This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json) Hash identifier: 9elhgpo12TlySWXp0sgqACl2WQBLwcHOuQMztfdibr8= Subject key identifier: 13:E0:3F:E8:5D:B5:FB:6E:3A:C2:30:BF:8F:9A:2D:F1:C6:D1:0D:A1 Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba Certificate serial: 019AF240139356EFA7BA1269DE1C40EB993A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft Manifest number: 16B3 Signing time: Sat 06 Dec 2025 06:01:16 +0000 Manifest this update: Sat 06 Dec 2025 06:01:16 +0000 Manifest next update: Sun 07 Dec 2025 06:01:16 +0000 Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: BgeYEKyGLbf4xot09Mbts2lGBB7ma35/XOjBS/u7F4I=) 2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:13:93:56:ef:a7:ba:12:69:de:1c:40:eb:99:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba Validity Not Before: Dec 6 06:01:16 2025 GMT Not After : Dec 7 06:01:16 2025 GMT Subject: CN=13e03fe85db5fb6e3ac230bf8f9a2df1c6d10da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:a3:55:aa:cc:2d:b4:48:79:cb:c0:9a:53: cd:e5:49:bb:40:3f:79:2b:52:c8:9f:76:7e:3b:3f: 3c:7c:ae:6d:39:e6:d4:da:9a:64:65:f8:a1:a1:fb: 6b:3e:94:04:70:03:88:4e:83:ed:62:46:8a:3d:a0: b9:12:58:ee:0e:ca:7d:e5:37:16:bb:b4:89:f8:4f: a4:bb:15:2a:22:96:b0:91:1f:ce:49:42:b6:f4:be: 8c:87:27:36:b9:d8:9a:07:03:8f:ce:63:f6:da:fa: 28:cb:af:31:fd:86:e5:2b:8c:52:37:0b:43:57:a6: 25:f2:1e:ef:8b:05:5c:79:cf:53:c8:2d:42:c2:b4: 3e:c7:4f:bd:fe:6a:34:d8:8b:c5:f8:e2:aa:18:0a: 60:39:65:de:d5:ff:24:c4:78:a6:af:79:9d:67:81: 40:06:68:fe:60:b9:4c:13:c3:b1:d8:fc:17:c5:b5: 65:2c:04:f2:c8:bb:84:e3:c1:23:74:83:a0:04:2e: 52:5d:b4:de:bc:9c:7f:6e:ea:19:15:2f:84:db:d3: 8e:de:3e:10:24:8a:36:ea:16:7e:5c:92:76:c7:38: 9c:96:cc:5e:da:25:63:56:36:15:88:ec:c0:f1:8f: ac:4e:d6:5b:f8:af:22:a1:3a:86:0f:e2:fe:c7:16: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E0:3F:E8:5D:B5:FB:6E:3A:C2:30:BF:8F:9A:2D:F1:C6:D1:0D:A1 X509v3 Authority Key Identifier: keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1c:89:6d:70:76:02:cb:83:b3:9a:8a:dd:69:6d:a2:6e:57: 0e:17:7b:0c:1a:d7:50:79:40:37:88:f9:85:c3:d0:3c:97:3d: de:1d:a1:c3:22:e0:e2:2e:d8:40:c0:5a:1b:8f:f7:15:d6:81: ff:c5:ea:1f:67:28:c8:7d:5a:b4:0b:e8:7e:31:89:46:d5:ef: b8:f1:bb:bd:3e:46:d2:86:b1:99:49:4d:65:31:4f:4a:db:74: a1:3b:f0:f1:e1:0b:8f:14:c7:5c:85:67:dc:97:63:c9:89:ec: 13:6a:9d:c2:b6:39:a4:6a:57:3c:c4:4b:71:0a:84:96:6c:cc: c5:f7:ea:6a:34:08:3e:45:b4:ba:37:19:95:47:c2:f0:f6:b0: a6:44:cc:bc:e4:27:22:0b:2d:f5:af:61:e4:60:15:64:c6:92: 55:0b:bd:43:e2:d4:4b:8b:2a:f1:f9:84:a6:c7:f9:4c:df:af: 05:78:29:e2:15:42:40:39:7f:cc:3e:79:5e:9b:9a:96:a7:58: c3:f2:28:7f:c1:59:90:22:18:5e:31:06:6e:2f:e4:46:26:aa: dd:8d:5c:a3:8b:9b:df:56:92:84:f0:81:e3:ba:df:38:fe:03: 04:79:29:f9:6b:07:82:73:c1:58:34:2f:2c:db:36:9e:3a:ed: 78:34:ad:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBOTVu+nuhJp3hxA65k6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2 MzBiYmEwHhcNMjUxMjA2MDYwMTE2WhcNMjUxMjA3MDYwMTE2WjAzMTEwLwYDVQQD EygxM2UwM2ZlODVkYjVmYjZlM2FjMjMwYmY4ZjlhMmRmMWM2ZDEwZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzSjVarMLbRIecvAmlPN5Um7QD95 K1LIn3Z+Oz88fK5tOebU2ppkZfihoftrPpQEcAOIToPtYkaKPaC5EljuDsp95TcW u7SJ+E+kuxUqIpawkR/OSUK29L6Mhyc2udiaBwOPzmP22vooy68x/YblK4xSNwtD V6Yl8h7viwVcec9TyC1CwrQ+x0+9/mo02IvF+OKqGApgOWXe1f8kxHimr3mdZ4FA Bmj+YLlME8Ox2PwXxbVlLATyyLuE48EjdIOgBC5SXbTevJx/buoZFS+E29OO3j4Q JIo26hZ+XJJ2xziclsxe2iVjVjYViOzA8Y+sTtZb+K8ioTqGD+L+xxYv2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPgP+hdtftuOsIwv4+aLfHG0Q2hMB8GA1UdIwQY MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt NTczMDlkZjY5NjQyLzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehyJbXB2 AsuDs5qK3Wltom5XDhd7DBrXUHlAN4j5hcPQPJc93h2hwyLg4i7YQMBaG4/3FdaB /8XqH2coyH1atAvofjGJRtXvuPG7vT5G0oaxmUlNZTFPStt0oTvw8eELjxTHXIVn 3JdjyYnsE2qdwrY5pGpXPMRLcQqElmzMxffqajQIPkW0ujcZlUfC8PawpkTMvOQn Igst9a9h5GAVZMaSVQu9Q+LUS4sq8fmEpsf5TN+vBXgp4hVCQDl/zD55XpualqdY w/Iof8FZkCIYXjEGbi/kRiaq3Y1co4ub31aShPCB47rfOP4DBHkp+WsHgnPBWDQv LNs2njrteDStcA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:11 2025 by rpki-client