This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json) Hash identifier: pBO56qABGEkqMDV47tQv4scocHNMW/fmnTseGQrfOv4= Subject key identifier: ED:DE:DA:B1:81:E4:A2:C0:1F:8C:4E:B1:9D:AB:51:18:BE:D9:36:6B Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff Certificate serial: 019B6768DF17C4D600AC5DF54399DF24CACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft Manifest number: 12E8 Signing time: Mon 29 Dec 2025 00:01:24 +0000 Manifest this update: Mon 29 Dec 2025 00:01:24 +0000 Manifest next update: Tue 30 Dec 2025 00:01:24 +0000 Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: tokKR8nYMnMFUFJ+Bs5IPqQE0tk83wcFQt+Ng10aW8w=) 2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:df:17:c4:d6:00:ac:5d:f5:43:99:df:24:ca:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff Validity Not Before: Dec 29 00:01:24 2025 GMT Not After : Dec 30 00:01:24 2025 GMT Subject: CN=eddedab181e4a2c01f8c4eb19dab5118bed9366b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:7f:f5:eb:fb:fe:7f:9c:9c:d7:d8:42:71: 0d:c7:37:7a:da:ca:d9:e0:3f:5c:54:c4:18:57:0e: 85:4d:f9:93:69:86:ee:ac:12:19:35:f3:42:a7:42: 1e:10:0b:b2:31:13:0d:bc:17:7e:41:68:3e:a6:e4: f2:f0:9b:fe:dc:fa:ad:25:42:b2:1a:93:c5:97:b2: 43:c5:0b:d1:49:94:48:ea:b6:8b:7c:8e:cd:70:48: 49:e2:72:ba:9c:43:60:84:5c:65:59:0a:fd:54:0f: 12:23:2e:7c:25:11:48:b5:bb:43:8f:d5:5b:97:5f: a6:f1:b9:59:0b:e4:e6:48:46:eb:90:4c:43:06:88: 9b:06:77:9f:a5:fb:1f:da:ee:23:49:38:ad:55:c5: 86:94:ba:3a:48:ed:01:c3:5a:9c:ee:13:1d:91:38: 95:0d:d7:eb:8c:3b:ac:a9:b3:44:32:d4:60:25:e4: e3:78:b2:66:b9:50:fb:96:c7:69:08:7e:ba:d9:26: 16:a9:ad:be:38:a1:65:e6:90:75:a2:97:97:af:bf: 26:8e:4a:c5:19:92:d9:97:e9:eb:67:37:d4:03:e8: 43:b1:3a:4f:d2:6c:f5:a8:8b:29:44:47:b1:3c:ca: 40:70:6d:0f:c4:9e:ca:ff:89:f1:44:be:69:35:e1: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DE:DA:B1:81:E4:A2:C0:1F:8C:4E:B1:9D:AB:51:18:BE:D9:36:6B X509v3 Authority Key Identifier: keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d3:75:fe:35:d2:6b:aa:b1:72:a6:84:bb:94:1a:35:51:c6: 99:8b:db:e7:10:6e:d9:ad:b0:f9:62:7d:5f:73:9e:91:66:21: 3a:eb:00:5f:ad:1d:38:12:3a:a3:8b:6a:ec:24:86:2e:0a:0b: b4:3f:32:cb:69:6b:c2:50:c5:16:4b:d4:5e:bc:3c:de:73:7a: ed:25:87:81:5a:ee:1d:11:64:7f:2d:1f:08:11:73:98:44:d5: 27:5b:20:3e:20:05:e6:9d:9a:b6:d4:0d:65:cc:19:74:d4:50: a2:e0:96:5f:d2:48:15:6e:a1:9f:4d:45:7d:af:02:d6:ef:cc: 33:93:9e:1e:9f:a1:ed:d3:8a:47:4f:cd:61:29:c5:13:74:20: c1:0e:e8:c8:39:1c:42:ec:50:1b:84:d4:52:4e:bb:00:4b:42: d0:27:3f:ee:be:8a:6b:9a:cc:28:5b:58:54:07:c1:43:d6:56: c5:da:08:2b:cf:8d:f1:b3:7c:41:95:6d:dc:30:69:01:c0:c7: f8:97:c7:bf:35:2e:e0:52:78:08:1c:57:5d:c1:2f:6f:fe:d8: 98:21:d4:2e:94:00:2a:fc:08:6b:22:1c:e0:3f:2d:b1:24:58: 42:07:83:2d:65:bf:71:ef:2f:24:d3:70:11:9f:fb:8d:7c:44: 16:54:9e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaN8XxNYArF31Q5nfJMrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OWI1NThjNDg1NTBlMDYyMzRjNWRkZmZjYWExZmNmMmU5 YWM2ZmYwHhcNMjUxMjI5MDAwMTI0WhcNMjUxMjMwMDAwMTI0WjAzMTEwLwYDVQQD EyhlZGRlZGFiMTgxZTRhMmMwMWY4YzRlYjE5ZGFiNTExOGJlZDkzNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8N/9ev7/n+cnNfYQnENxzd62srZ 4D9cVMQYVw6FTfmTaYburBIZNfNCp0IeEAuyMRMNvBd+QWg+puTy8Jv+3PqtJUKy GpPFl7JDxQvRSZRI6raLfI7NcEhJ4nK6nENghFxlWQr9VA8SIy58JRFItbtDj9Vb l1+m8blZC+TmSEbrkExDBoibBnefpfsf2u4jSTitVcWGlLo6SO0Bw1qc7hMdkTiV DdfrjDusqbNEMtRgJeTjeLJmuVD7lsdpCH662SYWqa2+OKFl5pB1opeXr78mjkrF GZLZl+nrZzfUA+hDsTpP0mz1qIspREexPMpAcG0PxJ7K/4nxRL5pNeEitQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3e2rGB5KLAH4xOsZ2rURi+2TZrMB8GA1UdIwQY MBaAFCSbVYxIVQ4GI0xd3/yqH88umsb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTct MTIxZDUzNTA4NWQ2LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTctMTIxZDUzNTA4NWQ2 LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNN1/jXS a6qxcqaEu5QaNVHGmYvb5xBu2a2w+WJ9X3OekWYhOusAX60dOBI6o4tq7CSGLgoL tD8yy2lrwlDFFkvUXrw83nN67SWHgVruHRFkfy0fCBFzmETVJ1sgPiAF5p2attQN ZcwZdNRQouCWX9JIFW6hn01Ffa8C1u/MM5OeHp+h7dOKR0/NYSnFE3QgwQ7oyDkc QuxQG4TUUk67AEtC0Cc/7r6Ka5rMKFtYVAfBQ9ZWxdoIK8+N8bN8QZVt3DBpAcDH +JfHvzUu4FJ4CBxXXcEvb/7YmCHULpQAKvwIayIc4D8tsSRYQgeDLWW/ce8vJNNw EZ/7jXxEFlSeqQ== -----END CERTIFICATE-----Generated at Mon Dec 29 08:49:35 2025 by rpki-client