This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft File: JTncEcLyIukQROG-eygeV23u5Fs.mft (raw, json) Hash identifier: ErOmU53H9g9DQzW431+8FaBv7CpEhdICx0tHHrsz4bA= Subject key identifier: 62:BC:41:3E:98:73:A1:B6:A1:89:0E:C8:BD:F2:76:17:FE:83:D7:78 Authority key identifier: 25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B Certificate issuer: /CN=2539dc11c2f222e91044e1be7b281e576deee45b Certificate serial: 019AF16419507D29B3B487E461898C3016E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft Manifest number: 0237 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: JTncEcLyIukQROG-eygeV23u5Fs.crl (hash: 4D5+mZdEYfo3032FLAybsELD3lPDRUuoxOTLOQi1FoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:19:50:7d:29:b3:b4:87:e4:61:89:8c:30:16:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2539dc11c2f222e91044e1be7b281e576deee45b Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=62bc413e9873a1b6a1890ec8bdf27617fe83d778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:67:a1:c3:03:80:ad:9d:c3:33:97:6f:6c:fb: c6:f7:79:5e:ba:67:ea:00:61:28:04:f9:ee:dc:90: e5:ec:38:f1:88:69:88:a1:f6:bf:20:1e:04:8c:20: 59:5a:4a:2f:ae:21:00:61:95:83:a0:e8:7c:a9:0b: 98:3e:65:ce:8d:92:35:98:a3:f7:df:d8:33:7b:ec: 82:8a:a9:54:5a:fd:bb:b7:73:fc:36:17:09:ce:b2: 95:b3:c0:d1:78:56:c6:1f:27:c2:8d:9e:30:05:18: 88:b7:e4:90:e1:a2:c0:ab:d0:21:8a:dd:0a:4d:b4: fa:28:ac:24:15:c7:ba:49:94:4c:01:74:21:29:eb: fd:53:be:1b:68:7e:4a:8b:3e:13:6a:ce:b0:2f:c3: 5e:32:46:c9:08:b2:2e:57:2c:c0:54:f1:bd:00:d0: 6e:95:ec:0a:cc:c6:5c:db:a7:c5:7b:84:8e:89:80: aa:e8:05:e4:9b:15:92:72:2a:6b:c4:a7:3b:b8:39: 07:f7:d2:bf:04:89:a4:a1:a8:48:09:0f:16:66:ec: 13:cd:c1:11:ee:7f:2d:b9:ac:1d:f3:c7:65:5e:d7: fe:04:8e:a3:aa:6b:28:3d:f6:ce:17:16:22:22:68: 64:67:16:e2:98:af:ff:c7:8a:f0:f8:c3:b0:29:73: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BC:41:3E:98:73:A1:B6:A1:89:0E:C8:BD:F2:76:17:FE:83:D7:78 X509v3 Authority Key Identifier: keyid:25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:92:de:df:a9:bc:4b:3c:7a:fc:9b:e9:e6:8b:23:3e:63:b1: e5:bc:a4:fe:7b:65:ce:a5:40:10:40:3f:78:77:a1:31:bb:e4: 93:e3:ed:c8:54:e4:0f:fb:6d:20:fb:7a:26:e2:72:75:9e:4b: bc:41:eb:63:dc:e6:17:db:9c:87:b0:27:c7:a1:87:bd:1e:d8: 45:aa:fb:e1:d4:34:58:a6:7f:f1:55:c1:79:c6:cb:b5:06:38: 3e:cf:8c:e3:d2:a2:48:bc:86:5d:27:06:ff:ad:0e:0f:09:c8: d0:22:42:f3:81:f3:f2:42:7a:08:2a:6a:9e:df:4f:43:a6:4d: 5a:75:58:bd:eb:b7:35:e6:1a:9b:bc:3b:e0:d7:6d:ae:ce:66: d9:0a:77:70:f0:32:0a:34:36:23:4d:3b:00:c2:53:af:73:e0: ee:87:8c:b2:90:f1:17:94:a1:c9:f4:52:e7:9e:38:02:21:90: eb:55:30:15:57:4b:a7:64:db:83:88:c2:09:4c:61:cc:d2:cd: ce:ea:e4:0f:79:64:68:44:3d:fc:f7:f7:05:9c:98:a9:a2:13: d9:70:cd:e9:f1:d0:52:f7:59:ba:32:1b:7a:74:41:fe:95:d5: 8d:b8:09:6c:ba:70:71:e4:84:e3:d2:7d:fa:ec:ed:2b:0f:39: bd:8e:95:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBlQfSmztIfkYYmMMBbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzlkYzExYzJmMjIyZTkxMDQ0ZTFiZTdiMjgxZTU3NmRl ZWU0NWIwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD Eyg2MmJjNDEzZTk4NzNhMWI2YTE4OTBlYzhiZGYyNzYxN2ZlODNkNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ehwwOArZ3DM5dvbPvG93leumfq AGEoBPnu3JDl7DjxiGmIofa/IB4EjCBZWkovriEAYZWDoOh8qQuYPmXOjZI1mKP3 39gze+yCiqlUWv27t3P8NhcJzrKVs8DReFbGHyfCjZ4wBRiIt+SQ4aLAq9Ahit0K TbT6KKwkFce6SZRMAXQhKev9U74baH5Kiz4Tas6wL8NeMkbJCLIuVyzAVPG9ANBu lewKzMZc26fFe4SOiYCq6AXkmxWSciprxKc7uDkH99K/BImkoahICQ8WZuwTzcER 7n8tuawd88dlXtf+BI6jqmsoPfbOFxYiImhkZxbimK//x4rw+MOwKXN5SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK8QT6Yc6G2oYkOyL3ydhf+g9d4MB8GA1UdIwQY MBaAFCU53BHC8iLpEEThvnsoHldt7uRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRuY0VjTHlJdWtRUk9HLWV5Z2VWMjN1NUZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85OGE1NTYtNmI2Zi00ZDVlLTk3MmUt MGZjOGRhMDUwM2M5LzEvSlRuY0VjTHlJdWtRUk9HLWV5Z2VWMjN1NUZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85OGE1NTYtNmI2Zi00ZDVlLTk3MmUtMGZjOGRhMDUwM2M5 LzEvSlRuY0VjTHlJdWtRUk9HLWV5Z2VWMjN1NUZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpLe36m8 Szx6/Jvp5osjPmOx5byk/ntlzqVAEEA/eHehMbvkk+PtyFTkD/ttIPt6JuJydZ5L vEHrY9zmF9uch7Anx6GHvR7YRar74dQ0WKZ/8VXBecbLtQY4Ps+M49KiSLyGXScG /60ODwnI0CJC84Hz8kJ6CCpqnt9PQ6ZNWnVYveu3NeYam7w74Ndtrs5m2Qp3cPAy CjQ2I007AMJTr3Pg7oeMspDxF5ShyfRS5544AiGQ61UwFVdLp2Tbg4jCCUxhzNLN zurkD3lkaEQ9/Pf3BZyYqaIT2XDN6fHQUvdZujIbenRB/pXVjbgJbLpwceSE49J9 +uztKw85vY6VpA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:05 2025 by rpki-client