This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json) Hash identifier: FdXNZnAjyUgY0z5/6f+bY0Oe7huqIh3H6j7cL2eIJLM= Subject key identifier: 1C:79:89:16:C7:30:D0:01:F2:2E:5F:B8:62:79:67:1F:95:A3:2E:73 Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50 Certificate serial: 019B495E07E2F1761970CAF5AB8F13095A4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft Manifest number: 178C Signing time: Tue 23 Dec 2025 04:00:57 +0000 Manifest this update: Tue 23 Dec 2025 04:00:57 +0000 Manifest next update: Wed 24 Dec 2025 04:00:57 +0000 Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: 5+OMlbEhBgbF7V/u1WLNdzb83nHKt0bv8Bi9rhI0FRg=) 2: e2Te0aWCQ8EtrlV0PLf_q38tHSg.roa (hash: 4ft8eS+VBA6HZC5LW6/i8Z2mYfS+sEEPwTfWda0kvP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:07:e2:f1:76:19:70:ca:f5:ab:8f:13:09:5a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50 Validity Not Before: Dec 23 04:00:57 2025 GMT Not After : Dec 24 04:00:57 2025 GMT Subject: CN=1c798916c730d001f22e5fb86279671f95a32e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:9c:ec:e2:0a:06:76:5f:c8:09:87:b0:9a: ef:50:48:7c:b1:e1:3c:f7:4d:0f:ef:c4:b7:0e:ed: 67:02:3c:37:56:63:68:4a:ce:25:33:9f:3b:e9:1c: 35:7b:dc:3f:e7:3c:14:c2:c9:21:48:f9:b7:ac:c5: ec:92:3f:62:85:31:58:6c:b5:63:33:d5:6b:ba:ab: d0:f3:73:98:83:e1:c5:6f:0d:76:18:ec:09:06:e3: 92:35:ee:26:80:06:f4:21:71:3a:5e:fd:10:94:92: 13:56:e1:d4:ef:9d:3c:ab:cf:c2:00:dd:b6:42:51: cd:59:84:98:ef:c2:91:d1:25:17:c6:70:79:d4:f7: 78:75:8a:30:db:ad:f1:b0:4c:a1:61:8d:ec:74:0e: 24:2f:40:6a:21:4d:04:42:c4:88:c6:26:81:a0:c0: 42:16:2a:61:5a:f4:75:70:8f:40:a6:8f:21:2f:02: df:b9:5e:2e:b4:a2:62:1b:ba:ba:dd:f8:fd:6c:15: 12:07:89:85:3b:8e:a6:f5:d5:72:3a:95:af:4a:38: 1d:ee:e9:d2:19:0e:89:87:a6:5e:2f:70:db:1f:f4: 17:05:68:52:3b:a2:09:9d:d7:44:9a:09:e7:41:64: 02:42:d4:8a:e0:82:99:96:5e:77:77:ea:23:09:66: ee:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:89:16:C7:30:D0:01:F2:2E:5F:B8:62:79:67:1F:95:A3:2E:73 X509v3 Authority Key Identifier: keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:64:35:ff:3b:50:bd:dc:9f:f8:56:df:c7:19:0c:ed:84:28: 45:da:66:7b:5d:a1:7a:1a:2d:13:db:04:c0:cf:17:7b:2b:02: da:b8:32:03:2f:7d:e7:ca:d4:7e:70:40:03:ed:a1:d4:08:cf: 39:c8:62:58:f7:75:12:83:e3:96:5c:23:02:53:0c:90:6c:1b: 8a:e8:92:c7:e6:4d:71:92:e3:8b:b0:ad:47:52:60:f9:52:7c: ae:bb:ec:c1:d2:dc:df:bb:79:1a:65:01:49:12:fd:44:b5:02: 86:c1:f0:ad:e0:e6:ea:6f:17:ba:b0:99:d3:11:a9:bb:ab:f7: 0e:57:d3:e9:b6:cf:67:d9:44:a5:3d:e8:a1:c2:02:ca:51:1c: 77:ec:89:d1:df:80:f7:f5:bf:12:82:aa:88:53:cc:79:27:63: c9:0d:11:26:fb:f3:27:34:4b:5b:84:b4:8a:92:67:70:97:59: c1:df:4e:18:60:d9:b7:cb:c6:28:8c:bb:6c:fd:8d:70:5a:a4: 39:4a:cf:f4:6a:e8:e3:ac:53:c1:22:f2:37:f4:a2:5a:e3:84: c4:10:90:2d:b4:98:45:99:21:50:8c:9c:56:25:2f:19:d6:dc: 6e:6f:97:45:de:7f:67:03:86:e8:f5:31:1c:c8:be:d1:2d:ba: 69:6f:89:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXgfi8XYZcMr1q48TCVpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0 OGFkNTAwHhcNMjUxMjIzMDQwMDU3WhcNMjUxMjI0MDQwMDU3WjAzMTEwLwYDVQQD EygxYzc5ODkxNmM3MzBkMDAxZjIyZTVmYjg2Mjc5NjcxZjk1YTMyZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueic7OIKBnZfyAmHsJrvUEh8seE8 900P78S3Du1nAjw3VmNoSs4lM5876Rw1e9w/5zwUwskhSPm3rMXskj9ihTFYbLVj M9VruqvQ83OYg+HFbw12GOwJBuOSNe4mgAb0IXE6Xv0QlJITVuHU7508q8/CAN22 QlHNWYSY78KR0SUXxnB51Pd4dYow263xsEyhYY3sdA4kL0BqIU0EQsSIxiaBoMBC FiphWvR1cI9Apo8hLwLfuV4utKJiG7q63fj9bBUSB4mFO46m9dVyOpWvSjgd7unS GQ6Jh6ZeL3DbH/QXBWhSO6IJnddEmgnnQWQCQtSK4IKZll53d+ojCWbu8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx5iRbHMNAB8i5fuGJ5Zx+Voy5zMB8GA1UdIwQY MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0 LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGQ1/ztQ vdyf+FbfxxkM7YQoRdpme12hehotE9sEwM8XeysC2rgyAy9958rUfnBAA+2h1AjP OchiWPd1EoPjllwjAlMMkGwbiuiSx+ZNcZLji7CtR1Jg+VJ8rrvswdLc37t5GmUB SRL9RLUChsHwreDm6m8XurCZ0xGpu6v3DlfT6bbPZ9lEpT3oocICylEcd+yJ0d+A 9/W/EoKqiFPMeSdjyQ0RJvvzJzRLW4S0ipJncJdZwd9OGGDZt8vGKIy7bP2NcFqk OUrP9Gro46xTwSLyN/SiWuOExBCQLbSYRZkhUIycViUvGdbcbm+XRd5/ZwOG6PUx HMi+0S26aW+JDg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:42:00 2025 by rpki-client