This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json) Hash identifier: Yjq9l/dMPgM4fR31MgQnRrUawSiMCXkXWFsPV0FDT/o= Subject key identifier: FB:FD:EF:04:98:ED:62:88:58:36:F9:00:80:8F:EB:EA:9F:46:7F:7D Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50 Certificate serial: 019AF088ABD1F24FB0D8715BE94B2D95F368 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 22:01:19 +0000 Manifest this update: Fri 05 Dec 2025 22:01:19 +0000 Manifest next update: Sat 06 Dec 2025 22:01:19 +0000 Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: omzLmpfaU376FihToHKrtxuL2ew2lC7fcYKG88hrztE=) 2: e2Te0aWCQ8EtrlV0PLf_q38tHSg.roa (hash: 4ft8eS+VBA6HZC5LW6/i8Z2mYfS+sEEPwTfWda0kvP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ab:d1:f2:4f:b0:d8:71:5b:e9:4b:2d:95:f3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50 Validity Not Before: Dec 5 22:01:19 2025 GMT Not After : Dec 6 22:01:19 2025 GMT Subject: CN=fbfdef0498ed62885836f900808febea9f467f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:a3:bb:a2:fa:e6:f9:92:da:dc:b4:60:4d: 7a:cc:d5:13:31:d8:a2:ad:10:ab:dd:35:7e:4f:31: 02:b9:d4:70:1f:3f:c1:08:a5:b7:d2:93:c6:fb:a3: 8c:53:1b:6f:cb:a6:e5:74:7a:2f:7a:2c:81:0e:20: 98:9e:8a:23:6f:81:df:85:4b:8e:9c:61:77:c6:91: 04:2f:0a:93:42:55:39:97:4b:bc:29:cf:96:4c:06: a2:d2:ee:20:96:c8:e3:f9:08:82:52:12:57:5c:2b: 14:b8:59:ff:47:97:e6:aa:0d:8d:1b:66:a9:01:41: 19:7b:32:35:5a:88:d1:33:2b:4f:74:9e:19:3b:b4: b3:38:a5:55:88:57:1b:35:47:3b:a3:c6:bd:8c:04: 14:8c:99:90:78:cd:bb:67:88:17:ad:8c:a0:17:b2: d1:32:52:be:a6:6d:93:0e:87:9d:56:14:16:f4:45: 37:e3:98:07:2a:ff:d5:a9:0a:6a:f6:08:aa:56:99: d8:75:70:9b:1d:8e:c8:6b:e7:1d:74:8e:6a:ae:4a: bc:4e:46:67:38:06:7a:eb:13:75:e2:c3:e8:16:e2: 08:9c:d1:07:da:84:61:c1:59:cb:62:b4:4c:97:0c: 58:77:ee:d8:a0:ed:e4:78:e6:84:64:bf:49:c2:c9: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FD:EF:04:98:ED:62:88:58:36:F9:00:80:8F:EB:EA:9F:46:7F:7D X509v3 Authority Key Identifier: keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cd:5a:2b:d8:7b:3e:87:55:db:74:e9:e2:db:00:62:34:65: 7a:7a:13:26:c2:5c:6a:5c:41:48:29:f5:b2:09:76:c8:84:ce: 1e:42:3d:f3:aa:33:c9:1a:4c:73:3a:51:c7:a7:12:ba:c8:49: 01:bf:c0:d1:3e:01:73:a3:76:36:72:a6:86:4c:25:8d:b7:0b: c4:a6:02:6e:f5:e3:df:e4:fd:18:e1:65:57:da:fd:b6:6d:ae: 11:f2:74:f2:c7:40:b4:96:f6:7e:6c:9b:77:24:b9:38:b3:1a: cd:3e:33:92:c8:86:53:18:74:58:ce:ef:08:c9:a9:d2:a9:7b: f3:bc:1b:28:28:11:49:49:33:22:74:a0:47:06:42:e8:07:06: de:28:36:d1:12:d9:f1:f7:af:a5:40:3f:f1:8d:54:ee:dc:a6: f0:42:27:a6:cc:05:a1:5d:c4:89:21:11:69:7e:52:fb:ab:4d: 02:46:d3:c8:c9:67:f6:cd:a5:6f:6c:39:16:97:c2:4c:00:2a: 25:33:28:5b:4d:47:a3:5a:a5:26:93:04:b3:e9:fd:9b:38:9c: f0:cc:7c:a2:a8:6c:f1:01:1e:c4:b5:ff:16:dc:8c:4a:61:50: 7b:48:ec:a7:22:27:0c:b9:35:ec:96:b4:82:c8:99:d0:83:fd: fc:fd:a3:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKvR8k+w2HFb6UstlfNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0 OGFkNTAwHhcNMjUxMjA1MjIwMTE5WhcNMjUxMjA2MjIwMTE5WjAzMTEwLwYDVQQD EyhmYmZkZWYwNDk4ZWQ2Mjg4NTgzNmY5MDA4MDhmZWJlYTlmNDY3ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKeju6L65vmS2ty0YE16zNUTMdii rRCr3TV+TzECudRwHz/BCKW30pPG+6OMUxtvy6bldHoveiyBDiCYnoojb4HfhUuO nGF3xpEELwqTQlU5l0u8Kc+WTAai0u4glsjj+QiCUhJXXCsUuFn/R5fmqg2NG2ap AUEZezI1WojRMytPdJ4ZO7SzOKVViFcbNUc7o8a9jAQUjJmQeM27Z4gXrYygF7LR MlK+pm2TDoedVhQW9EU345gHKv/VqQpq9giqVpnYdXCbHY7Ia+cddI5qrkq8TkZn OAZ66xN14sPoFuIInNEH2oRhwVnLYrRMlwxYd+7YoO3keOaEZL9Jwsm2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv97wSY7WKIWDb5AICP6+qfRn99MB8GA1UdIwQY MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0 LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbs1aK9h7 PodV23Tp4tsAYjRlenoTJsJcalxBSCn1sgl2yITOHkI986ozyRpMczpRx6cSushJ Ab/A0T4Bc6N2NnKmhkwljbcLxKYCbvXj3+T9GOFlV9r9tm2uEfJ08sdAtJb2fmyb dyS5OLMazT4zksiGUxh0WM7vCMmp0ql787wbKCgRSUkzInSgRwZC6AcG3ig20RLZ 8fevpUA/8Y1U7tym8EInpswFoV3EiSERaX5S+6tNAkbTyMln9s2lb2w5FpfCTAAq JTMoW01Ho1qlJpMEs+n9mzic8Mx8oqhs8QEexLX/FtyMSmFQe0jspyInDLk17Ja0 gsiZ0IP9/P2jUg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:14 2025 by rpki-client