This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json) Hash identifier: H1XHqzh2UJrf5hsONGa8+h0aiNTyW2J5Xbr9Oqa0f7w= Subject key identifier: 12:1A:B7:E4:EA:11:D7:7A:FA:91:88:E5:17:98:E9:31:A8:F5:A3:F4 Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e Certificate serial: 019B619D10964F7D67EB2188AF2B122A71BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 21:00:41 +0000 Manifest this update: Sat 27 Dec 2025 21:00:41 +0000 Manifest next update: Sun 28 Dec 2025 21:00:41 +0000 Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: J7zLq+LK/S6gFkehdaGvSGtJ2m5ynIYnu+C+xBaGocs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:10:96:4f:7d:67:eb:21:88:af:2b:12:2a:71:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e Validity Not Before: Dec 27 21:00:41 2025 GMT Not After : Dec 28 21:00:41 2025 GMT Subject: CN=121ab7e4ea11d77afa9188e51798e931a8f5a3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:f3:84:4d:ee:ef:b2:9d:1e:c4:b8:53:f7: 68:d4:d3:b7:7c:16:27:82:c8:47:54:7a:eb:0b:99: d6:01:d0:39:df:55:dd:29:b6:e3:a3:8d:a4:81:c3: e7:2b:b3:bb:33:9d:ba:27:fe:36:5b:35:00:99:06: 11:09:a1:96:fa:f6:ae:a9:b4:6f:0d:4d:43:0c:d3: 30:74:ed:da:04:3c:a4:4a:25:06:c0:f1:73:1c:9a: 43:64:38:77:cb:5d:2f:06:cd:a6:43:be:31:e7:78: f9:78:b2:f3:0c:d4:51:d8:4b:b3:e4:78:e1:cd:c7: 93:8f:c8:e5:8f:3e:ed:cf:83:05:2e:d9:ef:05:d8: ea:ed:a4:08:4b:10:58:02:09:bd:80:98:20:98:60: 9c:cd:92:d9:78:a8:ba:79:58:3b:71:ef:ca:22:08: e9:97:5c:1c:67:df:03:f1:bf:ba:b8:c4:3d:57:04: cd:60:dd:ab:c5:91:84:4b:52:f2:7a:8f:af:55:99: 28:9c:2a:52:1a:1a:04:f8:be:26:1d:4e:3a:bc:ce: c2:28:f4:6f:b0:70:53:64:e3:e4:42:2e:18:f2:2a: f3:93:bf:06:95:db:4b:ea:32:91:ed:5e:25:f6:cd: 55:b5:9f:5c:53:d8:8d:2b:3f:d6:4a:d8:69:be:97: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1A:B7:E4:EA:11:D7:7A:FA:91:88:E5:17:98:E9:31:A8:F5:A3:F4 X509v3 Authority Key Identifier: keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a4:91:2a:fc:66:6e:e1:2e:f0:a8:de:17:7e:9d:81:c7:d8: 58:1e:82:b6:6a:33:03:98:db:4f:fa:60:26:be:e5:19:f3:42: b8:13:12:58:92:90:fa:81:99:27:a2:5a:d4:78:4d:61:84:f3: 21:4e:8d:aa:29:3c:68:d1:fc:2f:1b:75:5a:ec:fc:81:ee:51: 7a:d8:04:3f:fb:5b:ab:4c:bd:04:42:37:62:62:58:1d:b8:50: be:30:56:12:16:c9:1d:4d:b8:9f:03:15:b6:12:50:a6:75:b4: b0:06:5c:cd:e3:3d:1a:6d:a7:f3:ab:04:34:85:c1:f2:d5:f8: 55:99:54:80:b3:68:04:98:8b:99:c5:0a:46:cd:e5:1f:ab:1e: 98:bd:24:49:c3:51:f9:11:40:eb:9b:ac:36:d9:f9:9f:a4:1a: d3:ac:d8:fb:63:6f:78:fa:44:57:38:32:eb:4b:0f:43:17:ec: 61:fe:71:63:44:1d:4e:94:e0:75:d2:a9:2e:00:b7:c4:74:24: 1e:78:72:e1:12:48:90:48:21:ce:61:a0:e0:8f:7e:59:43:19: 55:4b:73:d7:6d:49:d0:14:08:90:f2:d0:fe:0b:d7:f8:71:b9: 62:ef:b2:02:71:db:e2:79:e8:7d:40:87:ce:aa:e9:a1:af:81: 9e:05:12:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnRCWT31n6yGIrysSKnG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZTlhMWYxMmE4NGQ1MzI1MjYzN2ZmODVkNmViOGViMTYz NjM5M2UwHhcNMjUxMjI3MjEwMDQxWhcNMjUxMjI4MjEwMDQxWjAzMTEwLwYDVQQD EygxMjFhYjdlNGVhMTFkNzdhZmE5MTg4ZTUxNzk4ZTkzMWE4ZjVhM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphXzhE3u77KdHsS4U/do1NO3fBYn gshHVHrrC5nWAdA531XdKbbjo42kgcPnK7O7M526J/42WzUAmQYRCaGW+vauqbRv DU1DDNMwdO3aBDykSiUGwPFzHJpDZDh3y10vBs2mQ74x53j5eLLzDNRR2Euz5Hjh zceTj8jljz7tz4MFLtnvBdjq7aQISxBYAgm9gJggmGCczZLZeKi6eVg7ce/KIgjp l1wcZ98D8b+6uMQ9VwTNYN2rxZGES1Lyeo+vVZkonCpSGhoE+L4mHU46vM7CKPRv sHBTZOPkQi4Y8irzk78GldtL6jKR7V4l9s1VtZ9cU9iNKz/WSthpvpdlcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIat+TqEdd6+pGI5ReY6TGo9aP0MB8GA1UdIwQY MBaAFCTpofEqhNUyUmN/+F1uuOsWNjk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDk1YjUtZmJmYS00MTE4LTg2MmYt YzJjOTE2ZTQzOTI1LzEvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iNDk1YjUtZmJmYS00MTE4LTg2MmYtYzJjOTE2ZTQzOTI1 LzEvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqSRKvxm buEu8KjeF36dgcfYWB6CtmozA5jbT/pgJr7lGfNCuBMSWJKQ+oGZJ6Ja1HhNYYTz IU6Nqik8aNH8Lxt1Wuz8ge5RetgEP/tbq0y9BEI3YmJYHbhQvjBWEhbJHU24nwMV thJQpnW0sAZczeM9Gm2n86sENIXB8tX4VZlUgLNoBJiLmcUKRs3lH6semL0kScNR +RFA65usNtn5n6Qa06zY+2NvePpEVzgy60sPQxfsYf5xY0QdTpTgddKpLgC3xHQk Hnhy4RJIkEghzmGg4I9+WUMZVUtz121J0BQIkPLQ/gvX+HG5Yu+yAnHb4nnofUCH zqrpoa+BngUS1g== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:27 2025 by rpki-client