This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json) Hash identifier: WSZW3PNY3UerLEBOhJL8DFnYmUose54sXLVj7qKycTo= Subject key identifier: 47:39:65:9A:3B:F2:CB:B9:23:66:7D:53:06:25:41:90:D4:CE:22:AE Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb Certificate serial: 019AF12D750F66B19078D8661135B4067E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft Manifest number: 0AA7 Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: Nl9qwF42+DkWuk4HtZwKRken6hY1RQsqxT/RW9WG0Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:75:0f:66:b1:90:78:d8:66:11:35:b4:06:7e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=4739659a3bf2cbb923667d5306254190d4ce22ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:1e:b0:cc:1d:da:5c:44:2e:62:fc:13:bb: 71:24:39:72:bb:74:89:c1:06:2c:82:e3:9c:71:84: d1:a7:34:f4:b3:e5:48:c0:2e:5e:c1:58:80:99:96: bc:15:e2:02:78:9b:9f:2f:00:cf:24:67:ec:fd:ec: 99:d6:2c:53:0d:c1:1b:93:17:c4:8c:83:85:68:aa: 2d:a9:30:e8:90:30:bf:66:cf:a5:a8:5b:6e:32:b0: 8b:20:08:89:00:03:cb:f1:9b:a4:75:2b:83:42:7e: cd:4a:6c:ba:91:78:3d:47:1a:0e:fb:37:88:68:ed: 6e:1c:30:13:25:31:ef:b3:12:9c:d4:06:48:17:69: 32:9d:fb:bc:c5:10:b3:f3:e9:81:b2:5e:e8:19:b1: d2:65:ac:cf:c6:18:6a:33:ac:52:ce:39:13:95:b9: 4f:67:d2:2a:4c:de:8d:61:5a:e5:a3:2a:95:e7:1a: f3:2f:c6:36:f7:42:5f:7b:b8:da:4a:6f:b9:7f:c2: 01:98:7f:b6:67:b0:99:af:c5:3f:91:b7:9a:18:61: e4:48:76:48:56:6e:7c:bb:49:9f:d2:56:cf:b5:c3: 2c:25:92:75:98:15:d3:6d:d1:5a:3f:ab:9d:df:b5: 08:ef:f9:eb:5a:86:5c:a0:3c:5f:0e:cb:94:f1:b8: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:39:65:9A:3B:F2:CB:B9:23:66:7D:53:06:25:41:90:D4:CE:22:AE X509v3 Authority Key Identifier: keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f0:71:e7:99:47:c3:5a:88:f9:cb:93:d2:37:81:73:2f:df: e8:75:2b:8e:7b:4a:8d:a5:bd:33:c3:0b:11:69:67:c3:d9:7d: 30:f9:2e:0b:34:8f:3e:d1:b7:3c:6c:ac:7f:ec:7d:3b:4b:00: 1f:ba:78:42:c7:c5:29:e7:e1:68:8a:14:de:aa:9f:41:c0:36: 60:94:66:b6:f1:b6:6e:44:68:c9:04:b6:9d:75:c1:f7:27:64: 2b:f1:19:c6:38:28:f5:09:01:b6:7f:07:e3:15:84:d2:22:2b: 82:6d:f3:b2:6b:4f:23:e9:39:01:e6:37:b2:1b:bb:ff:52:d8: ca:f9:06:b9:df:2e:6a:5f:d5:e4:d2:c3:81:63:be:1a:11:b0: 91:fb:79:3d:92:6b:a5:eb:26:b6:51:5d:02:43:40:23:9c:a9: 74:41:68:d6:71:39:94:5a:30:ad:6a:d3:ba:bf:be:a3:71:0b: 59:eb:9d:a9:98:ee:d2:8f:75:ec:b9:f8:8f:09:04:b7:42:ad: 3d:70:49:af:84:7b:a6:61:7f:be:47:3b:93:27:e2:a1:53:ba: 03:e6:03:0f:83:ce:e9:da:e8:2b:57:66:5c:2e:ec:12:ad:38: b5:f1:3a:37:31:d4:08:8f:3c:75:24:ec:7d:2f:64:c2:80:28: 44:65:cc:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXUPZrGQeNhmETW0Bn4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDQzZTNlMDNhNjdmOTQ2ZTYzYjIyNWY0M2M5MTRiYjkz MjVjY2IwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD Eyg0NzM5NjU5YTNiZjJjYmI5MjM2NjdkNTMwNjI1NDE5MGQ0Y2UyMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUoesMwd2lxELmL8E7txJDlyu3SJ wQYsguOccYTRpzT0s+VIwC5ewViAmZa8FeICeJufLwDPJGfs/eyZ1ixTDcEbkxfE jIOFaKotqTDokDC/Zs+lqFtuMrCLIAiJAAPL8ZukdSuDQn7NSmy6kXg9RxoO+zeI aO1uHDATJTHvsxKc1AZIF2kynfu8xRCz8+mBsl7oGbHSZazPxhhqM6xSzjkTlblP Z9IqTN6NYVrloyqV5xrzL8Y290Jfe7jaSm+5f8IBmH+2Z7CZr8U/kbeaGGHkSHZI Vm58u0mf0lbPtcMsJZJ1mBXTbdFaP6ud37UI7/nrWoZcoDxfDsuU8bgMrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc5ZZo78su5I2Z9UwYlQZDUziKuMB8GA1UdIwQY MBaAFCVEPj4Dpn+UbmOyJfQ8kUu5MlzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVRLVBnT21mNVJ1WTdJbDlEeVJTN2t5WE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iZjcwZmQtODZkYy00ZDVjLWFmN2Ut NjJhNmUyODY2ZmMzLzEvSlVRLVBnT21mNVJ1WTdJbDlEeVJTN2t5WE1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iZjcwZmQtODZkYy00ZDVjLWFmN2UtNjJhNmUyODY2ZmMz LzEvSlVRLVBnT21mNVJ1WTdJbDlEeVJTN2t5WE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/Bx55lH w1qI+cuT0jeBcy/f6HUrjntKjaW9M8MLEWlnw9l9MPkuCzSPPtG3PGysf+x9O0sA H7p4QsfFKefhaIoU3qqfQcA2YJRmtvG2bkRoyQS2nXXB9ydkK/EZxjgo9QkBtn8H 4xWE0iIrgm3zsmtPI+k5AeY3shu7/1LYyvkGud8ual/V5NLDgWO+GhGwkft5PZJr pesmtlFdAkNAI5ypdEFo1nE5lFowrWrTur++o3ELWeudqZju0o917Ln4jwkEt0Kt PXBJr4R7pmF/vkc7kyfioVO6A+YDD4PO6droK1dmXC7sEq04tfE6NzHUCI88dSTs fS9kwoAoRGXM5A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:26 2025 by rpki-client