This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json) Hash identifier: qMboFnT79Zi01TqfS0P1myqh7G0xLktjutoinGTGh+A= Subject key identifier: 0C:9E:54:8F:27:90:4D:CA:45:B2:C7:C1:07:D7:51:FC:74:02:DD:A3 Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07 Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07 Certificate serial: 019AF31B22D4963AB88F7C44C9C5B16ED843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft Manifest number: 0ABA Signing time: Sat 06 Dec 2025 10:00:32 +0000 Manifest this update: Sat 06 Dec 2025 10:00:32 +0000 Manifest next update: Sun 07 Dec 2025 10:00:32 +0000 Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: dIJnPnLp0tIPbnBo1sfUh3U5QEHRG61Sfbp+RC/XLlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:22:d4:96:3a:b8:8f:7c:44:c9:c5:b1:6e:d8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07 Validity Not Before: Dec 6 10:00:32 2025 GMT Not After : Dec 7 10:00:32 2025 GMT Subject: CN=0c9e548f27904dca45b2c7c107d751fc7402dda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:31:3e:cd:17:4e:34:9f:74:eb:56:00:be: 22:09:95:7e:f1:92:6d:8b:77:4d:5f:89:9f:2d:9f: b7:09:0b:4e:1d:87:c4:ec:ee:2b:f5:b4:e8:33:2a: c2:dc:f9:2a:e7:ad:0f:f4:50:29:69:58:8d:f0:85: 27:06:d7:e3:18:86:76:6c:85:cc:52:20:5d:d5:40: 06:8f:71:15:59:28:df:ad:7a:0e:93:d2:68:fd:6d: 47:60:da:0f:7a:f6:c3:2d:09:83:df:1f:7d:36:ad: 03:43:4d:be:a5:65:e3:c4:a2:03:05:3f:31:31:e2: cb:dd:a1:6b:0b:9e:ac:f3:9b:67:87:af:e8:8e:02: 2b:22:38:c8:b6:22:19:4b:54:9b:ca:27:92:b0:da: 8d:bd:ea:24:98:ce:c1:42:f9:db:8f:e8:70:37:bb: e7:aa:0c:32:fa:e4:c1:c9:23:ba:af:5d:9d:f4:77: 6a:6c:c5:17:92:bb:57:39:a5:d0:71:86:94:47:cf: a4:61:6f:39:db:7a:6d:c1:f6:02:d5:34:26:ed:d1: ab:30:3c:9c:01:09:5f:37:cd:e2:ad:8b:bc:72:76: 94:0b:d9:05:f3:41:39:04:73:6b:db:86:2f:17:c6: 6f:5e:43:7b:65:e3:8a:f9:67:bb:7d:c8:6b:54:19: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9E:54:8F:27:90:4D:CA:45:B2:C7:C1:07:D7:51:FC:74:02:DD:A3 X509v3 Authority Key Identifier: keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:59:4e:18:82:e8:e7:fd:6a:e9:57:1f:92:dd:7a:49:c1:12: db:63:16:28:9f:ff:e6:b6:07:cd:ce:fa:2e:0d:e0:da:99:3e: 73:8b:ec:16:68:ad:d5:88:6b:47:5f:0e:8a:7f:22:af:bf:54: ee:9a:fe:52:1a:5e:b7:ec:72:a2:8b:6b:06:65:1d:5e:1a:37: 12:c2:59:d9:de:5d:75:a0:f5:98:0e:ea:60:34:df:84:d8:14: 12:87:8a:eb:fc:93:88:74:d2:a3:28:22:ac:5e:e8:e2:29:18: af:f4:d4:c0:1e:a9:02:9f:de:43:b8:78:fe:fe:d7:36:78:39: 71:5c:90:a7:78:7c:c2:78:92:1f:e5:13:64:b7:4b:d5:ec:57: 2e:87:05:4e:e2:24:fe:86:28:4c:81:78:a6:49:4b:19:60:9b: 9f:cf:2a:fe:29:75:fa:30:d5:35:b6:d5:af:0d:c4:5d:30:50: 9d:2a:60:9a:a3:04:ad:3c:6c:7b:57:90:ff:f1:3d:04:b8:34: 0f:74:2d:8f:f4:62:0c:a3:33:d7:3e:05:b6:5b:12:04:1a:11: e2:74:54:25:aa:8b:c3:84:ec:de:33:42:d2:41:07:0b:5c:84: be:8a:3b:0e:ac:26:a9:4b:ca:4e:62:1a:4d:51:9f:e7:9f:a8: e8:39:1a:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyLUljq4j3xEycWxbthDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NjI0ZDM2OTY0Njg4Zjk4OWM2NDRhYzIwMTFmNDE2NWQz Y2ViMDcwHhcNMjUxMjA2MTAwMDMyWhcNMjUxMjA3MTAwMDMyWjAzMTEwLwYDVQQD EygwYzllNTQ4ZjI3OTA0ZGNhNDViMmM3YzEwN2Q3NTFmYzc0MDJkZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXExPs0XTjSfdOtWAL4iCZV+8ZJt i3dNX4mfLZ+3CQtOHYfE7O4r9bToMyrC3Pkq560P9FApaViN8IUnBtfjGIZ2bIXM UiBd1UAGj3EVWSjfrXoOk9Jo/W1HYNoPevbDLQmD3x99Nq0DQ02+pWXjxKIDBT8x MeLL3aFrC56s85tnh6/ojgIrIjjItiIZS1SbyieSsNqNveokmM7BQvnbj+hwN7vn qgwy+uTBySO6r12d9HdqbMUXkrtXOaXQcYaUR8+kYW8523ptwfYC1TQm7dGrMDyc AQlfN83irYu8cnaUC9kF80E5BHNr24YvF8ZvXkN7ZeOK+We7fchrVBnGqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyeVI8nkE3KRbLHwQfXUfx0At2jMB8GA1UdIwQY MBaAFCRiTTaWRoj5icZErCAR9BZdPOsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkdKTk5wWkdpUG1KeGtTc0lCSDBGbDA4NndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MzkyOTEtMmQ1Yy00YzFkLTkwNzkt MDI3ZThjMDkxNDZiLzEvSkdKTk5wWkdpUG1KeGtTc0lCSDBGbDA4NndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83MzkyOTEtMmQ1Yy00YzFkLTkwNzktMDI3ZThjMDkxNDZi LzEvSkdKTk5wWkdpUG1KeGtTc0lCSDBGbDA4NndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1lOGILo 5/1q6Vcfkt16ScES22MWKJ//5rYHzc76Lg3g2pk+c4vsFmit1YhrR18Oin8ir79U 7pr+Uhpet+xyootrBmUdXho3EsJZ2d5ddaD1mA7qYDTfhNgUEoeK6/yTiHTSoygi rF7o4ikYr/TUwB6pAp/eQ7h4/v7XNng5cVyQp3h8wniSH+UTZLdL1exXLocFTuIk /oYoTIF4pklLGWCbn88q/il1+jDVNbbVrw3EXTBQnSpgmqMErTxse1eQ//E9BLg0 D3Qtj/RiDKMz1z4FtlsSBBoR4nRUJaqLw4Ts3jNC0kEHC1yEvoo7DqwmqUvKTmIa TVGf55+o6DkaLA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:19:28 2025 by rpki-client