This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft File: JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json) Hash identifier: VBdIbOjKebXXoKFLBVPwja5wckEyjoHM4XHPZpPWu6o= Subject key identifier: 52:93:01:E3:4C:C5:79:2C:C8:40:CD:89:86:73:AF:52:6E:B5:B0:23 Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6 Certificate issuer: /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6 Certificate serial: 019B21E32FEC23E5262BEA78A857746075D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 12:01:35 +0000 Manifest this update: Mon 15 Dec 2025 12:01:35 +0000 Manifest next update: Tue 16 Dec 2025 12:01:35 +0000 Files and hashes: 1: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: OO21hoj8x00tfFunA/H6S8I6cs6Zx9KI+FMb0Id+E+s=) 2: r8Obi9IFhGpTy_Fq_kKt7tzU_pA.roa (hash: aKaPCyYUlKajFN86VFdggb+LUFUQbQdhAkrOshlrb08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:2f:ec:23:e5:26:2b:ea:78:a8:57:74:60:75:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6 Validity Not Before: Dec 15 12:01:35 2025 GMT Not After : Dec 16 12:01:35 2025 GMT Subject: CN=529301e34cc5792cc840cd898673af526eb5b023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:36:24:42:3f:60:5b:cc:a0:28:86:e7:af:e6: 17:1d:73:ea:a0:06:e0:2c:51:b6:92:58:6e:2f:3c: eb:a1:52:62:c1:6c:0e:cd:c4:06:a7:6e:55:6c:31: 39:d9:e6:0e:c9:41:47:ad:b8:c9:fe:77:60:ed:e1: 40:b3:76:db:8a:26:0d:fa:bc:5d:d6:e7:62:52:7e: fd:53:35:c6:e7:da:a6:98:47:bb:e5:f8:43:65:f2: ac:6b:32:e6:6a:22:7f:5d:a8:c2:ef:d5:25:a0:e2: e1:29:ed:f6:b8:fd:c2:48:29:ea:6e:68:f3:5e:31: 5f:52:71:57:9d:62:3b:a0:21:cd:bc:ba:6c:64:89: a7:89:c5:e6:95:76:e3:08:ca:f1:07:41:35:a3:73: f9:b6:77:f8:12:49:d6:2e:38:09:5b:ea:06:cb:a1: 1b:9a:ac:a1:45:dd:32:6f:69:87:3c:00:89:d5:6f: 1a:f4:4c:dc:61:5b:b6:58:f5:30:4f:24:8d:ce:fb: a5:cc:eb:2c:c5:d1:67:5c:9b:ae:db:fa:cc:d6:d9: a7:bd:12:04:ba:54:c6:62:f4:c3:a0:35:0b:b1:5e: d9:25:73:55:c9:18:15:86:d9:2a:b4:0b:69:eb:bf: 9f:48:54:68:1f:40:dc:8d:c5:c4:f9:d4:88:8e:c4: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:93:01:E3:4C:C5:79:2C:C8:40:CD:89:86:73:AF:52:6E:B5:B0:23 X509v3 Authority Key Identifier: keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8a:bc:b8:de:81:a0:d1:e6:09:64:0a:39:dd:0c:f6:6c:21: 2a:2b:f6:d9:4f:a7:fd:36:36:7a:7c:96:4f:03:09:91:d7:2a: ce:67:6b:ea:5a:f6:61:79:50:ac:58:72:cd:06:66:0f:0a:99: f9:f9:9d:7c:c3:c4:12:a0:55:d8:b7:3a:6d:ae:9e:85:b1:91: 83:55:0a:e4:6d:62:79:5b:7a:0b:9e:92:bb:5b:6c:2c:e7:e9: 30:67:f8:3f:8d:9d:99:ed:30:3b:7a:24:c3:6f:e9:47:a9:bf: 4a:34:db:58:3f:5a:07:9b:24:59:d5:be:e0:36:2f:fa:98:f3: c5:b6:5d:09:92:dd:af:9d:6e:80:d5:6b:46:f6:bd:c8:52:8a: cf:93:54:ff:f7:e5:1b:28:46:b1:de:b4:d0:2f:9b:92:55:e1: 07:0f:3a:8b:f3:14:6f:f3:26:5e:f9:c0:e4:f2:70:c1:28:bf: de:c6:c2:b9:49:d6:17:5c:38:02:56:71:f1:2e:57:45:aa:b9: c9:c6:dc:31:f1:3a:29:25:38:e6:c3:cd:59:54:a2:f3:41:bc: 47:9a:ab:c5:f5:ae:bc:38:cd:d2:31:37:93:60:0c:d8:5d:47: b7:96:79:6f:88:9e:cf:f6:2c:70:ec:8b:41:c0:29:11:98:f0: a5:15:8d:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4y/sI+UmK+p4qFd0YHXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YjljZWIxMGMyYzhjMDBkMTYwOTk2MDNjYzExYmVkMDA1 NDdiZTYwHhcNMjUxMjE1MTIwMTM1WhcNMjUxMjE2MTIwMTM1WjAzMTEwLwYDVQQD Eyg1MjkzMDFlMzRjYzU3OTJjYzg0MGNkODk4NjczYWY1MjZlYjViMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzYkQj9gW8ygKIbnr+YXHXPqoAbg LFG2klhuLzzroVJiwWwOzcQGp25VbDE52eYOyUFHrbjJ/ndg7eFAs3bbiiYN+rxd 1udiUn79UzXG59qmmEe75fhDZfKsazLmaiJ/XajC79UloOLhKe32uP3CSCnqbmjz XjFfUnFXnWI7oCHNvLpsZImnicXmlXbjCMrxB0E1o3P5tnf4EknWLjgJW+oGy6Eb mqyhRd0yb2mHPACJ1W8a9EzcYVu2WPUwTySNzvulzOssxdFnXJuu2/rM1tmnvRIE ulTGYvTDoDULsV7ZJXNVyRgVhtkqtAtp67+fSFRoH0DcjcXE+dSIjsS/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKTAeNMxXksyEDNiYZzr1JutbAjMB8GA1UdIwQY MBaAFCa5zrEMLIwA0WCZYDzBG+0AVHvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUt YjYxMDU2ODQ2NmIzLzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUtYjYxMDU2ODQ2NmIz LzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoq8uN6B oNHmCWQKOd0M9mwhKiv22U+n/TY2enyWTwMJkdcqzmdr6lr2YXlQrFhyzQZmDwqZ +fmdfMPEEqBV2Lc6ba6ehbGRg1UK5G1ieVt6C56Su1tsLOfpMGf4P42dme0wO3ok w2/pR6m/SjTbWD9aB5skWdW+4DYv+pjzxbZdCZLdr51ugNVrRva9yFKKz5NU//fl GyhGsd600C+bklXhBw86i/MUb/MmXvnA5PJwwSi/3sbCuUnWF1w4AlZx8S5XRaq5 ycbcMfE6KSU45sPNWVSi80G8R5qrxfWuvDjN0jE3k2AM2F1Ht5Z5b4iez/YscOyL QcApEZjwpRWNpQ== -----END CERTIFICATE-----Generated at Mon Dec 15 21:32:34 2025 by rpki-client