This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json) Hash identifier: najXWHBErR6s+t2zUr/xGpNADN0FNwHirrJ5P6vHJyE= Subject key identifier: 86:D9:85:77:5A:29:87:C8:64:81:D3:11:FF:F7:F7:63:63:D0:F9:09 Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e Certificate serial: 019AF31C3277AD6B5C562B7A18003320A363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:42 +0000 Manifest this update: Sat 06 Dec 2025 10:01:42 +0000 Manifest next update: Sun 07 Dec 2025 10:01:42 +0000 Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=) 2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: KGn/Ya5W/XQeQgWPMYCk5mHtGK7WUVUH8+h1agRXwn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:32:77:ad:6b:5c:56:2b:7a:18:00:33:20:a3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e Validity Not Before: Dec 6 10:01:42 2025 GMT Not After : Dec 7 10:01:42 2025 GMT Subject: CN=86d985775a2987c86481d311fff7f76363d0f909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:c0:fd:f1:89:84:53:e8:a0:32:82:cc:92: 3a:b1:28:6a:58:5e:6d:f2:2d:aa:d6:07:1a:bb:83: 77:d0:6f:cb:e2:f9:cf:8b:3e:3d:36:4e:de:5f:e1: 03:cd:28:a7:c3:be:ef:b1:84:cf:08:58:4d:91:5b: 3c:df:87:b4:f9:46:0c:be:ef:2c:37:25:52:f4:54: 87:bd:03:4b:bf:07:c7:ac:e6:84:26:46:53:cd:a8: 41:c2:da:6d:72:51:c7:b1:a2:ee:3d:9a:1f:97:98: 0e:2f:86:83:d8:37:29:dd:b6:6e:25:10:f9:44:f9: 81:b4:70:5e:99:0c:24:1c:16:e8:7f:0e:a6:96:c5: ea:00:36:67:59:85:4f:c0:5e:49:51:63:d8:c0:6c: 16:5d:0e:14:a3:d3:3f:5a:52:87:eb:40:37:5d:10: 1f:cc:43:f8:47:b8:ca:5a:ff:ed:f5:b8:e0:16:b3: 54:24:c6:19:11:5e:c8:d8:38:b0:38:14:a8:13:09: 18:5d:b9:e6:38:09:6d:c5:16:97:a5:31:b8:c5:04: bd:29:fc:f5:d3:11:82:b7:1f:95:ce:67:ca:9b:6f: e7:e7:13:67:7a:1e:7a:93:1c:94:8f:3b:4f:54:34: 54:57:8f:3a:d0:24:b6:93:b4:b1:d5:bf:1c:4e:b8: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:85:77:5A:29:87:C8:64:81:D3:11:FF:F7:F7:63:63:D0:F9:09 X509v3 Authority Key Identifier: keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6b:62:76:ac:c1:bf:33:cc:e9:fb:17:17:aa:7a:be:8e:d8: 45:75:f2:4c:cd:63:66:ab:78:aa:b6:ba:30:d7:12:45:bf:65: fb:7c:09:20:f4:b6:95:b9:d2:b0:3f:c8:5b:c7:bb:92:a5:6f: 1b:d8:27:83:51:f2:21:bd:33:f9:61:4e:84:c4:e9:8d:e1:f9: 3f:b4:1d:b0:15:2a:f6:98:71:44:ff:53:46:5e:46:d9:a4:11: 58:03:7f:ba:b1:f7:d9:d0:45:c4:57:38:ec:82:99:65:2e:d6: 51:be:81:1b:97:48:8e:0f:dc:67:d6:f4:3a:a5:7e:85:38:8a: 19:fa:f5:85:0e:f1:0d:fb:58:7b:7c:f1:9c:10:48:61:26:d9: 46:1a:8d:44:46:b5:66:a3:9c:0a:95:56:38:a5:e0:a8:7c:80: e2:a3:5c:f2:a4:c9:d9:3f:bb:81:bd:7f:6d:9c:f9:46:9d:26: 7a:cd:17:42:95:12:a3:1c:ae:a4:b0:8f:10:c9:d1:61:2c:ea: 50:7e:62:e3:6c:76:9f:c7:e9:84:a6:95:fa:a3:c8:86:13:2b: ef:8f:2e:b3:6a:f2:6c:df:12:75:0d:5e:57:74:fd:ff:e5:e8: 07:9c:0d:06:86:9b:c1:a6:03:85:c2:f2:8c:bc:f3:35:9f:9c: 9e:4f:71:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDJ3rWtcVit6GAAzIKNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTMwYjYwZDIzZDc0ZTgyMjZiY2Q1ZTE1ZGM1YmY3NzBh ZDMwN2UwHhcNMjUxMjA2MTAwMTQyWhcNMjUxMjA3MTAwMTQyWjAzMTEwLwYDVQQD Eyg4NmQ5ODU3NzVhMjk4N2M4NjQ4MWQzMTFmZmY3Zjc2MzYzZDBmOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPzA/fGJhFPooDKCzJI6sShqWF5t 8i2q1gcau4N30G/L4vnPiz49Nk7eX+EDzSinw77vsYTPCFhNkVs834e0+UYMvu8s NyVS9FSHvQNLvwfHrOaEJkZTzahBwtptclHHsaLuPZofl5gOL4aD2Dcp3bZuJRD5 RPmBtHBemQwkHBbofw6mlsXqADZnWYVPwF5JUWPYwGwWXQ4Uo9M/WlKH60A3XRAf zEP4R7jKWv/t9bjgFrNUJMYZEV7I2DiwOBSoEwkYXbnmOAltxRaXpTG4xQS9Kfz1 0xGCtx+VzmfKm2/n5xNneh56kxyUjztPVDRUV4860CS2k7Sx1b8cTrjDKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbZhXdaKYfIZIHTEf/392Nj0PkJMB8GA1UdIwQY MBaAFCSjC2DSPXToImvNXhXcW/dwrTB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmIt OGIzYmY4YmY5OGViLzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmItOGIzYmY4YmY5OGVi LzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGtidqzB vzPM6fsXF6p6vo7YRXXyTM1jZqt4qra6MNcSRb9l+3wJIPS2lbnSsD/IW8e7kqVv G9gng1HyIb0z+WFOhMTpjeH5P7QdsBUq9phxRP9TRl5G2aQRWAN/urH32dBFxFc4 7IKZZS7WUb6BG5dIjg/cZ9b0OqV+hTiKGfr1hQ7xDftYe3zxnBBIYSbZRhqNREa1 ZqOcCpVWOKXgqHyA4qNc8qTJ2T+7gb1/bZz5Rp0mes0XQpUSoxyupLCPEMnRYSzq UH5i42x2n8fphKaV+qPIhhMr748us2rybN8SdQ1eV3T9/+XoB5wNBoabwaYDhcLy jLzzNZ+cnk9xpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:07 2025 by rpki-client