This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json) Hash identifier: b19USvh2u9hR6M96p6JSOh9CwgScjunaPF5MWawu040= Subject key identifier: 3C:E6:34:80:8C:FF:99:CD:C6:CD:A0:8A:70:20:44:93:F5:94:34:88 Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Certificate serial: 019B3E6DDA18154642530C7129CED6DCBEFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft Manifest number: 171B Signing time: Sun 21 Dec 2025 01:02:25 +0000 Manifest this update: Sun 21 Dec 2025 01:02:25 +0000 Manifest next update: Mon 22 Dec 2025 01:02:25 +0000 Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: 5o4eNKW1KPawT/zou+MbX7Wy8AZEe2IEEtksM0oRchk=) 2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:da:18:15:46:42:53:0c:71:29:ce:d6:dc:be:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Validity Not Before: Dec 21 01:02:25 2025 GMT Not After : Dec 22 01:02:25 2025 GMT Subject: CN=3ce634808cff99cdc6cda08a70204493f5943488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:c2:95:c9:5c:52:06:59:46:d8:33:12:14: 90:48:33:a0:eb:da:35:ec:8b:66:b9:c1:b9:82:9c: 1b:98:44:7f:f9:f0:60:39:5a:d6:2c:b5:70:0e:d4: 37:1d:81:9b:3f:ab:da:33:73:e0:f1:33:9c:73:fe: 8c:4e:cb:2d:a8:05:4a:49:5b:ef:92:43:e4:95:46: 99:db:16:37:e7:7c:c9:8b:4e:29:2b:fd:18:b4:8a: 3a:4e:9a:e7:87:81:92:b4:93:36:8f:c3:9f:f3:88: 79:5f:d1:db:3e:e5:d7:6a:d2:63:e8:ab:ae:8a:51: 5d:00:65:85:74:20:78:0f:c3:3d:eb:d8:bb:7f:92: 86:b2:f3:a9:97:10:38:0f:c2:3b:6b:2a:ee:9a:3f: 46:6b:cd:de:95:88:5a:45:be:84:90:73:26:58:39: 26:72:43:1f:69:9a:1f:4c:9f:9c:39:43:cc:a1:af: ac:51:f2:af:86:ff:25:8e:c2:d7:fb:d2:13:ab:01: 00:d5:db:27:57:95:0d:6d:62:46:f2:39:bb:9a:3e: e2:7b:39:24:ba:c4:ff:7d:b1:70:77:8d:de:8c:0a: 87:6c:85:b5:31:a2:a5:e1:02:87:35:b3:f1:c7:f1: 5f:60:cf:1a:76:61:91:c5:a7:f5:f1:1c:aa:85:73: 74:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:34:80:8C:FF:99:CD:C6:CD:A0:8A:70:20:44:93:F5:94:34:88 X509v3 Authority Key Identifier: keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0d:b9:60:66:a1:e0:22:50:e7:ee:45:f8:35:67:cd:17:94: 36:38:e6:e9:92:58:2b:45:49:43:1d:3d:64:52:6f:3b:b4:4c: f2:44:81:95:2d:41:81:57:1c:c9:fd:54:5c:50:4a:96:c0:ce: 86:42:b9:84:31:d4:da:0c:37:cd:c5:14:91:2a:22:8b:6f:71: f8:a1:b4:ae:d3:7a:3a:09:72:a4:f3:22:a7:f1:0e:c5:03:de: 22:dd:8f:00:be:7d:c4:16:49:f8:1b:a0:ef:4c:fb:51:95:c1: cd:61:1d:69:56:69:91:7b:b3:38:db:93:b4:2a:0a:2f:7e:61: fb:a3:79:07:fb:61:e2:dc:c8:14:ec:14:7b:27:dd:53:bf:ad: 8f:35:b5:1e:25:bf:7d:9e:30:0b:53:cb:59:7b:f5:b5:cc:2c: 71:1b:ec:a3:55:19:eb:30:e9:1b:d7:0f:58:e8:36:9d:a6:a9: 8f:36:b3:e0:56:cc:a3:62:6d:6b:03:25:df:e9:a5:3b:78:17: fa:aa:05:d0:3a:66:8b:8e:a5:0b:75:c9:8e:d9:e4:51:ae:15: 56:09:2e:fe:5d:d8:8c:9f:40:d2:52:05:6a:ba:2c:1c:83:be: 9d:0e:f4:8a:32:f2:96:33:60:7d:76:97:dc:f6:75:22:e3:2a: 2f:1b:af:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bdoYFUZCUwxxKc7W3L7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj NjZjNTIwHhcNMjUxMjIxMDEwMjI1WhcNMjUxMjIyMDEwMjI1WjAzMTEwLwYDVQQD EygzY2U2MzQ4MDhjZmY5OWNkYzZjZGEwOGE3MDIwNDQ5M2Y1OTQzNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsnClclcUgZZRtgzEhSQSDOg69o1 7ItmucG5gpwbmER/+fBgOVrWLLVwDtQ3HYGbP6vaM3Pg8TOcc/6MTsstqAVKSVvv kkPklUaZ2xY353zJi04pK/0YtIo6Tprnh4GStJM2j8Of84h5X9HbPuXXatJj6Kuu ilFdAGWFdCB4D8M969i7f5KGsvOplxA4D8I7ayrumj9Ga83elYhaRb6EkHMmWDkm ckMfaZofTJ+cOUPMoa+sUfKvhv8ljsLX+9ITqwEA1dsnV5UNbWJG8jm7mj7iezkk usT/fbFwd43ejAqHbIW1MaKl4QKHNbPxx/FfYM8admGRxaf18RyqhXN0SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzmNICM/5nNxs2ginAgRJP1lDSIMB8GA1UdIwQY MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2 LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiw25YGah 4CJQ5+5F+DVnzReUNjjm6ZJYK0VJQx09ZFJvO7RM8kSBlS1BgVccyf1UXFBKlsDO hkK5hDHU2gw3zcUUkSoii29x+KG0rtN6OglypPMip/EOxQPeIt2PAL59xBZJ+Bug 70z7UZXBzWEdaVZpkXuzONuTtCoKL35h+6N5B/th4tzIFOwUeyfdU7+tjzW1HiW/ fZ4wC1PLWXv1tcwscRvso1UZ6zDpG9cPWOg2naapjzaz4FbMo2JtawMl3+mlO3gX +qoF0Dpmi46lC3XJjtnkUa4VVgku/l3YjJ9A0lIFarosHIO+nQ70ijLyljNgfXaX 3PZ1IuMqLxuv2A== -----END CERTIFICATE-----Generated at Sun Dec 21 08:49:03 2025 by rpki-client