This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json) Hash identifier: +AcPvHNR9kGWrgIVJw43DEiPaVCU/RXANlPNjr2TvvQ= Subject key identifier: 26:3E:37:5F:1C:79:C7:87:B0:51:59:24:CC:FB:1D:1D:E4:DA:22:F4 Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Certificate serial: 019B4815C527123090724685F0B511D1909D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft Manifest number: 1720 Signing time: Mon 22 Dec 2025 22:02:24 +0000 Manifest this update: Mon 22 Dec 2025 22:02:24 +0000 Manifest next update: Tue 23 Dec 2025 22:02:24 +0000 Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: AksZBH2ZurCV36dZfmrc8bFEFzPnWE8XO8DQ9PIuxrw=) 2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:c5:27:12:30:90:72:46:85:f0:b5:11:d1:90:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Validity Not Before: Dec 22 22:02:24 2025 GMT Not After : Dec 23 22:02:24 2025 GMT Subject: CN=263e375f1c79c787b0515924ccfb1d1de4da22f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:33:6b:f7:e1:4e:5a:74:dc:83:b3:fe:ce: 9c:d6:d7:22:70:d7:f3:68:d1:32:6f:a3:25:74:e2: 10:fd:7b:0d:79:d4:7f:f3:10:f9:92:0a:60:68:e2: 67:a2:62:e8:60:49:4f:7c:a5:ac:c9:1a:ff:7b:b5: 1a:15:55:8b:71:84:65:da:af:97:27:62:ab:6e:b7: 74:1e:0a:9c:0e:ad:46:62:df:5e:01:b5:12:17:3d: 27:ed:7f:30:b0:40:f3:fc:95:0c:b8:e1:02:64:7b: 45:ed:c2:33:f9:63:96:65:5e:43:71:b9:ae:f1:72: 53:80:f6:06:29:b0:44:21:df:fb:c1:a0:33:cd:c1: 9c:f3:fa:4b:ed:ca:83:e3:28:d4:10:eb:d8:4f:83: b6:ec:23:ed:b9:90:f7:09:21:cd:85:cd:2d:5e:bb: 7d:f8:42:b7:dc:cd:48:51:6b:34:70:50:b4:9e:cd: fe:f8:d2:c6:db:fd:59:e4:91:c5:01:37:c2:ff:64: 74:c0:e6:08:19:ee:88:8d:5f:46:6f:8a:f9:a9:3c: 64:8b:57:13:fa:5d:2c:94:4b:60:49:b4:16:5d:3e: 4c:b5:dd:4a:eb:ac:26:9d:40:44:b2:6e:13:fc:ad: ea:3e:22:1b:33:f7:9b:0a:d0:60:c6:8b:19:70:2c: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3E:37:5F:1C:79:C7:87:B0:51:59:24:CC:FB:1D:1D:E4:DA:22:F4 X509v3 Authority Key Identifier: keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:84:96:23:20:98:b8:15:98:97:c0:fc:15:83:1b:83:7b:e2: 50:13:b4:b3:dc:77:a4:35:09:50:48:c4:e2:de:87:36:da:62: 8c:43:b0:d7:66:96:e9:e4:69:46:4b:0c:da:c1:47:e1:08:7d: d6:b8:a1:59:62:5a:af:77:53:12:67:2d:22:2d:cc:3a:a2:7e: f3:31:61:a2:96:99:bb:2f:7b:1f:64:11:58:53:59:3b:a6:c8: ed:f6:aa:8b:4d:60:93:cd:1b:51:e0:6f:d5:f1:67:77:99:0a: 13:52:85:14:da:72:d4:34:4f:46:27:51:a2:2f:36:19:b5:76: 6f:e0:7e:b4:6e:b2:88:27:f9:35:5a:7d:8c:52:d0:56:17:08: 92:f9:21:c3:d3:d7:31:45:a4:47:dc:2f:1c:37:1e:4f:17:de: 64:e7:af:5f:e8:4d:c0:41:b5:f4:dc:16:2e:5e:e0:7d:86:79: ac:95:cc:27:80:57:f9:e1:d6:3b:ed:9c:d1:df:fd:92:df:df: ce:92:39:7b:ee:f4:57:1b:58:4f:39:2d:85:79:aa:2e:aa:86: b2:71:e6:86:c3:f2:26:fa:fa:27:f4:c6:ea:b4:24:2e:12:e3: 3e:7f:9f:12:d9:09:4d:f2:1c:9f:10:a0:a2:99:c7:1b:d2:14: f4:6d:99:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFcUnEjCQckaF8LUR0ZCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj NjZjNTIwHhcNMjUxMjIyMjIwMjI0WhcNMjUxMjIzMjIwMjI0WjAzMTEwLwYDVQQD EygyNjNlMzc1ZjFjNzljNzg3YjA1MTU5MjRjY2ZiMWQxZGU0ZGEyMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFQza/fhTlp03IOz/s6c1tcicNfz aNEyb6MldOIQ/XsNedR/8xD5kgpgaOJnomLoYElPfKWsyRr/e7UaFVWLcYRl2q+X J2Krbrd0HgqcDq1GYt9eAbUSFz0n7X8wsEDz/JUMuOECZHtF7cIz+WOWZV5Dcbmu 8XJTgPYGKbBEId/7waAzzcGc8/pL7cqD4yjUEOvYT4O27CPtuZD3CSHNhc0tXrt9 +EK33M1IUWs0cFC0ns3++NLG2/1Z5JHFATfC/2R0wOYIGe6IjV9Gb4r5qTxki1cT +l0slEtgSbQWXT5Mtd1K66wmnUBEsm4T/K3qPiIbM/ebCtBgxosZcCwNnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY+N18ceceHsFFZJMz7HR3k2iL0MB8GA1UdIwQY MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2 LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4SWIyCY uBWYl8D8FYMbg3viUBO0s9x3pDUJUEjE4t6HNtpijEOw12aW6eRpRksM2sFH4Qh9 1rihWWJar3dTEmctIi3MOqJ+8zFhopaZuy97H2QRWFNZO6bI7faqi01gk80bUeBv 1fFnd5kKE1KFFNpy1DRPRidRoi82GbV2b+B+tG6yiCf5NVp9jFLQVhcIkvkhw9PX MUWkR9wvHDceTxfeZOevX+hNwEG19NwWLl7gfYZ5rJXMJ4BX+eHWO+2c0d/9kt/f zpI5e+70VxtYTzkthXmqLqqGsnHmhsPyJvr6J/TG6rQkLhLjPn+fEtkJTfIcnxCg opnHG9IU9G2ZmA== -----END CERTIFICATE-----Generated at Tue Dec 23 05:50:27 2025 by rpki-client