This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft File: JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft (raw, json) Hash identifier: PC49ZZy9SGRdJoqc2qHV7gAPUU5/6QsOJ+mrBAmqA3Y= Subject key identifier: 61:8C:24:45:42:5C:2C:AD:8D:49:40:A8:02:E7:B2:83:91:87:F6:1C Authority key identifier: 24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69 Certificate issuer: /CN=24e940db190b692cd1b0d583edb6d8c361124569 Certificate serial: 019B1B3C443A0CCFEDD419028CBB0807980F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft Manifest number: 0205 Signing time: Sun 14 Dec 2025 05:01:32 +0000 Manifest this update: Sun 14 Dec 2025 05:01:32 +0000 Manifest next update: Mon 15 Dec 2025 05:01:32 +0000 Files and hashes: 1: JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl (hash: siJWJhbb52oXaWc4PN3B7mIflGN4NFbkFFWqDPJnY4w=) 2: NDyL4QmyZMdWfVseu9H3PyESraU.roa (hash: 2KgZJolbNaz+51AuiNXbaQEgEsCh7UoocaNukepjnzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:44:3a:0c:cf:ed:d4:19:02:8c:bb:08:07:98:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e940db190b692cd1b0d583edb6d8c361124569 Validity Not Before: Dec 14 05:01:32 2025 GMT Not After : Dec 15 05:01:32 2025 GMT Subject: CN=618c2445425c2cad8d4940a802e7b2839187f61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:23:1a:30:ae:0a:12:e9:17:5b:29:a6:e8: 00:77:6b:70:40:a1:12:6a:ec:9a:f4:a8:b2:49:a1: 2a:80:47:a3:e2:d8:65:4c:ff:d6:d9:d0:c2:55:67: 1a:5e:30:57:c4:2b:de:f6:f0:75:ef:b7:a8:21:90: a7:cb:56:a8:32:17:20:1d:c1:85:b9:b4:72:59:bf: 66:50:2d:df:a2:99:5b:09:23:01:ee:42:d4:1b:62: 78:82:84:65:06:dd:a0:a5:6f:81:5d:ef:5c:36:83: d7:89:43:d9:92:29:58:c6:a6:14:10:b7:b8:e7:6c: 47:52:c4:2f:61:50:fd:86:c6:a2:fe:55:73:4d:e5: 6e:1a:47:b0:88:38:1b:3b:ae:e7:f1:dc:33:2f:f7: ea:64:9d:59:2f:f5:1f:80:ea:58:e7:61:d5:2e:ac: 65:e6:7f:21:6f:32:5a:be:be:d4:02:c3:b9:91:aa: b3:25:4f:5a:c9:0f:6f:1f:d8:c7:83:3c:0e:9e:7f: 15:4b:58:86:15:77:45:b3:b6:79:93:bf:79:80:f1: 49:f7:10:55:79:5a:a2:e6:00:96:e6:70:ab:1b:9f: bc:bf:f8:74:25:38:e5:96:d2:e0:8e:14:fa:e6:2c: d8:57:a3:e1:16:86:28:9d:16:4d:0b:f5:13:b2:4a: 9e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8C:24:45:42:5C:2C:AD:8D:49:40:A8:02:E7:B2:83:91:87:F6:1C X509v3 Authority Key Identifier: keyid:24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:71:f3:84:0d:6a:f2:13:ca:5f:c4:d8:90:bd:5d:26:38:80: 4a:a0:f5:2f:e2:6c:f5:db:a0:29:a9:d0:48:4e:08:eb:41:c1: a2:90:a6:d7:22:28:b4:c8:1e:68:34:7e:a1:62:5d:8a:ce:fd: fa:05:f6:6d:ed:bc:38:65:e6:8b:77:10:12:be:a1:48:c0:b0: 8d:f5:9c:59:ee:b5:46:d6:5f:55:b2:f9:c8:26:cd:32:6c:83: d7:14:8d:79:b6:18:c1:b3:2a:e9:84:e9:16:2a:a0:46:bb:f0: 64:f7:74:e0:89:66:f2:87:14:63:16:2b:41:ac:7c:12:1c:e4: 06:cb:36:bf:de:4f:5e:97:07:51:85:b7:be:36:0b:6e:d4:6e: cb:82:82:f1:7d:b4:aa:03:b6:17:c0:4c:62:45:83:c8:f9:79: 0f:99:09:69:85:71:31:b9:4a:7b:fe:e0:62:6f:a7:a6:58:87: f6:d9:98:26:05:6a:11:7f:9c:af:c0:a3:99:e1:09:7f:41:9c: ff:be:e5:26:26:7a:d3:ce:71:39:f3:b8:a8:66:47:12:be:ba: d2:33:5c:b7:4a:38:dd:ae:da:7b:68:4f:29:57:f3:4d:4f:30: 12:a9:b5:83:0f:a5:a8:ef:17:64:cb:b2:4b:74:49:19:cc:06: e7:01:37:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPEQ6DM/t1BkCjLsIB5gPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZTk0MGRiMTkwYjY5MmNkMWIwZDU4M2VkYjZkOGMzNjEx MjQ1NjkwHhcNMjUxMjE0MDUwMTMyWhcNMjUxMjE1MDUwMTMyWjAzMTEwLwYDVQQD Eyg2MThjMjQ0NTQyNWMyY2FkOGQ0OTQwYTgwMmU3YjI4MzkxODdmNjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5QjGjCuChLpF1sppugAd2twQKES auya9KiySaEqgEej4thlTP/W2dDCVWcaXjBXxCve9vB177eoIZCny1aoMhcgHcGF ubRyWb9mUC3foplbCSMB7kLUG2J4goRlBt2gpW+BXe9cNoPXiUPZkilYxqYUELe4 52xHUsQvYVD9hsai/lVzTeVuGkewiDgbO67n8dwzL/fqZJ1ZL/UfgOpY52HVLqxl 5n8hbzJavr7UAsO5kaqzJU9ayQ9vH9jHgzwOnn8VS1iGFXdFs7Z5k795gPFJ9xBV eVqi5gCW5nCrG5+8v/h0JTjlltLgjhT65izYV6PhFoYonRZNC/UTskqezQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGMJEVCXCytjUlAqALnsoORh/YcMB8GA1UdIwQY MBaAFCTpQNsZC2ks0bDVg+222MNhEkVpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk9sQTJ4a0xhU3pSc05XRDdiYll3MkVTUldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NTAyNWQtMDYxYS00ZDk2LWE3ZDIt ZjU4OWY4YzAzMmNhLzEvSk9sQTJ4a0xhU3pSc05XRDdiYll3MkVTUldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83NTAyNWQtMDYxYS00ZDk2LWE3ZDItZjU4OWY4YzAzMmNh LzEvSk9sQTJ4a0xhU3pSc05XRDdiYll3MkVTUldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3HzhA1q 8hPKX8TYkL1dJjiASqD1L+Js9dugKanQSE4I60HBopCm1yIotMgeaDR+oWJdis79 +gX2be28OGXmi3cQEr6hSMCwjfWcWe61RtZfVbL5yCbNMmyD1xSNebYYwbMq6YTp FiqgRrvwZPd04Ilm8ocUYxYrQax8EhzkBss2v95PXpcHUYW3vjYLbtRuy4KC8X20 qgO2F8BMYkWDyPl5D5kJaYVxMblKe/7gYm+npliH9tmYJgVqEX+cr8CjmeEJf0Gc /77lJiZ6085xOfO4qGZHEr660jNct0o43a7ae2hPKVfzTU8wEqm1gw+lqO8XZMuy S3RJGcwG5wE3fQ== -----END CERTIFICATE-----Generated at Sun Dec 14 09:34:39 2025 by rpki-client