This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft File: JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json) Hash identifier: peqBcn7y8mWN4Nw2iDGSYh6D90QMu+52ecuhFZ9AeWc= Subject key identifier: D9:BB:AD:51:BE:6B:A7:2A:C2:AC:E6:0D:32:0D:F8:83:5F:15:A5:DA Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70 Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70 Certificate serial: 019AF276FD68C3AA79E44C8A6663ADE458DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft Manifest number: 1738 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: 4meDEuGCQQ7oKvIgaoxyHnI2il/6/ETOsaLvPpr77w4=) 2: vyg3yZoDE3lDITkNoY-QCGp_Waw.roa (hash: xu1/KMb58m5rKylUKx2EbNMwZx0eL+J1SwYTzOBoPlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fd:68:c3:aa:79:e4:4c:8a:66:63:ad:e4:58:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b086f4824266384e078cf777375f21bd370b70 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=d9bbad51be6ba72ac2ace60d320df8835f15a5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:96:f5:f5:c3:f6:e0:4e:d9:5d:ca:a5:04: 85:19:8c:4f:09:75:6d:29:fd:33:a6:b2:45:94:e7: 0e:8f:c2:fa:2e:c2:a7:08:b6:46:0c:88:71:f2:af: 8c:07:e6:80:e3:11:47:7a:1b:b9:8a:3e:ab:5a:cd: ad:99:dc:b8:81:d2:30:7d:e0:e5:f8:30:32:35:f7: 0e:3d:f8:39:c8:64:63:2e:c0:ee:50:bc:38:fc:09: 41:e2:10:00:18:40:80:eb:ad:b5:4b:f8:f4:e6:74: 8f:c1:6f:10:0b:fe:0d:0f:cd:84:42:85:8f:7c:0b: df:92:87:fd:84:73:9e:9c:f3:d9:d4:a4:6f:ca:74: 9d:8b:56:e6:ee:16:3c:71:ac:50:29:72:8a:5c:40: c9:fa:2c:ba:13:90:30:0f:74:d4:d1:99:f1:23:3c: f6:fc:f0:83:45:52:d9:c4:38:2e:2e:df:02:69:01: 40:19:1c:a5:85:57:97:7c:39:b8:a7:d8:4d:35:01: d5:5a:7a:3a:38:e8:a8:8e:ce:c4:82:0d:1b:6f:6b: 40:d7:9d:33:26:82:5e:7e:3d:ff:cd:6c:da:a9:a6: 15:9e:3f:53:ab:72:dc:c1:ad:9b:e9:0f:d0:95:07: 94:7c:3d:42:1d:57:11:1d:2e:43:16:90:2b:07:33: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:AD:51:BE:6B:A7:2A:C2:AC:E6:0D:32:0D:F8:83:5F:15:A5:DA X509v3 Authority Key Identifier: keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:31:2a:a4:91:54:42:59:cf:c3:1e:85:ae:28:de:0f:01:78: 6a:f4:35:23:a6:0f:88:74:7f:de:86:7c:dc:84:77:a7:ff:97: 6e:0e:03:72:ce:0a:ae:3e:55:6d:a9:51:9c:1b:20:1b:13:ca: a3:cd:56:e0:5e:70:9d:77:fd:19:48:35:f8:c8:24:dd:bd:97: 26:5d:5a:0c:06:60:0c:54:41:1f:c3:e2:cf:f7:fd:04:b1:7b: 89:f2:f0:83:72:30:82:b6:0f:08:1b:f7:e1:81:d1:15:6f:ca: 60:fa:66:54:80:6c:3d:56:62:3e:3e:15:18:5e:8e:0b:0b:fe: 05:d4:5b:93:ec:ec:58:98:2d:52:63:5e:53:1f:78:38:c0:0d: ca:99:7a:be:80:87:c8:41:eb:e8:94:bf:ad:d7:ad:32:31:39: 79:11:cb:ba:15:a2:94:78:0f:80:7e:04:45:aa:9a:0f:eb:ba: 98:79:cc:c9:df:f9:ef:e2:74:7c:b9:dc:87:fe:86:b1:97:2b: 46:34:d7:80:4e:0a:7b:5e:d8:6b:07:9c:6f:9d:1d:96:fd:18: 20:4a:56:a1:ac:e5:c8:e2:a6:f6:83:6b:c2:e4:63:8a:0c:f4: 8e:04:b8:eb:96:f5:7c:2f:8a:17:cc:70:d3:7f:f1:48:49:85: 8e:87:0f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv1ow6p55EyKZmOt5FjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjA4NmY0ODI0MjY2Mzg0ZTA3OGNmNzc3Mzc1ZjIxYmQz NzBiNzAwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD EyhkOWJiYWQ1MWJlNmJhNzJhYzJhY2U2MGQzMjBkZjg4MzVmMTVhNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosGW9fXD9uBO2V3KpQSFGYxPCXVt Kf0zprJFlOcOj8L6LsKnCLZGDIhx8q+MB+aA4xFHehu5ij6rWs2tmdy4gdIwfeDl +DAyNfcOPfg5yGRjLsDuULw4/AlB4hAAGECA6621S/j05nSPwW8QC/4ND82EQoWP fAvfkof9hHOenPPZ1KRvynSdi1bm7hY8caxQKXKKXEDJ+iy6E5AwD3TU0ZnxIzz2 /PCDRVLZxDguLt8CaQFAGRylhVeXfDm4p9hNNQHVWno6OOiojs7Egg0bb2tA150z JoJefj3/zWzaqaYVnj9Tq3Lcwa2b6Q/QlQeUfD1CHVcRHS5DFpArBzMteQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNm7rVG+a6cqwqzmDTIN+INfFaXaMB8GA1UdIwQY MBaAFCSwhvSCQmY4TgeM93c3XyG9NwtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxDRzlJSkNaamhPQjR6M2R6ZGZJYjAzQzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZTEzOGYtNWU2My00Y2M0LThlNzUt ZGVjYjE4OGEwMDBkLzEvSkxDRzlJSkNaamhPQjR6M2R6ZGZJYjAzQzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lZTEzOGYtNWU2My00Y2M0LThlNzUtZGVjYjE4OGEwMDBk LzEvSkxDRzlJSkNaamhPQjR6M2R6ZGZJYjAzQzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjEqpJFU QlnPwx6FrijeDwF4avQ1I6YPiHR/3oZ83IR3p/+Xbg4Dcs4Krj5VbalRnBsgGxPK o81W4F5wnXf9GUg1+Mgk3b2XJl1aDAZgDFRBH8Piz/f9BLF7ifLwg3IwgrYPCBv3 4YHRFW/KYPpmVIBsPVZiPj4VGF6OCwv+BdRbk+zsWJgtUmNeUx94OMANypl6voCH yEHr6JS/rdetMjE5eRHLuhWilHgPgH4ERaqaD+u6mHnMyd/57+J0fLnch/6GsZcr RjTXgE4Ke17Yawecb50dlv0YIEpWoazlyOKm9oNrwuRjigz0jgS465b1fC+KF8xw 03/xSEmFjocP3A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:59 2025 by rpki-client