This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json) Hash identifier: pE4fQYtakDZN+VVr5P+C3x3WIBxAWH1k0+kDBYrLLHw= Subject key identifier: 81:C0:3B:05:3A:BF:79:75:F8:80:1F:BA:F3:9F:C9:3F:A5:B6:FB:D5 Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Certificate serial: 019B3A8FFAB8AFD4760B0FAF945E469BC2C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 07:01:12 +0000 Manifest this update: Sat 20 Dec 2025 07:01:12 +0000 Manifest next update: Sun 21 Dec 2025 07:01:12 +0000 Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: NJeN0KvNlZZOA5TlOq4lSXqWj3gHybahrra1n2ha+K4=) 2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:fa:b8:af:d4:76:0b:0f:af:94:5e:46:9b:c2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Validity Not Before: Dec 20 07:01:12 2025 GMT Not After : Dec 21 07:01:12 2025 GMT Subject: CN=81c03b053abf7975f8801fbaf39fc93fa5b6fbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:d7:4e:83:8f:96:82:c9:28:05:b5:01:70: fd:ff:b6:54:5e:0f:c1:75:bc:45:8f:97:fe:25:ee: 8f:7c:75:7a:dc:7f:45:bf:38:ed:ba:b7:81:07:a5: 03:da:0b:17:17:a4:2e:bb:37:eb:ec:33:8a:89:cf: f2:d2:d1:9c:67:99:f9:47:23:53:1f:98:c1:e9:a3: 36:e3:2b:0e:44:4d:e9:d6:34:5c:98:4a:95:f5:54: 60:cd:c7:43:0c:9f:ce:04:fb:6b:41:7e:3e:c9:52: cd:dc:61:7f:d7:ed:23:9b:83:93:9b:16:a1:21:60: 83:b3:bc:e9:b8:ca:df:d1:4a:32:b7:69:d4:45:c6: 6f:66:1f:35:9b:25:80:17:ea:62:2b:6d:b6:1c:33: d2:59:d5:df:83:7c:fa:e5:b0:07:9d:70:97:35:33: 7f:f9:eb:8a:f8:3b:bc:a0:36:8d:d4:cb:b1:59:43: e1:0d:4b:b3:d8:02:f3:af:40:bc:89:b8:bb:2a:d2: e2:88:b3:22:0f:fc:d8:c8:33:ee:54:6b:01:a7:b3: e6:e7:0e:b5:1f:48:55:66:37:8b:9a:a8:d4:eb:da: e1:e6:6b:2a:67:0b:37:41:eb:8b:40:eb:6d:58:9a: 68:58:9a:e2:66:6d:2e:e9:67:d3:a5:30:12:49:8b: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:3B:05:3A:BF:79:75:F8:80:1F:BA:F3:9F:C9:3F:A5:B6:FB:D5 X509v3 Authority Key Identifier: keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c1:f9:a8:d0:4c:ab:dd:b1:96:91:99:78:75:dc:d1:5e:86: 2a:77:5c:36:56:44:93:51:3f:a6:98:eb:c7:19:e8:23:28:cb: 9d:fa:97:74:0b:49:1d:ae:0b:cb:d0:8c:7c:0d:ef:97:29:38: 4b:33:03:b5:d4:07:af:77:4d:a2:46:c6:98:b9:25:bd:de:76: 53:be:9b:0c:d7:a7:a2:05:05:e1:4b:8f:13:00:e8:09:25:88: 07:f5:59:dd:90:b1:98:76:26:fd:9a:ee:1c:0e:91:f4:f7:0c: f8:3e:e0:94:23:4e:bd:d6:15:a8:fb:72:1f:67:b3:c4:c3:60: 84:d4:db:07:75:bb:87:9c:00:69:71:e4:8f:d6:26:75:92:ed: 4f:01:90:97:94:d7:f0:ac:21:20:0a:8c:5b:1e:a8:17:5d:be: 27:77:04:3e:e9:14:11:cd:26:05:a6:aa:73:10:46:48:80:7d: 4e:7a:ab:93:25:29:41:d4:0f:97:d8:e9:6d:25:10:58:76:66: 72:59:df:14:e0:48:91:bc:6b:3e:a8:7d:ff:ed:35:4a:49:92: 29:95:28:13:c9:0c:f7:17:0d:8f:ed:e8:d6:8e:8d:69:32:d2: a4:8f:64:92:75:86:69:0e:8d:1f:16:dc:9d:f2:34:38:1a:ee: 56:54:f1:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j/q4r9R2Cw+vlF5Gm8LCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj NjZjNTIwHhcNMjUxMjIwMDcwMTEyWhcNMjUxMjIxMDcwMTEyWjAzMTEwLwYDVQQD Eyg4MWMwM2IwNTNhYmY3OTc1Zjg4MDFmYmFmMzlmYzkzZmE1YjZmYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YbXToOPloLJKAW1AXD9/7ZUXg/B dbxFj5f+Je6PfHV63H9FvzjtureBB6UD2gsXF6Quuzfr7DOKic/y0tGcZ5n5RyNT H5jB6aM24ysORE3p1jRcmEqV9VRgzcdDDJ/OBPtrQX4+yVLN3GF/1+0jm4OTmxah IWCDs7zpuMrf0Uoyt2nURcZvZh81myWAF+piK222HDPSWdXfg3z65bAHnXCXNTN/ +euK+Du8oDaN1MuxWUPhDUuz2ALzr0C8ibi7KtLiiLMiD/zYyDPuVGsBp7Pm5w61 H0hVZjeLmqjU69rh5msqZws3QeuLQOttWJpoWJriZm0u6WfTpTASSYvKVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHAOwU6v3l1+IAfuvOfyT+ltvvVMB8GA1UdIwQY MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2 LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicH5qNBM q92xlpGZeHXc0V6GKndcNlZEk1E/ppjrxxnoIyjLnfqXdAtJHa4Ly9CMfA3vlyk4 SzMDtdQHr3dNokbGmLklvd52U76bDNenogUF4UuPEwDoCSWIB/VZ3ZCxmHYm/Zru HA6R9PcM+D7glCNOvdYVqPtyH2ezxMNghNTbB3W7h5wAaXHkj9YmdZLtTwGQl5TX 8KwhIAqMWx6oF12+J3cEPukUEc0mBaaqcxBGSIB9TnqrkyUpQdQPl9jpbSUQWHZm clnfFOBIkbxrPqh9/+01SkmSKZUoE8kM9xcNj+3o1o6NaTLSpI9kknWGaQ6NHxbc nfI0OBruVlTxMw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:02:57 2025 by rpki-client