This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json) Hash identifier: pRMgu/utn0U70s+5mCnPV7S3+db1iqD/CUOzKC6EmYM= Subject key identifier: 61:9D:C6:F9:7F:CB:F6:A6:2C:4B:08:E7:BC:BC:55:BB:82:DA:87:4C Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50 Certificate serial: 019B22BEC2F349929BAAC62A4184F1312529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 16:01:25 +0000 Manifest this update: Mon 15 Dec 2025 16:01:25 +0000 Manifest next update: Tue 16 Dec 2025 16:01:25 +0000 Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: zapkMb1qQzLxKrZI2a3VfJupaOFaLvogVR0oVMPqpMs=) 2: e2Te0aWCQ8EtrlV0PLf_q38tHSg.roa (hash: 4ft8eS+VBA6HZC5LW6/i8Z2mYfS+sEEPwTfWda0kvP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:c2:f3:49:92:9b:aa:c6:2a:41:84:f1:31:25:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50 Validity Not Before: Dec 15 16:01:25 2025 GMT Not After : Dec 16 16:01:25 2025 GMT Subject: CN=619dc6f97fcbf6a62c4b08e7bcbc55bb82da874c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:3d:2d:c8:a9:ea:3b:1e:31:c0:77:48:54: 5c:b3:56:08:f0:db:b2:60:ea:ba:9f:75:b9:61:fc: 8e:86:9c:c0:a9:3f:8d:97:4f:bd:cc:36:f8:16:19: f2:9f:a2:db:b6:b0:fb:3c:94:ba:74:ba:fe:d2:4c: d2:4c:ae:51:33:39:0b:74:11:c7:8c:bd:eb:c0:8c: d1:fa:36:53:46:bd:f6:5a:36:40:f7:e8:68:ab:d1: 21:42:48:41:31:47:50:b4:23:33:f2:f5:cf:fa:0e: 42:8c:ab:06:09:b0:6c:bd:ee:ab:40:16:21:57:b9: bf:69:ee:1c:27:3a:64:00:51:4a:e5:ea:c8:83:1e: 14:68:81:60:ee:c7:59:f8:f0:ed:17:78:43:07:66: f1:97:ad:93:23:0e:af:bb:05:7f:28:6d:89:05:4a: df:e4:32:70:80:80:f9:06:6b:6b:4e:58:55:b9:7a: a9:4b:93:d9:36:76:45:e3:dd:3e:2e:d1:1e:8f:f7: a9:94:37:cd:c4:8e:d7:49:5f:e7:9e:0f:68:d5:b2: 36:02:b2:9a:fa:3f:c2:72:a3:d2:57:36:7d:03:ff: bf:8d:be:d8:00:fe:2c:30:34:ed:48:9e:df:4f:c0: f5:f3:9d:e8:0c:20:45:7d:33:d6:06:da:93:d1:d5: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:C6:F9:7F:CB:F6:A6:2C:4B:08:E7:BC:BC:55:BB:82:DA:87:4C X509v3 Authority Key Identifier: keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:27:40:ff:a6:81:f2:cf:3c:f6:68:00:15:ff:6c:6c:94:0d: 34:bd:2d:6b:9a:76:98:27:72:8b:5e:17:b7:a0:45:fa:78:a4: dd:5b:80:e5:1f:53:3d:9d:da:73:86:45:9f:e3:8a:c6:c6:3c: 0a:00:a3:95:66:81:ce:aa:09:0c:fd:6a:e9:98:c2:e0:da:1a: 1d:38:ef:58:32:68:88:43:7e:fd:e8:44:d4:f5:2f:53:0c:c2: 33:a8:28:53:a6:8b:cd:a2:de:06:a6:81:a2:ca:0a:23:04:d8: c2:af:69:df:89:51:21:55:07:99:c2:34:c5:8b:97:d4:cb:e1: c1:e1:f5:97:75:ec:46:c0:ec:35:dc:13:da:97:12:17:d4:d3: 4e:9b:e0:87:97:35:f1:ec:51:b1:dc:a5:ba:f4:cf:e9:94:7d: 5b:1a:1c:49:76:31:47:73:0c:e1:05:5f:ca:e9:65:9f:e2:7e: f4:b5:b8:0b:30:d2:0c:b2:97:39:19:5d:0f:8e:8d:22:6e:a3: 56:f6:69:64:66:9a:29:67:5b:77:0a:99:a9:e1:46:b5:cb:d3: 78:56:34:6e:86:45:13:06:a2:23:44:3b:ac:68:8c:b0:36:aa: 29:9f:d8:0c:17:84:ed:40:65:6b:9f:8f:72:b0:ff:b8:ab:5f: 9f:0b:bf:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivsLzSZKbqsYqQYTxMSUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0 OGFkNTAwHhcNMjUxMjE1MTYwMTI1WhcNMjUxMjE2MTYwMTI1WjAzMTEwLwYDVQQD Eyg2MTlkYzZmOTdmY2JmNmE2MmM0YjA4ZTdiY2JjNTViYjgyZGE4NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRQ9Lcip6jseMcB3SFRcs1YI8Nuy YOq6n3W5YfyOhpzAqT+Nl0+9zDb4Fhnyn6LbtrD7PJS6dLr+0kzSTK5RMzkLdBHH jL3rwIzR+jZTRr32WjZA9+hoq9EhQkhBMUdQtCMz8vXP+g5CjKsGCbBsve6rQBYh V7m/ae4cJzpkAFFK5erIgx4UaIFg7sdZ+PDtF3hDB2bxl62TIw6vuwV/KG2JBUrf 5DJwgID5BmtrTlhVuXqpS5PZNnZF490+LtEej/eplDfNxI7XSV/nng9o1bI2ArKa +j/CcqPSVzZ9A/+/jb7YAP4sMDTtSJ7fT8D1853oDCBFfTPWBtqT0dUIiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGdxvl/y/amLEsI57y8VbuC2odMMB8GA1UdIwQY MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0 LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSdA/6aB 8s889mgAFf9sbJQNNL0ta5p2mCdyi14Xt6BF+nik3VuA5R9TPZ3ac4ZFn+OKxsY8 CgCjlWaBzqoJDP1q6ZjC4NoaHTjvWDJoiEN+/ehE1PUvUwzCM6goU6aLzaLeBqaB osoKIwTYwq9p34lRIVUHmcI0xYuX1MvhweH1l3XsRsDsNdwT2pcSF9TTTpvgh5c1 8exRsdyluvTP6ZR9WxocSXYxR3MM4QVfyulln+J+9LW4CzDSDLKXORldD46NIm6j VvZpZGaaKWdbdwqZqeFGtcvTeFY0boZFEwaiI0Q7rGiMsDaqKZ/YDBeE7UBla5+P crD/uKtfnwu/ng== -----END CERTIFICATE-----Generated at Mon Dec 15 22:11:30 2025 by rpki-client