This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json) Hash identifier: MQoQeo4l4knjJfMgbWYXg2f1GZdU7YAEM0uNpa7s70c= Subject key identifier: 52:DC:E9:3F:41:44:21:F6:0E:67:EF:7D:FD:C3:56:A4:8A:94:74:95 Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0 Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0 Certificate serial: 019AF2091C0C1FA0391AAF98050EADA58DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft Manifest number: 0608 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: jN9d9MwlOrJEvwtkAAgb9gLiGXReRNL6Lb8wVHekOe4=) 2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=) 3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1c:0c:1f:a0:39:1a:af:98:05:0e:ad:a5:8d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=52dce93f414421f60e67ef7dfdc356a48a947495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:03:06:42:ef:91:fa:c7:13:df:fe:b0:5e: 22:31:2d:f2:a0:37:41:8d:d0:2f:91:1d:df:0b:ea: d8:06:f6:99:78:fe:fd:3d:14:e7:4d:34:b2:aa:a6: aa:e7:e0:c2:dc:e6:ab:19:45:18:ff:7f:10:2e:c9: 66:6a:ef:b0:63:96:d4:2a:14:98:6f:74:7f:b5:c2: 00:0d:5d:c9:57:ae:50:dd:47:61:99:6e:67:aa:47: b9:7f:6a:7f:0e:72:40:da:6e:11:a6:c2:9e:a2:99: 82:4b:df:bd:51:f9:8c:66:2c:47:67:46:6f:68:b6: 24:33:33:5c:56:5c:54:c2:19:9c:6e:be:7a:a5:36: 57:1a:c9:4e:c1:c8:c0:f7:9e:02:c6:18:18:a0:72: aa:ec:33:9d:ba:00:6f:80:6c:c9:6e:97:21:5f:1f: cd:f7:da:ce:83:e3:66:cd:67:57:b2:56:d2:16:a5: 6f:e4:71:01:b8:8e:ab:02:d5:9e:8b:a1:07:14:14: 5c:86:f2:ef:55:85:a4:92:51:b3:ff:5c:5f:bb:fe: f1:67:8d:5b:3c:cf:ab:a6:24:56:e3:0e:84:4a:b3: 6f:56:63:0e:9c:96:a6:17:e7:68:dc:fd:17:de:ca: d7:95:19:a9:95:a8:3e:33:29:2c:7c:65:9c:41:a9: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DC:E9:3F:41:44:21:F6:0E:67:EF:7D:FD:C3:56:A4:8A:94:74:95 X509v3 Authority Key Identifier: keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7f:ad:d5:cc:d0:0f:af:5c:e5:84:cb:5c:34:4f:3f:9f:96: 37:d8:10:df:78:39:d5:44:10:4d:aa:8e:12:eb:90:1b:00:97: 3d:41:d3:f7:2d:80:8a:9c:a1:73:0a:2c:6f:97:66:f3:3c:fe: 12:d7:02:7b:46:34:ca:43:d2:00:ed:48:50:50:b5:46:3b:75: 6b:12:c0:66:5d:63:a3:8b:f7:f4:d3:a7:75:4c:33:12:b4:cb: dd:1d:77:1d:e4:a8:11:1b:fd:12:8e:8d:f7:32:52:1e:d5:36: 25:3a:a6:1b:1f:9c:91:89:68:35:00:37:c5:b8:be:41:05:55: ee:f7:09:69:13:12:0b:7d:bf:c3:98:05:37:1d:cd:f0:1c:46: 91:98:95:e4:03:60:83:42:01:ad:d1:a3:e9:25:f5:8f:ad:fc: d6:ab:61:9c:a9:ab:8f:0d:2c:22:7b:c8:5c:b6:e1:7b:5c:8f: 6d:1c:cc:fc:a9:ef:02:07:ef:f6:8f:3a:02:6b:08:15:41:f2: 17:ab:bf:8f:53:59:cd:7f:4d:9e:0a:02:9f:9d:35:d4:d8:1f: 72:7f:2c:ea:aa:a6:96:5f:d7:b1:08:40:5e:db:1a:6d:1e:7f: 5b:9f:87:d8:6b:b8:1c:25:01:d9:2a:99:41:03:c9:e7:20:fb: 1e:a8:47:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRwMH6A5Gq+YBQ6tpY2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MTVlODc5MmE0MjRmZjcyY2MxNzkyOTc4ZTJjZDRjZGJl ZGE0ZDAwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD Eyg1MmRjZTkzZjQxNDQyMWY2MGU2N2VmN2RmZGMzNTZhNDhhOTQ3NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JYDBkLvkfrHE9/+sF4iMS3yoDdB jdAvkR3fC+rYBvaZeP79PRTnTTSyqqaq5+DC3OarGUUY/38QLslmau+wY5bUKhSY b3R/tcIADV3JV65Q3UdhmW5nqke5f2p/DnJA2m4RpsKeopmCS9+9UfmMZixHZ0Zv aLYkMzNcVlxUwhmcbr56pTZXGslOwcjA954CxhgYoHKq7DOdugBvgGzJbpchXx/N 99rOg+NmzWdXslbSFqVv5HEBuI6rAtWei6EHFBRchvLvVYWkklGz/1xfu/7xZ41b PM+rpiRW4w6ESrNvVmMOnJamF+do3P0X3srXlRmplag+MyksfGWcQalE2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLc6T9BRCH2Dmfvff3DVqSKlHSVMB8GA1UdIwQY MBaAFCUV6HkqQk/3LMF5KXjizUzb7aTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzIt OWVlZDlkNzVjMGQxLzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzItOWVlZDlkNzVjMGQx LzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGH+t1czQ D69c5YTLXDRPP5+WN9gQ33g51UQQTaqOEuuQGwCXPUHT9y2Aipyhcwosb5dm8zz+ EtcCe0Y0ykPSAO1IUFC1Rjt1axLAZl1jo4v39NOndUwzErTL3R13HeSoERv9Eo6N 9zJSHtU2JTqmGx+ckYloNQA3xbi+QQVV7vcJaRMSC32/w5gFNx3N8BxGkZiV5ANg g0IBrdGj6SX1j6381qthnKmrjw0sInvIXLbhe1yPbRzM/KnvAgfv9o86AmsIFUHy F6u/j1NZzX9NngoCn5011Ngfcn8s6qqmll/XsQhAXtsabR5/W5+H2Gu4HCUB2SqZ QQPJ5yD7HqhHVw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:03 2025 by rpki-client