This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json) Hash identifier: sXtMEB21HzEIKBFZTZxk0xobIeIWEiBAjIr4O3EQTEI= Subject key identifier: 28:6F:2C:BC:ED:77:B9:3A:11:B9:4A:3F:BC:D0:F6:F4:3D:95:D8:80 Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c Certificate serial: 019AF1D23D0C82113505556AA0229039949E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: 0l8W0xRQZGtZ/jssxyklHp6n7H1xNbQEIr+r6+NcHgM=) 2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3d:0c:82:11:35:05:55:6a:a0:22:90:39:94:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=286f2cbced77b93a11b94a3fbcd0f6f43d95d880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:a0:c7:be:63:7d:fa:f9:a7:7f:e2:58:a3: 6d:ad:d9:a2:95:ce:05:09:de:11:15:e7:66:4e:03: 4b:06:65:49:9e:23:96:5f:24:cc:98:20:e8:e2:01: 88:a9:98:9e:ce:fa:f2:64:b7:ff:a4:4f:6f:19:21: 06:95:58:39:9e:88:f9:b8:a6:62:de:8e:17:73:e0: 0e:a4:b3:35:2c:fd:e8:1a:14:59:c5:64:7e:ac:84: b8:a3:9d:a0:a2:75:3a:41:be:f8:e4:56:7d:ea:1a: 5a:59:01:33:23:17:11:56:77:f2:6e:1b:cb:cd:a2: 63:c6:5c:d4:e2:14:64:c9:c3:ec:f2:a4:4a:3c:ff: 51:61:0a:53:14:b5:84:ae:89:6a:5f:4f:b4:a8:4e: a7:fc:97:13:aa:60:f6:d9:20:0d:f5:16:0e:b3:9a: 13:ca:99:a7:d6:1e:7d:8a:28:28:3a:db:79:a0:ad: 1b:48:28:5a:84:5e:02:02:aa:af:69:28:4a:8e:34: 12:99:db:27:24:35:d0:89:ab:67:a6:13:1d:1c:19: ac:2e:94:2e:75:76:8b:9b:ef:a8:77:8a:4a:80:3f: 38:58:13:3c:35:89:bb:c9:b1:b9:9d:34:1a:4a:83: 7e:0f:90:46:17:e1:1c:3e:3f:75:e3:9d:93:25:1c: 4a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6F:2C:BC:ED:77:B9:3A:11:B9:4A:3F:BC:D0:F6:F4:3D:95:D8:80 X509v3 Authority Key Identifier: keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:55:db:d6:62:68:13:21:47:5b:fa:10:73:6c:48:7b:1e:b5: fd:73:31:65:7f:67:4c:92:83:43:f9:e5:98:ac:4c:ca:ec:3b: 99:68:ca:f1:d0:46:58:96:f2:f5:66:d2:42:ad:05:a6:09:7d: d9:f4:b6:a2:36:d8:f6:9f:74:ef:70:84:c0:10:ed:ef:a8:c8: 23:b5:c0:d1:91:3d:3b:c9:1d:26:75:6f:62:e6:3a:d1:b6:97: be:52:12:16:43:30:4a:5c:ba:3e:8c:c0:94:82:0c:9a:d6:5a: 7c:c8:a4:15:f5:a4:ed:57:15:02:2f:64:ae:7c:82:1a:d2:64: 23:48:f1:2f:cd:a2:ff:a5:9f:9d:9c:a7:97:42:00:65:7f:a5: a3:13:36:4c:ba:e5:fa:f7:69:1f:81:9a:a1:e7:bd:95:18:6b: df:73:86:23:9d:bc:ce:b1:3f:c4:1e:a0:fb:47:7d:d0:88:b9: 12:17:e3:57:46:be:bf:d0:69:ce:76:39:25:25:34:40:17:ab: 15:83:7d:e1:2c:97:34:9c:86:a2:3d:a3:c5:21:b9:b4:71:98: 54:33:24:c0:ff:40:44:47:15:7b:ff:f8:ec:8c:60:0e:74:e7: f2:b6:a9:15:04:70:28:92:7b:00:7a:74:28:1d:d3:8a:c1:00: b6:03:2e:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j0MghE1BVVqoCKQOZSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzYxMjRiOWY3YWRhODliN2UyMjY0MWM4NTZkMzA1MzAz YzFmN2MwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EygyODZmMmNiY2VkNzdiOTNhMTFiOTRhM2ZiY2QwZjZmNDNkOTVkODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Ogx75jffr5p3/iWKNtrdmilc4F Cd4RFedmTgNLBmVJniOWXyTMmCDo4gGIqZiezvryZLf/pE9vGSEGlVg5noj5uKZi 3o4Xc+AOpLM1LP3oGhRZxWR+rIS4o52gonU6Qb745FZ96hpaWQEzIxcRVnfybhvL zaJjxlzU4hRkycPs8qRKPP9RYQpTFLWErolqX0+0qE6n/JcTqmD22SAN9RYOs5oT ypmn1h59iigoOtt5oK0bSChahF4CAqqvaShKjjQSmdsnJDXQiatnphMdHBmsLpQu dXaLm++od4pKgD84WBM8NYm7ybG5nTQaSoN+D5BGF+EcPj91452TJRxKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChvLLztd7k6EblKP7zQ9vQ9ldiAMB8GA1UdIwQY MBaAFCU2EkufetqJt+ImQchW0wUwPB98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kZWQ1ODMtYjY3Yi00NTgzLWEyNDAt Nzc0MmQyNjQ1MmVkLzEvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kZWQ1ODMtYjY3Yi00NTgzLWEyNDAtNzc0MmQyNjQ1MmVk LzEvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVXb1mJo EyFHW/oQc2xIex61/XMxZX9nTJKDQ/nlmKxMyuw7mWjK8dBGWJby9WbSQq0Fpgl9 2fS2ojbY9p9073CEwBDt76jII7XA0ZE9O8kdJnVvYuY60baXvlISFkMwSly6PozA lIIMmtZafMikFfWk7VcVAi9krnyCGtJkI0jxL82i/6WfnZynl0IAZX+loxM2TLrl +vdpH4Gaoee9lRhr33OGI528zrE/xB6g+0d90Ii5EhfjV0a+v9BpznY5JSU0QBer FYN94SyXNJyGoj2jxSG5tHGYVDMkwP9AREcVe//47IxgDnTn8rapFQRwKJJ7AHp0 KB3TisEAtgMuyg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:08 2025 by rpki-client