This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json) Hash identifier: TxnWdaRf8HMZbFjTFyAdrhdc6lRQTaB7TLXV2lY2zFg= Subject key identifier: F1:13:2A:B3:37:B8:4E:CA:50:B4:79:A3:D8:9E:35:45:CC:CF:F8:1A Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0 Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0 Certificate serial: 019B3D599B8E004EA1EA428590C4C14198BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft Manifest number: 063F Signing time: Sat 20 Dec 2025 20:00:41 +0000 Manifest this update: Sat 20 Dec 2025 20:00:41 +0000 Manifest next update: Sun 21 Dec 2025 20:00:41 +0000 Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: Ci8SKUZHOlvj+IgVLeJ/xbp+lUxET6AdccTZHCngS/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:9b:8e:00:4e:a1:ea:42:85:90:c4:c1:41:98:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0 Validity Not Before: Dec 20 20:00:41 2025 GMT Not After : Dec 21 20:00:41 2025 GMT Subject: CN=f1132ab337b84eca50b479a3d89e3545cccff81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:97:f6:ff:78:b5:b4:25:81:01:67:3e:cc: 1d:28:73:4a:f3:87:ab:b1:53:c7:c8:8e:31:4d:d5: 0d:db:13:ee:5d:ec:6c:8a:eb:3b:f0:14:3d:a2:f9: 62:a3:2f:84:bb:b6:a9:8f:af:c6:56:0b:17:da:4c: 65:c6:d1:e8:70:4c:cf:32:47:16:f3:e5:bd:79:36: c1:1b:76:04:9f:67:61:9c:ec:7a:30:bc:74:25:d5: 6f:24:1b:6f:85:e4:ae:7d:b5:99:0e:1a:2b:a0:2d: 73:01:0b:37:fa:31:23:8a:d9:94:51:25:98:7c:68: 2e:14:89:a8:ec:26:6e:2f:a6:86:a7:3a:95:ef:37: 17:0d:8d:cb:04:b4:a9:d6:1c:a7:2e:69:fe:7b:d0: 93:23:2d:33:b2:4e:2e:e8:c9:91:1e:2a:e0:d7:1e: a9:67:72:19:b0:ef:84:b9:31:a5:ec:39:f0:44:06: f2:8a:f1:8f:f2:26:a1:e8:63:46:de:70:49:1f:dd: 16:d0:57:c7:4b:b1:9b:70:11:3f:b2:b6:82:37:c5: a3:38:3e:bd:ad:10:10:df:7c:37:74:26:a9:dc:2e: 88:ee:d1:14:30:c8:5a:39:19:a2:d2:a9:34:22:f4: ac:95:23:7b:20:f3:89:c0:f4:60:b2:3e:d3:6e:c1: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:13:2A:B3:37:B8:4E:CA:50:B4:79:A3:D8:9E:35:45:CC:CF:F8:1A X509v3 Authority Key Identifier: keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5f:28:b5:04:8c:71:b9:a2:d5:39:75:29:16:4c:d2:02:9d: 39:b3:99:e0:90:bd:53:d7:e7:f4:2c:f6:2a:41:54:5c:03:92: 0b:f4:d3:06:eb:64:e1:50:72:47:74:25:af:8b:13:58:b4:17: 26:6c:17:75:8d:ee:b8:89:fd:75:80:a1:38:38:dd:a5:e1:0d: 86:a7:9d:ee:86:f4:f6:95:ce:fa:68:1e:75:5d:94:0f:7e:ab: f0:25:37:a7:4b:57:66:78:1e:bc:f7:55:c5:be:14:7b:54:5b: 3c:8b:93:23:a2:f0:7c:df:83:53:19:d5:b0:96:83:86:c3:d5: c8:1f:46:36:34:ed:09:d2:8f:93:69:d3:2f:57:d5:12:df:84: ff:c8:9d:32:30:1a:8a:78:9b:c4:49:7a:fc:1a:d1:c3:2e:12: 29:93:26:5f:94:f0:63:5f:1d:00:f9:3f:20:87:f1:ae:d0:63: 91:91:98:88:15:3f:eb:cf:1e:66:bd:38:08:67:c1:02:8f:2e: 75:a5:41:62:5a:b5:76:c2:a7:23:0b:c9:80:a7:e6:12:58:10: f4:82:c1:08:a1:fd:e9:61:d9:cc:d4:ce:18:a9:7e:dc:2a:d3: 25:7c:5c:90:bd:df:83:c8:d4:ca:ae:21:62:1a:fe:66:23:79: 0c:4d:28:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZuOAE6h6kKFkMTBQZi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTAwOGZmNjZkNDU2ZTQzZWZkYzExOTZiMTdkODQ0M2Qy Mzk3ZjAwHhcNMjUxMjIwMjAwMDQxWhcNMjUxMjIxMjAwMDQxWjAzMTEwLwYDVQQD EyhmMTEzMmFiMzM3Yjg0ZWNhNTBiNDc5YTNkODllMzU0NWNjY2ZmODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiKX9v94tbQlgQFnPswdKHNK84er sVPHyI4xTdUN2xPuXexsius78BQ9ovlioy+Eu7apj6/GVgsX2kxlxtHocEzPMkcW 8+W9eTbBG3YEn2dhnOx6MLx0JdVvJBtvheSufbWZDhoroC1zAQs3+jEjitmUUSWY fGguFImo7CZuL6aGpzqV7zcXDY3LBLSp1hynLmn+e9CTIy0zsk4u6MmRHirg1x6p Z3IZsO+EuTGl7DnwRAbyivGP8iah6GNG3nBJH90W0FfHS7GbcBE/sraCN8WjOD69 rRAQ33w3dCap3C6I7tEUMMhaORmi0qk0IvSslSN7IPOJwPRgsj7TbsH4lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPETKrM3uE7KULR5o9ieNUXMz/gaMB8GA1UdIwQY MBaAFCWgCP9m1FbkPv3BGWsX2EQ9I5fwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lM2I0ZDQtMjUwMS00YTVlLTlmMjQt ZmJmZWY3NDYxMDEwLzEvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lM2I0ZDQtMjUwMS00YTVlLTlmMjQtZmJmZWY3NDYxMDEw LzEvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIl8otQSM cbmi1Tl1KRZM0gKdObOZ4JC9U9fn9Cz2KkFUXAOSC/TTButk4VByR3Qlr4sTWLQX JmwXdY3uuIn9dYChODjdpeENhqed7ob09pXO+mgedV2UD36r8CU3p0tXZngevPdV xb4Ue1RbPIuTI6LwfN+DUxnVsJaDhsPVyB9GNjTtCdKPk2nTL1fVEt+E/8idMjAa inibxEl6/BrRwy4SKZMmX5TwY18dAPk/IIfxrtBjkZGYiBU/688eZr04CGfBAo8u daVBYlq1dsKnIwvJgKfmElgQ9ILBCKH96WHZzNTOGKl+3CrTJXxckL3fg8jUyq4h Yhr+ZiN5DE0oVw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:54 2025 by rpki-client