This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json) Hash identifier: ndPaJ5YHwLxGWejOYjxOFRjh3WHeK7tPSvFysGtNhkg= Subject key identifier: 20:72:8A:6B:86:86:6A:EE:B1:1E:80:C0:DB:43:8C:75:51:6E:D8:81 Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Certificate serial: 019B465CE778C7361A4FED9AFFEBC6860FE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft Manifest number: 1422 Signing time: Mon 22 Dec 2025 14:00:52 +0000 Manifest this update: Mon 22 Dec 2025 14:00:52 +0000 Manifest next update: Tue 23 Dec 2025 14:00:52 +0000 Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: 29E4N4h4KtUkd5+CGUuAndf5uFmavXL2/uuFoanEZ1M=) 2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:e7:78:c7:36:1a:4f:ed:9a:ff:eb:c6:86:0f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Validity Not Before: Dec 22 14:00:52 2025 GMT Not After : Dec 23 14:00:52 2025 GMT Subject: CN=20728a6b86866aeeb11e80c0db438c75516ed881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:44:d2:d7:f0:ea:68:68:a0:45:40:c1:17: 70:e3:0e:42:32:5f:7f:3c:ad:62:a0:57:f7:11:9e: 99:bb:ff:92:93:c4:86:8b:7d:4b:4d:f5:5a:0e:24: 49:ce:2a:d8:b9:de:e5:70:cb:92:5c:f5:c3:25:93: 68:6f:1d:45:42:9b:3b:ff:49:50:b7:28:ab:26:10: 5f:af:41:c0:13:0c:d9:d2:cf:3d:5d:92:84:8d:62: f6:75:f4:67:fd:9b:bc:66:b6:14:59:49:8b:96:a7: d5:ac:b2:37:58:b9:87:88:e9:12:af:e0:1a:5d:7c: a2:5c:c5:b3:02:e3:e6:f2:bb:01:55:2b:78:18:67: cb:d5:07:a1:a7:3c:b5:f2:cd:dd:3d:88:52:3e:1f: 4a:63:ea:ee:51:1a:c1:b4:f2:8e:bc:61:db:5c:51: d1:42:e5:e0:f7:fd:36:2f:ea:a9:14:0b:dc:01:af: 66:96:07:ad:36:6b:26:19:cc:2d:30:40:94:0f:65: bc:e0:a5:03:44:a2:b6:f2:bc:d4:9f:bd:38:d0:e9: 92:e4:6d:21:61:a9:88:cb:18:c2:dd:b9:fc:2d:4f: a8:32:01:a7:14:78:2d:36:d9:2d:f0:eb:80:80:31: da:74:ec:48:aa:c3:5c:e9:a8:7a:39:f8:21:24:3c: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:8A:6B:86:86:6A:EE:B1:1E:80:C0:DB:43:8C:75:51:6E:D8:81 X509v3 Authority Key Identifier: keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:6e:b0:a5:34:70:2e:c9:bc:11:f5:57:ac:22:e6:ba:e7:4e: fc:c2:03:b5:c2:e0:76:df:8a:92:74:84:89:50:37:ed:2f:a9: 06:c9:21:84:b0:b3:ed:39:80:da:15:b2:1b:a3:ef:9d:92:d6: 89:53:11:f4:ec:d0:3b:cc:f4:f9:a2:e0:e2:97:a5:4b:7e:f8: ff:4b:82:0c:06:28:9d:f1:2b:61:41:a5:bc:c2:c4:a3:fe:6d: fe:c0:97:cb:64:9a:16:ee:c1:02:d8:60:82:7f:69:a0:80:ad: fa:61:87:2e:ab:0a:6d:99:46:07:d5:ee:7f:ea:5f:5c:8c:8d: da:cc:5f:df:9e:58:26:59:7b:71:ee:53:0f:2e:ec:36:40:0d: 1d:5c:ce:07:53:ed:9f:66:43:87:08:95:9a:31:0a:ec:72:f7: 9e:01:c6:92:da:7b:e3:56:4e:3e:dd:0d:b3:c8:98:51:b9:21: da:3f:bc:b8:46:e5:9b:24:bc:f3:62:98:e9:f8:77:9e:f9:8d: bb:b0:3a:45:15:fb:ab:61:00:cb:5c:9f:f3:ff:0a:f6:9a:1a: ba:fb:83:d8:36:3e:ab:63:90:1f:ad:34:1f:87:0d:71:bd:f8: 43:1b:87:84:33:69:8d:1b:ba:90:78:85:01:92:f5:5a:d3:71: d0:c6:11:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXOd4xzYaT+2a/+vGhg/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2 ZmE3ZTMwHhcNMjUxMjIyMTQwMDUyWhcNMjUxMjIzMTQwMDUyWjAzMTEwLwYDVQQD EygyMDcyOGE2Yjg2ODY2YWVlYjExZTgwYzBkYjQzOGM3NTUxNmVkODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw91E0tfw6mhooEVAwRdw4w5CMl9/ PK1ioFf3EZ6Zu/+Sk8SGi31LTfVaDiRJzirYud7lcMuSXPXDJZNobx1FQps7/0lQ tyirJhBfr0HAEwzZ0s89XZKEjWL2dfRn/Zu8ZrYUWUmLlqfVrLI3WLmHiOkSr+Aa XXyiXMWzAuPm8rsBVSt4GGfL1Qehpzy18s3dPYhSPh9KY+ruURrBtPKOvGHbXFHR QuXg9/02L+qpFAvcAa9mlgetNmsmGcwtMECUD2W84KUDRKK28rzUn7040OmS5G0h YamIyxjC3bn8LU+oMgGnFHgtNtkt8OuAgDHadOxIqsNc6ah6OfghJDxLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCByimuGhmrusR6AwNtDjHVRbtiBMB8GA1UdIwQY MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG6wpTRw Lsm8EfVXrCLmuudO/MIDtcLgdt+KknSEiVA37S+pBskhhLCz7TmA2hWyG6PvnZLW iVMR9OzQO8z0+aLg4pelS374/0uCDAYonfErYUGlvMLEo/5t/sCXy2SaFu7BAthg gn9poICt+mGHLqsKbZlGB9Xuf+pfXIyN2sxf355YJll7ce5TDy7sNkANHVzOB1Pt n2ZDhwiVmjEK7HL3ngHGktp741ZOPt0Ns8iYUbkh2j+8uEblmyS882KY6fh3nvmN u7A6RRX7q2EAy1yf8/8K9poauvuD2DY+q2OQH600H4cNcb34QxuHhDNpjRu6kHiF AZL1WtNx0MYRmQ== -----END CERTIFICATE-----Generated at Mon Dec 22 17:20:38 2025 by rpki-client