This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft File: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft (raw, json) Hash identifier: QxoBzd3xOI0X+yK9i7IduPOe7SRqPXKoYLOp4z5PxbU= Subject key identifier: 7B:1A:9C:F9:B9:81:8B:1A:FE:80:4E:F5:3E:77:67:3F:5A:29:8F:2A Authority key identifier: 25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39 Certificate issuer: /CN=253441fe85d3435c71a1894eed0c744147644a39 Certificate serial: 019AF12D3F08DC20905140CEC0E0CADB9B48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft Manifest number: 0218 Signing time: Sat 06 Dec 2025 01:01:05 +0000 Manifest this update: Sat 06 Dec 2025 01:01:05 +0000 Manifest next update: Sun 07 Dec 2025 01:01:05 +0000 Files and hashes: 1: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl (hash: TOZdhrc0B2+wy3L7GCjeEtuhd6PKmLY3icytfMFj4N8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3f:08:dc:20:90:51:40:ce:c0:e0:ca:db:9b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253441fe85d3435c71a1894eed0c744147644a39 Validity Not Before: Dec 6 01:01:05 2025 GMT Not After : Dec 7 01:01:05 2025 GMT Subject: CN=7b1a9cf9b9818b1afe804ef53e77673f5a298f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:9b:36:6c:48:3d:ec:e2:ca:1d:cd:0e:f4: 0e:25:7c:0e:2f:c2:3e:c1:b3:e9:42:d0:18:29:0a: 4e:fa:42:ac:1e:f4:d3:3c:24:7a:17:46:94:99:e3: f0:a5:4e:68:a8:e0:71:34:87:dd:6d:26:a2:40:e6: 53:19:47:c5:fc:d1:6d:15:1e:d2:b8:55:32:5c:8d: c1:2c:fc:26:c3:c6:28:43:c4:a0:a8:62:30:20:66: 7d:aa:0c:87:66:16:10:a7:ac:ad:0f:bf:f0:66:ca: 7d:25:d6:f4:3c:de:a3:40:fb:28:39:ab:c5:46:29: 05:a7:f4:45:0d:5b:a3:32:10:0c:4f:d7:d1:1a:a4: 2c:82:8b:4f:9d:d0:db:26:08:33:5c:0e:8a:f7:05: 9f:00:19:21:0c:01:cc:06:34:d3:77:62:4e:91:a4: 9c:4b:d5:1f:d0:41:72:ec:3c:b6:28:72:4c:37:38: f7:10:68:34:77:e5:b7:b8:e9:d7:6d:b6:e5:20:d2: 4a:be:b7:cf:ae:d4:9e:cd:e3:8c:de:d2:2f:84:be: 29:b5:a1:44:8e:7a:d8:c5:e5:48:60:d9:a7:23:d9: 77:30:5e:01:5c:55:8e:f7:8e:44:94:05:82:c0:a2: 5d:65:cf:2f:68:f5:37:33:5f:00:5c:65:7e:bf:22: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1A:9C:F9:B9:81:8B:1A:FE:80:4E:F5:3E:77:67:3F:5A:29:8F:2A X509v3 Authority Key Identifier: keyid:25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:ca:fb:3f:b9:aa:73:77:b5:b0:70:b3:69:14:ac:43:c0:7b: da:2c:d7:b1:b6:dc:f4:11:57:b8:92:37:57:93:17:44:0a:82: 53:0a:84:04:f0:18:10:5a:31:ef:37:fa:1f:91:d3:a1:fa:65: d7:2c:ba:f2:9a:c8:09:f4:2b:f8:f8:f3:e2:3f:ca:02:af:81: 2f:3c:d9:31:2b:66:ab:25:0b:50:82:92:7a:64:e8:58:3f:79: a6:bc:71:af:fa:0b:bc:1b:f7:a6:42:b8:96:b1:b2:f1:7f:6e: 84:93:fc:d7:c0:c6:02:f3:9e:a5:67:49:9c:f4:fc:13:70:93: 1c:a9:5f:7b:74:1f:07:a3:ee:ba:76:21:e2:03:74:7a:1e:2e: ae:6b:ca:f7:3b:cd:8c:0f:9a:5c:de:dd:34:89:2e:45:a4:0d: e6:41:d1:f2:dd:02:60:13:18:da:a3:77:23:cb:e7:60:e8:9c: 02:bb:8c:42:f5:da:4d:50:0d:03:90:5d:89:a2:73:d4:d9:3d: d8:d1:04:ab:9e:89:b3:5e:ea:23:68:80:74:d5:76:76:f1:5f: d2:51:5a:81:bd:7d:5e:54:41:36:5e:5d:43:db:43:12:44:5d: ba:5c:91:3c:ff:d2:ca:0e:77:f8:b7:fd:16:8b:09:cc:c3:65: 08:46:b3:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLT8I3CCQUUDOwODK25tIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzQ0MWZlODVkMzQzNWM3MWExODk0ZWVkMGM3NDQxNDc2 NDRhMzkwHhcNMjUxMjA2MDEwMTA1WhcNMjUxMjA3MDEwMTA1WjAzMTEwLwYDVQQD Eyg3YjFhOWNmOWI5ODE4YjFhZmU4MDRlZjUzZTc3NjczZjVhMjk4ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJSbNmxIPeziyh3NDvQOJXwOL8I+ wbPpQtAYKQpO+kKsHvTTPCR6F0aUmePwpU5oqOBxNIfdbSaiQOZTGUfF/NFtFR7S uFUyXI3BLPwmw8YoQ8SgqGIwIGZ9qgyHZhYQp6ytD7/wZsp9Jdb0PN6jQPsoOavF RikFp/RFDVujMhAMT9fRGqQsgotPndDbJggzXA6K9wWfABkhDAHMBjTTd2JOkaSc S9Uf0EFy7Dy2KHJMNzj3EGg0d+W3uOnXbbblINJKvrfPrtSezeOM3tIvhL4ptaFE jnrYxeVIYNmnI9l3MF4BXFWO945ElAWCwKJdZc8vaPU3M18AXGV+vyIl/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsanPm5gYsa/oBO9T53Zz9aKY8qMB8GA1UdIwQY MBaAFCU0Qf6F00NccaGJTu0MdEFHZEo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yOThlYTItM2FmMS00OWY1LTgxNGUt NGVmMzI4NjFjOTE1LzEvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yOThlYTItM2FmMS00OWY1LTgxNGUtNGVmMzI4NjFjOTE1 LzEvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusr7P7mq c3e1sHCzaRSsQ8B72izXsbbc9BFXuJI3V5MXRAqCUwqEBPAYEFox7zf6H5HTofpl 1yy68prICfQr+Pjz4j/KAq+BLzzZMStmqyULUIKSemToWD95prxxr/oLvBv3pkK4 lrGy8X9uhJP818DGAvOepWdJnPT8E3CTHKlfe3QfB6PuunYh4gN0eh4urmvK9zvN jA+aXN7dNIkuRaQN5kHR8t0CYBMY2qN3I8vnYOicAruMQvXaTVANA5BdiaJz1Nk9 2NEEq56Js17qI2iAdNV2dvFf0lFagb19XlRBNl5dQ9tDEkRdulyRPP/Syg53+Lf9 FosJzMNlCEaz0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:59 2025 by rpki-client