This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json) Hash identifier: njNF2+myVcBOcE0v6fQ4Q2DbcCwBH0VIZBsSZzsnD9w= Subject key identifier: D6:D3:31:9E:46:11:7F:70:98:51:5F:69:14:B8:2A:A5:6D:E9:77:3B Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30 Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530 Certificate serial: 019B34C45687E059C66C4B89F0961D802744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 04:00:40 +0000 Manifest this update: Fri 19 Dec 2025 04:00:40 +0000 Manifest next update: Sat 20 Dec 2025 04:00:40 +0000 Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: PMF2iMitKplJQzarf7tGm6mUcStgrsq3qoo+p9/qkR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:56:87:e0:59:c6:6c:4b:89:f0:96:1d:80:27:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530 Validity Not Before: Dec 19 04:00:40 2025 GMT Not After : Dec 20 04:00:40 2025 GMT Subject: CN=d6d3319e46117f7098515f6914b82aa56de9773b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:c1:c7:71:4d:30:3a:f6:d4:56:1c:b9:85: 7f:14:fd:26:8f:79:fe:44:0c:48:8d:73:6e:11:af: 8a:41:10:ea:59:be:71:0d:b7:8c:ac:b0:ca:d1:65: d2:52:a3:27:55:6c:e2:9c:52:09:29:f8:78:e4:d6: 3f:f5:20:f9:6c:7f:75:91:91:b7:a1:59:99:30:e9: 03:11:07:d8:8a:b9:1d:a3:1b:48:b8:b3:ec:05:23: c9:71:18:4f:32:c1:c4:27:db:55:28:09:5a:4e:12: c4:0f:4b:d9:9c:a2:66:cd:23:8c:02:86:b5:07:1b: 69:d9:47:15:bb:7c:91:72:ce:63:d1:bd:9b:13:d1: 83:44:9a:38:55:29:90:c1:dd:01:9d:d9:82:49:68: 5d:bb:5f:03:54:fb:26:7c:eb:3a:12:bf:13:48:49: 89:1f:9f:17:96:1d:8e:02:d0:70:4a:cd:1e:2a:65: c0:5d:24:eb:9c:3f:c0:4f:cd:45:48:7f:d1:43:79: d1:be:f2:93:05:cc:f6:b4:ad:d9:e4:87:5c:5a:26: 51:41:72:90:ff:04:7b:99:59:e7:86:38:b5:f9:2d: 1a:7b:b2:69:dc:26:22:73:c1:4d:3d:7f:6e:a9:10: 2b:30:0b:2f:64:54:e1:b2:a3:42:ce:af:32:44:cd: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D3:31:9E:46:11:7F:70:98:51:5F:69:14:B8:2A:A5:6D:E9:77:3B X509v3 Authority Key Identifier: keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c3:73:69:43:ff:b3:26:c7:f1:5c:f7:37:40:b6:06:21:71: bd:3b:de:8d:2a:57:fa:43:f9:3d:24:cd:65:7d:09:bf:2f:13: e2:37:ae:4c:03:88:e9:f8:35:52:70:68:96:33:6d:8e:af:12: 1f:09:a4:4c:1c:c2:57:84:71:94:73:99:0d:90:7b:49:94:3a: a3:6b:a2:35:6c:12:fc:ab:dc:2a:6b:df:f6:cb:59:b9:f5:ec: ae:b7:0f:f8:59:1c:ba:54:e8:7a:52:ce:db:b6:e9:bb:34:ce: a2:59:c7:de:33:f7:b4:94:f5:1f:aa:f8:94:e7:a5:c8:14:4a: 3f:4f:98:4b:b6:90:af:44:83:7b:e8:c2:21:69:d4:96:00:0e: 11:04:15:3f:79:0e:84:09:1f:a7:00:e1:41:2c:6d:9a:53:96: c0:47:43:7c:da:cb:0b:14:80:af:38:5c:23:42:bb:82:f3:44: e7:78:40:b1:c1:30:c8:4e:91:a7:c6:71:fa:65:b0:4e:e3:3a: 1f:14:dc:65:c1:9f:f2:33:60:ea:af:13:0f:b2:aa:a6:32:89: f9:80:2a:c7:00:7a:a8:a8:62:74:db:d8:99:d6:14:10:04:4f: 27:72:ff:fd:1f:0d:6a:88:cb:92:a1:62:69:b4:e2:9c:8b:8d: 9c:fe:8e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xFaH4FnGbEuJ8JYdgCdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MmIwNGMzMTk5YjFlYjk2OTNkNDMyMGY3YmQzNjFlZDYx NzA1MzAwHhcNMjUxMjE5MDQwMDQwWhcNMjUxMjIwMDQwMDQwWjAzMTEwLwYDVQQD EyhkNmQzMzE5ZTQ2MTE3ZjcwOTg1MTVmNjkxNGI4MmFhNTZkZTk3NzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOzBx3FNMDr21FYcuYV/FP0mj3n+ RAxIjXNuEa+KQRDqWb5xDbeMrLDK0WXSUqMnVWzinFIJKfh45NY/9SD5bH91kZG3 oVmZMOkDEQfYirkdoxtIuLPsBSPJcRhPMsHEJ9tVKAlaThLED0vZnKJmzSOMAoa1 Bxtp2UcVu3yRcs5j0b2bE9GDRJo4VSmQwd0BndmCSWhdu18DVPsmfOs6Er8TSEmJ H58Xlh2OAtBwSs0eKmXAXSTrnD/AT81FSH/RQ3nRvvKTBcz2tK3Z5IdcWiZRQXKQ /wR7mVnnhji1+S0ae7Jp3CYic8FNPX9uqRArMAsvZFThsqNCzq8yRM3eIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbTMZ5GEX9wmFFfaRS4KqVt6Xc7MB8GA1UdIwQY MBaAFCQrBMMZmx65aT1DIPe9Nh7WFwUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wYzAyYzAtNTY5Yy00NWVhLWIwNWIt NjZiNjdlMjFhODJiLzEvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wYzAyYzAtNTY5Yy00NWVhLWIwNWItNjZiNjdlMjFhODJi LzEvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsNzaUP/ sybH8Vz3N0C2BiFxvTvejSpX+kP5PSTNZX0Jvy8T4jeuTAOI6fg1UnBoljNtjq8S HwmkTBzCV4RxlHOZDZB7SZQ6o2uiNWwS/KvcKmvf9stZufXsrrcP+FkculToelLO 27bpuzTOolnH3jP3tJT1H6r4lOelyBRKP0+YS7aQr0SDe+jCIWnUlgAOEQQVP3kO hAkfpwDhQSxtmlOWwEdDfNrLCxSArzhcI0K7gvNE53hAscEwyE6Rp8Zx+mWwTuM6 HxTcZcGf8jNg6q8TD7KqpjKJ+YAqxwB6qKhidNvYmdYUEARPJ3L//R8NaojLkqFi abTinIuNnP6OWw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:08:16 2025 by rpki-client