This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json) Hash identifier: tR3TBs4zydiNXxddAgH5rufsbD/yOWNyvdR4x7T3hnc= Subject key identifier: C7:29:6C:2D:10:9A:89:96:5F:1D:47:50:8E:60:75:5A:B8:C0:CB:FD Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00 Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000 Certificate serial: 019AF12E2EA3233E355366D9FF636EAD20E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft Manifest number: 0AFF Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=) 2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: K3a0v3c4Hoqrgj0SwKiTEPDy94zhw7xbIKCk2+6qNCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2e:a3:23:3e:35:53:66:d9:ff:63:6e:ad:20:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000 Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=c7296c2d109a89965f1d47508e60755ab8c0cbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:5c:42:4f:b4:5c:f4:33:4b:29:38:ff:36: 77:3c:c0:1b:a2:eb:39:01:ff:bf:77:41:86:e4:13: 94:33:e6:63:07:d0:b3:fb:89:01:03:f7:7a:91:93: 1b:a3:0e:a6:30:46:b7:f6:c1:e6:ba:f2:81:38:55: e4:35:7d:26:82:16:aa:1a:92:1f:c6:d9:fa:1b:0a: a3:84:41:7f:0e:88:37:41:54:8f:bc:74:99:66:d8: 16:19:04:c6:26:64:17:c2:c0:5a:a4:9a:8d:b2:33: 82:04:ed:bf:7b:5a:56:b7:04:9c:3e:0a:bd:94:20: 92:99:5e:bb:63:fe:03:49:d0:7b:d3:8f:1c:57:1e: 4a:80:cb:f7:f0:4a:72:21:e7:ec:43:fb:7e:a5:af: 1f:3b:98:08:28:6c:40:55:00:72:56:d4:0c:b6:be: 52:e8:c8:4e:8c:87:f1:eb:cc:f1:6b:a8:55:7e:b2: fb:13:c1:9a:45:82:cb:05:81:5c:f8:92:86:23:47: 69:31:01:ae:ed:23:78:67:65:11:4b:9a:e0:9a:3e: 17:24:9e:1a:3f:44:da:5b:1c:b7:10:c6:b7:c9:30: f1:f6:33:2b:e5:38:e1:a6:2d:65:aa:c6:82:1d:d8: 45:c4:f2:9a:0f:b7:50:66:38:94:9b:c2:48:64:be: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:29:6C:2D:10:9A:89:96:5F:1D:47:50:8E:60:75:5A:B8:C0:CB:FD X509v3 Authority Key Identifier: keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a4:d1:15:50:19:b9:64:75:f0:8a:7d:fd:23:8d:18:4c:f9: 9d:bb:ee:a4:f6:d1:8b:95:cc:38:0d:b4:fc:04:29:41:b9:a7: c3:56:ca:5a:67:c5:cd:a6:fe:92:b5:1b:9d:ea:c2:75:0a:05: 09:55:fb:92:0b:8f:7c:9a:36:3b:98:aa:64:64:df:58:7d:af: c8:5f:38:32:30:10:3d:7f:e4:aa:58:58:e7:7e:42:0a:4d:5c: b3:4c:99:6e:fd:ae:12:2f:52:db:75:46:90:5e:ad:3b:c5:9b: d5:37:6c:88:38:f6:25:1f:c2:a0:07:a8:b5:b6:2d:62:04:92: c2:27:9b:e1:cb:9b:94:1d:76:3e:3f:9e:eb:68:a3:88:85:de: 15:fc:0f:97:0e:c2:1b:17:d2:c2:65:b4:df:2b:20:e3:ae:11: da:05:1a:eb:9d:d6:54:7a:6f:eb:00:87:f5:b2:33:64:2b:1c: 6f:79:69:0b:7f:17:3f:66:e4:e5:27:7d:8c:0f:a8:6b:38:6d: 5b:4a:d1:4e:72:9d:ec:a8:4c:cf:d2:9a:e7:40:32:ff:c8:b4: 9e:21:13:39:fc:11:f7:16:05:76:51:18:b2:d1:02:0b:4c:11: 19:d2:7d:91:6e:fe:77:95:a7:42:7c:0d:81:4a:b5:80:81:ac: b0:d9:d9:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLi6jIz41U2bZ/2NurSDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzM1ODM1OGViYTUxYjUzNGQzZmFlOWE2Y2I4NzFkZTYz N2UwMDAwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EyhjNzI5NmMyZDEwOWE4OTk2NWYxZDQ3NTA4ZTYwNzU1YWI4YzBjYmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ZcQk+0XPQzSyk4/zZ3PMAbous5 Af+/d0GG5BOUM+ZjB9Cz+4kBA/d6kZMbow6mMEa39sHmuvKBOFXkNX0mghaqGpIf xtn6GwqjhEF/Dog3QVSPvHSZZtgWGQTGJmQXwsBapJqNsjOCBO2/e1pWtwScPgq9 lCCSmV67Y/4DSdB7048cVx5KgMv38EpyIefsQ/t+pa8fO5gIKGxAVQByVtQMtr5S 6MhOjIfx68zxa6hVfrL7E8GaRYLLBYFc+JKGI0dpMQGu7SN4Z2URS5rgmj4XJJ4a P0TaWxy3EMa3yTDx9jMr5Tjhpi1lqsaCHdhFxPKaD7dQZjiUm8JIZL5dXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcpbC0QmomWXx1HUI5gdVq4wMv9MB8GA1UdIwQY MBaAFCUzWDWOulG1NNP66abLhx3mN+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYzJmOTAtMjZlYS00ZDU5LTkxYTkt NGQ3NzU2MjJiY2I2LzEvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xYzJmOTAtMjZlYS00ZDU5LTkxYTktNGQ3NzU2MjJiY2I2 LzEvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6TRFVAZ uWR18Ip9/SONGEz5nbvupPbRi5XMOA20/AQpQbmnw1bKWmfFzab+krUbnerCdQoF CVX7kguPfJo2O5iqZGTfWH2vyF84MjAQPX/kqlhY535CCk1cs0yZbv2uEi9S23VG kF6tO8Wb1TdsiDj2JR/CoAeotbYtYgSSwieb4cublB12Pj+e62ijiIXeFfwPlw7C GxfSwmW03ysg464R2gUa653WVHpv6wCH9bIzZCscb3lpC38XP2bk5Sd9jA+oazht W0rRTnKd7KhMz9Ka50Ay/8i0niETOfwR9xYFdlEYstECC0wRGdJ9kW7+d5WnQnwN gUq1gIGssNnZlg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:37 2025 by rpki-client