This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft File: JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json) Hash identifier: BLCl4X3YNRsXYnYDOITQkvGRY7q79/iw7Zn68V6NSc4= Subject key identifier: 2B:B0:B1:08:F1:82:73:5E:30:29:61:70:E4:29:4E:72:DB:73:AB:1C Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Certificate serial: 019AF2097E621A5A18745066C559AA150674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft Manifest number: 04CD Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 3fYim0ijqP_BPvrPAf718jkZRmQ.roa (hash: V0lFAiOFRTLCuEx4SmU/vGh5hARSPW9ZgXZlfAsOVf8=) 2: 5_wrTSOzkEFkkNCOm-aPJQ6g-ks.roa (hash: MnzABlRB9zAfXgr3KOIwgG+mPu7rINrzCKmSJs1qoHs=) 3: 8irZy2V_SHs0ikDlT3HoUGHPpBc.roa (hash: ktGCRrCCmdPPWWR6aei4/ftpTdWVZoIYkk/wJpTtUbs=) 4: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: eTt9xcvIJ81+oPh61BbNsUlv60N9sJkJHFLY7JyNB50=) 5: LVAav_DbE0Bn_vYesALzQOtzKjY.roa (hash: 4RX3D3BO7OZGFhz2Gjt6JnBHkmsWj0HFcGJycXe3uBc=) 6: T_3CW91l4Ozg0UI-EMyAPQNoU_g.roa (hash: SMOplo2gA8wZUBwfetQvreWq71DhKQvNI+FZVh2vTrU=) 7: V0hiBKAD_2Rx16fFCpXLWp2vS2o.roa (hash: 257o80B1eNua34Ds30lc/JlpuCcz9SXDjJhL/EtWRiA=) 8: _M_h1-9zAN0bMB1vg7c8ROF5VAs.roa (hash: 8R7gKy3wzWC7YJoDHki/Obg/Smy+MMmINl0mUe/Kcmo=) 9: qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa (hash: uW0LUh4aX/A4RWhfxffVlViL65qqd1EWr8OCT6eFcKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7e:62:1a:5a:18:74:50:66:c5:59:aa:15:06:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=2bb0b108f182735e30296170e4294e72db73ab1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:f6:2e:08:a2:f9:3f:0a:c0:94:4f:f2:f3: 11:90:9d:7c:8d:14:3a:03:cf:83:d5:2c:5d:1e:0a: e3:2b:29:e6:df:5d:44:8e:7a:6d:d9:2e:f2:de:89: 81:d6:15:a8:a6:06:ea:8c:fd:53:52:07:9a:c7:a6: e2:45:f6:fe:48:21:f1:6a:7f:82:ab:67:8f:41:26: b6:f4:2c:d6:24:aa:8a:0c:6e:96:db:90:6c:2c:4d: c2:ac:98:a3:92:cb:e3:a1:ea:eb:1e:2f:81:11:e1: 81:55:ac:79:46:67:ba:8a:2b:f3:50:b0:09:7f:ef: 87:d7:f6:f1:a9:1d:f1:3c:92:24:b1:7b:83:3d:f7: b0:06:f0:36:05:50:25:be:5e:ba:2b:cb:17:15:5b: d2:9b:a1:f2:92:cf:fc:06:1b:7f:73:7a:b2:8c:26: dc:67:6d:b1:42:aa:4e:32:1c:4b:2c:20:23:4e:3d: cd:89:54:aa:50:e8:b6:d7:aa:1c:80:f0:6a:2a:48: a9:59:f9:45:3f:dc:b8:b3:df:28:d8:a9:7e:5c:6e: 4b:49:4d:e0:c3:b6:40:1d:e0:2c:d1:aa:8f:09:c6: 8e:75:77:da:4c:ae:bf:de:d4:b6:5c:fa:2b:a1:2f: cd:92:c9:26:bf:98:92:29:62:f0:81:1c:15:f2:19: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B0:B1:08:F1:82:73:5E:30:29:61:70:E4:29:4E:72:DB:73:AB:1C X509v3 Authority Key Identifier: keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1b:bd:ed:de:c3:8d:45:2a:17:42:2c:87:51:80:7e:df:0b: f5:05:91:35:7b:5f:d1:d5:c9:9a:e7:cb:11:ae:1d:fc:5c:9c: 0d:0c:c3:57:49:a2:a8:0e:fb:b4:57:9e:9b:9f:10:f7:70:7a: d4:9b:4b:1c:95:e0:17:6d:df:0c:a4:6e:f4:39:d6:fe:f6:c5: 43:9b:7d:2a:2f:a9:33:69:c0:d5:74:4e:b8:09:c1:57:8d:ea: a1:30:8d:0f:c5:50:a0:f6:2a:64:2b:65:2d:54:1e:85:64:bf: d0:90:fd:0a:f1:c3:cd:d7:93:57:b1:0c:99:28:ed:a0:04:71: d7:3d:dc:38:6d:5f:2c:be:20:b9:b2:fd:73:8d:dc:58:5c:50: 15:80:b9:9d:20:9b:19:c3:28:2e:2d:57:d5:ed:70:30:f1:8a: 41:bc:19:e6:2f:31:93:34:2d:a5:b8:3e:3f:d6:5a:09:a3:8f: 55:26:73:af:61:48:f3:d4:70:63:2b:6e:f3:f4:23:92:40:cf: df:50:70:b5:29:68:1a:59:07:7c:55:96:43:35:d0:00:08:fc: d7:8b:82:7d:80:14:4d:6a:b8:6a:26:01:62:43:1e:f0:33:55: 4e:65:11:84:98:4f:4b:ac:7d:29:11:60:80:dd:93:32:8b:c8: e7:d1:03:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX5iGloYdFBmxVmqFQZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3 YWI3N2MwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EygyYmIwYjEwOGYxODI3MzVlMzAyOTYxNzBlNDI5NGU3MmRiNzNhYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmb2Lgii+T8KwJRP8vMRkJ18jRQ6 A8+D1SxdHgrjKynm311Ejnpt2S7y3omB1hWopgbqjP1TUgeax6biRfb+SCHxan+C q2ePQSa29CzWJKqKDG6W25BsLE3CrJijksvjoerrHi+BEeGBVax5Rme6iivzULAJ f++H1/bxqR3xPJIksXuDPfewBvA2BVAlvl66K8sXFVvSm6Hyks/8Bht/c3qyjCbc Z22xQqpOMhxLLCAjTj3NiVSqUOi216ocgPBqKkipWflFP9y4s98o2Kl+XG5LSU3g w7ZAHeAs0aqPCcaOdXfaTK6/3tS2XPoroS/Nkskmv5iSKWLwgRwV8hnTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuwsQjxgnNeMClhcOQpTnLbc6scMB8GA1UdIwQY MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt NmExOGRjODgxNmRiLzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxu97d7D jUUqF0Ish1GAft8L9QWRNXtf0dXJmufLEa4d/FycDQzDV0miqA77tFeem58Q93B6 1JtLHJXgF23fDKRu9DnW/vbFQ5t9Ki+pM2nA1XROuAnBV43qoTCND8VQoPYqZCtl LVQehWS/0JD9CvHDzdeTV7EMmSjtoARx1z3cOG1fLL4gubL9c43cWFxQFYC5nSCb GcMoLi1X1e1wMPGKQbwZ5i8xkzQtpbg+P9ZaCaOPVSZzr2FI89RwYytu8/QjkkDP 31BwtSloGlkHfFWWQzXQAAj814uCfYAUTWq4aiYBYkMe8DNVTmURhJhPS6x9KRFg gN2TMovI59EDBw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:08 2025 by rpki-client