This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json) Hash identifier: Ib2Lj11atbDUWp0O9RAkZZ6JX8teDnkxevwesVVKLtk= Subject key identifier: 8C:4C:AA:1F:3C:B3:5C:82:F6:C3:28:A6:86:AA:58:9C:A2:47:16:D7 Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84 Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84 Certificate serial: 019AF1D1F25A0421D54A42C90DB1397C6211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft Manifest number: 0971 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: T64x8WMhWngYync1D2/yDzUOISEsFWoNEM2XddSzIhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f2:5a:04:21:d5:4a:42:c9:0d:b1:39:7c:62:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d26a5146996d220461081072c76396582fca84 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=8c4caa1f3cb35c82f6c328a686aa589ca24716d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:c3:90:ed:87:7d:28:5f:be:28:ad:9b:d1: 79:85:99:a9:58:a8:07:42:ea:5d:71:0d:07:c9:37: b7:7b:c4:9d:17:30:2f:d6:e9:e8:e2:02:05:87:da: 4a:26:21:53:bf:92:30:51:da:9f:04:6a:11:3a:71: 21:32:fb:cc:44:81:8a:5d:4e:dc:81:c0:65:7e:3a: d8:08:d0:25:2d:58:69:10:60:50:c1:34:80:56:14: bd:fb:65:33:65:27:35:f1:d9:e6:70:e9:da:9b:1e: 31:d4:64:c3:13:b8:2c:60:d9:23:22:9c:4f:48:e1: 9f:9f:a5:4c:ca:d3:94:de:cc:25:35:a4:ba:02:e6: 57:0b:96:e4:40:c3:19:68:5a:78:c7:53:80:54:b6: 7e:b5:ea:9b:e8:2b:81:43:35:15:44:d7:cd:dc:13: 55:0e:c6:c8:89:d6:21:b6:69:eb:1e:c4:fc:c3:4d: 25:ad:c9:9e:33:7d:55:15:42:f5:d3:ec:07:24:94: 02:d9:da:ca:64:8b:0e:6b:da:8d:f8:9c:98:b2:da: 04:e0:f4:da:a2:da:68:38:2e:d3:93:99:83:37:e8: 9b:64:89:e7:2f:82:d3:4c:b3:97:33:06:91:8d:38: df:fa:af:6f:b6:0c:82:5e:88:02:71:d1:68:a9:d8: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4C:AA:1F:3C:B3:5C:82:F6:C3:28:A6:86:AA:58:9C:A2:47:16:D7 X509v3 Authority Key Identifier: keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:94:2d:c5:7a:9c:1a:ab:ea:0f:ef:fc:78:f0:5c:55:6c:0a: f7:f6:db:43:e7:f6:80:aa:c1:8c:a5:47:57:9c:bb:30:e6:9a: f4:d3:1f:0c:5f:0f:4f:91:37:07:ed:a8:89:75:c2:17:8a:3b: 98:46:c9:c5:2b:cf:b7:87:34:69:2a:6c:80:d2:89:e6:5c:1b: f2:f9:27:66:2c:8e:21:a5:ec:ff:a7:96:49:29:3c:61:9b:3a: cc:26:bc:bc:d5:93:bf:5f:a2:7d:4d:15:41:18:a2:74:e7:b9: 7b:44:55:51:85:c1:be:6c:5a:3b:d9:e4:a1:af:c6:8b:0c:05: 03:20:62:a5:64:35:17:09:7e:4a:6b:47:f4:15:75:09:40:c6: f1:f5:14:e6:0b:c5:14:b6:d4:91:fa:4a:75:ac:1c:25:4e:f5: 37:32:af:d7:fb:2b:49:cc:ae:36:6e:7f:05:eb:1c:35:1f:df: 3b:25:17:83:24:79:16:f7:39:62:bf:af:b5:31:e9:2c:7e:36: 43:bc:24:f5:56:10:40:80:00:77:cc:99:49:bf:20:c0:18:8c: 1e:12:79:5f:c9:bb:38:71:1c:4b:e3:b7:af:ef:a9:89:05:b1: f6:44:a5:b7:f3:1a:32:f1:0e:51:23:6b:c6:96:c0:c9:86:f0: 1f:0b:96:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fJaBCHVSkLJDbE5fGIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI2YTUxNDY5OTZkMjIwNDYxMDgxMDcyYzc2Mzk2NTgy ZmNhODQwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD Eyg4YzRjYWExZjNjYjM1YzgyZjZjMzI4YTY4NmFhNTg5Y2EyNDcxNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBvDkO2HfShfviitm9F5hZmpWKgH QupdcQ0HyTe3e8SdFzAv1uno4gIFh9pKJiFTv5IwUdqfBGoROnEhMvvMRIGKXU7c gcBlfjrYCNAlLVhpEGBQwTSAVhS9+2UzZSc18dnmcOnamx4x1GTDE7gsYNkjIpxP SOGfn6VMytOU3swlNaS6AuZXC5bkQMMZaFp4x1OAVLZ+teqb6CuBQzUVRNfN3BNV DsbIidYhtmnrHsT8w00lrcmeM31VFUL10+wHJJQC2drKZIsOa9qN+JyYstoE4PTa otpoOC7Tk5mDN+ibZInnL4LTTLOXMwaRjTjf+q9vtgyCXogCcdFoqdjl+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxMqh88s1yC9sMopoaqWJyiRxbXMB8GA1UdIwQY MBaAFCTSalFGmW0iBGEIEHLHY5ZYL8qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEt NWI5ODk2MjczNzg5LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEtNWI5ODk2MjczNzg5 LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpQtxXqc GqvqD+/8ePBcVWwK9/bbQ+f2gKrBjKVHV5y7MOaa9NMfDF8PT5E3B+2oiXXCF4o7 mEbJxSvPt4c0aSpsgNKJ5lwb8vknZiyOIaXs/6eWSSk8YZs6zCa8vNWTv1+ifU0V QRiidOe5e0RVUYXBvmxaO9nkoa/GiwwFAyBipWQ1Fwl+SmtH9BV1CUDG8fUU5gvF FLbUkfpKdawcJU71NzKv1/srScyuNm5/BescNR/fOyUXgyR5Fvc5Yr+vtTHpLH42 Q7wk9VYQQIAAd8yZSb8gwBiMHhJ5X8m7OHEcS+O3r++piQWx9kSlt/MaMvEOUSNr xpbAyYbwHwuWLA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:22 2025 by rpki-client