This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json) Hash identifier: W7+lJFJ/ZE2Kw6PbEJb4fBI5Cr0GjiyQG1YSP4nTt/E= Subject key identifier: 6B:FE:50:0C:F4:57:FA:97:E5:11:A0:D2:1F:91:FD:9A:F6:20:86:03 Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67 Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67 Certificate serial: 019B5A5141BEAB7D7749245F34F2810EA2BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft Manifest number: 092B Signing time: Fri 26 Dec 2025 11:00:32 +0000 Manifest this update: Fri 26 Dec 2025 11:00:32 +0000 Manifest next update: Sat 27 Dec 2025 11:00:32 +0000 Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: zM8q61a2WSCPp3gilT9xuFjzaZuSi2TwHij6szbNTOg=) 2: yQOovkVgBPdQUYWIP8s5JEl_do0.roa (hash: teGG3Giw/XqatuTMOZRs13KC4GUJoaqGETNz76LPhGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:41:be:ab:7d:77:49:24:5f:34:f2:81:0e:a2:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67 Validity Not Before: Dec 26 11:00:32 2025 GMT Not After : Dec 27 11:00:32 2025 GMT Subject: CN=6bfe500cf457fa97e511a0d21f91fd9af6208603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:5a:11:1f:ee:60:91:9e:f6:8f:4b:e6:93: 27:1f:db:c8:40:11:8a:07:a6:bf:3e:f8:ad:19:5a: 6d:77:64:b5:06:78:ca:4c:e6:5d:fa:38:32:f4:f1: 8d:24:1d:a6:b7:95:56:03:c2:ca:54:18:da:33:ec: 25:61:2e:66:9b:73:d9:dc:37:ed:d3:96:48:8c:71: 1d:2e:d6:a1:d3:16:b9:9f:57:b0:1b:8c:fc:70:f6: 5f:6a:b7:22:f5:7b:10:7a:dd:1c:af:c7:9f:f9:af: a9:cf:15:8a:b4:b8:67:da:4d:c6:45:3b:b8:4b:34: 74:5c:b8:19:7a:19:d8:03:25:fd:64:db:89:95:d0: ba:ae:fd:83:e9:8d:8a:87:e5:97:2b:a5:d3:12:8f: e0:cb:31:81:56:86:d1:e1:42:e0:dc:8c:6b:79:3a: ad:a0:91:08:3b:0c:6d:28:73:6c:67:7b:b3:28:6f: 45:f1:46:48:88:6e:4d:70:f2:71:9d:b1:24:be:89: 3c:ea:0e:4a:3e:7a:6e:18:2c:d9:8a:32:9b:74:cd: 07:d0:91:cf:60:14:69:4e:47:6e:86:ec:c0:20:ab: 6f:20:38:02:45:2f:8b:4c:50:15:86:d7:c7:ba:c1: 54:55:39:6c:31:ab:4a:a5:31:2c:9e:34:33:34:66: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FE:50:0C:F4:57:FA:97:E5:11:A0:D2:1F:91:FD:9A:F6:20:86:03 X509v3 Authority Key Identifier: keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:4f:51:18:b7:98:de:c1:3f:58:4f:55:a1:7e:52:81:8f: 5c:d1:c5:73:64:26:6c:05:82:0f:85:43:e5:8f:e2:1a:2b:7c: f3:90:4a:c5:28:cf:e6:7d:a5:8c:7f:cd:a6:40:ba:3a:2a:f4: 3b:56:98:19:75:63:4b:4e:85:de:aa:85:45:4a:f4:2e:44:24: 8c:2d:55:0d:73:eb:7f:9b:01:60:bc:fe:cf:4a:af:26:8c:0e: d3:30:cc:de:ee:a8:3f:78:bb:e4:2c:fa:eb:1f:b5:48:95:f0: f9:05:83:12:cb:68:a6:c2:85:ae:44:f1:3f:ad:a3:f8:7c:5e: 9c:06:dc:8b:ed:73:7c:b7:a9:9e:b5:7e:67:4c:0c:ea:65:f9: 4b:ed:93:76:52:d0:76:0c:bc:31:75:1f:1f:f3:45:3f:69:c9: 53:7f:96:53:96:62:78:47:cc:e9:92:b4:b1:84:5a:72:06:4a: cb:32:07:2c:8e:7a:af:58:c0:2d:46:08:b1:05:c1:0d:f6:3a: 26:7a:ab:eb:03:c1:67:ac:f4:3e:73:8f:54:3d:61:31:fd:48: fc:8d:8f:7f:34:fb:8c:a4:24:82:29:d5:06:00:c4:48:5a:2c: 99:a1:a5:7f:72:bb:b3:95:22:1c:fc:5b:6e:3a:5c:e5:48:46: 73:e4:0f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUG+q313SSRfNPKBDqK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NmY5YmU3ODNkNzNkOTVhYjhhYTU0NjE5ZTYwZjkwMTFj MDRkNjcwHhcNMjUxMjI2MTEwMDMyWhcNMjUxMjI3MTEwMDMyWjAzMTEwLwYDVQQD Eyg2YmZlNTAwY2Y0NTdmYTk3ZTUxMWEwZDIxZjkxZmQ5YWY2MjA4NjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun1aER/uYJGe9o9L5pMnH9vIQBGK B6a/PvitGVptd2S1BnjKTOZd+jgy9PGNJB2mt5VWA8LKVBjaM+wlYS5mm3PZ3Dft 05ZIjHEdLtah0xa5n1ewG4z8cPZfarci9XsQet0cr8ef+a+pzxWKtLhn2k3GRTu4 SzR0XLgZehnYAyX9ZNuJldC6rv2D6Y2Kh+WXK6XTEo/gyzGBVobR4ULg3IxreTqt oJEIOwxtKHNsZ3uzKG9F8UZIiG5NcPJxnbEkvok86g5KPnpuGCzZijKbdM0H0JHP YBRpTkduhuzAIKtvIDgCRS+LTFAVhtfHusFUVTlsMatKpTEsnjQzNGYWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGv+UAz0V/qX5RGg0h+R/Zr2IIYDMB8GA1UdIwQY MBaAFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWIt Y2JiZDAxZjJiOTFjLzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWItY2JiZDAxZjJiOTFj LzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALopPURi3 mN7BP1hPVaF+UoGPXNHFc2QmbAWCD4VD5Y/iGit885BKxSjP5n2ljH/NpkC6Oir0 O1aYGXVjS06F3qqFRUr0LkQkjC1VDXPrf5sBYLz+z0qvJowO0zDM3u6oP3i75Cz6 6x+1SJXw+QWDEstopsKFrkTxP62j+HxenAbci+1zfLepnrV+Z0wM6mX5S+2TdlLQ dgy8MXUfH/NFP2nJU3+WU5ZieEfM6ZK0sYRacgZKyzIHLI56r1jALUYIsQXBDfY6 Jnqr6wPBZ6z0PnOPVD1hMf1I/I2PfzT7jKQkginVBgDESFosmaGlf3K7s5UiHPxb bjpc5UhGc+QP4w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:03 2025 by rpki-client