This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json) Hash identifier: H0TyZG4KCzpkK8zZfCA0FxljSp+OYe37XQTNKReTGwg= Subject key identifier: 8F:0C:61:09:AA:85:DE:27:12:D0:51:57:45:E5:9A:49:BD:65:E2:E2 Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34 Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34 Certificate serial: 019AF276781237D080E23C821763BE8C4A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft Manifest number: 0A57 Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: MYKziE/NaMfP5tnY0PNOjCPTCF7V7nHh5fAj7gtaGig=) 2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:78:12:37:d0:80:e2:3c:82:17:63:be:8c:4a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=8f0c6109aa85de2712d0515745e59a49bd65e2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:9e:46:bb:7f:94:32:36:76:26:54:8e:6f: 7e:57:cb:92:ae:6b:67:9b:0c:c4:df:bd:af:23:a9: 51:ff:e5:f4:8a:e4:86:2e:41:0c:c0:b2:6f:69:0c: 8b:4f:49:5e:b5:a6:ea:56:d0:72:f7:65:ed:e8:2d: 26:fb:24:bc:b6:f2:05:bb:10:1c:9e:85:6a:c7:54: fb:a1:66:b3:f3:fc:44:6a:7f:74:7a:d9:fc:3d:5a: 2a:4a:27:45:6b:2d:71:e4:c7:41:ea:f0:68:70:b5: 6a:2e:b9:06:7e:9f:18:01:05:b6:89:fb:4d:e0:a9: 31:d1:ed:74:5b:e0:07:9c:95:fc:4b:3a:f2:ec:a6: 92:25:01:50:81:e8:88:03:4d:32:3c:25:51:c3:1a: d0:b4:9e:b4:09:b0:7d:5b:5e:d5:fb:19:22:cb:39: 3d:04:9b:5f:10:5c:a0:04:c4:7d:5c:6e:66:e5:92: df:79:15:8a:b3:f4:5e:3d:db:91:f9:e7:d4:a5:a1: 1c:9b:ad:53:d8:55:59:46:c0:f2:ca:15:01:8c:67: 0a:6d:0b:4d:f8:8a:80:74:36:21:d2:f6:36:07:12: d2:f6:67:57:d0:6b:2d:68:cc:e2:e5:51:15:7d:cd: 32:a2:73:ef:b9:0e:ac:c1:eb:9d:37:84:ee:c2:b0: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0C:61:09:AA:85:DE:27:12:D0:51:57:45:E5:9A:49:BD:65:E2:E2 X509v3 Authority Key Identifier: keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7e:b4:b3:47:45:90:29:08:84:62:bf:b7:39:b4:78:63:b3: 7c:74:e4:14:10:f6:80:61:ec:2e:5b:9f:9b:9e:50:09:0a:74: 89:6a:45:05:b5:53:2e:e9:cf:31:b4:2c:3c:36:17:e4:a9:7b: 41:0f:f9:80:76:cb:88:a3:08:86:f3:57:01:d5:ad:12:e5:24: db:d8:5e:43:2b:1b:b9:f5:e5:c2:7f:0d:e9:65:70:9c:30:28: 92:f1:af:da:b9:4a:25:64:22:b7:2b:da:e9:fb:cd:f6:a5:9e: 84:be:9d:9f:f9:29:7e:49:6b:9a:2f:26:a5:88:e9:f8:18:76: 22:e6:15:d4:bb:46:97:ef:57:3f:69:1a:da:27:8c:36:00:b2: 83:76:cc:f8:4f:3e:0d:1b:26:64:39:bd:e7:86:8a:06:98:0b: c1:59:7b:38:61:83:6a:fe:3b:dc:7f:76:f5:98:74:cf:22:3b: 79:45:76:84:cc:c8:37:64:7a:38:6c:f7:a3:4a:32:5d:32:08: dc:5c:c5:36:47:96:fc:32:ed:2e:46:8d:77:24:c6:cd:62:ea: 9d:5f:91:bb:23:de:ae:07:69:f5:23:6d:68:1b:10:ec:a2:d4: a5:52:77:e5:8c:1b:fe:de:2b:32:71:b4:d8:23:65:32:c9:ac: ea:aa:62:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydngSN9CA4jyCF2O+jEp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OTkyZjMyZDc0ODZkZmI0YTMyYzJlNzgxMDg1NGFjNmE2 NjhlMzQwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD Eyg4ZjBjNjEwOWFhODVkZTI3MTJkMDUxNTc0NWU1OWE0OWJkNjVlMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QyeRrt/lDI2diZUjm9+V8uSrmtn mwzE372vI6lR/+X0iuSGLkEMwLJvaQyLT0letabqVtBy92Xt6C0m+yS8tvIFuxAc noVqx1T7oWaz8/xEan90etn8PVoqSidFay1x5MdB6vBocLVqLrkGfp8YAQW2iftN 4Kkx0e10W+AHnJX8Szry7KaSJQFQgeiIA00yPCVRwxrQtJ60CbB9W17V+xkiyzk9 BJtfEFygBMR9XG5m5ZLfeRWKs/RePduR+efUpaEcm61T2FVZRsDyyhUBjGcKbQtN +IqAdDYh0vY2BxLS9mdX0GstaMzi5VEVfc0yonPvuQ6sweudN4TuwrDiMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8MYQmqhd4nEtBRV0Xlmkm9ZeLiMB8GA1UdIwQY MBaAFCSZLzLXSG37SjLC54EIVKxqZo40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMTk1OTItNGE0NC00Mjk4LWJkOGUt NGIyZTY4MGM3NDkxLzEvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yMTk1OTItNGE0NC00Mjk4LWJkOGUtNGIyZTY4MGM3NDkx LzEvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX60s0dF kCkIhGK/tzm0eGOzfHTkFBD2gGHsLlufm55QCQp0iWpFBbVTLunPMbQsPDYX5Kl7 QQ/5gHbLiKMIhvNXAdWtEuUk29heQysbufXlwn8N6WVwnDAokvGv2rlKJWQityva 6fvN9qWehL6dn/kpfklrmi8mpYjp+Bh2IuYV1LtGl+9XP2ka2ieMNgCyg3bM+E8+ DRsmZDm954aKBpgLwVl7OGGDav473H929Zh0zyI7eUV2hMzIN2R6OGz3o0oyXTII 3FzFNkeW/DLtLkaNdyTGzWLqnV+RuyPergdp9SNtaBsQ7KLUpVJ35Ywb/t4rMnG0 2CNlMsms6qpixg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:52 2025 by rpki-client