This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft File: JovHlTH32BXSsrUin5rJ9vi_68o.mft (raw, json) Hash identifier: SBY6aoZggcNRqh0NiMOyERGk5IGydw0Atzv/wQxQg7A= Subject key identifier: 17:A7:27:CE:19:76:7C:2F:27:B0:12:93:93:41:FD:73:BC:F2:3D:7D Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA Certificate issuer: /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca Certificate serial: 019AF12ED19FFAE44AC25359C06C8CAD9154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 01:02:48 +0000 Manifest this update: Sat 06 Dec 2025 01:02:48 +0000 Manifest next update: Sun 07 Dec 2025 01:02:48 +0000 Files and hashes: 1: JovHlTH32BXSsrUin5rJ9vi_68o.crl (hash: 8GFvmRzMfSM4X5GARDSSYeLuzJoIhURDTUTSVVOh+MY=) 2: fbUeFXfkxWs40ix5vT2S2k90Z-k.roa (hash: UcP80IpCz9vBYWCvKMhbqTO9Etv9kTfCKFjSdIAUqCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d1:9f:fa:e4:4a:c2:53:59:c0:6c:8c:ad:91:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca Validity Not Before: Dec 6 01:02:48 2025 GMT Not After : Dec 7 01:02:48 2025 GMT Subject: CN=17a727ce19767c2f27b012939341fd73bcf23d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:e0:ec:6b:21:43:25:52:b2:09:5a:fd:e5: 66:01:be:cf:fe:bf:e3:c9:7c:48:20:7c:b3:03:ec: 1c:5e:98:be:a2:21:a1:2b:ab:97:16:b1:0b:09:f7: 73:9d:4f:53:cc:f6:75:e9:37:0c:ed:0c:6b:ab:03: d0:7a:7c:60:bd:6d:30:cf:a6:40:3d:83:8a:ef:09: 38:60:d3:36:b6:0b:71:2d:ea:03:45:3f:d3:b4:b6: b6:c0:d1:3d:0c:1d:ec:b1:bc:a8:3d:7f:f6:0d:3e: ab:41:af:19:4b:9e:93:3c:7b:7f:c3:a8:12:76:63: 61:e6:cb:e1:6e:a8:90:a6:e2:fb:f5:4e:c0:22:77: c4:e3:10:fa:b8:e1:2c:e1:12:c0:0c:d1:e0:5f:b9: 9f:e7:b1:24:77:b6:1f:e8:22:79:81:3d:ee:3f:c0: 2a:57:6d:19:72:f8:09:0e:0b:cc:c8:ca:9e:74:77: 1d:45:3e:4d:3c:94:22:89:f6:03:cd:9f:d0:a7:e1: c4:eb:b2:10:08:c3:0a:a7:ef:a9:93:c2:7b:71:2f: c4:2e:28:75:75:9f:37:21:66:aa:ad:36:51:b5:48: 36:e5:09:fb:f8:8b:f2:3c:47:ca:01:05:7d:46:2c: 98:84:c7:d1:93:6e:4f:14:e4:35:c2:c4:21:4f:61: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:27:CE:19:76:7C:2F:27:B0:12:93:93:41:FD:73:BC:F2:3D:7D X509v3 Authority Key Identifier: keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:03:c9:50:c0:d6:b3:73:e0:8c:72:a6:4a:34:5f:e8:86:41: 01:94:41:b7:54:ce:d9:99:db:fb:fc:af:0a:1a:46:60:31:07: ea:fc:63:f2:a6:31:cc:af:6e:97:5d:fa:56:19:a0:83:1e:68: 37:55:9f:de:df:f5:b8:f2:04:b4:73:53:ab:ed:7e:a6:28:bd: 0d:2d:22:e5:9d:ff:8d:fc:6c:1f:1a:ed:a2:e2:7e:80:06:eb: 0a:52:03:aa:28:ce:c7:c3:ad:42:0f:39:1c:da:b2:8c:16:8f: c5:8c:58:7c:8b:5e:a4:86:83:b5:68:10:82:f3:15:c1:3d:e6: 35:f8:60:85:2b:1e:31:9b:cc:4f:9f:2d:6e:3f:17:c4:91:a8: b6:e4:8a:8e:62:e0:6c:7b:49:24:d0:7b:4d:51:f0:96:78:bb: fb:97:43:21:26:35:cd:ea:de:2f:67:0f:d0:48:d5:46:42:92: 73:12:79:8f:96:4b:54:7a:c6:f7:b8:f4:86:19:1a:3a:a9:6f: 31:03:e2:fe:ce:fa:4a:ff:59:44:a0:ae:1d:f5:05:8b:27:ce: 4b:9a:2a:bd:e3:89:1d:fe:2e:5d:b4:b7:b4:52:8a:b9:38:ae: 84:b8:2b:a1:11:ca:49:0b:a4:e0:ce:ef:51:56:3a:1c:a3:be: 1a:14:19:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtGf+uRKwlNZwGyMrZFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGJjNzk1MzFmN2Q4MTVkMmIyYjUyMjlmOWFjOWY2Zjhi ZmViY2EwHhcNMjUxMjA2MDEwMjQ4WhcNMjUxMjA3MDEwMjQ4WjAzMTEwLwYDVQQD EygxN2E3MjdjZTE5NzY3YzJmMjdiMDEyOTM5MzQxZmQ3M2JjZjIzZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx7g7GshQyVSsgla/eVmAb7P/r/j yXxIIHyzA+wcXpi+oiGhK6uXFrELCfdznU9TzPZ16TcM7QxrqwPQenxgvW0wz6ZA PYOK7wk4YNM2tgtxLeoDRT/TtLa2wNE9DB3ssbyoPX/2DT6rQa8ZS56TPHt/w6gS dmNh5svhbqiQpuL79U7AInfE4xD6uOEs4RLADNHgX7mf57Ekd7Yf6CJ5gT3uP8Aq V20ZcvgJDgvMyMqedHcdRT5NPJQiifYDzZ/Qp+HE67IQCMMKp++pk8J7cS/ELih1 dZ83IWaqrTZRtUg25Qn7+IvyPEfKAQV9RiyYhMfRk25PFOQ1wsQhT2FpbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBenJ84ZdnwvJ7ASk5NB/XO88j19MB8GA1UdIwQY MBaAFCaLx5Ux99gV0rK1Ip+ayfb4v+vKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZjA3ZTAtMDc1ZC00NTQ4LTljOWEt MTU1YjM1N2JkODgwLzEvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yZjA3ZTAtMDc1ZC00NTQ4LTljOWEtMTU1YjM1N2JkODgw LzEvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgPJUMDW s3PgjHKmSjRf6IZBAZRBt1TO2Znb+/yvChpGYDEH6vxj8qYxzK9ul136Vhmggx5o N1Wf3t/1uPIEtHNTq+1+pii9DS0i5Z3/jfxsHxrtouJ+gAbrClIDqijOx8OtQg85 HNqyjBaPxYxYfItepIaDtWgQgvMVwT3mNfhghSseMZvMT58tbj8XxJGotuSKjmLg bHtJJNB7TVHwlni7+5dDISY1zereL2cP0EjVRkKScxJ5j5ZLVHrG97j0hhkaOqlv MQPi/s76Sv9ZRKCuHfUFiyfOS5oqveOJHf4uXbS3tFKKuTiuhLgroRHKSQuk4M7v UVY6HKO+GhQZPw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:49 2025 by rpki-client