This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json) Hash identifier: h+aWmJYvOLE05GLvX6ZBbl7wcUFUYTdST6AnviqUp70= Subject key identifier: 16:B9:F1:C1:60:3A:F1:04:43:E4:A2:33:2C:96:80:8A:35:63:EF:BF Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Certificate serial: 019AF12D5BF2E6BB9926EAE5ED4E8E7DF350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: SK2Z13K/k+QvifK05CnUXmb2sPZalI4BFPMDzaEmhdo=) 2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5b:f2:e6:bb:99:26:ea:e5:ed:4e:8e:7d:f3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=16b9f1c1603af10443e4a2332c96808a3563efbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5e:26:86:5b:fb:3e:ba:3e:1f:9c:f7:3e:ab: ad:bd:78:3d:7b:fc:a5:94:d2:d8:49:86:be:65:12: a4:68:ee:22:e8:5b:64:35:7e:06:bb:44:d4:22:3c: ce:51:8d:82:6b:45:11:7f:cb:94:e3:67:65:69:67: 22:14:63:e8:12:ef:f3:b7:ca:b7:fb:99:b9:a7:e3: 5f:e7:f7:b9:bd:fe:80:06:60:99:78:72:eb:a4:99: 99:77:0d:17:c3:06:c8:7c:49:ee:6b:06:41:6a:ae: c0:29:2d:27:42:c5:53:d3:10:a7:c6:a1:85:c0:55: c4:91:ca:57:75:d6:68:59:64:7d:e3:56:ee:a5:e4: 82:b5:a8:94:b5:13:e0:eb:3d:87:fb:35:27:31:cf: c3:e6:97:71:27:06:4b:92:5a:52:8e:8e:2c:eb:6c: c3:ae:77:db:92:14:99:3f:e5:24:65:84:2b:0f:fc: 59:61:df:c6:37:36:09:e8:93:fa:55:1e:0b:72:98: 73:69:6d:c1:2a:93:ba:24:16:f8:a2:c8:d2:e0:dd: c1:8a:4f:46:c4:de:e4:ea:2a:2d:10:f3:d8:f2:e2: d8:09:ae:61:d6:74:41:09:6d:f6:84:2a:5a:7f:a8: b4:f3:54:c0:9a:47:34:a4:c4:2d:01:76:5a:af:77: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B9:F1:C1:60:3A:F1:04:43:E4:A2:33:2C:96:80:8A:35:63:EF:BF X509v3 Authority Key Identifier: keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:7f:94:fc:7f:96:7b:13:cd:20:20:88:bb:66:ac:62:97:26: 72:fd:91:12:09:2e:e2:60:aa:9c:3b:f3:94:fc:bd:4a:aa:b8: 56:0e:78:b5:cc:05:a9:3e:6b:7f:90:25:08:08:7a:cc:8c:e2: 99:65:42:1b:f8:3b:6a:3b:7e:e8:2e:bb:26:82:a8:7e:73:0d: e3:d2:ac:ee:72:8d:37:d1:6c:72:e9:95:2a:4b:bf:52:a5:12: 0f:9e:6f:cb:64:22:58:ee:1a:0b:d8:59:c8:d0:7a:3c:5c:a9: 38:d1:57:d7:05:7b:3b:0e:a3:a0:a8:94:cd:e1:ee:85:26:e6: 5f:4b:20:ff:b6:5a:80:e4:2d:5a:cd:56:2a:36:a0:18:c5:92: 5d:c1:40:24:b3:96:39:11:10:cc:6e:e3:ae:a0:51:ce:2e:88: 51:96:67:1d:78:73:24:05:19:f6:d6:5b:37:e9:c5:a5:3d:54: f6:65:b5:29:5a:11:3c:fc:82:99:99:b8:40:44:29:6d:10:13: fd:54:8e:24:66:61:e5:6f:c0:3a:95:66:03:74:28:29:86:4e: ea:67:2d:60:91:58:cb:b6:2d:95:0d:32:8c:61:6d:72:a5:ae: db:58:11:86:26:40:ca:1b:a6:b4:04:34:fd:36:2f:bf:09:5e: 6b:cd:e3:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVvy5ruZJurl7U6OffNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj NjZjNTIwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EygxNmI5ZjFjMTYwM2FmMTA0NDNlNGEyMzMyYzk2ODA4YTM1NjNlZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF4mhlv7Pro+H5z3PqutvXg9e/yl lNLYSYa+ZRKkaO4i6FtkNX4Gu0TUIjzOUY2Ca0URf8uU42dlaWciFGPoEu/zt8q3 +5m5p+Nf5/e5vf6ABmCZeHLrpJmZdw0XwwbIfEnuawZBaq7AKS0nQsVT0xCnxqGF wFXEkcpXddZoWWR941bupeSCtaiUtRPg6z2H+zUnMc/D5pdxJwZLklpSjo4s62zD rnfbkhSZP+UkZYQrD/xZYd/GNzYJ6JP6VR4LcphzaW3BKpO6JBb4osjS4N3Bik9G xN7k6iotEPPY8uLYCa5h1nRBCW32hCpaf6i081TAmkc0pMQtAXZar3feeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa58cFgOvEEQ+SiMyyWgIo1Y++/MB8GA1UdIwQY MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2 LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsX+U/H+W exPNICCIu2asYpcmcv2REgku4mCqnDvzlPy9Sqq4Vg54tcwFqT5rf5AlCAh6zIzi mWVCG/g7ajt+6C67JoKofnMN49Ks7nKNN9FscumVKku/UqUSD55vy2QiWO4aC9hZ yNB6PFypONFX1wV7Ow6joKiUzeHuhSbmX0sg/7ZagOQtWs1WKjagGMWSXcFAJLOW OREQzG7jrqBRzi6IUZZnHXhzJAUZ9tZbN+nFpT1U9mW1KVoRPPyCmZm4QEQpbRAT /VSOJGZh5W/AOpVmA3QoKYZO6mctYJFYy7YtlQ0yjGFtcqWu21gRhiZAyhumtAQ0 /TYvvwlea83jww== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:42 2025 by rpki-client