This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json) Hash identifier: rzVpsSSiaJfOlIlZvcGO7Gh5DLzgMfzK+tnnYjg6KmU= Subject key identifier: AE:71:37:33:92:A0:11:BB:E2:F9:DD:96:69:9D:4E:4C:8B:B6:9A:A1 Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d Certificate serial: 019B2219805D43345525A2F6AE664F09A9F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft Manifest number: 0A72 Signing time: Mon 15 Dec 2025 13:00:55 +0000 Manifest this update: Mon 15 Dec 2025 13:00:55 +0000 Manifest next update: Tue 16 Dec 2025 13:00:55 +0000 Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: NzPOy4i2ndwwzrLqo1jILjh8Tpp7dvxis/V2PwDnYCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:80:5d:43:34:55:25:a2:f6:ae:66:4f:09:a9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d Validity Not Before: Dec 15 13:00:55 2025 GMT Not After : Dec 16 13:00:55 2025 GMT Subject: CN=ae71373392a011bbe2f9dd96699d4e4c8bb69aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:fc:ad:98:42:37:54:bd:d6:bb:4f:53:05: 8f:e5:eb:db:de:be:80:48:fc:ec:c7:de:39:87:0f: a9:5c:e1:5e:36:db:fa:30:34:d8:b5:ac:54:e8:fc: da:b4:36:86:f9:6c:aa:a3:16:75:10:d0:b1:2a:37: f8:a2:bf:22:6e:06:6e:b7:70:13:b3:59:23:2f:77: 11:b2:ed:b4:8e:71:5f:7e:71:ca:b1:7d:30:10:c0: 51:97:c6:bc:c0:41:13:a9:ab:68:dc:75:c9:8a:d4: e7:62:ae:df:4c:25:ad:20:9a:42:57:3d:d5:70:6d: 16:ba:94:b4:ff:99:f3:4c:e6:f8:4b:eb:ed:ca:74: f7:ed:e8:69:39:0b:c1:10:77:68:34:67:bb:ed:32: 4a:fb:25:cf:a6:37:f8:00:ff:10:31:89:dd:97:dd: 7d:32:d3:9c:d2:90:08:c2:f9:9c:4b:15:10:22:24: 6d:a0:3e:f3:7d:5d:10:c0:c5:8e:81:1f:f6:58:e3: 0c:e6:63:4b:f7:29:ca:fe:44:98:7b:e4:1b:26:8c: 33:06:80:7e:a5:27:2a:8a:5f:f6:6e:dc:bb:88:d2: fc:9d:b4:29:1d:69:11:f3:63:57:00:c3:dd:3d:e5: b9:83:88:ce:23:8f:db:fc:b1:df:3d:81:23:5d:82: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:71:37:33:92:A0:11:BB:E2:F9:DD:96:69:9D:4E:4C:8B:B6:9A:A1 X509v3 Authority Key Identifier: keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ba:ac:30:c8:a5:d5:df:99:f1:9f:40:dc:bc:bb:1f:3a:1d: 46:94:f7:f9:a8:b2:0d:3f:de:4f:83:db:c0:0b:87:5b:b8:d6: 14:f1:38:9c:73:3a:61:12:a1:40:10:d1:c1:ed:6a:9c:5a:e9: d9:aa:10:c1:3a:81:e0:a8:dc:da:dc:7d:a2:c9:e2:e8:cb:aa: 33:c5:41:d9:dd:9a:5c:56:95:04:30:de:5f:dd:7a:29:1f:f5: c6:4c:01:f9:6c:17:d4:04:08:18:65:9b:f9:fe:be:38:d2:da: 36:d0:bf:78:09:86:59:d4:45:a6:66:5a:ba:1f:dd:b3:60:28: 0f:41:ab:2c:7e:09:06:14:ab:43:2b:b6:22:29:1b:c7:66:6d: 6e:4f:f8:5b:2a:06:b4:6a:a7:24:7a:d5:bb:3e:5b:9f:fa:d3: 4e:a8:08:87:4f:5c:d3:07:32:ee:4d:50:21:1e:5a:80:f5:17: 31:22:fc:b6:ff:ce:5c:02:eb:f6:7d:74:78:e8:99:28:65:af: 37:ad:af:b9:e9:f8:29:76:9a:2c:02:6c:03:f3:29:77:5a:87: f8:0f:f9:8c:98:5a:94:1d:7d:fd:00:e3:6f:3b:d9:f5:95:64: 24:3a:db:4c:66:91:ce:dd:38:da:4f:b1:e3:95:10:04:c8:70: c2:91:96:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGYBdQzRVJaL2rmZPCan4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZGJhMWIzNWRlNzM3ZjcxYjdjNTUwZGY1ZjRiNDRlODM2 NDZiOGQwHhcNMjUxMjE1MTMwMDU1WhcNMjUxMjE2MTMwMDU1WjAzMTEwLwYDVQQD EyhhZTcxMzczMzkyYTAxMWJiZTJmOWRkOTY2OTlkNGU0YzhiYjY5YWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y/8rZhCN1S91rtPUwWP5evb3r6A SPzsx945hw+pXOFeNtv6MDTYtaxU6PzatDaG+WyqoxZ1ENCxKjf4or8ibgZut3AT s1kjL3cRsu20jnFffnHKsX0wEMBRl8a8wEETqato3HXJitTnYq7fTCWtIJpCVz3V cG0WupS0/5nzTOb4S+vtynT37ehpOQvBEHdoNGe77TJK+yXPpjf4AP8QMYndl919 MtOc0pAIwvmcSxUQIiRtoD7zfV0QwMWOgR/2WOMM5mNL9ynK/kSYe+QbJowzBoB+ pScqil/2bty7iNL8nbQpHWkR82NXAMPdPeW5g4jOI4/b/LHfPYEjXYKACQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5xNzOSoBG74vndlmmdTkyLtpqhMB8GA1UdIwQY MBaAFCTbobNd5zf3G3xVDfX0tE6DZGuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTVlOWYtZDU0MS00NTY0LTk5NDct ZGEwNGUyZjM5Yjg4LzEvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTVlOWYtZDU0MS00NTY0LTk5NDctZGEwNGUyZjM5Yjg4 LzEvSk51aHMxM25OX2NiZkZVTjlmUzBUb05rYTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirqsMMil 1d+Z8Z9A3Ly7HzodRpT3+aiyDT/eT4PbwAuHW7jWFPE4nHM6YRKhQBDRwe1qnFrp 2aoQwTqB4Kjc2tx9osni6MuqM8VB2d2aXFaVBDDeX916KR/1xkwB+WwX1AQIGGWb +f6+ONLaNtC/eAmGWdRFpmZauh/ds2AoD0GrLH4JBhSrQyu2Iikbx2Ztbk/4WyoG tGqnJHrVuz5bn/rTTqgIh09c0wcy7k1QIR5agPUXMSL8tv/OXALr9n10eOiZKGWv N62vuen4KXaaLAJsA/Mpd1qH+A/5jJhalB19/QDjbzvZ9ZVkJDrbTGaRzt042k+x 45UQBMhwwpGWiw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:01 2025 by rpki-client