This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft File: JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json) Hash identifier: +Og2QuB7r/5CHYlkXmozOO2tEEdkdDsln/R3ISVfD2A= Subject key identifier: 46:8E:01:B0:C9:ED:19:BD:51:E5:8E:4C:BC:1E:96:51:6A:06:ED:DA Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60 Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60 Certificate serial: 019B51BE15CDB6457CF72726DC92CE43B173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft Manifest number: 126D Signing time: Wed 24 Dec 2025 19:02:50 +0000 Manifest this update: Wed 24 Dec 2025 19:02:50 +0000 Manifest next update: Thu 25 Dec 2025 19:02:50 +0000 Files and hashes: 1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=) 2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=) 3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: GBR1Sv1JEfT0o1G6M4v+vjuqbdTXpaBbcS933oea4i0=) 4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=) 5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:be:15:cd:b6:45:7c:f7:27:26:dc:92:ce:43:b1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24504c74c7127090a4cff85001f443149e128e60 Validity Not Before: Dec 24 19:02:50 2025 GMT Not After : Dec 25 19:02:50 2025 GMT Subject: CN=468e01b0c9ed19bd51e58e4cbc1e96516a06edda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:24:c7:3d:ce:a5:92:ec:04:bf:f0:75:a7: c4:65:a7:f3:51:83:26:e5:9e:ec:6a:7c:82:ac:c1: dc:e3:7a:25:27:77:b1:15:c5:7b:e6:a9:e7:2f:c5: 12:61:47:22:9d:ca:13:c9:15:f8:87:f9:6e:58:61: 98:2e:91:71:6e:4f:29:02:7a:6b:e9:b4:ff:3f:f2: fd:68:d2:94:ce:c2:ab:ce:7e:55:4e:c5:e6:36:d7: c6:62:67:27:ba:e7:5d:e5:2d:6b:45:51:fe:64:fa: ce:c6:1a:0c:57:bf:30:41:f3:b3:27:b3:52:55:3d: e2:2c:68:ce:7b:28:15:0b:dd:c3:70:f4:a2:85:98: 72:08:86:34:39:da:2f:7a:ad:92:32:04:5d:57:3d: ea:6c:7b:bf:dd:4f:a6:54:11:0f:91:86:0f:85:bb: a8:a0:c0:cd:6d:4b:5c:fe:28:42:89:f4:f1:15:73: 55:bc:40:cc:25:97:98:48:8e:b3:38:7f:ca:e1:2f: 74:57:da:69:55:e6:32:bf:64:b4:c8:c9:df:04:6d: 7a:7f:e6:39:f3:5b:47:16:9f:83:ed:aa:1b:7e:ea: 1d:c6:4e:7a:7e:ed:a5:42:9c:f8:1e:fe:2b:d5:d9: b1:ad:4b:97:a3:b3:c2:b4:ff:50:96:5e:79:4b:69: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:01:B0:C9:ED:19:BD:51:E5:8E:4C:BC:1E:96:51:6A:06:ED:DA X509v3 Authority Key Identifier: keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b2:63:56:b5:b4:25:44:80:8d:ec:2f:54:70:38:bf:d2:36: c8:0d:b8:15:9e:ff:7a:86:cb:38:94:b4:39:f4:f4:ac:dd:ff: c3:fc:e8:ac:1b:9e:b7:89:69:94:b6:27:f4:d5:7f:eb:0c:e9: 55:28:64:17:bd:75:8d:5c:db:a7:56:d7:b9:9f:19:6d:56:eb: fc:af:12:24:00:89:47:6d:66:71:f1:83:33:ab:6d:32:2f:65: d5:f3:bd:68:84:8f:36:53:22:75:87:a9:cc:d9:bb:f1:60:4e: 2f:8b:21:a9:c3:59:85:da:ea:39:de:dc:db:62:76:08:e5:19: eb:0f:ca:3a:5a:a9:bc:4a:de:04:63:15:5c:34:04:fd:b9:06: 38:38:ef:6b:02:f8:62:0a:11:af:79:ca:b8:34:6d:c3:25:cc: e4:7e:91:0c:70:68:cb:56:67:4b:09:e8:ba:cc:fe:db:b1:7c: 79:79:13:72:11:d3:23:58:1a:bb:80:37:65:ed:2f:ae:93:fd: 98:ff:4c:b5:fa:a2:d5:79:f8:81:7b:2d:75:8c:e8:12:79:b7: 73:01:7e:05:94:fe:bb:a0:ae:1d:d6:8b:0b:ad:fe:6a:e4:bf: da:f7:c5:98:98:5a:17:77:e2:7c:da:7d:87:a8:3f:36:59:75: 5f:98:55:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvhXNtkV89ycm3JLOQ7FzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTA0Yzc0YzcxMjcwOTBhNGNmZjg1MDAxZjQ0MzE0OWUx MjhlNjAwHhcNMjUxMjI0MTkwMjUwWhcNMjUxMjI1MTkwMjUwWjAzMTEwLwYDVQQD Eyg0NjhlMDFiMGM5ZWQxOWJkNTFlNThlNGNiYzFlOTY1MTZhMDZlZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dwkxz3OpZLsBL/wdafEZafzUYMm 5Z7sanyCrMHc43olJ3exFcV75qnnL8USYUcincoTyRX4h/luWGGYLpFxbk8pAnpr 6bT/P/L9aNKUzsKrzn5VTsXmNtfGYmcnuudd5S1rRVH+ZPrOxhoMV78wQfOzJ7NS VT3iLGjOeygVC93DcPSihZhyCIY0Odoveq2SMgRdVz3qbHu/3U+mVBEPkYYPhbuo oMDNbUtc/ihCifTxFXNVvEDMJZeYSI6zOH/K4S90V9ppVeYyv2S0yMnfBG16f+Y5 81tHFp+D7aobfuodxk56fu2lQpz4Hv4r1dmxrUuXo7PCtP9Qll55S2kwSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaOAbDJ7Rm9UeWOTLwellFqBu3aMB8GA1UdIwQY MBaAFCRQTHTHEnCQpM/4UAH0QxSeEo5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zOTZlOGItNzFkMy00NmJmLWEyNDQt ZDA2MjJjNGNkNDhkLzEvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zOTZlOGItNzFkMy00NmJmLWEyNDQtZDA2MjJjNGNkNDhk LzEvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7JjVrW0 JUSAjewvVHA4v9I2yA24FZ7/eobLOJS0OfT0rN3/w/zorBuet4lplLYn9NV/6wzp VShkF711jVzbp1bXuZ8ZbVbr/K8SJACJR21mcfGDM6ttMi9l1fO9aISPNlMidYep zNm78WBOL4shqcNZhdrqOd7c22J2COUZ6w/KOlqpvEreBGMVXDQE/bkGODjvawL4 YgoRr3nKuDRtwyXM5H6RDHBoy1ZnSwnousz+27F8eXkTchHTI1gau4A3Ze0vrpP9 mP9Mtfqi1Xn4gXstdYzoEnm3cwF+BZT+u6CuHdaLC63+auS/2vfFmJhaF3fifNp9 h6g/Nll1X5hVdw== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:40 2025 by rpki-client