This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json) Hash identifier: mFsuLrWA0Khxw5A30uI50h7qw/0apNAHV97oThDMc8g= Subject key identifier: 75:B5:05:65:6E:91:FF:66:4F:6C:BD:8D:76:D1:38:0E:83:0D:5C:67 Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84 Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84 Certificate serial: 019B71471BC2233B1166E80E894D8AA17356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft Manifest number: 09B3 Signing time: Tue 30 Dec 2025 22:00:44 +0000 Manifest this update: Tue 30 Dec 2025 22:00:44 +0000 Manifest next update: Wed 31 Dec 2025 22:00:44 +0000 Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: 8s4DWb9/3c0PnfbLbo63SRQpeXsd1VMdS9ZEmCizqfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:1b:c2:23:3b:11:66:e8:0e:89:4d:8a:a1:73:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d26a5146996d220461081072c76396582fca84 Validity Not Before: Dec 30 22:00:44 2025 GMT Not After : Dec 31 22:00:44 2025 GMT Subject: CN=75b505656e91ff664f6cbd8d76d1380e830d5c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:97:12:06:f9:b6:d9:e3:a1:8a:0c:af:31: 32:09:25:9f:fd:88:02:78:34:9d:1f:d8:bd:bb:d8: d1:6b:04:23:8a:36:d0:f3:c6:8b:a1:b7:f8:a8:e1: 43:f2:d0:7e:a2:5c:ca:2b:a3:b5:e5:66:a2:35:39: cf:25:d2:6e:c4:6c:66:9e:20:f8:aa:08:ab:5e:dd: ee:f5:66:05:51:f9:20:28:03:5a:98:45:1a:e5:dd: 7d:de:7c:d3:6a:63:31:d9:41:ab:71:d8:e2:7e:19: a1:f7:d4:f3:dd:55:e3:84:40:d2:74:f3:55:29:c6: 15:0f:d3:40:46:03:3c:1c:96:2a:f9:03:da:40:91: 85:d5:fa:d2:13:b5:75:bc:9e:75:c5:fe:c0:b4:5f: ec:96:eb:17:85:f6:63:5a:6e:2f:36:2e:6e:2c:ac: 1b:a4:7e:4e:ac:3a:63:71:67:7b:6e:1a:6f:a9:0c: d3:cb:2d:bc:d0:b6:97:20:51:d2:e1:bb:69:a9:2a: 58:19:fb:92:2d:93:2b:52:b5:76:51:c1:c6:bc:cd: 7e:37:a6:48:b0:49:49:28:06:bc:d1:f7:1a:7a:87: 62:eb:85:6c:c2:b4:e7:3e:09:8d:24:c3:f5:cf:f2: 3b:92:59:09:b9:29:52:9f:8a:ff:7a:ec:ff:71:7b: 1e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B5:05:65:6E:91:FF:66:4F:6C:BD:8D:76:D1:38:0E:83:0D:5C:67 X509v3 Authority Key Identifier: keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0d:24:28:a4:87:06:3d:7f:b3:4f:30:33:a5:25:2a:7a:5d: 58:48:36:57:f3:d9:20:5d:55:35:7f:b3:e6:76:1d:c4:e4:43: 61:7f:fe:78:bd:99:d8:1c:6f:ea:d4:97:10:3c:c0:9b:69:4b: ab:30:6d:48:9a:a5:38:dc:87:f3:e1:d9:0e:df:65:a7:ac:f4: 34:61:c0:56:59:93:cf:55:86:f0:b7:f4:7a:bd:de:43:cb:17: 97:e9:11:72:3c:5f:69:5d:6b:98:95:8b:6f:02:c6:fd:2b:83: d8:ff:43:6c:3c:10:09:f9:0f:a4:f1:5f:d3:c2:47:dc:b3:50: 2c:2a:34:cf:dd:83:09:ac:36:71:34:4d:21:30:e3:ab:ab:d7: b6:30:dd:04:0e:66:53:13:ac:d9:11:4e:46:60:f3:73:ce:79: 6f:cb:82:f7:17:11:cb:06:ab:5e:5f:27:02:a3:1b:55:f7:da: b8:85:19:ee:88:b3:ed:2e:a2:62:88:ed:f7:dc:33:69:50:c2: eb:a0:4d:a5:5c:5b:fd:de:54:15:de:81:2b:e4:94:e3:c9:32: f8:d8:39:5d:a0:af:a5:f8:cf:38:c4:27:22:ab:c6:f2:44:0f: 2f:08:42:32:bf:b2:d2:6b:1b:bd:ec:1a:c2:52:30:cd:83:44: 0e:72:bf:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRxvCIzsRZugOiU2KoXNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI2YTUxNDY5OTZkMjIwNDYxMDgxMDcyYzc2Mzk2NTgy ZmNhODQwHhcNMjUxMjMwMjIwMDQ0WhcNMjUxMjMxMjIwMDQ0WjAzMTEwLwYDVQQD Eyg3NWI1MDU2NTZlOTFmZjY2NGY2Y2JkOGQ3NmQxMzgwZTgzMGQ1YzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4qXEgb5ttnjoYoMrzEyCSWf/YgC eDSdH9i9u9jRawQjijbQ88aLobf4qOFD8tB+olzKK6O15WaiNTnPJdJuxGxmniD4 qgirXt3u9WYFUfkgKANamEUa5d193nzTamMx2UGrcdjifhmh99Tz3VXjhEDSdPNV KcYVD9NARgM8HJYq+QPaQJGF1frSE7V1vJ51xf7AtF/slusXhfZjWm4vNi5uLKwb pH5OrDpjcWd7bhpvqQzTyy280LaXIFHS4btpqSpYGfuSLZMrUrV2UcHGvM1+N6ZI sElJKAa80fcaeodi64VswrTnPgmNJMP1z/I7klkJuSlSn4r/euz/cXseTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW1BWVukf9mT2y9jXbROA6DDVxnMB8GA1UdIwQY MBaAFCTSalFGmW0iBGEIEHLHY5ZYL8qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEt NWI5ODk2MjczNzg5LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEtNWI5ODk2MjczNzg5 LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEg0kKKSH Bj1/s08wM6UlKnpdWEg2V/PZIF1VNX+z5nYdxORDYX/+eL2Z2Bxv6tSXEDzAm2lL qzBtSJqlONyH8+HZDt9lp6z0NGHAVlmTz1WG8Lf0er3eQ8sXl+kRcjxfaV1rmJWL bwLG/SuD2P9DbDwQCfkPpPFf08JH3LNQLCo0z92DCaw2cTRNITDjq6vXtjDdBA5m UxOs2RFORmDzc855b8uC9xcRywarXl8nAqMbVffauIUZ7oiz7S6iYojt99wzaVDC 66BNpVxb/d5UFd6BK+SU48ky+Ng5XaCvpfjPOMQnIqvG8kQPLwhCMr+y0msbvewa wlIwzYNEDnK/6g== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:03 2025 by rpki-client