This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json) Hash identifier: YXibfytwcUihr2zTqRGXYMKY41i9Ow3x4M3a2BYzsqA= Subject key identifier: 65:CB:FC:7C:E0:41:14:A8:4E:CD:E7:38:4D:58:EC:71:82:04:85:68 Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0 Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0 Certificate serial: 019B33E8EC0488606995E874AA73DBD6FA58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 00:01:01 +0000 Manifest this update: Fri 19 Dec 2025 00:01:01 +0000 Manifest next update: Sat 20 Dec 2025 00:01:01 +0000 Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: lMgizKF1QqgE4aCu0pdQ1HiRmtv4XjeiQdF1ZgeYbTY=) 2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:ec:04:88:60:69:95:e8:74:aa:73:db:d6:fa:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0 Validity Not Before: Dec 19 00:01:01 2025 GMT Not After : Dec 20 00:01:01 2025 GMT Subject: CN=65cbfc7ce04114a84ecde7384d58ec7182048568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:2a:aa:77:a0:74:0d:73:08:d1:ea:e6:b4: f5:c6:b0:85:6b:71:df:d4:65:8b:5e:1a:97:43:dc: 01:67:b8:2d:3b:e4:40:87:69:4e:65:9b:67:47:a2: af:10:4e:18:43:98:78:67:7d:2b:8a:8b:84:04:25: 5d:44:87:27:3d:78:6e:08:17:5a:65:0e:a1:9e:12: 2d:fd:0c:ef:1d:b1:6a:4f:85:e8:ed:76:ea:d2:8e: 8a:d4:b0:c9:ee:8e:6e:3b:d3:47:1b:4c:95:d2:dc: 4a:b1:ea:d9:42:50:fa:bb:30:b6:77:01:00:2c:f7: b1:83:c2:75:f7:32:3d:40:66:f4:f6:3e:b5:cb:df: f8:4a:47:47:a6:41:4f:d0:2a:ee:6e:a4:e5:22:b1: 59:f4:09:4d:ba:d4:e4:d4:60:a8:ed:85:12:bd:ce: 04:aa:cb:58:1f:37:6e:aa:26:07:5c:83:6e:52:e5: 1a:1e:7a:5c:0d:61:a0:4c:5a:1f:b8:6f:80:ef:20: 39:64:d2:76:5c:e1:6f:db:60:92:1f:da:eb:46:ee: 6f:07:5b:13:2a:a9:82:5e:c4:e8:2c:0d:6f:6e:9f: 7c:fc:74:32:3d:c3:b3:40:e7:73:cc:1a:3f:e5:7e: 2a:e8:14:37:89:79:71:d1:47:73:ec:10:9e:82:bd: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:FC:7C:E0:41:14:A8:4E:CD:E7:38:4D:58:EC:71:82:04:85:68 X509v3 Authority Key Identifier: keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:37:35:c0:19:03:07:c7:b1:9c:3b:65:93:bd:33:8c:ff:1e: d1:c1:d0:6f:05:48:5e:98:ea:63:fa:d4:bf:07:83:12:ba:4e: d2:31:79:b0:05:6e:3b:ac:78:bc:91:3b:db:3c:80:91:2b:1c: 5b:68:f7:02:e8:2e:b3:45:36:4d:ba:96:d1:dd:f2:7a:e6:ab: c3:5c:8c:8f:66:bf:2f:a4:cd:9c:72:c2:6d:e3:c4:24:1c:de: 57:9b:69:a2:4c:99:d0:53:86:0f:5d:35:3b:19:a3:c6:1d:c3: 60:ed:15:d3:b3:33:d9:38:42:58:a4:32:f9:f9:ff:58:1f:b7: d9:21:30:cd:0a:f7:20:cc:8a:8d:33:3d:72:ec:82:e1:6e:f5: 8f:5f:25:ec:1a:11:24:0f:00:24:2f:91:5d:06:be:d2:84:d2: c1:8a:d3:81:90:38:1c:78:98:83:09:ec:1f:6d:5d:5b:ea:d0: 2c:0d:d1:06:f0:a1:f7:05:6a:de:aa:82:89:6a:69:39:ba:f6: b0:62:cd:0d:bb:47:ce:3c:b6:81:a9:08:b0:03:74:95:85:d0: a9:00:ef:1b:31:45:03:e1:6c:98:cc:61:2d:9f:a4:b0:df:a4: 59:5f:b0:d6:f4:8e:e8:93:ae:21:01:c7:47:42:71:41:27:57: 00:c9:4a:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6OwEiGBpleh0qnPb1vpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZWNkMTNhZTAyN2YzN2YwMzg2Mjc0OTM0NzA0NGEyNjIw MjhlYjAwHhcNMjUxMjE5MDAwMTAxWhcNMjUxMjIwMDAwMTAxWjAzMTEwLwYDVQQD Eyg2NWNiZmM3Y2UwNDExNGE4NGVjZGU3Mzg0ZDU4ZWM3MTgyMDQ4NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+8qqnegdA1zCNHq5rT1xrCFa3Hf 1GWLXhqXQ9wBZ7gtO+RAh2lOZZtnR6KvEE4YQ5h4Z30riouEBCVdRIcnPXhuCBda ZQ6hnhIt/QzvHbFqT4Xo7Xbq0o6K1LDJ7o5uO9NHG0yV0txKserZQlD6uzC2dwEA LPexg8J19zI9QGb09j61y9/4SkdHpkFP0CrubqTlIrFZ9AlNutTk1GCo7YUSvc4E qstYHzduqiYHXINuUuUaHnpcDWGgTFofuG+A7yA5ZNJ2XOFv22CSH9rrRu5vB1sT KqmCXsToLA1vbp98/HQyPcOzQOdzzBo/5X4q6BQ3iXlx0Udz7BCegr3Y+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXL/HzgQRSoTs3nOE1Y7HGCBIVoMB8GA1UdIwQY MBaAFCTs0TrgJ/N/A4YnSTRwRKJiAo6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMt OWMwYTllOGI3OGUxLzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMtOWMwYTllOGI3OGUx LzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTc1wBkD B8exnDtlk70zjP8e0cHQbwVIXpjqY/rUvweDErpO0jF5sAVuO6x4vJE72zyAkSsc W2j3Augus0U2TbqW0d3yeuarw1yMj2a/L6TNnHLCbePEJBzeV5tpokyZ0FOGD101 Oxmjxh3DYO0V07Mz2ThCWKQy+fn/WB+32SEwzQr3IMyKjTM9cuyC4W71j18l7BoR JA8AJC+RXQa+0oTSwYrTgZA4HHiYgwnsH21dW+rQLA3RBvCh9wVq3qqCiWppObr2 sGLNDbtHzjy2gakIsAN0lYXQqQDvGzFFA+FsmMxhLZ+ksN+kWV+w1vSO6JOuIQHH R0JxQSdXAMlK3A== -----END CERTIFICATE-----Generated at Fri Dec 19 03:46:31 2025 by rpki-client