This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json) Hash identifier: /fMNlNSxXnVgDB4xOR2KTYXAOitfup+8r+0n2Pk9j94= Subject key identifier: 79:BA:6D:84:D7:59:77:58:0B:63:44:0D:A0:5F:B1:3E:6E:E5:4B:CD Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0 Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0 Certificate serial: 019B3C0FDDB28C8EA0625A806030181339D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 14:00:31 +0000 Manifest this update: Sat 20 Dec 2025 14:00:31 +0000 Manifest next update: Sun 21 Dec 2025 14:00:31 +0000 Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: H4g7aBaoJlooQX+S+98F/MCph9Ay9GO6RmP5nSE9CvU=) 2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:dd:b2:8c:8e:a0:62:5a:80:60:30:18:13:39:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0 Validity Not Before: Dec 20 14:00:31 2025 GMT Not After : Dec 21 14:00:31 2025 GMT Subject: CN=79ba6d84d75977580b63440da05fb13e6ee54bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:f9:0b:a4:d3:7e:6d:99:33:21:59:a5:49: 95:73:65:fd:ea:9f:0f:f2:a7:a4:5c:ed:f6:a0:f4: 1e:73:ed:14:c4:c5:0d:5a:1e:8d:ab:4c:07:66:3c: 00:d9:46:4e:49:71:52:56:d6:59:88:41:db:e4:62: 5d:01:00:7a:eb:a4:7f:e6:17:21:5b:6d:ef:98:55: 31:28:34:c9:26:57:05:59:9f:5f:03:bf:c7:99:69: 75:5c:46:78:d0:06:50:cf:2c:e8:69:cb:1e:ba:b8: 3a:0b:76:c9:c7:a8:e8:eb:fe:26:44:51:89:05:47: 8f:7c:13:0a:37:e9:9c:a1:38:48:84:d9:44:29:93: b2:a1:61:f8:85:d6:80:af:92:e9:e8:e7:c5:62:e6: 1a:5d:03:19:99:45:28:33:f2:ed:42:87:fa:d6:b9: 28:a0:31:6c:a9:51:cb:90:dc:c6:5a:94:44:14:cc: de:b3:78:14:52:aa:1d:a8:ae:9c:56:d3:83:19:77: 33:13:73:03:2a:1a:03:15:fd:fe:57:65:ad:6f:9f: 67:f5:bc:dd:7a:68:c4:00:c5:51:8b:bc:ce:c3:e0: bf:9c:02:f3:22:4b:82:ed:b3:9f:69:da:87:eb:28: 20:1c:59:06:d4:9c:1a:48:49:a4:d9:5b:61:34:c6: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BA:6D:84:D7:59:77:58:0B:63:44:0D:A0:5F:B1:3E:6E:E5:4B:CD X509v3 Authority Key Identifier: keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ed:22:8b:c8:85:03:5c:4f:ee:95:a0:d0:9d:34:3e:04:02: 6b:4e:40:70:47:82:af:21:74:0b:22:dd:df:ba:fa:ea:b8:a6: 35:2e:47:6b:da:74:ac:9a:81:71:2b:05:78:23:7a:a4:5c:6c: 7e:19:7f:f5:1e:b5:49:0e:01:54:eb:dd:77:50:da:1e:07:58: ef:b8:c0:d5:eb:9a:3a:8b:e7:a3:ee:d4:12:1d:8d:c9:69:37: 4f:e5:d7:c8:87:be:07:0a:15:78:0c:86:08:9c:07:36:18:31: 67:e2:64:05:ea:48:df:36:1a:9b:d9:17:7a:73:eb:e2:42:20: c4:2a:43:d5:44:1c:b2:b7:90:83:2b:16:ab:92:81:d7:af:2c: 1f:38:1b:28:9d:82:32:82:1a:be:ed:7f:04:d2:20:5d:03:bd: e9:aa:d0:68:60:11:41:8a:f0:74:b1:15:82:21:0a:60:d4:7b: 44:98:e8:0e:af:98:f3:8e:07:bb:e9:06:87:51:4c:50:a9:e9: 30:dc:8a:52:fb:80:6d:da:88:da:dc:44:b4:22:12:63:be:4e: 9e:c2:9a:7b:14:98:e4:fa:92:96:21:9b:47:51:cd:1d:f6:a5: ec:9c:c5:0c:d5:c8:41:13:6a:60:ab:6b:86:a6:b4:b5:00:09: af:c9:0a:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D92yjI6gYlqAYDAYEznZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MjFmZmI2OGVhYjk3ZTI0YTkwNjI2ZDkwNDk4YmU3ZWQ3 MDY2ZjAwHhcNMjUxMjIwMTQwMDMxWhcNMjUxMjIxMTQwMDMxWjAzMTEwLwYDVQQD Eyg3OWJhNmQ4NGQ3NTk3NzU4MGI2MzQ0MGRhMDVmYjEzZTZlZTU0YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsD5C6TTfm2ZMyFZpUmVc2X96p8P 8qekXO32oPQec+0UxMUNWh6Nq0wHZjwA2UZOSXFSVtZZiEHb5GJdAQB666R/5hch W23vmFUxKDTJJlcFWZ9fA7/HmWl1XEZ40AZQzyzoacseurg6C3bJx6jo6/4mRFGJ BUePfBMKN+mcoThIhNlEKZOyoWH4hdaAr5Lp6OfFYuYaXQMZmUUoM/LtQof61rko oDFsqVHLkNzGWpREFMzes3gUUqodqK6cVtODGXczE3MDKhoDFf3+V2Wtb59n9bzd emjEAMVRi7zOw+C/nALzIkuC7bOfadqH6yggHFkG1JwaSEmk2VthNMZ4nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm6bYTXWXdYC2NEDaBfsT5u5UvNMB8GA1UdIwQY MBaAFCQh/7aOq5fiSpBibZBJi+ftcGbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZTAyMGItZTBkNy00NTFkLWJiMDUt ZDkwOGZhZjM0ZWY4LzEvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hZTAyMGItZTBkNy00NTFkLWJiMDUtZDkwOGZhZjM0ZWY4 LzEvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtu0ii8iF A1xP7pWg0J00PgQCa05AcEeCryF0CyLd37r66rimNS5Ha9p0rJqBcSsFeCN6pFxs fhl/9R61SQ4BVOvdd1DaHgdY77jA1euaOovno+7UEh2NyWk3T+XXyIe+BwoVeAyG CJwHNhgxZ+JkBepI3zYam9kXenPr4kIgxCpD1UQcsreQgysWq5KB168sHzgbKJ2C MoIavu1/BNIgXQO96arQaGARQYrwdLEVgiEKYNR7RJjoDq+Y844Hu+kGh1FMUKnp MNyKUvuAbdqI2txEtCISY75OnsKaexSY5PqSliGbR1HNHfal7JzFDNXIQRNqYKtr hqa0tQAJr8kKEA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:36:00 2025 by rpki-client