This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json) Hash identifier: MgvwdGcOltAVd58hFI8v4IlBPZZvY5J+bU5rG0Zmj24= Subject key identifier: 10:EA:B8:06:44:6B:FB:EE:FE:92:44:C9:B1:9D:50:13:8E:D4:9F:7F Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7 Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7 Certificate serial: 019B3DC79FDF60C30EC2AA86DB69EF0BEEB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft Manifest number: 0943 Signing time: Sat 20 Dec 2025 22:00:51 +0000 Manifest this update: Sat 20 Dec 2025 22:00:51 +0000 Manifest next update: Sun 21 Dec 2025 22:00:51 +0000 Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: rIyGaWMPcT4N6whu+F1gV+gzHAE7L6BmHi/Z1hC/Y8A=) 2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=) 3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:9f:df:60:c3:0e:c2:aa:86:db:69:ef:0b:ee:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7 Validity Not Before: Dec 20 22:00:51 2025 GMT Not After : Dec 21 22:00:51 2025 GMT Subject: CN=10eab806446bfbeefe9244c9b19d50138ed49f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:50:06:09:e1:af:bc:d7:93:c6:47:9c:9b: ad:29:cc:d3:4d:5d:a6:b3:6b:63:df:49:03:89:12: 3c:46:5c:0d:0c:cf:4c:9b:e3:0d:93:34:ff:85:39: b9:09:08:ac:7d:3f:c8:cb:3e:18:05:f6:15:6c:95: 7b:6e:cd:b1:9e:01:3b:2d:ce:fd:f2:e0:10:f7:10: ca:d5:0c:15:85:e1:9e:31:ee:a1:06:fd:ea:62:85: f5:ca:ac:17:74:cf:42:c6:55:a8:e3:5b:24:ab:12: d3:b1:32:54:29:aa:77:1e:4a:88:03:da:e7:b0:8a: 6f:af:91:f7:99:5e:bf:e5:76:12:96:71:6a:96:4d: af:0d:13:8f:d6:5a:e8:93:42:30:0d:89:8c:73:44: 4c:93:64:f6:6a:23:e1:d2:f6:ae:af:20:87:9e:4c: 0d:3a:e1:82:9a:92:ce:76:fa:b6:0f:7a:0c:84:1b: 43:a9:de:97:8c:82:33:5b:d7:66:6c:22:cf:74:53: 6a:e6:9d:f7:08:65:44:80:2a:eb:a4:45:7b:a5:71: 57:52:67:26:cc:42:f3:96:d2:92:33:e4:03:cc:18: df:60:90:10:0f:8c:ee:50:14:65:e6:ca:29:0d:13: ff:7e:c4:90:e4:2b:5b:42:31:ba:97:13:ae:4d:6c: 6f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EA:B8:06:44:6B:FB:EE:FE:92:44:C9:B1:9D:50:13:8E:D4:9F:7F X509v3 Authority Key Identifier: keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fe:06:1e:96:6d:30:ae:be:cd:cf:ab:df:b1:4e:11:27:df: d3:4e:13:1a:a7:5c:16:50:ed:83:19:c6:8b:e2:2b:dc:75:35: d8:e4:85:f3:00:1d:1b:05:a2:bf:a1:aa:7a:74:2f:ea:81:d0: 88:f7:1a:d5:1a:2b:6a:9b:f3:bc:3c:8f:1d:8f:15:e4:22:4a: 1b:29:a0:53:19:91:e5:16:96:d8:80:a8:f1:bd:14:81:81:2b: f0:ff:42:cf:38:67:c2:58:2d:f6:7b:16:09:e1:b3:6a:3c:a6: 9c:e4:80:0c:75:a3:51:64:5d:dd:61:4d:7f:e0:0b:ec:54:17: 7f:8e:3b:3a:a2:84:44:e4:3f:a5:79:89:f5:55:81:d1:4b:0f: 9d:bf:f3:4f:85:71:50:cb:b8:0c:3f:7b:57:ce:9e:09:c5:b0: 64:9d:d1:4d:a0:0b:44:4f:1a:02:50:7a:21:0a:27:f2:26:8f: b8:17:29:e9:5b:02:83:6e:de:9b:d3:3d:86:a1:ad:c1:b1:7f: 70:72:12:cb:bb:da:d3:cd:36:a6:4d:3b:1b:b8:bd:e4:63:7a: 3f:1c:11:8c:c6:aa:82:89:18:26:07:30:6f:d4:5e:9b:f3:66: fe:f5:8e:6d:c7:1f:69:22:9d:0c:2f:3f:14:83:d2:0c:22:4f: 27:53:33:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5/fYMMOwqqG22nvC+60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDkwNmI5MGMxZDg1NjY3M2U0MTRmMzk4MDViZTU4M2Qy MzBiYTcwHhcNMjUxMjIwMjIwMDUxWhcNMjUxMjIxMjIwMDUxWjAzMTEwLwYDVQQD EygxMGVhYjgwNjQ0NmJmYmVlZmU5MjQ0YzliMTlkNTAxMzhlZDQ5ZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXlQBgnhr7zXk8ZHnJutKczTTV2m s2tj30kDiRI8RlwNDM9Mm+MNkzT/hTm5CQisfT/Iyz4YBfYVbJV7bs2xngE7Lc79 8uAQ9xDK1QwVheGeMe6hBv3qYoX1yqwXdM9CxlWo41skqxLTsTJUKap3HkqIA9rn sIpvr5H3mV6/5XYSlnFqlk2vDROP1lrok0IwDYmMc0RMk2T2aiPh0vauryCHnkwN OuGCmpLOdvq2D3oMhBtDqd6XjIIzW9dmbCLPdFNq5p33CGVEgCrrpEV7pXFXUmcm zELzltKSM+QDzBjfYJAQD4zuUBRl5sopDRP/fsSQ5CtbQjG6lxOuTWxv/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDquAZEa/vu/pJEybGdUBOO1J9/MB8GA1UdIwQY MBaAFCTZBrkMHYVmc+QU85gFvlg9IwunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEt NGZjMjhlNTA5OGM3LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEtNGZjMjhlNTA5OGM3 LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXf4GHpZt MK6+zc+r37FOESff004TGqdcFlDtgxnGi+Ir3HU12OSF8wAdGwWiv6GqenQv6oHQ iPca1RorapvzvDyPHY8V5CJKGymgUxmR5RaW2ICo8b0UgYEr8P9Czzhnwlgt9nsW CeGzajymnOSADHWjUWRd3WFNf+AL7FQXf447OqKEROQ/pXmJ9VWB0UsPnb/zT4Vx UMu4DD97V86eCcWwZJ3RTaALRE8aAlB6IQon8iaPuBcp6VsCg27em9M9hqGtwbF/ cHISy7va0802pk07G7i95GN6PxwRjMaqgokYJgcwb9Rem/Nm/vWObccfaSKdDC8/ FIPSDCJPJ1MzeQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:22 2025 by rpki-client