This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json) Hash identifier: Yz3AXe62AfKTpZCHP1MmC51zaIPopidJSzZsAs0HYK4= Subject key identifier: 70:D7:78:E0:52:9B:D7:03:62:A5:BD:A0:32:D5:A1:24:09:FD:81:21 Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49 Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349 Certificate serial: 019B51F38FCF02ADF1D7B5C7A7FC08A28BDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft Manifest number: 0471 Signing time: Wed 24 Dec 2025 20:01:15 +0000 Manifest this update: Wed 24 Dec 2025 20:01:15 +0000 Manifest next update: Thu 25 Dec 2025 20:01:15 +0000 Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: ZQ05jQ9AOERiSE71kpteSWgTRlmIg8xxtmuHfOm0KRQ=) 2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:8f:cf:02:ad:f1:d7:b5:c7:a7:fc:08:a2:8b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349 Validity Not Before: Dec 24 20:01:15 2025 GMT Not After : Dec 25 20:01:15 2025 GMT Subject: CN=70d778e0529bd70362a5bda032d5a12409fd8121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:c7:cd:b6:26:71:db:5c:6f:25:6a:59:ab: 22:a5:47:0e:27:f0:c3:7c:3e:5e:bd:6a:25:c5:b0: f6:8e:be:fb:fb:37:05:e7:6f:d9:a5:ed:76:c7:7a: 66:d8:6b:84:55:24:85:11:85:4f:7a:36:a4:55:22: b9:5f:ee:2a:ba:3a:66:07:b2:0c:23:59:04:ef:2c: 4a:87:b6:16:d4:44:ba:89:c5:11:6d:59:64:11:8b: 6a:ca:42:9e:89:e9:d9:48:37:cd:4f:b0:3b:f3:69: 43:5f:9c:78:ae:e5:8a:cb:e9:35:5e:22:5a:e4:b3: ed:1c:f9:b0:79:ba:92:7b:c6:3c:50:9c:bb:4c:87: c7:ef:40:9e:d1:d4:0d:ba:ab:a6:ea:91:4e:43:b0: a6:d9:32:6f:3b:cc:d7:02:32:07:c0:9d:90:f6:fb: 67:b0:3a:79:0c:7c:54:bc:e0:bf:05:2a:8e:a3:11: 4f:03:a2:6f:30:dc:36:ef:5b:ef:b7:b4:a7:e1:2b: 7f:f4:ec:2c:e0:17:0e:9f:50:b1:9c:26:85:e9:eb: 0f:43:82:e1:29:9a:db:f3:a4:49:8c:5c:2b:f1:d2: c4:2c:04:fc:d3:3e:76:0c:87:f5:c0:6e:db:95:ea: c1:6d:e4:9d:78:f8:82:d1:ac:18:e3:74:cc:c4:ed: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D7:78:E0:52:9B:D7:03:62:A5:BD:A0:32:D5:A1:24:09:FD:81:21 X509v3 Authority Key Identifier: keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b9:6f:6b:ca:e8:f8:98:d2:22:11:28:a8:3b:bf:c1:e3:76: 86:ab:46:58:06:58:ee:69:77:c2:f5:93:9f:f2:f6:d9:9b:41: db:01:76:63:d6:51:8d:3c:39:38:49:6d:16:48:93:79:92:21: 40:fb:87:bb:e4:d6:eb:99:1d:b2:69:b5:d1:31:c8:d0:77:6b: b9:ed:e7:5a:7c:77:20:f9:dd:da:cf:76:15:dc:80:4c:c6:4e: d4:59:28:65:3b:4e:8b:a5:1e:84:f7:b9:e7:a5:e7:50:75:12: 7f:2f:5a:d2:05:1c:2b:a9:6d:67:6a:de:48:26:30:1b:88:94: c3:a8:5f:2a:03:45:03:98:69:fe:19:5b:34:3e:86:6d:46:ed: 85:d9:65:5e:2b:fa:e9:46:37:c2:c3:70:c5:1c:22:d0:20:b0: 2a:a9:8e:87:27:e2:bc:68:5b:c6:b9:97:f8:dd:71:60:97:7f: a9:3f:d6:72:f7:5e:3c:0b:e3:ec:5b:2e:fb:f0:88:d3:8d:ce: c6:17:54:30:4e:a4:b5:66:bc:42:84:70:59:5f:98:b7:b2:3a: a5:75:fd:fa:0a:31:73:79:a4:71:55:c1:96:ee:6d:1a:88:0e: ca:0e:e6:56:5b:39:c7:98:90:6e:45:42:b4:0e:9d:bb:7b:ab: 67:8a:69:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR84/PAq3x17XHp/wIoovaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm NzQzNDkwHhcNMjUxMjI0MjAwMTE1WhcNMjUxMjI1MjAwMTE1WjAzMTEwLwYDVQQD Eyg3MGQ3NzhlMDUyOWJkNzAzNjJhNWJkYTAzMmQ1YTEyNDA5ZmQ4MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2HHzbYmcdtcbyVqWasipUcOJ/DD fD5evWolxbD2jr77+zcF52/Zpe12x3pm2GuEVSSFEYVPejakVSK5X+4qujpmB7IM I1kE7yxKh7YW1ES6icURbVlkEYtqykKeienZSDfNT7A782lDX5x4ruWKy+k1XiJa 5LPtHPmwebqSe8Y8UJy7TIfH70Ce0dQNuqum6pFOQ7Cm2TJvO8zXAjIHwJ2Q9vtn sDp5DHxUvOC/BSqOoxFPA6JvMNw271vvt7Sn4St/9Ows4BcOn1CxnCaF6esPQ4Lh KZrb86RJjFwr8dLELAT80z52DIf1wG7blerBbeSdePiC0awY43TMxO0DywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDXeOBSm9cDYqW9oDLVoSQJ/YEhMB8GA1UdIwQY MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLlva8ro +JjSIhEoqDu/weN2hqtGWAZY7ml3wvWTn/L22ZtB2wF2Y9ZRjTw5OEltFkiTeZIh QPuHu+TW65kdsmm10THI0Hdrue3nWnx3IPnd2s92FdyATMZO1FkoZTtOi6UehPe5 56XnUHUSfy9a0gUcK6ltZ2reSCYwG4iUw6hfKgNFA5hp/hlbND6GbUbthdllXiv6 6UY3wsNwxRwi0CCwKqmOhyfivGhbxrmX+N1xYJd/qT/WcvdePAvj7Fsu+/CI043O xhdUME6ktWa8QoRwWV+Yt7I6pXX9+goxc3mkcVXBlu5tGogOyg7mVls5x5iQbkVC tA6du3urZ4ppow== -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:51 2025 by rpki-client