This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json) Hash identifier: 6IT/Q6aHLm6f5ASrLYxDkoWMdl2UVNs3ftc2+l/225M= Subject key identifier: 0D:E6:91:EE:00:61:B6:52:8A:A5:49:72:C0:94:56:FC:B3:69:2F:D6 Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca Certificate serial: 019AF087EB89964C4D8B76A7E04B6ECA530C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 22:00:30 +0000 Manifest this update: Fri 05 Dec 2025 22:00:30 +0000 Manifest next update: Sat 06 Dec 2025 22:00:30 +0000 Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: bsqx0Qqpl3lq8MHzgyFOBraZZK/CUUvPgsfGYcGbzpg=) 2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:eb:89:96:4c:4d:8b:76:a7:e0:4b:6e:ca:53:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca Validity Not Before: Dec 5 22:00:30 2025 GMT Not After : Dec 6 22:00:30 2025 GMT Subject: CN=0de691ee0061b6528aa54972c09456fcb3692fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:63:41:9a:21:f0:99:89:3b:19:ab:80:85: 04:19:79:67:ca:67:d7:05:e0:62:6b:47:6a:90:32: 8d:0f:ed:68:79:2e:c7:62:6f:6f:1c:4d:46:a9:cd: 63:ff:dc:73:5e:9a:78:04:87:4b:5f:e9:ee:a7:04: 88:e4:24:36:0a:34:bd:7f:8f:91:2d:94:35:a3:bc: b4:95:b2:d6:76:14:b2:02:55:77:cd:f9:9e:07:ef: 17:da:f9:c7:bb:49:05:ca:54:32:fc:ba:0c:d0:20: 34:b9:89:ff:f6:3d:c2:8f:6c:47:25:71:33:d5:bc: bf:9d:12:99:31:05:11:26:34:9e:75:92:91:93:e4: 8d:f6:f7:e2:d7:ab:51:42:e7:b4:1b:45:42:55:37: 8b:94:79:b5:30:bd:84:46:f3:76:78:7c:e9:1f:95: 78:bf:13:ed:ae:fa:fd:ab:27:0f:84:6c:2b:44:82: 4e:fe:a7:fd:6c:f6:b8:9f:5d:d6:96:25:4d:12:13: d7:a9:53:2d:d6:ee:51:13:b8:0b:fd:54:1b:b4:da: e2:44:13:7b:f4:60:c0:ee:9a:08:ed:19:da:ef:74: bd:27:29:00:2e:07:1c:69:5f:e9:10:c0:80:0b:e9: e2:5d:60:52:a7:90:19:59:11:79:0f:99:cc:c7:93: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E6:91:EE:00:61:B6:52:8A:A5:49:72:C0:94:56:FC:B3:69:2F:D6 X509v3 Authority Key Identifier: keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0e:14:53:ec:f5:f7:c8:dd:dd:c7:af:50:b4:28:ce:df:45: 49:69:1a:72:8f:25:be:c4:54:30:c3:bd:75:b2:31:fd:9c:90: 82:16:b7:de:40:13:09:84:a2:31:e7:8a:9e:43:18:63:49:49: 85:99:3b:f2:4e:b2:62:f4:92:0f:8d:5f:f9:ce:3f:e7:52:a7: 88:51:17:f2:c5:09:70:c4:16:2d:a2:97:42:f8:e6:63:74:3e: 69:a9:d9:f7:a0:37:d0:a1:58:78:dd:4b:ce:1f:1c:16:5d:33: 56:28:58:ab:aa:14:2a:20:fc:b8:82:5e:ed:24:cc:44:cc:c8: 3f:99:c0:14:a5:d6:0e:c6:f9:c3:1c:3e:ea:e8:98:36:d8:1a: 32:2f:a3:6b:d6:44:a4:ba:41:ec:56:0c:9b:81:1c:ca:8f:a8: f5:f1:b9:24:5c:85:27:ab:70:31:e9:49:e5:e7:07:5c:74:22: 84:a8:fb:f2:1a:77:ec:ac:e2:a9:af:d7:67:54:3c:0b:0b:a3: 9c:59:32:40:94:66:47:68:b1:32:eb:ab:1d:15:36:a0:ab:06: 48:8d:1c:a3:35:6f:57:af:d8:4c:dc:58:e6:e0:73:9f:db:f5: 43:57:fe:07:51:ac:92:c3:f7:d4:2c:3a:53:cb:53:44:64:d9: d0:fa:c2:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+uJlkxNi3an4EtuylMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDM5MjNlNzczZWIyNzA0OTJhZWNjOGRhMTVjMmU1Y2E1 N2MyY2EwHhcNMjUxMjA1MjIwMDMwWhcNMjUxMjA2MjIwMDMwWjAzMTEwLwYDVQQD EygwZGU2OTFlZTAwNjFiNjUyOGFhNTQ5NzJjMDk0NTZmY2IzNjkyZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusNjQZoh8JmJOxmrgIUEGXlnymfX BeBia0dqkDKND+1oeS7HYm9vHE1Gqc1j/9xzXpp4BIdLX+nupwSI5CQ2CjS9f4+R LZQ1o7y0lbLWdhSyAlV3zfmeB+8X2vnHu0kFylQy/LoM0CA0uYn/9j3Cj2xHJXEz 1by/nRKZMQURJjSedZKRk+SN9vfi16tRQue0G0VCVTeLlHm1ML2ERvN2eHzpH5V4 vxPtrvr9qycPhGwrRIJO/qf9bPa4n13WliVNEhPXqVMt1u5RE7gL/VQbtNriRBN7 9GDA7poI7Rna73S9JykALgccaV/pEMCAC+niXWBSp5AZWRF5D5nMx5NV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3mke4AYbZSiqVJcsCUVvyzaS/WMB8GA1UdIwQY MBaAFCZDkj53PrJwSSrsyNoVwuXKV8LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUt NzhjMzdjMGIwZDk3LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUtNzhjMzdjMGIwZDk3 LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXA4UU+z1 98jd3cevULQozt9FSWkaco8lvsRUMMO9dbIx/ZyQgha33kATCYSiMeeKnkMYY0lJ hZk78k6yYvSSD41f+c4/51KniFEX8sUJcMQWLaKXQvjmY3Q+aanZ96A30KFYeN1L zh8cFl0zVihYq6oUKiD8uIJe7STMRMzIP5nAFKXWDsb5wxw+6uiYNtgaMi+ja9ZE pLpB7FYMm4Ecyo+o9fG5JFyFJ6twMelJ5ecHXHQihKj78hp37Kziqa/XZ1Q8Cwuj nFkyQJRmR2ixMuurHRU2oKsGSI0cozVvV6/YTNxY5uBzn9v1Q1f+B1GsksP31Cw6 U8tTRGTZ0PrCow== -----END CERTIFICATE-----Generated at Sat Dec 6 04:58:39 2025 by rpki-client