This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json) Hash identifier: HmztggXVNb2fy0SZKSmAC445JdcNLzgIrzqQivLDtqw= Subject key identifier: 99:00:C3:EE:09:05:83:18:E7:9C:C9:FA:C4:1C:B0:EA:5C:FB:FE:C7 Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e Certificate serial: 019AF19AB467B4F71005CDAC9E44FA794D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: wjzAGCfMX4xNW18+4JPY9PHd+AplW4LFZPPMvY3Euf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b4:67:b4:f7:10:05:cd:ac:9e:44:fa:79:4d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=9900c3ee09058318e79cc9fac41cb0ea5cfbfec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:da:ad:02:da:06:15:7a:ef:80:28:18:88: ae:b6:99:82:53:87:d9:1b:ae:17:57:49:a7:be:fe: 77:a3:e7:4a:63:8c:d7:33:e1:2d:75:01:97:74:10: 94:0b:17:77:a2:32:03:96:56:7c:f8:d2:da:94:99: 38:11:df:82:25:6e:77:0e:f0:af:69:97:fd:11:14: f9:60:73:cb:e4:ca:35:b4:c3:76:39:08:f5:e8:de: a3:35:c1:2b:c5:77:0b:b6:f1:68:e8:13:69:13:e9: e6:3f:e5:fb:3f:96:a6:48:85:47:32:d7:29:87:13: 2f:05:ee:7c:71:ca:6c:a9:f4:a9:6f:1e:39:93:3d: e5:26:64:59:39:77:5e:b2:47:2b:9e:c1:1f:56:d5: b0:8a:d7:b4:e3:8a:2d:cc:c0:7b:62:24:a3:9b:4d: 7c:38:e2:31:8e:93:15:ab:f4:dd:f6:22:b8:2b:54: c2:c0:63:5d:c8:fb:58:09:56:12:99:d0:53:1c:3d: 94:4e:c3:3f:48:6b:04:e0:05:19:b2:18:3e:d8:82: de:26:3a:05:89:55:69:7a:ec:d0:68:d7:0a:6c:79: ca:48:6a:f4:0b:3a:24:bc:ff:4b:91:40:37:ec:dc: f3:70:5e:29:95:9e:fc:de:cc:b5:62:5c:c2:d6:01: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:00:C3:EE:09:05:83:18:E7:9C:C9:FA:C4:1C:B0:EA:5C:FB:FE:C7 X509v3 Authority Key Identifier: keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:9e:4d:c6:9d:78:a4:dd:61:15:ba:24:c9:24:e3:d4:b8: fd:92:03:cb:ad:f8:c1:0a:e8:d4:9b:61:d5:bc:b8:49:b2:0a: c8:87:44:07:38:b3:e4:ad:6a:e9:44:be:f7:8d:d0:71:00:40: 5d:76:ff:0b:b7:75:3f:0c:b8:96:5b:7e:b4:93:07:93:16:50: 1e:aa:65:5e:ad:a0:fa:b0:79:2f:b1:88:9c:43:33:d3:37:e6: f1:2b:0a:ea:5e:8e:0d:ce:24:59:bb:2e:64:4f:c6:15:e3:9a: 29:1a:10:9e:c0:11:83:c7:0d:ff:51:bb:0b:f6:8d:b3:82:a1: 1a:50:4d:ad:00:42:53:b1:8a:79:b1:9a:59:46:36:3b:75:12: 5f:f8:99:e9:a1:ef:11:c0:d1:71:62:7b:9c:4b:f9:e4:82:ef: b2:cb:72:a6:07:6e:7a:98:4d:e4:74:70:f5:67:67:f4:83:e2: 60:b9:9d:76:e9:2a:62:02:a4:c1:13:3b:f1:a3:a5:5b:c3:a1: 1e:3b:48:c3:f5:bd:29:9d:f2:e4:f1:be:d7:e0:a9:72:37:d0: 0e:cf:0d:b5:71:60:77:c3:0e:67:47:26:8a:c7:8a:e7:31:98: 0b:9c:95:d0:ed:a6:1f:6a:26:70:ed:fd:e3:ac:91:59:a1:81: b3:6f:89:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrRntPcQBc2snkT6eU1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZTlhMWYxMmE4NGQ1MzI1MjYzN2ZmODVkNmViOGViMTYz NjM5M2UwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD Eyg5OTAwYzNlZTA5MDU4MzE4ZTc5Y2M5ZmFjNDFjYjBlYTVjZmJmZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlzarQLaBhV674AoGIiutpmCU4fZ G64XV0mnvv53o+dKY4zXM+EtdQGXdBCUCxd3ojIDllZ8+NLalJk4Ed+CJW53DvCv aZf9ERT5YHPL5Mo1tMN2OQj16N6jNcErxXcLtvFo6BNpE+nmP+X7P5amSIVHMtcp hxMvBe58ccpsqfSpbx45kz3lJmRZOXdeskcrnsEfVtWwite044otzMB7YiSjm018 OOIxjpMVq/Td9iK4K1TCwGNdyPtYCVYSmdBTHD2UTsM/SGsE4AUZshg+2ILeJjoF iVVpeuzQaNcKbHnKSGr0CzokvP9LkUA37NzzcF4plZ783sy1YlzC1gFGjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkAw+4JBYMY55zJ+sQcsOpc+/7HMB8GA1UdIwQY MBaAFCTpofEqhNUyUmN/+F1uuOsWNjk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDk1YjUtZmJmYS00MTE4LTg2MmYt YzJjOTE2ZTQzOTI1LzEvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iNDk1YjUtZmJmYS00MTE4LTg2MmYtYzJjOTE2ZTQzOTI1 LzEvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT+eTcad eKTdYRW6JMkk49S4/ZIDy634wQro1Jth1by4SbIKyIdEBziz5K1q6US+943QcQBA XXb/C7d1Pwy4llt+tJMHkxZQHqplXq2g+rB5L7GInEMz0zfm8SsK6l6ODc4kWbsu ZE/GFeOaKRoQnsARg8cN/1G7C/aNs4KhGlBNrQBCU7GKebGaWUY2O3USX/iZ6aHv EcDRcWJ7nEv55ILvsstypgduephN5HRw9Wdn9IPiYLmddukqYgKkwRM78aOlW8Oh HjtIw/W9KZ3y5PG+1+CpcjfQDs8NtXFgd8MOZ0cmiseK5zGYC5yV0O2mH2omcO39 46yRWaGBs2+JIg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:02 2025 by rpki-client