This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json) Hash identifier: MRjQWeWHB3Ajqdc3ZJvXzqFEmq2eIiXokyuRKEGP9yE= Subject key identifier: C6:CA:96:AD:4F:0F:E4:AB:35:CE:86:0E:52:CD:E5:87:7B:14:82:80 Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff Certificate serial: 019AF389CD709AFCAD1AF511C9B5AB60095B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft Manifest number: 12AC Signing time: Sat 06 Dec 2025 12:01:25 +0000 Manifest this update: Sat 06 Dec 2025 12:01:25 +0000 Manifest next update: Sun 07 Dec 2025 12:01:25 +0000 Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: QGmYTP32VkTJMJbGdSz5nh/Eo00Hggh7bH1NZ5K8WJU=) 2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:cd:70:9a:fc:ad:1a:f5:11:c9:b5:ab:60:09:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff Validity Not Before: Dec 6 12:01:25 2025 GMT Not After : Dec 7 12:01:25 2025 GMT Subject: CN=c6ca96ad4f0fe4ab35ce860e52cde5877b148280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:84:a8:86:21:bf:fe:ad:34:76:4e:17:f0:29: c8:53:57:2f:9e:82:d6:19:20:96:ee:d9:6c:ae:6c: 6c:c2:09:97:45:15:17:4f:17:dd:1c:16:2d:fb:85: 11:8c:63:52:43:8c:49:65:20:77:c0:06:90:35:1c: 50:cf:eb:68:0d:43:da:d4:5a:db:b1:cd:b8:9e:4d: e6:0d:0b:09:08:c0:14:4b:59:30:cf:56:aa:41:b6: a9:7b:9f:2c:74:d6:2e:67:db:87:68:76:50:fc:e6: cb:5b:2c:4c:aa:b4:e8:7b:d9:c1:a8:9a:5e:5c:42: 35:35:e7:de:7a:78:23:99:08:fa:5d:dd:3a:3c:cb: 8d:d9:46:9e:41:64:bd:92:e3:37:7f:59:ef:68:ab: 69:ac:85:9e:66:c6:0c:b3:01:28:01:2a:52:e8:fb: 0d:0d:d7:a8:a2:b9:56:d8:92:29:6f:de:23:8b:10: 28:a0:73:9f:52:30:6b:ab:4b:56:bc:0b:e1:19:d7: 21:2d:ed:52:4c:94:63:45:8f:7a:a1:ee:ba:6a:d5: 4c:78:e1:49:57:be:d2:24:c5:d1:37:bc:04:c2:1c: 25:bd:b3:1d:c8:fc:63:6e:b6:eb:81:e5:51:18:a0: c6:41:ae:55:64:b6:0f:3e:0c:5e:f5:11:4c:be:73: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CA:96:AD:4F:0F:E4:AB:35:CE:86:0E:52:CD:E5:87:7B:14:82:80 X509v3 Authority Key Identifier: keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:01:ae:f6:5a:d3:8a:a5:d8:3a:c2:a4:6a:72:14:b7:ad:bf: 2f:d3:e4:c3:66:c9:de:94:99:64:9c:00:67:5f:73:be:d7:f5: d7:23:b0:d6:08:c9:24:98:d6:69:7b:f5:39:98:e5:f9:27:35: f9:4b:41:ea:06:06:4a:98:9d:4a:47:6e:96:82:a4:e0:75:44: 83:e9:e6:24:ea:b3:38:a5:79:fc:81:39:24:68:01:ce:35:85: 73:bf:c6:a1:d0:d8:60:0b:ac:49:a2:3e:2d:6f:f0:5d:52:68: de:0f:07:cb:0e:a1:b1:c9:b3:63:1c:35:2f:e3:3c:4c:f5:48: 02:73:54:6c:ea:d1:93:46:5f:12:2f:32:4f:2a:bb:f0:f3:bd: 2e:46:31:78:cb:22:39:86:9b:a2:72:c3:93:a2:1c:4e:fc:36: 53:77:36:fc:b9:6f:7f:09:8c:15:6b:ab:cf:fc:a5:89:aa:42: a1:62:95:1a:35:e2:12:c7:52:aa:e2:68:3e:fa:e7:4a:3a:28: a6:a5:33:1b:f0:24:44:2f:d7:eb:0f:4f:a8:81:05:52:45:11: 71:2d:5c:b8:f2:46:c0:e0:37:b4:a2:96:28:91:25:d7:ac:b2: e5:82:d2:cb:11:d8:5b:e7:79:a3:b0:b2:16:70:1f:fa:fa:91: 06:0c:1d:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzic1wmvytGvURybWrYAlbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OWI1NThjNDg1NTBlMDYyMzRjNWRkZmZjYWExZmNmMmU5 YWM2ZmYwHhcNMjUxMjA2MTIwMTI1WhcNMjUxMjA3MTIwMTI1WjAzMTEwLwYDVQQD EyhjNmNhOTZhZDRmMGZlNGFiMzVjZTg2MGU1MmNkZTU4NzdiMTQ4MjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YSohiG//q00dk4X8CnIU1cvnoLW GSCW7tlsrmxswgmXRRUXTxfdHBYt+4URjGNSQ4xJZSB3wAaQNRxQz+toDUPa1Frb sc24nk3mDQsJCMAUS1kwz1aqQbape58sdNYuZ9uHaHZQ/ObLWyxMqrToe9nBqJpe XEI1NefeengjmQj6Xd06PMuN2UaeQWS9kuM3f1nvaKtprIWeZsYMswEoASpS6PsN DdeoorlW2JIpb94jixAooHOfUjBrq0tWvAvhGdchLe1STJRjRY96oe66atVMeOFJ V77SJMXRN7wEwhwlvbMdyPxjbrbrgeVRGKDGQa5VZLYPPgxe9RFMvnMD1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbKlq1PD+SrNc6GDlLN5Yd7FIKAMB8GA1UdIwQY MBaAFCSbVYxIVQ4GI0xd3/yqH88umsb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTct MTIxZDUzNTA4NWQ2LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTctMTIxZDUzNTA4NWQ2 LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwGu9lrT iqXYOsKkanIUt62/L9Pkw2bJ3pSZZJwAZ19zvtf11yOw1gjJJJjWaXv1OZjl+Sc1 +UtB6gYGSpidSkduloKk4HVEg+nmJOqzOKV5/IE5JGgBzjWFc7/GodDYYAusSaI+ LW/wXVJo3g8Hyw6hscmzYxw1L+M8TPVIAnNUbOrRk0ZfEi8yTyq78PO9LkYxeMsi OYabonLDk6IcTvw2U3c2/LlvfwmMFWurz/yliapCoWKVGjXiEsdSquJoPvrnSjoo pqUzG/AkRC/X6w9PqIEFUkURcS1cuPJGwOA3tKKWKJEl16yy5YLSyxHYW+d5o7Cy FnAf+vqRBgwdVA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:47 2025 by rpki-client