This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft File: JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json) Hash identifier: uBwmg3AAcm8VSBaUcU0Iuc1oX6Ic54DgiCVUGbunDZ8= Subject key identifier: 1A:1E:21:8A:EA:FE:8B:91:93:5D:07:15:F0:BC:3E:91:11:56:2D:75 Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6 Certificate issuer: /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6 Certificate serial: 019AF389D21DD4C7E9A1DBAE228202D0835B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 12:01:26 +0000 Manifest this update: Sat 06 Dec 2025 12:01:26 +0000 Manifest next update: Sun 07 Dec 2025 12:01:26 +0000 Files and hashes: 1: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: W0EmCTH+GSU7UJZC3dm/lIUV9MyCllIxPCZ8LElOCPk=) 2: r8Obi9IFhGpTy_Fq_kKt7tzU_pA.roa (hash: aKaPCyYUlKajFN86VFdggb+LUFUQbQdhAkrOshlrb08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d2:1d:d4:c7:e9:a1:db:ae:22:82:02:d0:83:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6 Validity Not Before: Dec 6 12:01:26 2025 GMT Not After : Dec 7 12:01:26 2025 GMT Subject: CN=1a1e218aeafe8b91935d0715f0bc3e9111562d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:d6:b5:c8:bf:27:b4:b5:b5:0b:91:65:a0: 1c:6a:04:b5:5b:06:a0:fa:54:d7:2a:89:73:68:ae: 60:10:8e:2a:f4:30:6c:70:d0:ed:c0:cb:db:14:b1: 14:68:89:c0:c5:8b:21:e3:aa:85:a6:31:22:a7:aa: ef:cc:91:db:24:5e:5a:85:5e:94:8c:d1:3b:31:18: 49:e5:d7:f2:0e:9c:53:eb:0d:bf:d8:0f:e5:f1:b3: 76:aa:5f:89:27:0a:e0:c9:60:fe:8e:13:e1:91:56: d1:d9:35:0a:a5:3b:b7:e3:b1:39:1d:ba:6d:86:94: 96:3a:a8:cb:49:95:e2:38:fd:64:d5:16:6b:fe:a3: e7:ca:30:9a:18:2d:0c:9d:8f:9d:8b:08:9c:5d:b9: 6d:70:95:05:ee:24:a4:4d:ab:6f:05:3d:3f:53:11: 84:01:ea:78:45:14:4b:16:47:a4:01:92:8e:ad:17: ac:9c:82:e0:df:08:fd:78:63:1b:93:8a:43:16:18: 4e:0c:85:d4:ca:f1:ce:fa:04:58:a4:b6:34:0a:c4: 39:40:5a:1a:e6:19:2e:ab:7d:ff:66:ba:04:68:5d: 93:a2:a8:c2:84:f7:e9:72:38:5b:54:54:a4:94:08: 7c:1e:95:b1:15:a7:53:b6:bc:c9:50:6b:5f:49:f9: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1E:21:8A:EA:FE:8B:91:93:5D:07:15:F0:BC:3E:91:11:56:2D:75 X509v3 Authority Key Identifier: keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:95:39:75:02:30:2a:8e:d5:7e:b1:08:f2:5a:f5:0b:06:1e: 8c:1c:f4:19:2a:27:a2:11:01:a9:ca:29:fe:9b:ba:0a:00:b2: 34:f2:6e:49:b9:fb:5f:1c:51:f1:34:88:ec:8e:c5:de:79:c9: 52:f5:5d:04:fb:3d:6a:9e:4b:54:2d:23:3f:bc:bf:44:2d:55: 61:79:b6:43:1b:e7:cb:04:18:b3:2e:55:b6:19:3f:e6:1f:41: 7b:eb:23:5d:d4:d0:13:9f:ee:c6:e2:1b:56:e1:82:77:14:00: 0d:02:70:fc:ac:07:1d:03:72:0b:bf:2c:9c:95:4c:9d:c0:35: 0e:f2:df:28:ea:1b:c9:78:6d:c3:15:2d:94:cc:6b:f7:9f:ed: d7:0f:22:e2:fe:bd:92:48:ba:86:26:f1:a0:92:71:af:f6:88: e2:c0:00:5e:96:cb:1e:9c:78:b9:a3:8d:cc:76:93:b0:79:1b: c3:dd:7d:16:fa:a2:2a:0b:85:84:0e:e2:fb:9b:35:97:ef:29: 42:67:71:a8:e2:b4:de:a4:c9:68:76:a7:8b:e7:f7:6c:3e:8a: 44:46:d0:e6:53:fd:ec:f8:12:cf:a7:d2:f6:f2:b8:fb:3a:c4: cb:ca:dd:c0:b9:fc:0c:71:a1:d7:c1:0c:35:6e:a2:78:37:1f: 21:69:48:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidId1MfpoduuIoIC0INbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YjljZWIxMGMyYzhjMDBkMTYwOTk2MDNjYzExYmVkMDA1 NDdiZTYwHhcNMjUxMjA2MTIwMTI2WhcNMjUxMjA3MTIwMTI2WjAzMTEwLwYDVQQD EygxYTFlMjE4YWVhZmU4YjkxOTM1ZDA3MTVmMGJjM2U5MTExNTYyZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44jWtci/J7S1tQuRZaAcagS1Wwag +lTXKolzaK5gEI4q9DBscNDtwMvbFLEUaInAxYsh46qFpjEip6rvzJHbJF5ahV6U jNE7MRhJ5dfyDpxT6w2/2A/l8bN2ql+JJwrgyWD+jhPhkVbR2TUKpTu347E5Hbpt hpSWOqjLSZXiOP1k1RZr/qPnyjCaGC0MnY+diwicXbltcJUF7iSkTatvBT0/UxGE Aep4RRRLFkekAZKOrResnILg3wj9eGMbk4pDFhhODIXUyvHO+gRYpLY0CsQ5QFoa 5hkuq33/ZroEaF2ToqjChPfpcjhbVFSklAh8HpWxFadTtrzJUGtfSfmTWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoeIYrq/ouRk10HFfC8PpERVi11MB8GA1UdIwQY MBaAFCa5zrEMLIwA0WCZYDzBG+0AVHvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUt YjYxMDU2ODQ2NmIzLzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUtYjYxMDU2ODQ2NmIz LzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5U5dQIw Ko7VfrEI8lr1CwYejBz0GSonohEBqcop/pu6CgCyNPJuSbn7XxxR8TSI7I7F3nnJ UvVdBPs9ap5LVC0jP7y/RC1VYXm2QxvnywQYsy5Vthk/5h9Be+sjXdTQE5/uxuIb VuGCdxQADQJw/KwHHQNyC78snJVMncA1DvLfKOobyXhtwxUtlMxr95/t1w8i4v69 kki6hibxoJJxr/aI4sAAXpbLHpx4uaONzHaTsHkbw919FvqiKguFhA7i+5s1l+8p QmdxqOK03qTJaHani+f3bD6KREbQ5lP97PgSz6fS9vK4+zrEy8rdwLn8DHGh18EM NW6ieDcfIWlIcA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:18:35 2025 by rpki-client