This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json) Hash identifier: FPYZH4TwEb3KABjJHAtnPeD7xAR5EcTVYZGs3dnGjmQ= Subject key identifier: AA:00:D7:06:84:3B:06:47:59:93:A8:2B:1F:C2:5F:57:96:19:33:6F Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Certificate serial: 019AF164012230EF31A51DD5AFF5CD849F03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft Manifest number: 13F6 Signing time: Sat 06 Dec 2025 02:00:54 +0000 Manifest this update: Sat 06 Dec 2025 02:00:54 +0000 Manifest next update: Sun 07 Dec 2025 02:00:54 +0000 Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: 2KyDYsr/0y3Y4T/Kegowqp0L6r7/CMbWidKY19yWo8U=) 2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:01:22:30:ef:31:a5:1d:d5:af:f5:cd:84:9f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Validity Not Before: Dec 6 02:00:54 2025 GMT Not After : Dec 7 02:00:54 2025 GMT Subject: CN=aa00d706843b06475993a82b1fc25f579619336f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:af:b5:bc:83:1c:c0:91:27:e4:f4:1e:8c: c5:05:f2:bf:7a:7b:32:08:2e:ad:a7:7f:ff:da:1e: 67:68:fa:36:70:ab:fc:c3:dc:38:e3:05:19:91:26: 09:d8:17:0c:30:88:2c:d9:0c:4a:27:59:ff:c9:37: 77:53:3d:75:00:28:39:20:55:bf:0b:4f:22:a7:f4: 6e:b8:ae:ff:7e:83:bf:5c:3d:d9:7e:3d:18:ea:f7: 6f:5c:f1:93:07:6b:8b:10:c0:b6:18:1f:1c:32:73: 7f:69:f2:f0:6a:c7:01:95:73:76:be:b8:f8:c2:d7: c0:a6:5d:30:76:80:77:4b:2b:cc:62:21:4d:73:1d: 68:4b:d3:2f:44:d7:4d:93:cf:e5:db:ce:12:8f:88: a0:1d:0c:1e:a7:26:b5:c6:17:a2:b3:ee:12:80:f4: 0b:d0:72:d6:08:f1:0e:57:1e:4a:88:fc:76:de:21: 9f:56:db:05:a7:78:9c:55:d6:83:f4:8a:70:c5:a6: d5:45:e2:fe:af:d2:d0:c8:cd:7e:f3:32:15:e2:4c: 26:4b:83:a3:51:0d:38:75:27:fb:98:23:30:12:36: d8:01:59:7f:bc:0f:1f:49:4a:cf:b1:69:8d:91:0a: dd:aa:85:3e:46:d8:4a:1f:72:91:f7:e9:32:0b:61: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:00:D7:06:84:3B:06:47:59:93:A8:2B:1F:C2:5F:57:96:19:33:6F X509v3 Authority Key Identifier: keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e6:d5:87:80:81:48:7d:36:f4:4b:0f:d1:8e:ed:89:bc:43: 68:53:d8:d5:9c:90:87:50:53:10:39:e0:50:05:92:9f:e8:eb: 93:4d:72:e9:15:f0:a4:cf:19:b0:f7:33:e3:c4:ba:f4:f2:f6: da:83:96:cb:22:d5:db:26:c2:4f:5b:f9:6a:ed:b5:40:8c:64: 9c:8d:82:c4:8c:2b:f0:2f:a2:e9:1f:24:83:93:74:19:be:97: 73:a3:e6:a5:06:04:d5:a8:84:a4:ab:09:a8:99:c9:77:28:9e: 15:3a:9d:ea:fd:c4:78:11:19:26:80:76:1a:ae:c4:e6:70:27: 53:6f:f3:53:e2:bc:db:e0:40:09:78:66:c0:70:12:8d:f2:f1: 9d:18:ed:38:3b:e2:49:25:8a:dd:64:b9:61:cc:c0:da:2c:eb: 2d:fd:46:fa:b5:0b:a8:88:c5:9f:17:8c:68:00:48:47:2c:82: 26:c1:b7:52:69:52:99:bc:b3:2a:7b:36:21:5d:28:2f:04:0f: c8:27:d0:66:25:6b:52:22:37:c0:ed:3e:d9:2b:5e:11:0e:bf: 97:e4:b3:80:0c:2c:7a:7a:72:05:a1:57:2a:fb:d1:8c:09:09: 06:42:95:a5:36:91:02:a5:62:58:9f:17:88:e6:33:69:a8:81: f3:c7:26:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAEiMO8xpR3Vr/XNhJ8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2 ZmE3ZTMwHhcNMjUxMjA2MDIwMDU0WhcNMjUxMjA3MDIwMDU0WjAzMTEwLwYDVQQD EyhhYTAwZDcwNjg0M2IwNjQ3NTk5M2E4MmIxZmMyNWY1Nzk2MTkzMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaevtbyDHMCRJ+T0HozFBfK/ensy CC6tp3//2h5naPo2cKv8w9w44wUZkSYJ2BcMMIgs2QxKJ1n/yTd3Uz11ACg5IFW/ C08ip/RuuK7/foO/XD3Zfj0Y6vdvXPGTB2uLEMC2GB8cMnN/afLwascBlXN2vrj4 wtfApl0wdoB3SyvMYiFNcx1oS9MvRNdNk8/l284Sj4igHQwepya1xheis+4SgPQL 0HLWCPEOVx5KiPx23iGfVtsFp3icVdaD9IpwxabVReL+r9LQyM1+8zIV4kwmS4Oj UQ04dSf7mCMwEjbYAVl/vA8fSUrPsWmNkQrdqoU+RthKH3KR9+kyC2F8VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoA1waEOwZHWZOoKx/CX1eWGTNvMB8GA1UdIwQY MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaubVh4CB SH029EsP0Y7tibxDaFPY1ZyQh1BTEDngUAWSn+jrk01y6RXwpM8ZsPcz48S69PL2 2oOWyyLV2ybCT1v5au21QIxknI2CxIwr8C+i6R8kg5N0Gb6Xc6PmpQYE1aiEpKsJ qJnJdyieFTqd6v3EeBEZJoB2Gq7E5nAnU2/zU+K82+BACXhmwHASjfLxnRjtODvi SSWK3WS5YczA2izrLf1G+rULqIjFnxeMaABIRyyCJsG3UmlSmbyzKns2IV0oLwQP yCfQZiVrUiI3wO0+2SteEQ6/l+SzgAwsenpyBaFXKvvRjAkJBkKVpTaRAqViWJ8X iOYzaaiB88cmng== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:17 2025 by rpki-client