This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json) Hash identifier: gBULTXm4gCKBUBP3sltQM9rk1LOr2gRvyvu8fdgVfBU= Subject key identifier: 43:F4:B3:4F:2D:E9:6A:4B:3D:99:24:F8:40:0C:F9:50:B4:79:6D:EA Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6 Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6 Certificate serial: 019AF50AECFB9BF34D0CDC2FC69C719AB66B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft Manifest number: 14A3 Signing time: Sat 06 Dec 2025 19:02:05 +0000 Manifest this update: Sat 06 Dec 2025 19:02:05 +0000 Manifest next update: Sun 07 Dec 2025 19:02:05 +0000 Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: pcTiQkbF8rxwsVMkBykglNOqaGLJ/SRIRQmC5kqxabw=) 2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ec:fb:9b:f3:4d:0c:dc:2f:c6:9c:71:9a:b6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6 Validity Not Before: Dec 6 19:02:05 2025 GMT Not After : Dec 7 19:02:05 2025 GMT Subject: CN=43f4b34f2de96a4b3d9924f8400cf950b4796dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d0:15:c9:f1:0a:16:ab:7e:8a:7b:db:b2:52: c0:47:da:fa:82:59:9f:1c:59:b3:ce:b5:4a:b9:57: 0e:fe:59:78:ab:8b:ee:e3:60:ff:7c:fb:1a:c9:03: 42:2a:0c:dd:b5:02:28:dd:8e:cc:30:3b:4f:2e:2e: 3d:ba:88:dc:3f:45:13:3e:2c:7b:cf:c2:4a:a1:3b: 21:2b:d9:d1:ec:2b:66:8f:41:de:14:06:e8:c9:e9: cc:81:9e:9b:7f:43:0b:18:8c:15:ec:94:89:92:a3: f1:9e:2a:ca:9f:ab:3e:5c:f1:b0:0a:7b:45:3d:86: 72:8a:62:71:9f:69:c5:1a:9c:36:96:52:10:88:a1: 09:b2:67:1d:0c:b6:28:f0:0e:16:ed:7c:10:97:77: e5:53:26:b5:a3:a8:ff:1f:68:8d:90:e0:59:aa:7e: 49:a4:4b:52:2d:f0:28:5d:59:16:6a:65:7e:34:b9: 06:49:fc:b9:05:22:b1:49:66:5e:90:d2:28:e6:29: 28:4c:7b:d2:6d:87:b4:1b:71:7d:ad:f8:a8:81:dd: 98:fc:d2:97:89:26:e3:3c:ae:4f:35:47:bf:96:d3: eb:06:40:e9:dc:fa:5d:44:c8:03:0f:b3:96:ad:b0: 3f:b8:f3:90:75:1d:ef:eb:68:0e:69:22:31:4a:bd: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F4:B3:4F:2D:E9:6A:4B:3D:99:24:F8:40:0C:F9:50:B4:79:6D:EA X509v3 Authority Key Identifier: keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:52:f9:05:85:03:b5:2b:ec:6b:66:35:5b:f4:1d:cd:49:f3: 8e:d2:35:03:14:42:3b:3c:b9:da:6c:83:b7:63:4f:96:fd:59: ca:3e:b8:84:5f:13:e9:c9:e7:ed:fc:21:51:df:32:d5:23:8c: 01:b3:d1:ee:d7:34:bf:90:03:0d:a8:bc:94:87:6b:52:d1:00: 4e:db:70:96:b9:57:cb:28:99:a9:3e:67:ee:98:5f:68:2d:e3: 08:86:1a:fb:80:70:88:3e:d0:be:e3:0f:d7:6c:b5:b0:3f:b9: f1:a2:13:e8:55:19:94:cf:21:8f:ba:a3:c8:a4:a0:ae:ca:90: 03:7d:90:5c:12:98:69:b7:e1:fc:6e:bf:bd:e8:62:08:6a:bd: 9d:dd:ec:b5:13:6a:01:40:a8:26:9f:91:82:a6:6e:85:11:00: 1e:53:79:4c:16:f2:ea:be:33:20:e8:01:c3:bf:14:9e:e7:34: 89:78:19:72:52:aa:14:cd:d4:32:cb:76:28:1e:21:22:36:f8: ec:61:be:f1:d0:1e:a6:8e:ab:48:dc:44:08:76:5c:59:13:7f: 19:20:65:27:a6:6f:a4:98:27:96:87:ef:81:69:bd:6f:e8:85: 40:10:cc:05:63:d1:eb:99:29:6f:a6:9e:30:9b:b2:cd:65:b3: a1:4e:0c:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cuz7m/NNDNwvxpxxmrZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw ZjU0YzYwHhcNMjUxMjA2MTkwMjA1WhcNMjUxMjA3MTkwMjA1WjAzMTEwLwYDVQQD Eyg0M2Y0YjM0ZjJkZTk2YTRiM2Q5OTI0Zjg0MDBjZjk1MGI0Nzk2ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29AVyfEKFqt+invbslLAR9r6glmf HFmzzrVKuVcO/ll4q4vu42D/fPsayQNCKgzdtQIo3Y7MMDtPLi49uojcP0UTPix7 z8JKoTshK9nR7Ctmj0HeFAboyenMgZ6bf0MLGIwV7JSJkqPxnirKn6s+XPGwCntF PYZyimJxn2nFGpw2llIQiKEJsmcdDLYo8A4W7XwQl3flUya1o6j/H2iNkOBZqn5J pEtSLfAoXVkWamV+NLkGSfy5BSKxSWZekNIo5ikoTHvSbYe0G3F9rfiogd2Y/NKX iSbjPK5PNUe/ltPrBkDp3PpdRMgDD7OWrbA/uPOQdR3v62gOaSIxSr051wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP0s08t6WpLPZkk+EAM+VC0eW3qMB8GA1UdIwQY MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct MTBjNzUwYzZlMzUxLzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1L5BYUD tSvsa2Y1W/QdzUnzjtI1AxRCOzy52myDt2NPlv1Zyj64hF8T6cnn7fwhUd8y1SOM AbPR7tc0v5ADDai8lIdrUtEATttwlrlXyyiZqT5n7phfaC3jCIYa+4BwiD7QvuMP 12y1sD+58aIT6FUZlM8hj7qjyKSgrsqQA32QXBKYabfh/G6/vehiCGq9nd3stRNq AUCoJp+RgqZuhREAHlN5TBby6r4zIOgBw78Unuc0iXgZclKqFM3UMst2KB4hIjb4 7GG+8dAepo6rSNxECHZcWRN/GSBlJ6ZvpJgnlofvgWm9b+iFQBDMBWPR65kpb6ae MJuyzWWzoU4M/w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:35 2025 by rpki-client