This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json) Hash identifier: IdzDGIKwW7VUaVsRglQx3JnZ6peYXEIXjJkSgjMi1xo= Subject key identifier: E6:62:F7:7C:A0:DD:2E:33:31:F3:8B:7D:BE:A2:1A:81:5A:D5:9A:4A Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f Certificate serial: 019AF12E13FD70FFB490F26CAC2D864DB521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft Manifest number: 1465 Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: Bw9HcCjKSuSnck7JRV1HjW4/HTrnH3tY79UayPIQFAM=) 2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:13:fd:70:ff:b4:90:f2:6c:ac:2d:86:4d:b5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=e662f77ca0dd2e3331f38b7dbea21a815ad59a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:04:90:cb:a2:80:70:d3:aa:c2:2d:90:9e: 7e:84:34:6d:66:97:ae:ae:88:77:e7:3a:46:0b:3a: 3f:02:43:33:f4:99:fa:74:ef:8e:aa:04:d0:7d:be: 00:d6:e2:d6:66:e3:b5:60:ee:a0:c4:d6:ee:17:2f: de:ca:a1:71:82:3f:fd:09:ac:5f:26:a0:e3:f2:66: 03:45:25:50:9f:ba:c7:c9:09:e0:3d:0d:60:62:e2: ea:57:2a:ae:66:9e:cf:1d:8f:a6:38:0b:bb:82:b8: 45:8b:cf:4e:cb:b7:37:66:96:aa:7f:fb:07:3a:2c: ba:16:40:55:4b:e1:b4:40:96:b1:8f:71:5c:36:c8: f2:60:45:67:b9:f3:9f:56:93:4d:9d:2b:32:06:59: cd:5b:70:c9:92:8e:43:95:89:dc:57:b4:0a:17:ae: 40:11:5e:39:06:71:a1:ef:c8:1d:d8:01:cc:90:a5: 01:d2:f1:0b:fc:5f:80:82:d9:d4:f0:92:03:db:68: 65:80:1f:95:cc:5b:78:9e:ce:0a:49:4f:31:11:00: 3f:76:5c:0e:3a:86:57:3d:2b:a9:7b:01:02:3f:f9: e8:ad:96:85:16:4b:d7:73:35:0c:63:e5:14:c7:a4: 8b:87:b8:c2:cc:af:41:8d:43:a3:91:d3:dd:f4:e8: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:62:F7:7C:A0:DD:2E:33:31:F3:8B:7D:BE:A2:1A:81:5A:D5:9A:4A X509v3 Authority Key Identifier: keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:51:1c:e1:3e:db:b4:04:5d:b6:55:b0:3b:e4:93:05:42:89: 7c:b2:38:0b:d3:41:51:e8:d9:3d:17:23:22:24:f1:09:98:55: 7d:6f:f7:f3:40:6c:a1:90:3c:07:ab:ef:66:25:6e:36:40:2b: 7e:f8:47:ed:bb:b1:78:7a:23:9f:6d:79:f4:13:db:f9:bf:a7: aa:9a:90:fd:cb:9c:ff:4c:8a:1b:c2:3e:5f:5d:54:d4:78:5d: e3:44:07:35:25:b5:61:1d:a3:e6:c9:93:eb:77:17:dd:3f:9a: 45:ae:83:de:22:29:7c:98:9d:b1:87:10:b7:cf:a5:57:aa:09: 51:2d:07:c4:09:74:2a:c8:4e:40:72:d7:d5:47:b5:1e:ba:f2: 25:43:1e:e7:ba:01:5d:73:b3:4f:99:5a:1e:dd:f4:59:42:a2: 90:09:8c:30:ea:58:db:fd:e6:b6:8c:af:49:b5:92:67:b3:a6: e5:a2:7c:7d:12:6f:8e:a6:d4:59:56:2d:b2:38:4b:4f:0c:6b: 6b:2a:b0:9a:3b:97:0a:7f:c1:4c:25:c9:51:49:32:18:d3:be: 4a:b0:df:e7:77:94:49:6e:30:69:25:d6:36:e6:17:8f:58:96: 48:f3:e6:87:3e:8a:9c:d6:01:65:d7:bf:6f:88:40:cb:b3:3d: 36:98:2c:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhP9cP+0kPJsrC2GTbUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWZjZjJhYjZlNmRiYzE2MzRlZTU5MWZjMWI3NGE0MWRl M2VhNWYwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD EyhlNjYyZjc3Y2EwZGQyZTMzMzFmMzhiN2RiZWEyMWE4MTVhZDU5YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEMEkMuigHDTqsItkJ5+hDRtZpeu roh35zpGCzo/AkMz9Jn6dO+OqgTQfb4A1uLWZuO1YO6gxNbuFy/eyqFxgj/9Caxf JqDj8mYDRSVQn7rHyQngPQ1gYuLqVyquZp7PHY+mOAu7grhFi89Oy7c3Zpaqf/sH Oiy6FkBVS+G0QJaxj3FcNsjyYEVnufOfVpNNnSsyBlnNW3DJko5DlYncV7QKF65A EV45BnGh78gd2AHMkKUB0vEL/F+AgtnU8JID22hlgB+VzFt4ns4KSU8xEQA/dlwO OoZXPSupewECP/norZaFFkvXczUMY+UUx6SLh7jCzK9BjUOjkdPd9OjA3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZi93yg3S4zMfOLfb6iGoFa1ZpKMB8GA1UdIwQY MBaAFAifzyq25tvBY07lkfwbdKQd4+pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUt M2MwYjkyNTRhNmY4LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUtM2MwYjkyNTRhNmY4 LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1Ec4T7b tARdtlWwO+STBUKJfLI4C9NBUejZPRcjIiTxCZhVfW/380BsoZA8B6vvZiVuNkAr fvhH7buxeHojn2159BPb+b+nqpqQ/cuc/0yKG8I+X11U1Hhd40QHNSW1YR2j5smT 63cX3T+aRa6D3iIpfJidsYcQt8+lV6oJUS0HxAl0KshOQHLX1Ue1HrryJUMe57oB XXOzT5laHt30WUKikAmMMOpY2/3mtoyvSbWSZ7Om5aJ8fRJvjqbUWVYtsjhLTwxr ayqwmjuXCn/BTCXJUUkyGNO+SrDf53eUSW4waSXWNuYXj1iWSPPmhz6KnNYBZde/ b4hAy7M9NpgshA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:32 2025 by rpki-client