This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json) Hash identifier: F75A8p63HOOtpWcCQmac9WVZHHNsRo1aO+4SJLzgVWE= Subject key identifier: 94:42:39:9B:2C:57:00:1E:BC:02:E0:5E:04:78:1F:F4:88:4C:4D:10 Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00 Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000 Certificate serial: 019B3E6D19E7CBC2B5BBE10BBC0909D62536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft Manifest number: 0B27 Signing time: Sun 21 Dec 2025 01:01:36 +0000 Manifest this update: Sun 21 Dec 2025 01:01:36 +0000 Manifest next update: Mon 22 Dec 2025 01:01:36 +0000 Files and hashes: 1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=) 2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: NLktKYFXp5t4HVmaO96tfBHLhDBtVQErBJ9LivhOqEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:19:e7:cb:c2:b5:bb:e1:0b:bc:09:09:d6:25:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000 Validity Not Before: Dec 21 01:01:36 2025 GMT Not After : Dec 22 01:01:36 2025 GMT Subject: CN=9442399b2c57001ebc02e05e04781ff4884c4d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:62:cb:3d:ea:18:4c:80:30:ef:0e:26:c7: b4:a5:74:07:ff:6f:3e:a8:43:57:3c:7f:c8:95:37: 20:6f:5b:c8:15:54:d0:98:19:31:60:62:17:d4:8d: 35:8e:2f:4e:25:2c:ac:ae:c8:4c:15:f6:ef:2f:9e: 31:15:9f:59:2d:f9:9d:7a:fe:a5:4c:1f:93:b7:5a: 01:26:07:8a:c5:7b:ea:b4:97:f7:03:ee:05:f2:33: a2:4d:6c:f5:f7:40:d5:6c:37:d1:5c:69:b7:1b:f6: 03:f7:44:c6:74:6d:64:e4:a4:ab:b5:f1:40:36:44: 6e:c4:b0:26:21:a9:6c:4e:98:f6:1c:19:f6:be:0c: 3c:01:e0:e4:da:60:3a:b6:a9:a0:df:2d:3d:32:72: de:fb:a0:0a:76:1b:97:ca:ec:c7:e0:e9:49:6e:76: bb:5f:fb:dd:a4:f1:ae:66:3a:dc:8d:1a:ee:a2:b4: 68:2a:e7:a6:44:55:25:f5:d9:ef:75:7a:29:6b:e6: 68:9c:5b:44:e7:a4:22:ca:ce:c0:e7:4c:78:62:15: 18:16:b8:a9:61:60:2a:65:7d:d7:b7:cf:9d:10:3d: 5e:7f:39:66:6c:79:a6:52:c4:e5:20:5c:93:75:fc: 05:7a:15:cd:6d:e6:81:6c:3a:3c:7d:8d:44:57:c2: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:42:39:9B:2C:57:00:1E:BC:02:E0:5E:04:78:1F:F4:88:4C:4D:10 X509v3 Authority Key Identifier: keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f5:d3:f6:08:7f:72:21:1b:44:a7:63:f8:ab:e4:8e:c6:35: b1:e4:e6:4e:eb:b2:21:5d:83:6c:c3:6f:6e:60:44:6d:db:a8: 11:f5:62:2e:22:4c:0f:18:6d:6d:da:2f:5e:da:89:33:ff:c8: e3:c5:0f:26:2e:1a:75:8c:74:c3:52:31:ef:2a:0b:54:9b:01: 84:62:43:9d:0f:7a:64:e2:16:fb:fb:3d:ba:ad:32:e2:6f:2a: 76:88:52:14:ca:03:44:b8:be:b0:0d:70:e0:cf:c9:32:9d:f0: 15:f7:46:a2:1b:a8:53:98:6c:8e:97:67:15:d5:29:eb:93:24: 0c:60:ec:5c:37:03:9e:16:0b:e0:f3:c4:f7:69:3e:b8:37:4f: e0:5b:b7:15:ef:70:94:61:1a:ec:91:42:dd:7e:29:15:ed:0e: ea:9a:df:4e:61:27:41:da:f7:1c:85:5b:a2:87:d1:e1:48:20: 27:eb:86:5a:a9:de:d1:2a:b1:d9:52:bf:00:62:d5:47:14:d1: d0:14:6e:b9:4a:33:60:f9:4d:a7:e3:c8:d3:15:34:58:d6:42: f2:7f:61:44:ec:a0:25:f3:6f:6f:a8:89:e2:34:3c:2b:33:99: 0c:db:fc:2d:9d:a4:19:eb:c4:cb:c7:3d:0a:b9:94:7e:9a:f3: e5:5b:49:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bRnny8K1u+ELvAkJ1iU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzM1ODM1OGViYTUxYjUzNGQzZmFlOWE2Y2I4NzFkZTYz N2UwMDAwHhcNMjUxMjIxMDEwMTM2WhcNMjUxMjIyMDEwMTM2WjAzMTEwLwYDVQQD Eyg5NDQyMzk5YjJjNTcwMDFlYmMwMmUwNWUwNDc4MWZmNDg4NGM0ZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkpiyz3qGEyAMO8OJse0pXQH/28+ qENXPH/IlTcgb1vIFVTQmBkxYGIX1I01ji9OJSysrshMFfbvL54xFZ9ZLfmdev6l TB+Tt1oBJgeKxXvqtJf3A+4F8jOiTWz190DVbDfRXGm3G/YD90TGdG1k5KSrtfFA NkRuxLAmIalsTpj2HBn2vgw8AeDk2mA6tqmg3y09MnLe+6AKdhuXyuzH4OlJbna7 X/vdpPGuZjrcjRruorRoKuemRFUl9dnvdXopa+ZonFtE56Qiys7A50x4YhUYFrip YWAqZX3Xt8+dED1efzlmbHmmUsTlIFyTdfwFehXNbeaBbDo8fY1EV8L2TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRCOZssVwAevALgXgR4H/SITE0QMB8GA1UdIwQY MBaAFCUzWDWOulG1NNP66abLhx3mN+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYzJmOTAtMjZlYS00ZDU5LTkxYTkt NGQ3NzU2MjJiY2I2LzEvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xYzJmOTAtMjZlYS00ZDU5LTkxYTktNGQ3NzU2MjJiY2I2 LzEvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfXT9gh/ ciEbRKdj+KvkjsY1seTmTuuyIV2DbMNvbmBEbduoEfViLiJMDxhtbdovXtqJM//I 48UPJi4adYx0w1Ix7yoLVJsBhGJDnQ96ZOIW+/s9uq0y4m8qdohSFMoDRLi+sA1w 4M/JMp3wFfdGohuoU5hsjpdnFdUp65MkDGDsXDcDnhYL4PPE92k+uDdP4Fu3Fe9w lGEa7JFC3X4pFe0O6prfTmEnQdr3HIVboofR4UggJ+uGWqne0Sqx2VK/AGLVRxTR 0BRuuUozYPlNp+PI0xU0WNZC8n9hROygJfNvb6iJ4jQ8KzOZDNv8LZ2kGevEy8c9 CrmUfprz5VtJ9g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:16:46 2025 by rpki-client