This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json) Hash identifier: DDZNmPb28/vy7TKXmg4jsKEulosY6eIb3G4hUKFxFaI= Subject key identifier: 6E:28:36:3B:69:0E:85:85:92:77:6A:21:86:FA:26:B8:44:D9:43:F3 Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49 Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349 Certificate serial: 019AF16479C03B386AE08EFC645D1DCFD41C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft Manifest number: 043F Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: u5xhKj5jOTeZTWyZAv3yHtEwV6T0Fi09uA62PiRU4Oc=) 2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:79:c0:3b:38:6a:e0:8e:fc:64:5d:1d:cf:d4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349 Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=6e28363b690e858592776a2186fa26b844d943f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:18:32:bd:13:b1:ff:17:1f:e7:42:94:6d: a8:b5:2f:78:fc:03:5d:81:cd:21:ed:83:5d:ae:87: 8d:8c:d7:5f:42:cf:3e:4a:47:c1:fa:cb:1e:47:14: a0:0d:26:98:25:80:9c:5d:da:6d:61:26:c5:db:a2: c4:6f:1c:8f:e2:c4:d2:11:f3:62:7e:7e:d1:b2:46: d7:f5:20:3f:b9:09:f4:e4:d0:18:81:d9:39:16:62: a3:81:cd:fc:91:76:34:ac:a4:57:24:75:f8:90:41: 6c:31:5c:b6:d4:8f:07:68:f1:74:0d:ae:fb:4b:cb: 47:35:b5:06:8a:48:0f:1b:81:ae:cd:c1:7e:97:29: 14:2a:b8:f9:d5:a1:68:60:59:b7:7d:81:e1:d5:fe: 44:bc:ad:c0:65:bf:7b:58:bb:f8:c2:67:e0:f2:4c: ca:6a:eb:2c:bc:85:bd:6a:0d:41:55:d2:52:30:05: 30:69:42:4e:a2:12:b9:09:62:e6:b9:9d:cc:45:d5: 69:ca:cc:a6:0f:bb:6a:e3:fd:5c:fe:5e:cb:02:49: 53:d5:70:3b:64:11:dc:30:59:bb:8e:0f:e8:86:43: 73:6e:52:9a:33:30:47:10:72:c7:0d:26:b9:19:39: 7a:58:1d:60:5f:64:04:2a:7c:08:f8:54:b4:48:03: 4e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:28:36:3B:69:0E:85:85:92:77:6A:21:86:FA:26:B8:44:D9:43:F3 X509v3 Authority Key Identifier: keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:04:19:f6:47:ef:d4:8b:2c:a8:d2:64:02:99:58:20:ed:d7: 8c:02:12:33:b0:a6:53:6d:ce:dc:55:fd:38:c4:ac:e5:63:90: f7:b1:93:d0:af:9d:e8:68:46:75:aa:1d:2e:75:4e:39:58:cf: 81:74:fd:f0:70:df:4c:16:81:0e:b3:4b:dc:5e:a7:48:0f:29: b6:2c:17:6b:59:d4:1c:0b:35:a1:49:25:d0:54:32:21:73:cb: 02:71:9a:0c:0c:06:66:35:5b:be:6a:43:cf:70:c9:14:82:71: 2e:65:f9:0f:d2:b9:52:d7:45:8d:01:bf:89:d7:71:9f:54:a3: 54:19:ad:80:49:88:d2:30:38:74:72:66:c5:15:b0:db:99:ac: 0d:00:db:24:40:f5:e1:28:3b:8f:1b:00:90:5c:da:38:fd:f2: 6e:92:ec:7d:71:8d:f9:b3:fd:f7:b4:dd:95:80:d8:2a:45:fc: 26:12:51:ef:e9:35:aa:23:1e:f9:8c:66:64:f2:f2:a0:f9:95: 5b:c2:52:3d:29:a1:99:75:e0:21:2b:4d:1d:cf:07:f6:68:9e: 9f:41:c2:ba:fc:e3:8c:0e:04:d3:d6:f5:98:13:b9:43:f7:21: f7:a9:ff:e7:6f:66:e2:fb:01:f9:d8:03:01:4f:f6:c3:dd:d3: 1c:32:65:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHnAOzhq4I78ZF0dz9QcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm NzQzNDkwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD Eyg2ZTI4MzYzYjY5MGU4NTg1OTI3NzZhMjE4NmZhMjZiODQ0ZDk0M2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK4YMr0Tsf8XH+dClG2otS94/ANd gc0h7YNdroeNjNdfQs8+SkfB+sseRxSgDSaYJYCcXdptYSbF26LEbxyP4sTSEfNi fn7RskbX9SA/uQn05NAYgdk5FmKjgc38kXY0rKRXJHX4kEFsMVy21I8HaPF0Da77 S8tHNbUGikgPG4GuzcF+lykUKrj51aFoYFm3fYHh1f5EvK3AZb97WLv4wmfg8kzK aussvIW9ag1BVdJSMAUwaUJOohK5CWLmuZ3MRdVpysymD7tq4/1c/l7LAklT1XA7 ZBHcMFm7jg/ohkNzblKaMzBHEHLHDSa5GTl6WB1gX2QEKnwI+FS0SANOVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4oNjtpDoWFkndqIYb6JrhE2UPzMB8GA1UdIwQY MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgQZ9kfv 1IssqNJkAplYIO3XjAISM7CmU23O3FX9OMSs5WOQ97GT0K+d6GhGdaodLnVOOVjP gXT98HDfTBaBDrNL3F6nSA8ptiwXa1nUHAs1oUkl0FQyIXPLAnGaDAwGZjVbvmpD z3DJFIJxLmX5D9K5UtdFjQG/iddxn1SjVBmtgEmI0jA4dHJmxRWw25msDQDbJED1 4Sg7jxsAkFzaOP3ybpLsfXGN+bP997TdlYDYKkX8JhJR7+k1qiMe+YxmZPLyoPmV W8JSPSmhmXXgIStNHc8H9mien0HCuvzjjA4E09b1mBO5Q/ch96n/529m4vsB+dgD AU/2w93THDJlYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:36 2025 by rpki-client