This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json) Hash identifier: D3dDI0C3QDgmTvb8qbacSWaiyAwkLWN2bWS66NpiBOA= Subject key identifier: 01:E4:14:C5:BE:1C:9E:8D:37:BF:F8:08:4C:7E:72:64:70:8F:D1:C8 Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c Certificate serial: 019AF1D25188F9837E064A472B35951B65B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft Manifest number: 039E Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: 6g1+2GioSiSoNbXMwRPPWNEeZduOODMIRqpnggUYr/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:51:88:f9:83:7e:06:4a:47:2b:35:95:1b:65:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=01e414c5be1c9e8d37bff8084c7e7264708fd1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:36:ae:2d:73:30:52:95:e5:45:e3:e7:df: b7:fe:c5:e4:e7:ce:49:77:84:93:16:20:34:50:c2: 7b:bf:0b:f5:18:7e:ad:b6:16:2a:b8:41:ee:fc:24: 5a:98:55:cd:44:e4:b0:13:a9:28:ea:10:92:16:56: a0:fd:21:33:c7:85:47:0d:7e:b0:e0:d3:d6:10:e0: 62:93:8a:30:52:ad:fd:ac:e0:ce:39:78:d7:00:04: 34:fc:f8:c1:e2:57:b2:e1:a9:e0:10:38:d3:3d:a9: 55:b1:d3:e4:d0:d4:64:17:89:ae:19:f7:a5:6e:85: ab:90:22:7c:6c:01:6b:53:ad:7d:36:13:36:41:48: db:a5:74:3b:1a:06:18:92:1f:9b:87:cd:af:8e:10: 14:89:4b:b7:28:fa:46:72:50:c9:63:09:49:db:56: b1:33:21:59:05:a7:8f:06:05:bf:6f:73:17:bc:15: 43:ad:56:a1:93:f3:29:0b:26:56:4e:1e:9e:60:7b: 5b:ef:91:ee:26:49:88:0b:19:0d:53:d5:ca:98:2e: 35:11:25:56:7b:7e:6a:aa:16:75:f1:33:86:b4:6b: 7e:0d:c4:ca:ac:28:0b:5c:ce:d8:8b:35:5e:5a:d0: e3:21:97:d1:c3:ce:4b:3b:96:fa:a7:62:d2:e9:47: 21:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:14:C5:BE:1C:9E:8D:37:BF:F8:08:4C:7E:72:64:70:8F:D1:C8 X509v3 Authority Key Identifier: keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8c:71:5e:46:41:1a:ec:0f:5f:48:14:d7:56:9a:cc:96:18: c3:02:d4:39:ec:8e:d2:e6:5e:a7:aa:86:ef:f0:75:9e:9f:23: 9e:37:04:78:47:b1:3e:67:52:c2:34:9e:b0:52:f1:b1:d1:40: 5b:4a:00:03:95:8f:63:72:23:4a:50:9f:60:8d:24:b0:2f:8b: fa:66:ed:56:69:96:69:9c:ac:41:d4:64:07:4f:28:38:46:7a: 46:f0:77:2b:f2:69:5f:07:2c:e1:3c:5c:0f:30:1a:7a:9a:56: 7c:56:47:f0:25:e6:96:e1:c8:2e:80:aa:32:7d:39:ef:15:37: d9:c5:7e:86:cb:5d:81:48:28:71:5d:89:8a:ec:1a:65:ec:99: 9d:7d:27:3d:23:c8:46:43:b4:4e:38:ad:05:10:1d:40:3f:09: bb:f4:23:d7:91:f1:af:a0:ce:e5:10:6e:85:fa:6f:b7:f8:35: 67:d3:c1:61:29:a8:f1:8f:7c:61:ad:4d:51:72:41:d6:86:63: 19:45:af:6d:d9:b2:21:b3:bd:00:b6:cf:08:bc:fb:dc:8e:3c: 35:10:1e:fb:5a:49:7e:3c:eb:7e:13:78:a0:f3:2d:bf:65:d1: 9d:29:0b:ce:29:b8:d6:13:3c:43:6c:02:6f:1f:db:ea:28:76: 75:29:20:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lGI+YN+BkpHKzWVG2W2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MjQ4MDRhMDI3NzcwMzljNGNmZDhjMDBkYzI5ZmE5MWQ4 YTM5MGMwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EygwMWU0MTRjNWJlMWM5ZThkMzdiZmY4MDg0YzdlNzI2NDcwOGZkMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq42ri1zMFKV5UXj59+3/sXk585J d4STFiA0UMJ7vwv1GH6tthYquEHu/CRamFXNROSwE6ko6hCSFlag/SEzx4VHDX6w 4NPWEOBik4owUq39rODOOXjXAAQ0/PjB4ley4angEDjTPalVsdPk0NRkF4muGfel boWrkCJ8bAFrU619NhM2QUjbpXQ7GgYYkh+bh82vjhAUiUu3KPpGclDJYwlJ21ax MyFZBaePBgW/b3MXvBVDrVahk/MpCyZWTh6eYHtb75HuJkmICxkNU9XKmC41ESVW e35qqhZ18TOGtGt+DcTKrCgLXM7YizVeWtDjIZfRw85LO5b6p2LS6UchmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHkFMW+HJ6NN7/4CEx+cmRwj9HIMB8GA1UdIwQY MBaAFCQkgEoCd3A5xM/YwA3Cn6kdijkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQt ZDAwYjU4MjJjY2VmLzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQtZDAwYjU4MjJjY2Vm LzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4xxXkZB GuwPX0gU11aazJYYwwLUOeyO0uZep6qG7/B1np8jnjcEeEexPmdSwjSesFLxsdFA W0oAA5WPY3IjSlCfYI0ksC+L+mbtVmmWaZysQdRkB08oOEZ6RvB3K/JpXwcs4Txc DzAaeppWfFZH8CXmluHILoCqMn057xU32cV+hstdgUgocV2JiuwaZeyZnX0nPSPI RkO0TjitBRAdQD8Ju/Qj15Hxr6DO5RBuhfpvt/g1Z9PBYSmo8Y98Ya1NUXJB1oZj GUWvbdmyIbO9ALbPCLz73I48NRAe+1pJfjzrfhN4oPMtv2XRnSkLzim41hM8Q2wC bx/b6ih2dSkgwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:20 2025 by rpki-client