This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft File: JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json) Hash identifier: cTIuZR+nzDsKcSsNdtguy1XMx/Qk0kPXChZdhYLom+Y= Subject key identifier: 9B:8A:55:D4:ED:C2:1C:EE:CC:EA:10:52:E9:1B:D5:6B:24:08:B8:1E Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97 Certificate issuer: /CN=25a3f511d0095606a525084ae460836dc5d24397 Certificate serial: 019B3AFDA1F69BAF637144D23D346908F1D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 09:00:58 +0000 Manifest this update: Sat 20 Dec 2025 09:00:58 +0000 Manifest next update: Sun 21 Dec 2025 09:00:58 +0000 Files and hashes: 1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: VwBmeUnwSl+S7F7pDbBHBAnSfLQr4tfG9Ea3NGyg+CQ=) 2: amXQGDZKy47wA0u5iNrCG12G65E.roa (hash: 1n+UabIeiKZ85p6BFII330KVf+1vpRK87qkxEEsolHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:a1:f6:9b:af:63:71:44:d2:3d:34:69:08:f1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397 Validity Not Before: Dec 20 09:00:58 2025 GMT Not After : Dec 21 09:00:58 2025 GMT Subject: CN=9b8a55d4edc21ceeccea1052e91bd56b2408b81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:97:ac:d7:a3:b5:c2:42:be:e0:21:13:96: 09:70:c0:23:32:7f:43:ac:06:0a:e8:f5:5a:30:bf: 7d:bc:02:a6:4f:a6:fe:24:89:92:72:46:38:13:12: 85:94:12:0d:00:12:42:23:5a:36:d8:2e:9b:af:1f: 42:34:d0:d2:89:6f:a7:ab:35:1d:2d:4c:9d:90:16: 50:22:c8:a1:bc:e6:34:ee:f1:5a:3a:7f:1e:3b:9b: 5e:2f:a5:b2:44:7f:50:98:1a:d2:fb:b3:90:1f:20: 73:c0:11:d6:5d:35:47:79:30:a3:ef:b3:16:fb:cf: 4b:d7:8b:f8:d7:36:ea:a4:e2:c9:8e:67:36:bc:32: 9a:52:ec:4d:4a:f9:48:ab:98:1a:c3:f3:b8:8a:f2: 3b:9c:e0:3b:72:57:5e:ea:98:bc:d6:fd:40:a1:2f: 84:21:0e:58:25:9c:68:f1:91:88:9f:ca:b9:e0:93: 4c:85:82:4c:4c:2f:1d:cc:3a:23:4d:74:c6:97:ba: 5e:0d:a1:34:30:e2:7a:9d:db:76:7b:3e:92:4a:78: 53:da:a2:d9:9d:20:30:86:98:52:6a:53:ec:56:c1: 8c:56:c2:b8:06:47:e2:8e:a8:9f:52:f4:13:30:98: 5f:97:88:88:90:32:c9:6d:2a:17:ed:75:1d:91:11: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:55:D4:ED:C2:1C:EE:CC:EA:10:52:E9:1B:D5:6B:24:08:B8:1E X509v3 Authority Key Identifier: keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9f:be:72:6b:74:d7:ec:1a:12:50:32:94:c4:77:6b:d3:85: 28:5b:1e:c2:c0:08:a1:e3:86:05:3c:5e:46:97:92:af:0d:9f: 2e:69:87:fa:85:71:4b:4d:02:aa:fe:9c:fd:1e:88:93:b6:4b: 41:e5:aa:22:92:98:4b:31:21:64:fc:21:0e:4f:1d:d9:15:da: 42:15:46:ea:64:1b:b9:c5:a2:a3:7f:45:c8:c2:43:1b:bb:61: b3:98:ef:81:48:ad:e1:61:8d:03:b9:8e:4f:c7:a5:8b:a5:a5: 51:bd:41:46:71:e1:b6:0b:2c:1f:01:e2:74:74:74:c9:bb:5c: 7f:44:e6:0a:8f:fd:6c:55:01:1b:02:48:66:2a:9a:c2:68:bd: 78:b9:06:1a:91:00:99:af:7f:72:b4:29:ce:c2:a1:fb:3a:e2: 70:d3:6c:74:ba:96:01:29:6f:93:b3:40:b7:0e:d2:e0:d1:cd: e8:17:2d:a1:2c:9a:43:4b:0e:eb:81:da:61:ca:b4:af:5e:15: a5:50:2c:72:07:13:c9:40:ca:8b:b1:89:0e:2e:34:81:17:8f: 4a:9c:41:cc:9a:f8:b8:b9:f7:26:df:55:de:1c:07:9d:1c:28: 38:a1:90:8c:ab:ef:87:c7:8c:1c:e9:3f:bf:06:ca:05:61:e6: 9f:01:6c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/aH2m69jcUTSPTRpCPHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTNmNTExZDAwOTU2MDZhNTI1MDg0YWU0NjA4MzZkYzVk MjQzOTcwHhcNMjUxMjIwMDkwMDU4WhcNMjUxMjIxMDkwMDU4WjAzMTEwLwYDVQQD Eyg5YjhhNTVkNGVkYzIxY2VlY2NlYTEwNTJlOTFiZDU2YjI0MDhiODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjOXrNejtcJCvuAhE5YJcMAjMn9D rAYK6PVaML99vAKmT6b+JImSckY4ExKFlBINABJCI1o22C6brx9CNNDSiW+nqzUd LUydkBZQIsihvOY07vFaOn8eO5teL6WyRH9QmBrS+7OQHyBzwBHWXTVHeTCj77MW +89L14v41zbqpOLJjmc2vDKaUuxNSvlIq5gaw/O4ivI7nOA7clde6pi81v1AoS+E IQ5YJZxo8ZGIn8q54JNMhYJMTC8dzDojTXTGl7peDaE0MOJ6ndt2ez6SSnhT2qLZ nSAwhphSalPsVsGMVsK4BkfijqifUvQTMJhfl4iIkDLJbSoX7XUdkRFojwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuKVdTtwhzuzOoQUukb1WskCLgeMB8GA1UdIwQY MBaAFCWj9RHQCVYGpSUISuRgg23F0kOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYt ZThiNzBhYTQ0MmZkLzEvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYtZThiNzBhYTQ0MmZk LzEvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJ++cmt0 1+waElAylMR3a9OFKFsewsAIoeOGBTxeRpeSrw2fLmmH+oVxS00Cqv6c/R6Ik7ZL QeWqIpKYSzEhZPwhDk8d2RXaQhVG6mQbucWio39FyMJDG7ths5jvgUit4WGNA7mO T8eli6WlUb1BRnHhtgssHwHidHR0ybtcf0TmCo/9bFUBGwJIZiqawmi9eLkGGpEA ma9/crQpzsKh+zricNNsdLqWASlvk7NAtw7S4NHN6BctoSyaQ0sO64HaYcq0r14V pVAscgcTyUDKi7GJDi40gRePSpxBzJr4uLn3Jt9V3hwHnRwoOKGQjKvvh8eMHOk/ vwbKBWHmnwFs+A== -----END CERTIFICATE-----Generated at Sat Dec 20 17:50:02 2025 by rpki-client