This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json) Hash identifier: jTnwNW1u4MBXVxCmcHpb7lCaEF4hn0Wdi52q5MohV0I= Subject key identifier: 2B:6E:C7:E7:42:48:A9:94:51:86:EC:24:95:1F:45:82:2D:4B:B6:CD Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d Certificate serial: 019B337B4EA6E57105BBD706E89FCC2648B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft Manifest number: 0A7B Signing time: Thu 18 Dec 2025 22:01:17 +0000 Manifest this update: Thu 18 Dec 2025 22:01:17 +0000 Manifest next update: Fri 19 Dec 2025 22:01:17 +0000 Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: CGwuPOpOhBR7pCsNS/bMTGmc1+IhYsNR9nqTKmBWhZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:4e:a6:e5:71:05:bb:d7:06:e8:9f:cc:26:48:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d Validity Not Before: Dec 18 22:01:17 2025 GMT Not After : Dec 19 22:01:17 2025 GMT Subject: CN=2b6ec7e74248a9945186ec24951f45822d4bb6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:84:78:34:87:b1:9f:4c:f4:15:dd:be:21: 00:6e:e2:fd:eb:5d:76:2d:a7:82:a1:c3:86:f4:e3: 75:8a:d4:a8:b3:7a:87:6a:e4:88:52:65:cb:fd:73: 0a:66:f1:5c:5f:c8:86:47:77:5c:8c:b7:40:b3:7b: 95:6c:98:5b:8e:29:4b:b6:84:5a:57:71:26:5a:d8: 6e:e1:05:2c:4a:dc:d5:80:1d:60:41:4f:30:7b:3e: 39:ba:42:80:5e:8b:d5:f3:ab:1f:81:b5:ec:6d:eb: 50:42:fa:13:6a:2b:8c:58:ab:87:8b:d9:c4:8c:d2: b3:b8:8c:1a:7e:e1:c7:ab:34:b7:14:ed:25:8f:3b: 81:5a:1f:7b:5f:e2:3c:8c:60:49:a6:be:e3:25:98: 7e:c0:3d:ec:c6:74:f9:fc:51:a7:7c:36:5d:3f:34: 59:fa:65:c9:27:42:07:68:aa:bb:da:1c:66:c4:8d: a3:44:56:37:1c:64:3a:2c:9b:51:91:a3:3e:69:d0: 92:74:d8:83:f9:37:1c:ee:ef:56:5f:2f:3d:da:58: b5:2d:b9:23:3f:55:1f:de:0a:51:de:af:3b:05:21: 0b:66:b5:9f:9d:2d:f4:26:76:80:57:5f:36:c6:95: 5b:28:1d:5d:0c:68:f9:c6:d9:ec:81:66:35:e2:70: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6E:C7:E7:42:48:A9:94:51:86:EC:24:95:1F:45:82:2D:4B:B6:CD X509v3 Authority Key Identifier: keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:f4:1f:1f:eb:ff:bf:19:79:d3:9c:01:95:63:bc:79:af: 27:b4:00:c2:28:8c:f4:0b:59:54:b6:a4:40:ed:a0:a4:de:1f: 47:53:5c:fa:ad:17:4b:ac:12:ff:14:bf:05:4a:4c:ab:46:88: 7b:32:66:d6:e5:0f:41:74:90:51:c1:47:25:03:a0:3e:ea:a4: 63:1c:44:2e:e9:a7:ff:a7:1e:fc:44:c7:2a:d3:8c:b1:4a:d8: 9c:78:26:fc:29:98:1a:67:bb:b6:d5:89:20:53:53:56:94:b3: d4:17:41:03:e5:9f:8b:4c:5f:c4:75:f3:43:f7:a3:14:46:cb: 8d:f7:15:9f:ef:e1:ad:01:f7:ae:e7:d7:cd:a8:79:61:d6:32: 98:2b:02:de:b5:35:16:f3:4d:18:ad:e5:08:7f:b4:79:c8:46: 22:00:13:e4:6b:34:fd:60:16:3a:ae:db:60:e6:89:4c:e5:72: 99:82:96:b6:74:39:c3:8a:8d:8f:c9:b7:3a:5a:f8:7a:25:c1: da:d4:9b:f5:0e:6e:29:6a:26:5c:26:06:73:60:c7:39:a2:27: 3b:2d:7d:a3:8d:9e:5c:a7:9e:2e:fd:5a:5f:40:d4:5e:86:79: 37:02:dd:ba:a5:e3:00:03:cd:29:71:ef:8b:d4:87:94:5a:ad: 0f:b2:ba:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze06m5XEFu9cG6J/MJki1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZGJhMWIzNWRlNzM3ZjcxYjdjNTUwZGY1ZjRiNDRlODM2 NDZiOGQwHhcNMjUxMjE4MjIwMTE3WhcNMjUxMjE5MjIwMTE3WjAzMTEwLwYDVQQD EygyYjZlYzdlNzQyNDhhOTk0NTE4NmVjMjQ5NTFmNDU4MjJkNGJiNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiKEeDSHsZ9M9BXdviEAbuL96112 LaeCocOG9ON1itSos3qHauSIUmXL/XMKZvFcX8iGR3dcjLdAs3uVbJhbjilLtoRa V3EmWthu4QUsStzVgB1gQU8wez45ukKAXovV86sfgbXsbetQQvoTaiuMWKuHi9nE jNKzuIwafuHHqzS3FO0ljzuBWh97X+I8jGBJpr7jJZh+wD3sxnT5/FGnfDZdPzRZ +mXJJ0IHaKq72hxmxI2jRFY3HGQ6LJtRkaM+adCSdNiD+Tcc7u9WXy892li1Lbkj P1Uf3gpR3q87BSELZrWfnS30JnaAV182xpVbKB1dDGj5xtnsgWY14nCe/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtux+dCSKmUUYbsJJUfRYItS7bNMB8GA1UdIwQY MBaAFCTbobNd5zf3G3xVDfX0tE6DZGuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTVlOWYtZDU0MS00NTY0LTk5NDct ZGEwNGUyZjM5Yjg4LzEvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTVlOWYtZDU0MS00NTY0LTk5NDctZGEwNGUyZjM5Yjg4 LzEvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyr0Hx/r /78ZedOcAZVjvHmvJ7QAwiiM9AtZVLakQO2gpN4fR1Nc+q0XS6wS/xS/BUpMq0aI ezJm1uUPQXSQUcFHJQOgPuqkYxxELumn/6ce/ETHKtOMsUrYnHgm/CmYGme7ttWJ IFNTVpSz1BdBA+Wfi0xfxHXzQ/ejFEbLjfcVn+/hrQH3rufXzah5YdYymCsC3rU1 FvNNGK3lCH+0echGIgAT5Gs0/WAWOq7bYOaJTOVymYKWtnQ5w4qNj8m3Olr4eiXB 2tSb9Q5uKWomXCYGc2DHOaInOy19o42eXKeeLv1aX0DUXoZ5NwLduqXjAAPNKXHv i9SHlFqtD7K6UQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:16:42 2025 by rpki-client