This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json) Hash identifier: MgnQyWHDgTU/zIJEL3NiddwGIOh8txjV4EMsxe4XyYk= Subject key identifier: C3:F6:82:EB:DE:6A:76:2B:B3:7C:89:DE:8F:19:C1:2F:81:43:7C:8D Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca Certificate serial: 019B3DC7929DF73E9564B6361FE96036852D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 22:00:47 +0000 Manifest this update: Sat 20 Dec 2025 22:00:47 +0000 Manifest next update: Sun 21 Dec 2025 22:00:47 +0000 Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: 97+FBw0Gj72wD+iceeq4ySXdJNDKPL9YK55Y5NgHNDM=) 2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:92:9d:f7:3e:95:64:b6:36:1f:e9:60:36:85:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca Validity Not Before: Dec 20 22:00:47 2025 GMT Not After : Dec 21 22:00:47 2025 GMT Subject: CN=c3f682ebde6a762bb37c89de8f19c12f81437c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:03:70:e3:b9:d3:2b:9e:b5:4b:76:6a:90: e0:df:56:bc:f2:63:39:8a:46:ff:ce:b7:ba:00:5f: 15:cc:c9:40:62:63:ba:94:07:df:8a:b0:57:4f:b6: 71:98:9c:25:15:d5:ac:44:2f:25:51:cf:8d:fe:56: 04:83:05:d1:88:e0:6d:55:7e:9d:75:5b:b3:cd:2f: cf:8d:01:10:31:d9:1f:83:41:3d:17:ef:14:4a:d1: 8c:59:b2:0c:07:ea:a4:2e:fb:da:8d:46:a3:3f:88: 37:42:7b:76:f1:d2:72:3a:11:14:35:01:b4:ee:d8: 3d:c0:88:e2:83:24:af:48:32:64:30:67:4e:47:24: 59:81:f9:b0:76:39:b3:0f:a9:f6:31:bb:b5:c4:12: 9b:b7:d5:2d:97:ac:cd:76:0c:90:71:f7:2a:60:19: e2:c1:ed:79:09:8d:43:18:3c:31:52:14:42:4c:89: 44:2c:07:dc:cc:65:f0:b6:b2:91:0e:da:8f:4a:0d: ed:39:08:fa:ba:cf:1a:b6:76:ea:89:43:03:b2:47: 61:73:f6:e3:c0:0c:3c:7c:bd:73:cf:dc:b5:8d:41: 89:6c:74:9a:c8:73:e3:44:fa:e7:19:67:11:c2:86: 4d:06:d9:c0:ba:2d:06:86:e9:e5:51:43:ec:88:6e: 57:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F6:82:EB:DE:6A:76:2B:B3:7C:89:DE:8F:19:C1:2F:81:43:7C:8D X509v3 Authority Key Identifier: keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:95:f6:93:05:9e:be:b9:2a:86:ff:a0:aa:d0:11:43:a7:51: 20:70:b2:e9:dc:59:86:ae:3d:3c:50:68:cd:fc:fa:53:69:19: de:ae:8f:94:54:ef:5d:5b:37:ea:d6:16:2f:48:ce:14:46:95: 2b:fa:92:1d:66:07:49:eb:72:2b:51:3a:7c:1a:fd:af:1b:cb: 92:58:4a:ae:c5:10:c8:0c:d7:13:42:b8:be:19:bb:8e:ba:85: 0c:7a:f8:52:e6:09:0e:f6:c9:ae:e8:0d:9c:ea:6d:7b:89:1b: 86:85:c2:f7:ee:5d:ba:de:7e:bd:8c:d2:30:1b:28:68:e8:62: 83:02:16:ca:72:4f:70:d1:7f:7d:02:ab:41:2d:58:58:c7:7b: e0:b9:14:5b:52:44:a5:1a:fc:0f:58:11:6b:dd:90:c6:d2:a6: 86:1b:c9:32:a7:c8:9b:77:0a:b2:02:da:52:f5:c0:62:59:9e: de:a4:8c:40:c8:01:97:ec:78:c2:10:cd:e8:a9:ae:0a:0a:ba: a4:de:56:fb:61:5f:52:82:0e:a3:c7:20:1f:0b:39:96:3b:db: 47:12:73:52:17:19:aa:8f:db:54:9f:fe:24:d5:ac:30:d6:94: a1:79:67:69:7e:31:a0:6d:98:88:ec:f5:5c:d2:04:4f:97:d5: 91:ff:40:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5Kd9z6VZLY2H+lgNoUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDM5MjNlNzczZWIyNzA0OTJhZWNjOGRhMTVjMmU1Y2E1 N2MyY2EwHhcNMjUxMjIwMjIwMDQ3WhcNMjUxMjIxMjIwMDQ3WjAzMTEwLwYDVQQD EyhjM2Y2ODJlYmRlNmE3NjJiYjM3Yzg5ZGU4ZjE5YzEyZjgxNDM3YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndEDcOO50yuetUt2apDg31a88mM5 ikb/zre6AF8VzMlAYmO6lAffirBXT7ZxmJwlFdWsRC8lUc+N/lYEgwXRiOBtVX6d dVuzzS/PjQEQMdkfg0E9F+8UStGMWbIMB+qkLvvajUajP4g3Qnt28dJyOhEUNQG0 7tg9wIjigySvSDJkMGdORyRZgfmwdjmzD6n2Mbu1xBKbt9Utl6zNdgyQcfcqYBni we15CY1DGDwxUhRCTIlELAfczGXwtrKRDtqPSg3tOQj6us8atnbqiUMDskdhc/bj wAw8fL1zz9y1jUGJbHSayHPjRPrnGWcRwoZNBtnAui0GhunlUUPsiG5X/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMP2guveanYrs3yJ3o8ZwS+BQ3yNMB8GA1UdIwQY MBaAFCZDkj53PrJwSSrsyNoVwuXKV8LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUt NzhjMzdjMGIwZDk3LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUtNzhjMzdjMGIwZDk3 LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJX2kwWe vrkqhv+gqtARQ6dRIHCy6dxZhq49PFBozfz6U2kZ3q6PlFTvXVs36tYWL0jOFEaV K/qSHWYHSetyK1E6fBr9rxvLklhKrsUQyAzXE0K4vhm7jrqFDHr4UuYJDvbJrugN nOpte4kbhoXC9+5dut5+vYzSMBsoaOhigwIWynJPcNF/fQKrQS1YWMd74LkUW1JE pRr8D1gRa92QxtKmhhvJMqfIm3cKsgLaUvXAYlme3qSMQMgBl+x4whDN6KmuCgq6 pN5W+2FfUoIOo8cgHws5ljvbRxJzUhcZqo/bVJ/+JNWsMNaUoXlnaX4xoG2YiOz1 XNIET5fVkf9A3w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:16:05 2025 by rpki-client