This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json) Hash identifier: qLhpGDHpcMJGuE1ZndnAQMIj7bnjh2F2zba9/M+ynzo= Subject key identifier: 52:AC:46:E6:B2:9D:B5:DB:F8:55:BF:D0:C0:DB:0A:0A:DC:82:E1:E1 Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0 Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0 Certificate serial: 019AF0BED92CCACBCD102DF9131B6FF278BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: x+t2BCsPG9Ebxuzy7gKQm+01opZO095w2yB5jOlk+aA=) 2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:d9:2c:ca:cb:cd:10:2d:f9:13:1b:6f:f2:78:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0 Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=52ac46e6b29db5dbf855bfd0c0db0a0adc82e1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:3b:74:9e:cd:d4:77:45:6f:9b:85:92:37: a7:53:84:9f:04:f2:24:73:53:6c:c3:45:76:ae:8a: fe:7d:d2:e1:65:f0:d7:3d:70:66:5c:51:b5:fd:99: ac:ae:a0:80:c0:d3:0d:c4:b2:f7:f8:af:0c:10:fb: ab:e6:ee:d2:88:e0:76:64:99:3f:ef:6b:ab:35:27: fc:aa:fa:a2:ba:a5:fb:a4:a3:08:d2:4f:3d:9e:59: c6:fb:cc:48:f4:3e:20:58:67:31:8d:e9:61:24:e3: 8a:50:ae:0a:2f:f8:7c:34:79:69:5e:85:b9:8c:8e: 71:1f:7b:70:ee:26:c0:7b:c7:98:43:a1:53:1e:f2: 19:f3:d1:e2:82:d3:98:73:70:1a:9e:c8:c0:c0:05: 37:b3:43:f9:a4:28:d5:91:1a:8f:a0:c9:a1:bd:57: 28:19:e0:15:75:e4:f2:c5:48:a1:0a:0c:f2:4a:c7: 46:83:7a:24:a5:c7:46:c2:c8:19:55:4b:db:3b:d5: 64:36:53:8e:d1:bc:c5:85:91:3b:e2:17:5a:a2:a7: 66:8e:c6:61:68:38:ba:9c:2a:b6:48:cb:43:9e:3c: 3d:45:56:34:7a:3f:08:82:3a:84:e5:9e:f1:32:ea: cb:d6:67:19:a5:a6:68:23:94:fa:a9:91:07:7d:e1: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AC:46:E6:B2:9D:B5:DB:F8:55:BF:D0:C0:DB:0A:0A:DC:82:E1:E1 X509v3 Authority Key Identifier: keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d6:8f:a5:72:d4:fc:85:ab:22:bd:c9:6a:12:0f:c1:79:36: e9:e2:bb:a8:b9:cd:d8:bf:07:1e:5b:a2:1e:49:85:33:b4:59: 77:9d:96:7f:bc:2a:39:52:9b:9f:96:fe:5c:00:39:b7:4a:43: 31:1d:72:5f:52:1e:2c:ff:2c:79:d5:8a:bb:87:52:61:25:1d: 21:48:e2:8c:08:b9:db:68:82:e0:00:17:45:18:25:19:af:e8: 24:37:3c:a5:ee:94:c1:8b:a0:41:e1:c9:a3:b7:f9:0d:1f:83: bc:1a:87:fd:63:11:82:6e:17:d4:54:c2:b8:dc:f2:d3:88:69: 6b:3b:87:32:03:d5:93:c8:c7:74:e6:8a:04:c3:f2:1f:7b:dd: 63:7a:e0:ee:12:76:4e:3e:6f:52:4c:93:37:f2:d4:4a:5b:0d: b4:34:ed:18:83:69:55:9d:a1:f5:bd:54:70:1e:26:67:80:c1: 8f:c8:24:6e:fc:e5:5b:ae:ca:3f:01:5c:ee:18:38:ba:43:53: dd:e8:29:74:11:11:62:ba:f9:07:3a:ec:06:98:c1:7a:6d:0a: 87:f5:63:57:a9:83:86:14:05:22:24:42:fa:64:e7:94:86:4d: 99:fd:00:38:cf:5b:a5:3d:35:31:6a:dc:90:a3:d2:e0:78:ea: 72:3e:06:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtksysvNEC35Extv8ni/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MjFmZmI2OGVhYjk3ZTI0YTkwNjI2ZDkwNDk4YmU3ZWQ3 MDY2ZjAwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD Eyg1MmFjNDZlNmIyOWRiNWRiZjg1NWJmZDBjMGRiMGEwYWRjODJlMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfU7dJ7N1HdFb5uFkjenU4SfBPIk c1Nsw0V2ror+fdLhZfDXPXBmXFG1/ZmsrqCAwNMNxLL3+K8MEPur5u7SiOB2ZJk/ 72urNSf8qvqiuqX7pKMI0k89nlnG+8xI9D4gWGcxjelhJOOKUK4KL/h8NHlpXoW5 jI5xH3tw7ibAe8eYQ6FTHvIZ89HigtOYc3AansjAwAU3s0P5pCjVkRqPoMmhvVco GeAVdeTyxUihCgzySsdGg3okpcdGwsgZVUvbO9VkNlOO0bzFhZE74hdaoqdmjsZh aDi6nCq2SMtDnjw9RVY0ej8IgjqE5Z7xMurL1mcZpaZoI5T6qZEHfeEVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKsRuaynbXb+FW/0MDbCgrcguHhMB8GA1UdIwQY MBaAFCQh/7aOq5fiSpBibZBJi+ftcGbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZTAyMGItZTBkNy00NTFkLWJiMDUt ZDkwOGZhZjM0ZWY4LzEvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hZTAyMGItZTBkNy00NTFkLWJiMDUtZDkwOGZhZjM0ZWY4 LzEvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftaPpXLU /IWrIr3JahIPwXk26eK7qLnN2L8HHluiHkmFM7RZd52Wf7wqOVKbn5b+XAA5t0pD MR1yX1IeLP8sedWKu4dSYSUdIUjijAi522iC4AAXRRglGa/oJDc8pe6UwYugQeHJ o7f5DR+DvBqH/WMRgm4X1FTCuNzy04hpazuHMgPVk8jHdOaKBMPyH3vdY3rg7hJ2 Tj5vUkyTN/LUSlsNtDTtGINpVZ2h9b1UcB4mZ4DBj8gkbvzlW67KPwFc7hg4ukNT 3egpdBERYrr5BzrsBpjBem0Kh/VjV6mDhhQFIiRC+mTnlIZNmf0AOM9bpT01MWrc kKPS4Hjqcj4GGg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:00 2025 by rpki-client