This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft File: JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json) Hash identifier: fls3ASZbWemN2NegqAaDT7ilvUDeQiZuOHxiwVWbz9c= Subject key identifier: 08:E7:36:CD:C9:9E:8B:E0:A5:D7:52:B5:CB:39:3F:0C:3E:E7:8E:0F Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97 Certificate issuer: /CN=25a3f511d0095606a525084ae460836dc5d24397 Certificate serial: 019B2D7907ECF0730CFE23E8266C55B6E6EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 18:01:05 +0000 Manifest this update: Wed 17 Dec 2025 18:01:05 +0000 Manifest next update: Thu 18 Dec 2025 18:01:05 +0000 Files and hashes: 1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: Nup0l36y/w193uAENWO+2pYsKJbF8oMjoIpA/jLfWgA=) 2: amXQGDZKy47wA0u5iNrCG12G65E.roa (hash: 1n+UabIeiKZ85p6BFII330KVf+1vpRK87qkxEEsolHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:07:ec:f0:73:0c:fe:23:e8:26:6c:55:b6:e6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397 Validity Not Before: Dec 17 18:01:05 2025 GMT Not After : Dec 18 18:01:05 2025 GMT Subject: CN=08e736cdc99e8be0a5d752b5cb393f0c3ee78e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a0:92:48:02:5b:ca:eb:ac:c2:a7:9f:8a:76: 95:2a:59:e8:5f:72:a4:6b:12:3c:4f:87:e4:d2:c3: bd:70:31:d2:94:4c:e3:87:fd:80:10:58:26:0d:bb: fd:74:61:cd:70:60:e9:51:58:7c:d0:35:e3:ec:70: a3:24:8e:0d:16:bf:58:29:8c:29:a1:b1:3f:cf:47: 5a:b4:87:d3:85:bd:33:44:c5:1f:ab:32:9d:65:d6: e5:41:43:f0:5b:38:7a:77:1b:e9:29:e8:16:bd:bd: 5d:d7:78:7c:7f:5c:8f:87:ee:f5:9a:07:ed:94:67: 3a:74:18:11:24:46:b9:29:54:93:52:cf:55:8d:fb: f4:f6:e0:6d:47:ac:b5:fd:d3:b5:74:65:7a:e2:27: 16:3e:00:be:4d:1a:cd:4a:d8:b8:87:0f:df:e6:d9: ca:0f:cf:84:d8:e9:f7:6c:1f:28:fb:7e:bb:23:ae: 64:d8:71:ee:fc:10:e5:7b:6a:87:19:4c:fc:44:a4: 54:8e:92:9b:c0:a7:5f:f6:54:04:3d:90:a7:f9:ff: d6:48:e4:ea:80:79:dc:40:48:7e:a4:6d:00:e0:af: b7:ee:69:d2:ee:a6:8e:b0:5f:fa:65:3f:16:b4:8f: e8:b4:47:52:21:da:2a:8a:2b:8a:74:cf:1c:9c:fa: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E7:36:CD:C9:9E:8B:E0:A5:D7:52:B5:CB:39:3F:0C:3E:E7:8E:0F X509v3 Authority Key Identifier: keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6f:2a:6f:f6:98:13:e8:06:57:04:d9:6c:67:57:0c:87:13: b1:cc:69:b9:29:9c:2f:e2:58:c1:f8:bc:7d:2d:bf:7d:19:51: 8a:8f:63:ec:04:8d:67:6c:65:c0:6f:06:50:8e:b1:fc:95:9e: 18:90:01:57:43:35:f0:de:62:68:c4:fc:d5:87:ff:48:15:7b: cf:25:3f:bc:2e:f9:96:bf:44:b8:87:6d:d7:f2:19:8d:10:40: b0:06:f5:25:f8:d1:8e:5e:11:7b:b1:28:cb:88:30:78:a5:ab: 22:bd:24:7f:09:b2:48:35:f2:d0:72:d9:6e:e8:17:61:d4:e2: fc:2f:8e:ce:35:12:a3:18:f1:b8:b5:ae:38:0f:26:f3:65:8f: ba:6f:30:74:29:4f:3b:5a:db:e4:8e:a5:12:0f:2d:cb:13:06: f6:13:e8:48:b6:55:b7:79:18:14:44:7c:eb:c6:30:3d:89:c4: 4b:a3:fa:80:a6:39:dd:c9:15:e8:32:8e:32:aa:61:5a:ea:8a: 24:1e:19:17:2a:ed:e4:ee:c0:f9:4a:53:9c:e4:b7:6c:54:3e: 3b:ed:12:64:34:96:3f:c4:47:31:7b:a0:e8:85:92:e5:4b:3b: 54:79:ad:73:8b:98:79:e5:cd:2f:1d:9f:11:a1:68:4e:52:67: 5c:d0:45:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteQfs8HMM/iPoJmxVtubuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTNmNTExZDAwOTU2MDZhNTI1MDg0YWU0NjA4MzZkYzVk MjQzOTcwHhcNMjUxMjE3MTgwMTA1WhcNMjUxMjE4MTgwMTA1WjAzMTEwLwYDVQQD EygwOGU3MzZjZGM5OWU4YmUwYTVkNzUyYjVjYjM5M2YwYzNlZTc4ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6CSSAJbyuuswqefinaVKlnoX3Kk axI8T4fk0sO9cDHSlEzjh/2AEFgmDbv9dGHNcGDpUVh80DXj7HCjJI4NFr9YKYwp obE/z0datIfThb0zRMUfqzKdZdblQUPwWzh6dxvpKegWvb1d13h8f1yPh+71mgft lGc6dBgRJEa5KVSTUs9Vjfv09uBtR6y1/dO1dGV64icWPgC+TRrNSti4hw/f5tnK D8+E2On3bB8o+367I65k2HHu/BDle2qHGUz8RKRUjpKbwKdf9lQEPZCn+f/WSOTq gHncQEh+pG0A4K+37mnS7qaOsF/6ZT8WtI/otEdSIdoqiiuKdM8cnPqwcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjnNs3JnovgpddStcs5Pww+544PMB8GA1UdIwQY MBaAFCWj9RHQCVYGpSUISuRgg23F0kOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYt ZThiNzBhYTQ0MmZkLzEvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYtZThiNzBhYTQ0MmZk LzEvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUm8qb/aY E+gGVwTZbGdXDIcTscxpuSmcL+JYwfi8fS2/fRlRio9j7ASNZ2xlwG8GUI6x/JWe GJABV0M18N5iaMT81Yf/SBV7zyU/vC75lr9EuIdt1/IZjRBAsAb1JfjRjl4Re7Eo y4gweKWrIr0kfwmySDXy0HLZbugXYdTi/C+OzjUSoxjxuLWuOA8m82WPum8wdClP O1rb5I6lEg8tyxMG9hPoSLZVt3kYFER868YwPYnES6P6gKY53ckV6DKOMqphWuqK JB4ZFyrt5O7A+UpTnOS3bFQ+O+0SZDSWP8RHMXug6IWS5Us7VHmtc4uYeeXNLx2f EaFoTlJnXNBFYA== -----END CERTIFICATE-----Generated at Thu Dec 18 00:24:20 2025 by rpki-client