This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json) Hash identifier: NRM7wqEsE0mkjQulbbXoRFE7QjGb9Fsu18yt6qZDnOM= Subject key identifier: 44:BA:6B:7F:90:64:06:67:F0:2A:48:89:CC:33:D6:37:53:64:80:AA Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d Certificate serial: 019AF1D222EC3293DBD896389E561F6703DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft Manifest number: 0A59 Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: GoVbC8I+0aIrIKKdiey5ztweHg3kWV+gns+lViUKzN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:22:ec:32:93:db:d8:96:38:9e:56:1f:67:03:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=44ba6b7f90640667f02a4889cc33d637536480aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:fc:d3:c3:79:ed:9f:aa:9f:2b:f3:90:7a: e3:dd:95:3b:9a:a8:41:f4:54:07:a3:bf:cf:d6:ec: 7a:42:fd:28:1f:38:e6:b2:fc:0d:33:5a:22:e5:72: 13:c0:66:5f:96:bc:53:1b:72:22:03:93:36:04:8d: f3:2b:8c:eb:25:97:f6:fe:4b:6e:0b:53:60:52:be: cd:13:e9:50:1c:ab:8d:f4:e1:1e:75:26:fb:8b:3d: 6b:31:46:5c:dc:d6:a4:a9:39:ce:b5:d9:b8:f0:e7: ee:b4:f0:37:d3:cd:a6:7b:70:d6:f0:68:f8:db:32: 64:1f:2d:b5:e0:d5:a3:d0:05:8e:60:c0:30:ca:79: 1c:3c:64:24:85:7d:67:d9:61:16:f6:03:86:ae:fe: 9b:96:a0:b1:8b:77:50:a5:62:39:8e:d3:d7:e3:85: 8d:06:1a:aa:7d:a6:55:26:f9:e4:d8:c8:1d:81:98: 3f:85:97:dd:e0:1c:fd:65:49:bc:d5:52:38:7a:76: 93:49:12:49:fc:5f:a5:59:8c:28:77:31:bc:4b:50: bc:ec:d1:d4:59:71:62:15:38:3c:f0:85:50:10:66: 2f:15:fd:04:de:9d:42:52:97:ac:0d:33:60:40:aa: e8:84:bf:d4:43:cb:40:d6:8d:41:90:b7:74:83:ef: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BA:6B:7F:90:64:06:67:F0:2A:48:89:CC:33:D6:37:53:64:80:AA X509v3 Authority Key Identifier: keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:87:2c:27:7e:27:72:b3:4c:71:25:31:15:73:9f:be:c4:dd: 61:f4:ff:62:46:7b:7a:b1:ae:34:55:e2:e9:fd:04:ec:28:6d: 75:f0:63:f2:84:65:06:d9:bf:f3:cb:fa:73:0c:3a:2a:b8:35: 90:9a:41:4e:2f:b0:06:9a:af:99:4d:98:c3:0c:a2:7a:91:71: ec:5d:cc:10:6e:fd:a6:1f:7d:fa:69:56:dc:75:2d:70:a9:ae: df:57:1c:c1:d8:09:b9:ac:71:27:e0:96:7d:ee:5e:85:e5:29: 03:e2:23:02:20:53:6b:8d:1e:2f:61:54:18:fd:56:43:8b:f5: b5:16:ee:98:0f:2b:e4:57:2a:58:21:51:f4:16:17:09:0d:0e: 61:37:6f:91:c3:ad:89:fa:fe:ec:1b:b5:91:64:bb:73:0e:4f: f8:10:7c:39:52:21:85:af:49:17:3e:2e:08:9d:0b:39:ce:12: b8:5e:ed:25:da:a3:e8:6b:72:f1:6d:78:2b:46:d3:94:1a:7d: 37:73:74:2c:8c:fb:07:69:b3:4a:d1:9b:2f:ec:ac:e0:da:77: b6:9d:3a:c4:f3:20:e6:19:5f:ee:2a:6f:08:a1:ee:44:2c:97: 2c:0b:33:4c:ee:47:43:6f:7b:b9:1d:98:8a:13:f9:03:97:99: c8:09:b0:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iLsMpPb2JY4nlYfZwPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZGJhMWIzNWRlNzM3ZjcxYjdjNTUwZGY1ZjRiNDRlODM2 NDZiOGQwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD Eyg0NGJhNmI3ZjkwNjQwNjY3ZjAyYTQ4ODljYzMzZDYzNzUzNjQ4MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGb808N57Z+qnyvzkHrj3ZU7mqhB 9FQHo7/P1ux6Qv0oHzjmsvwNM1oi5XITwGZflrxTG3IiA5M2BI3zK4zrJZf2/ktu C1NgUr7NE+lQHKuN9OEedSb7iz1rMUZc3NakqTnOtdm48OfutPA3082me3DW8Gj4 2zJkHy214NWj0AWOYMAwynkcPGQkhX1n2WEW9gOGrv6blqCxi3dQpWI5jtPX44WN BhqqfaZVJvnk2MgdgZg/hZfd4Bz9ZUm81VI4enaTSRJJ/F+lWYwodzG8S1C87NHU WXFiFTg88IVQEGYvFf0E3p1CUpesDTNgQKrohL/UQ8tA1o1BkLd0g+/0gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFES6a3+QZAZn8CpIicwz1jdTZICqMB8GA1UdIwQY MBaAFCTbobNd5zf3G3xVDfX0tE6DZGuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTVlOWYtZDU0MS00NTY0LTk5NDct ZGEwNGUyZjM5Yjg4LzEvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTVlOWYtZDU0MS00NTY0LTk5NDctZGEwNGUyZjM5Yjg4 LzEvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIcsJ34n crNMcSUxFXOfvsTdYfT/YkZ7erGuNFXi6f0E7ChtdfBj8oRlBtm/88v6cww6Krg1 kJpBTi+wBpqvmU2YwwyiepFx7F3MEG79ph99+mlW3HUtcKmu31ccwdgJuaxxJ+CW fe5eheUpA+IjAiBTa40eL2FUGP1WQ4v1tRbumA8r5FcqWCFR9BYXCQ0OYTdvkcOt ifr+7Bu1kWS7cw5P+BB8OVIhha9JFz4uCJ0LOc4SuF7tJdqj6Gty8W14K0bTlBp9 N3N0LIz7B2mzStGbL+ys4Np3tp06xPMg5hlf7ipvCKHuRCyXLAszTO5HQ297uR2Y ihP5A5eZyAmwjA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:43 2025 by rpki-client