This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json) Hash identifier: CycbxhinCqcIuzU+Nfy+kbx5r1WvaDB53mshbPkavdQ= Subject key identifier: 8F:EE:D1:8D:EC:50:05:F0:F4:5E:13:EE:BF:04:8B:A0:91:74:13:08 Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67 Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67 Certificate serial: 019B262DB126EA8D6DE8057224B2A4E6E28B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft Manifest number: 0910 Signing time: Tue 16 Dec 2025 08:01:27 +0000 Manifest this update: Tue 16 Dec 2025 08:01:27 +0000 Manifest next update: Wed 17 Dec 2025 08:01:27 +0000 Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: xsdoY9Fbk2cwECU3vg94wifvRY0jR0cYkyhIyHlNXjk=) 2: yQOovkVgBPdQUYWIP8s5JEl_do0.roa (hash: teGG3Giw/XqatuTMOZRs13KC4GUJoaqGETNz76LPhGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:b1:26:ea:8d:6d:e8:05:72:24:b2:a4:e6:e2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67 Validity Not Before: Dec 16 08:01:27 2025 GMT Not After : Dec 17 08:01:27 2025 GMT Subject: CN=8feed18dec5005f0f45e13eebf048ba091741308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:51:e7:2b:59:6e:05:ca:8e:4f:05:b8:ce:47: af:49:74:b5:84:76:ef:e2:5c:bd:d4:3f:29:c7:1c: 03:5b:62:8a:7e:fb:ab:e6:68:ec:06:9e:b8:8e:78: 36:bc:3d:85:35:c1:62:a6:1c:53:66:e2:8c:66:1d: 71:eb:a8:06:5c:ee:14:a2:90:c0:16:4b:db:60:0d: ab:25:ee:23:52:89:b6:db:7c:5f:fe:0a:4a:c2:09: ba:a6:ce:02:70:ab:01:ab:53:2d:6c:16:e1:ed:0a: c7:f6:d1:08:18:e1:cc:aa:ce:3b:43:f6:bf:cc:ef: 40:28:c9:f2:a1:eb:01:fb:ac:a8:a3:76:fb:58:85: 13:1f:56:4e:c7:fa:f6:12:5c:88:63:7c:9a:a8:d6: b1:2f:60:21:30:2d:33:8e:60:2c:79:9a:46:33:3b: af:75:46:93:94:72:49:16:b6:0a:11:6c:d5:07:a0: 6a:94:29:a5:aa:db:41:b7:74:a6:56:7f:7e:4c:a8: d5:f3:85:dc:a2:a2:d6:46:99:4b:ed:89:96:86:52: 42:7c:4d:50:66:dd:af:ed:b5:d5:f2:42:ee:6b:2e: d8:b2:56:a8:e7:21:04:e8:6d:c0:c0:72:40:b9:35: 56:c0:70:1c:0d:ba:30:73:f5:4f:2e:02:d4:5e:7a: a9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EE:D1:8D:EC:50:05:F0:F4:5E:13:EE:BF:04:8B:A0:91:74:13:08 X509v3 Authority Key Identifier: keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:bb:47:b5:38:ac:cf:d2:e7:a5:b9:54:ba:76:94:57:5d:8a: fb:c1:f1:a3:d1:48:4f:40:00:b4:68:7c:fe:72:aa:df:20:d4: 2e:ef:6f:fa:b5:62:08:ec:e7:bc:50:5a:46:14:0e:42:87:2b: 36:64:47:e3:e6:a1:92:37:36:25:6b:13:41:a4:7d:cc:fe:98: 9e:98:e0:95:42:5a:45:dd:f4:56:dd:62:2b:0f:5b:c8:bc:6f: 91:6e:42:46:c3:cb:fa:54:a6:23:a9:1d:f5:99:90:91:ea:c8: 70:01:93:72:6d:3c:b4:60:e2:7c:33:fe:29:09:56:64:d4:15: 9d:bc:ed:95:ec:68:71:c0:20:82:a2:a9:e1:74:c8:70:43:2b: 97:43:4e:6a:5b:c0:36:78:2c:7a:76:70:6a:4a:79:20:ec:3e: 62:1e:04:92:ef:3e:2f:7b:5f:73:4a:24:90:28:49:0e:11:7d: 5d:ee:31:a0:14:fa:33:42:e9:e5:1f:27:a3:25:c2:96:9f:ae: bc:f2:75:1a:14:13:45:e8:0b:70:e6:ec:39:ab:75:e6:55:d5: 0f:94:e2:78:d6:9c:35:68:50:ca:0f:c5:95:4d:06:e9:09:8c: e1:d3:2b:76:21:94:48:f9:ae:7a:ac:3d:a9:67:e2:9c:8c:81: 0a:46:6e:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLbEm6o1t6AVyJLKk5uKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NmY5YmU3ODNkNzNkOTVhYjhhYTU0NjE5ZTYwZjkwMTFj MDRkNjcwHhcNMjUxMjE2MDgwMTI3WhcNMjUxMjE3MDgwMTI3WjAzMTEwLwYDVQQD Eyg4ZmVlZDE4ZGVjNTAwNWYwZjQ1ZTEzZWViZjA0OGJhMDkxNzQxMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1HnK1luBcqOTwW4zkevSXS1hHbv 4ly91D8pxxwDW2KKfvur5mjsBp64jng2vD2FNcFiphxTZuKMZh1x66gGXO4UopDA FkvbYA2rJe4jUom223xf/gpKwgm6ps4CcKsBq1MtbBbh7QrH9tEIGOHMqs47Q/a/ zO9AKMnyoesB+6yoo3b7WIUTH1ZOx/r2ElyIY3yaqNaxL2AhMC0zjmAseZpGMzuv dUaTlHJJFrYKEWzVB6BqlCmlqttBt3SmVn9+TKjV84XcoqLWRplL7YmWhlJCfE1Q Zt2v7bXV8kLuay7Yslao5yEE6G3AwHJAuTVWwHAcDbowc/VPLgLUXnqpsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/u0Y3sUAXw9F4T7r8Ei6CRdBMIMB8GA1UdIwQY MBaAFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWIt Y2JiZDAxZjJiOTFjLzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWItY2JiZDAxZjJiOTFj LzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbtHtTis z9LnpblUunaUV12K+8Hxo9FIT0AAtGh8/nKq3yDULu9v+rViCOznvFBaRhQOQocr NmRH4+ahkjc2JWsTQaR9zP6YnpjglUJaRd30Vt1iKw9byLxvkW5CRsPL+lSmI6kd 9ZmQkerIcAGTcm08tGDifDP+KQlWZNQVnbztlexoccAggqKp4XTIcEMrl0NOalvA NngsenZwakp5IOw+Yh4Eku8+L3tfc0okkChJDhF9Xe4xoBT6M0Lp5R8noyXClp+u vPJ1GhQTRegLcObsOat15lXVD5TieNacNWhQyg/FlU0G6QmM4dMrdiGUSPmueqw9 qWfinIyBCkZuGQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:28 2025 by rpki-client