This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json) Hash identifier: r8F3k0BjWuJ3RyscXKVzhJvqWnqubDqVWEdITcbcjW0= Subject key identifier: 84:32:30:BE:3F:F5:D5:E5:09:3F:C9:6A:42:8C:C6:25:71:40:5C:57 Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67 Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67 Certificate serial: 019B281BC64107A967CF4C404571AD9C52DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft Manifest number: 0911 Signing time: Tue 16 Dec 2025 17:01:07 +0000 Manifest this update: Tue 16 Dec 2025 17:01:07 +0000 Manifest next update: Wed 17 Dec 2025 17:01:07 +0000 Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: edvjZpcA/jVuuZT/LVWAJXyxbg4TZm35DxH30dJzh9Q=) 2: yQOovkVgBPdQUYWIP8s5JEl_do0.roa (hash: teGG3Giw/XqatuTMOZRs13KC4GUJoaqGETNz76LPhGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:c6:41:07:a9:67:cf:4c:40:45:71:ad:9c:52:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67 Validity Not Before: Dec 16 17:01:07 2025 GMT Not After : Dec 17 17:01:07 2025 GMT Subject: CN=843230be3ff5d5e5093fc96a428cc62571405c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:9a:6a:4a:f4:6e:27:46:a3:0e:7e:7d:99: ca:b4:74:b4:02:95:2a:bf:07:28:ad:5d:39:6d:b1: 3c:b6:92:8b:62:cb:57:83:e5:69:02:17:8b:da:af: e5:ff:9b:df:1b:94:07:28:a7:06:0d:09:3d:45:aa: 4c:34:13:2b:5a:ef:1a:40:73:2f:23:65:24:e0:29: 4f:55:a5:cf:87:88:28:a5:e2:d2:47:4a:1d:0f:28: 44:3d:2a:e4:ee:02:17:bb:5a:46:14:c5:3a:34:a6: 07:95:a2:31:9c:99:22:00:34:e9:94:8d:e7:5a:29: 79:40:5d:c9:24:a6:cb:ea:6b:c1:e9:30:74:7d:39: 19:48:71:ac:0c:07:f5:be:cc:ea:73:a5:8c:f2:39: 00:96:df:e7:2c:c5:3f:77:37:a6:e5:4a:f1:c8:3b: c8:7b:5a:26:f5:22:d4:1e:75:c6:67:5d:c5:3d:17: 3a:14:c3:d2:c8:a2:71:3f:bf:f0:28:10:e4:f1:01: 61:ad:50:ab:25:e9:3d:d3:68:4e:6e:7c:1e:8b:71: 1f:6a:10:ce:6e:b1:18:ae:80:f7:ff:12:df:b7:4a: 93:ac:45:23:90:33:52:4b:4b:80:eb:4e:5f:07:3a: fa:a4:32:82:fe:3c:71:50:3a:0a:a2:89:a9:c1:71: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:30:BE:3F:F5:D5:E5:09:3F:C9:6A:42:8C:C6:25:71:40:5C:57 X509v3 Authority Key Identifier: keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:9e:65:28:7d:06:5e:b5:8b:54:e8:d3:69:8e:2f:5b:7e:7b: 41:de:62:f4:83:99:26:98:c4:6e:3c:d9:8a:b7:86:59:da:3e: e4:a4:97:25:c9:2f:7c:e6:95:7f:cf:60:82:20:d2:a0:3e:7a: 95:9c:b2:c5:74:ae:a2:0e:78:73:ad:c3:05:12:92:68:3f:a3: 28:a1:a9:41:6c:a4:76:40:e7:78:da:c7:d8:fb:25:7f:57:8c: 85:35:ba:f2:da:a4:e5:26:07:30:ae:d8:9a:8e:b6:13:7b:b3: 2c:82:27:2d:33:91:9c:0a:6e:ce:6d:f5:98:42:08:57:6a:9e: 7a:ac:10:63:eb:72:12:a0:93:d6:e4:9f:0f:27:3d:b8:a9:ee: 26:f3:ed:55:0f:46:18:57:06:3a:b2:e3:e4:27:24:f2:74:cd: 5c:c8:e7:e0:67:a3:1c:92:6c:5c:79:dd:f5:ea:54:94:db:ca: 89:00:3c:a8:33:38:07:66:a7:b3:52:83:d1:bb:9f:7a:6c:02: 37:47:ed:d8:78:92:65:2e:19:f2:69:a4:a5:af:3f:e6:6c:87: 97:d1:13:88:f4:82:fd:74:15:d6:5f:9c:f0:c4:49:b8:18:18: cb:23:77:a9:37:ea:1a:b4:e7:47:df:88:2e:e3:08:45:7b:1f: e5:97:9e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG8ZBB6lnz0xARXGtnFLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NmY5YmU3ODNkNzNkOTVhYjhhYTU0NjE5ZTYwZjkwMTFj MDRkNjcwHhcNMjUxMjE2MTcwMTA3WhcNMjUxMjE3MTcwMTA3WjAzMTEwLwYDVQQD Eyg4NDMyMzBiZTNmZjVkNWU1MDkzZmM5NmE0MjhjYzYyNTcxNDA1YzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11Caakr0bidGow5+fZnKtHS0ApUq vwcorV05bbE8tpKLYstXg+VpAheL2q/l/5vfG5QHKKcGDQk9RapMNBMrWu8aQHMv I2Uk4ClPVaXPh4gopeLSR0odDyhEPSrk7gIXu1pGFMU6NKYHlaIxnJkiADTplI3n Wil5QF3JJKbL6mvB6TB0fTkZSHGsDAf1vszqc6WM8jkAlt/nLMU/dzem5UrxyDvI e1om9SLUHnXGZ13FPRc6FMPSyKJxP7/wKBDk8QFhrVCrJek902hObnwei3EfahDO brEYroD3/xLft0qTrEUjkDNSS0uA605fBzr6pDKC/jxxUDoKoompwXG0RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQyML4/9dXlCT/JakKMxiVxQFxXMB8GA1UdIwQY MBaAFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWIt Y2JiZDAxZjJiOTFjLzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWItY2JiZDAxZjJiOTFj LzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJ5lKH0G XrWLVOjTaY4vW357Qd5i9IOZJpjEbjzZireGWdo+5KSXJckvfOaVf89ggiDSoD56 lZyyxXSuog54c63DBRKSaD+jKKGpQWykdkDneNrH2Pslf1eMhTW68tqk5SYHMK7Y mo62E3uzLIInLTORnApuzm31mEIIV2qeeqwQY+tyEqCT1uSfDyc9uKnuJvPtVQ9G GFcGOrLj5Cck8nTNXMjn4GejHJJsXHnd9epUlNvKiQA8qDM4B2ans1KD0bufemwC N0ft2HiSZS4Z8mmkpa8/5myHl9ETiPSC/XQV1l+c8MRJuBgYyyN3qTfqGrTnR9+I LuMIRXsf5ZeeaA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:12:42 2025 by rpki-client