This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json) Hash identifier: OOxXqr6E0qoOyGKXS2F6pZC/cxCqJm1+agpipSuZZME= Subject key identifier: EB:F6:1F:67:3A:79:A5:F7:13:4D:C8:03:00:45:FD:94:DC:92:8D:2D Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba Certificate serial: 019B52CEA4B81E48A9C81368CE4FFC417AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft Manifest number: 16E5 Signing time: Thu 25 Dec 2025 00:00:32 +0000 Manifest this update: Thu 25 Dec 2025 00:00:32 +0000 Manifest next update: Fri 26 Dec 2025 00:00:32 +0000 Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: BlJuEN4BfJ/z1AAzBTtluozyh8y+zzwLVCPgm+NVAEA=) 2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:a4:b8:1e:48:a9:c8:13:68:ce:4f:fc:41:7a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba Validity Not Before: Dec 25 00:00:32 2025 GMT Not After : Dec 26 00:00:32 2025 GMT Subject: CN=ebf61f673a79a5f7134dc8030045fd94dc928d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2c:18:64:00:50:d8:63:c7:fb:05:22:7a:12: bf:1e:83:cd:d5:d0:2f:9b:17:82:0d:d0:11:46:08: bc:6e:7a:d0:1d:a1:ca:e0:44:92:5b:1a:60:55:47: c4:99:21:bd:f3:ba:d0:60:ad:d0:22:61:ac:e8:cf: 9f:e7:92:df:15:16:68:a2:03:ad:3c:b6:80:5c:75: c1:5e:0f:ec:ba:46:6d:52:07:a3:3f:1b:d6:bb:ea: 4d:03:09:e3:70:12:2a:02:1e:74:03:10:35:53:c8: 7a:13:02:00:98:76:7c:ff:83:de:d6:d4:59:9a:a7: e7:a5:3a:d6:32:0b:77:8d:ea:43:95:fb:f0:95:97: 8a:11:d7:34:44:05:61:04:bf:62:eb:8c:f3:3a:93: 68:61:a3:51:18:a5:c9:49:75:57:d6:57:6b:bf:94: 05:4c:37:ad:2e:ab:65:ca:ae:de:27:8c:2a:72:bf: 27:89:e3:4a:06:b4:70:98:ac:12:40:95:5b:59:e0: 00:6e:b1:cd:9b:df:79:d6:01:00:62:7c:ea:83:2d: f7:32:70:71:21:f4:71:0e:77:60:f8:36:0e:7e:6a: 46:61:a1:0e:0c:43:39:26:ce:c5:58:3d:25:11:a0: 61:de:c8:b2:0a:a4:90:f1:d4:3a:eb:43:6f:09:3f: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F6:1F:67:3A:79:A5:F7:13:4D:C8:03:00:45:FD:94:DC:92:8D:2D X509v3 Authority Key Identifier: keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:42:5b:94:9b:70:d7:ec:cd:e9:94:40:e4:bf:a5:b0:68:f7: 01:fa:ac:f5:86:c7:e0:b9:da:f6:bd:e0:32:40:de:99:14:b3: 7f:70:cd:68:4c:f3:58:94:38:ee:17:00:c5:41:a1:b9:51:7e: 3f:cb:a2:b9:39:da:e7:84:0b:02:26:bd:7d:70:01:8c:7e:7d: fa:40:86:8c:6e:07:02:4a:4a:7e:b8:3f:3a:74:c9:f1:d3:9e: c7:cb:d4:ae:42:1b:74:ae:c4:45:3f:09:79:0a:1f:64:31:2e: 51:22:a6:8b:67:2e:b5:7c:0e:27:e2:19:58:82:57:94:66:c8: a5:9b:ff:0f:64:85:ad:c8:99:ca:d1:7d:d9:18:98:15:2b:27: d4:de:24:a8:40:82:64:ea:47:a7:9b:dc:c0:55:8e:3a:50:e3: 7d:de:f9:71:a4:80:10:7b:5d:e5:c4:52:99:c7:8a:db:90:c7: 77:da:ea:aa:1e:ae:78:ba:e9:ce:81:95:76:f8:89:db:6f:72: 91:4f:0a:9f:ff:c5:ca:c0:04:6c:4d:84:5b:d1:90:e2:38:c3: 54:2a:6e:6e:7a:c9:de:37:76:9a:b0:29:fe:b6:92:84:2f:f4: b1:4a:6a:b6:45:1b:7f:4f:d8:a0:96:8b:25:05:fb:2f:03:04: a3:70:9c:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzqS4HkipyBNozk/8QXqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2 MzBiYmEwHhcNMjUxMjI1MDAwMDMyWhcNMjUxMjI2MDAwMDMyWjAzMTEwLwYDVQQD EyhlYmY2MWY2NzNhNzlhNWY3MTM0ZGM4MDMwMDQ1ZmQ5NGRjOTI4ZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiwYZABQ2GPH+wUiehK/HoPN1dAv mxeCDdARRgi8bnrQHaHK4ESSWxpgVUfEmSG987rQYK3QImGs6M+f55LfFRZoogOt PLaAXHXBXg/sukZtUgejPxvWu+pNAwnjcBIqAh50AxA1U8h6EwIAmHZ8/4Pe1tRZ mqfnpTrWMgt3jepDlfvwlZeKEdc0RAVhBL9i64zzOpNoYaNRGKXJSXVX1ldrv5QF TDetLqtlyq7eJ4wqcr8nieNKBrRwmKwSQJVbWeAAbrHNm9951gEAYnzqgy33MnBx IfRxDndg+DYOfmpGYaEODEM5Js7FWD0lEaBh3siyCqSQ8dQ660NvCT9GGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv2H2c6eaX3E03IAwBF/ZTcko0tMB8GA1UdIwQY MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt NTczMDlkZjY5NjQyLzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0JblJtw 1+zN6ZRA5L+lsGj3Afqs9YbH4Lna9r3gMkDemRSzf3DNaEzzWJQ47hcAxUGhuVF+ P8uiuTna54QLAia9fXABjH59+kCGjG4HAkpKfrg/OnTJ8dOex8vUrkIbdK7ERT8J eQofZDEuUSKmi2cutXwOJ+IZWIJXlGbIpZv/D2SFrciZytF92RiYFSsn1N4kqECC ZOpHp5vcwFWOOlDjfd75caSAEHtd5cRSmceK25DHd9rqqh6ueLrpzoGVdviJ229y kU8Kn//FysAEbE2EW9GQ4jjDVCpubnrJ3jd2mrAp/raShC/0sUpqtkUbf0/YoJaL JQX7LwMEo3Cc9w== -----END CERTIFICATE-----Generated at Thu Dec 25 05:12:56 2025 by rpki-client