This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json) Hash identifier: FPz2rnZEaxepN9Fgun7CUHBncCvB3d3En4BfpgBZFZE= Subject key identifier: 16:36:59:36:57:F7:E6:40:2E:1C:4B:B1:76:CE:01:2F:6F:E1:FC:41 Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca Certificate serial: 019B439284FD5693AF3CBFB6FA1CBB54422A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 01:00:34 +0000 Manifest this update: Mon 22 Dec 2025 01:00:34 +0000 Manifest next update: Tue 23 Dec 2025 01:00:34 +0000 Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: S+VPIIz06uapDa7a7TVcmvxZq5x5L2s/jhEvhrwjW3w=) 2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:84:fd:56:93:af:3c:bf:b6:fa:1c:bb:54:42:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca Validity Not Before: Dec 22 01:00:34 2025 GMT Not After : Dec 23 01:00:34 2025 GMT Subject: CN=1636593657f7e6402e1c4bb176ce012f6fe1fc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:bf:12:31:2f:4a:89:35:8d:6f:5e:01:76: 38:cd:2b:b6:cc:d0:5f:c2:05:2b:9e:00:e4:94:86: d8:2f:37:b9:2d:de:d7:aa:a1:b5:2c:d4:2b:d6:be: 87:0d:b6:9c:97:62:2d:13:95:b2:a2:55:fc:43:e0: c8:56:e6:d5:61:cf:5b:74:71:b1:02:e6:52:a0:31: d8:3b:0b:cc:b1:1a:9e:1b:fe:89:ab:00:9f:ed:a8: 00:ee:b1:1a:7f:e7:f1:65:ca:4b:75:2d:47:e6:08: e8:9e:17:43:b0:fd:95:36:8d:7b:9f:87:58:b9:78: ca:2a:2e:92:7a:09:03:d0:da:07:e6:a3:ef:bb:93: ae:53:8a:1f:b5:97:d5:64:a8:61:a0:c3:73:5c:68: c7:a1:d1:b1:85:98:51:8b:73:21:47:2d:1d:f6:9d: a1:14:c1:6c:e6:87:63:08:78:66:24:8d:4e:00:10: 8f:43:76:cf:f0:1a:29:52:cf:0c:75:37:f5:20:11: 85:98:22:0e:4f:e0:50:12:96:84:01:01:4d:f4:e2: 47:f0:f6:bf:1e:19:19:b5:80:1f:23:e4:0b:43:44: ae:ec:e4:5b:37:26:a2:bf:42:44:b5:66:f3:7d:67: 7d:23:ab:0f:95:f7:58:16:7b:37:f5:07:0f:ae:ad: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:36:59:36:57:F7:E6:40:2E:1C:4B:B1:76:CE:01:2F:6F:E1:FC:41 X509v3 Authority Key Identifier: keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c3:11:a1:db:2c:88:a9:e2:05:3a:0f:0b:8c:76:75:9e:3d: 07:92:e0:1a:fa:ec:53:44:d2:0b:18:e3:95:48:e2:63:66:55: 7b:ce:06:9c:b2:dd:ea:03:e5:a8:b0:cf:b9:10:85:9a:99:b6: be:42:fb:e6:16:19:94:ff:40:3f:f6:de:f9:fd:55:52:d1:db: 7d:92:cf:04:db:a8:9b:3b:1b:ca:6e:6c:f5:7d:ec:15:84:a8: 9e:c7:fb:4d:2d:ce:ba:53:cc:e8:04:8c:04:33:98:83:33:02: d9:d9:e4:98:b6:09:37:90:90:1a:4e:4c:3f:60:9b:43:51:ac: e7:74:93:4a:6d:8e:bd:e9:be:44:92:93:20:99:88:af:69:61: 2e:31:90:11:c5:fe:ef:54:cd:fa:21:ce:e8:83:ff:91:5b:fd: 0b:e3:8b:ab:23:93:9d:5f:44:b0:33:4c:60:fb:94:6a:89:ed: df:b0:fa:86:03:a8:60:1e:3e:a8:9b:d9:00:4f:91:f6:6f:00: 85:18:be:a8:27:a1:ac:75:db:ec:02:9b:7e:bf:f1:bc:43:de: 94:dd:4b:b4:75:96:32:00:91:14:03:81:79:b1:32:2c:7f:31: 3e:6f:8a:68:ed:06:8f:f8:e0:7d:6f:c1:b7:3f:13:a1:a0:94: b0:4a:c5:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkoT9VpOvPL+2+hy7VEIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDM5MjNlNzczZWIyNzA0OTJhZWNjOGRhMTVjMmU1Y2E1 N2MyY2EwHhcNMjUxMjIyMDEwMDM0WhcNMjUxMjIzMDEwMDM0WjAzMTEwLwYDVQQD EygxNjM2NTkzNjU3ZjdlNjQwMmUxYzRiYjE3NmNlMDEyZjZmZTFmYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ty/EjEvSok1jW9eAXY4zSu2zNBf wgUrngDklIbYLze5Ld7XqqG1LNQr1r6HDbacl2ItE5WyolX8Q+DIVubVYc9bdHGx AuZSoDHYOwvMsRqeG/6JqwCf7agA7rEaf+fxZcpLdS1H5gjonhdDsP2VNo17n4dY uXjKKi6SegkD0NoH5qPvu5OuU4oftZfVZKhhoMNzXGjHodGxhZhRi3MhRy0d9p2h FMFs5odjCHhmJI1OABCPQ3bP8BopUs8MdTf1IBGFmCIOT+BQEpaEAQFN9OJH8Pa/ HhkZtYAfI+QLQ0Su7ORbNyaiv0JEtWbzfWd9I6sPlfdYFns39QcPrq36aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY2WTZX9+ZALhxLsXbOAS9v4fxBMB8GA1UdIwQY MBaAFCZDkj53PrJwSSrsyNoVwuXKV8LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUt NzhjMzdjMGIwZDk3LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUtNzhjMzdjMGIwZDk3 LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8MRodss iKniBToPC4x2dZ49B5LgGvrsU0TSCxjjlUjiY2ZVe84GnLLd6gPlqLDPuRCFmpm2 vkL75hYZlP9AP/be+f1VUtHbfZLPBNuomzsbym5s9X3sFYSonsf7TS3OulPM6ASM BDOYgzMC2dnkmLYJN5CQGk5MP2CbQ1Gs53STSm2Ovem+RJKTIJmIr2lhLjGQEcX+ 71TN+iHO6IP/kVv9C+OLqyOTnV9EsDNMYPuUaont37D6hgOoYB4+qJvZAE+R9m8A hRi+qCehrHXb7AKbfr/xvEPelN1LtHWWMgCRFAOBebEyLH8xPm+KaO0Gj/jgfW/B tz8ToaCUsErFuA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:35:45 2025 by rpki-client