This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json) Hash identifier: 4fqOGTH/oCCYpRM/+bcbK/QtJYtlbusO+vJgRmq344k= Subject key identifier: 10:A3:08:EC:91:3F:04:5B:C9:03:EE:1F:0F:18:9F:25:C1:37:4B:DA Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d Certificate serial: 019B4ADEF3C1CB8DB5AE7ACA8FDC4C77506A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft Manifest number: 1290 Signing time: Tue 23 Dec 2025 11:01:23 +0000 Manifest this update: Tue 23 Dec 2025 11:01:23 +0000 Manifest next update: Wed 24 Dec 2025 11:01:23 +0000 Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: i+EI7TxE598489pClUh1uvkNinDDJDnrHlcWuMQMcXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:f3:c1:cb:8d:b5:ae:7a:ca:8f:dc:4c:77:50:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d Validity Not Before: Dec 23 11:01:23 2025 GMT Not After : Dec 24 11:01:23 2025 GMT Subject: CN=10a308ec913f045bc903ee1f0f189f25c1374bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:31:29:1b:b2:db:fe:bf:91:76:53:63:1b: 9c:52:4f:c0:1c:26:7f:e2:56:e7:25:76:00:37:fa: 31:6e:c3:56:2e:99:d5:14:d6:87:0b:3b:2d:20:31: 2f:10:d4:02:b0:c0:98:d6:25:be:39:59:ac:4e:05: 52:ba:20:b3:40:dd:40:82:28:ee:58:70:b2:ce:ce: 94:26:92:e0:c8:a7:97:ba:2d:33:33:0c:c0:1e:94: 47:ee:d5:96:d2:f0:59:eb:e8:60:19:9e:a2:0d:a2: 46:e3:4f:1b:5a:17:0d:19:e5:d5:35:a1:bf:3b:f0: 28:00:d4:f4:d2:32:38:09:e5:0e:33:0e:54:8c:27: 2d:b0:25:b8:05:0c:ce:ba:a6:69:17:f6:ce:d9:20: e2:7f:4b:6f:44:0b:58:71:88:55:7f:d4:b3:03:3b: e0:78:af:50:d7:86:e3:ec:41:1f:e8:1c:a8:04:91: ac:b5:d5:bd:83:a6:1b:5f:10:20:ca:4e:d7:7b:38: a1:7a:41:01:db:55:05:16:b9:1a:c0:33:bf:e8:70: b3:1e:62:29:2f:dc:0e:65:5f:43:ec:0c:5e:d0:fa: 0e:bd:8a:d3:04:28:76:83:b2:dc:18:d4:e6:91:a6: ac:85:bd:02:91:56:22:69:97:16:eb:e1:96:a2:c9: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:08:EC:91:3F:04:5B:C9:03:EE:1F:0F:18:9F:25:C1:37:4B:DA X509v3 Authority Key Identifier: keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:72:30:13:2d:56:35:c1:43:4c:46:99:ab:a4:c4:c8:f7:9e: 9c:42:2a:71:93:6c:c1:99:fb:a9:46:34:e8:ad:ec:69:85:dd: 1b:c7:64:e6:ec:35:37:3b:da:81:ea:a8:f6:e4:21:16:17:f8: 11:61:93:72:9f:d3:67:ae:38:39:a6:ec:d0:0c:fa:f2:ed:c0: 77:5a:e4:a4:b6:57:3b:dc:cd:fd:f0:84:78:98:e6:ce:9c:02: fa:a1:f2:67:2f:ed:09:19:f8:5f:56:a7:be:30:ce:31:c0:96: 33:47:19:88:6c:73:d6:ab:6c:3e:bf:f9:25:f6:c4:92:07:fd: be:e3:d0:c8:92:9a:a0:ca:4b:4d:21:c3:f8:91:62:a2:67:1f: 99:4f:06:66:59:07:a4:7e:e5:3a:80:7e:6b:4d:af:7d:19:a7: bd:e4:9a:25:6a:95:f6:36:e3:da:cd:88:33:72:1a:a8:5f:b2: b1:26:e7:77:f3:88:98:7c:9c:0a:b1:72:e0:15:2d:1f:6b:c4: f4:0b:bb:9c:6e:82:e1:29:f7:e6:5c:ca:43:2e:c2:58:8b:68: 38:0f:9e:b3:3a:d7:a5:23:42:09:ba:9f:6b:01:1e:35:7d:f8: 7a:70:07:ce:84:a9:ff:4e:a1:da:82:83:1f:4d:ac:93:1d:05: 75:01:66:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3vPBy421rnrKj9xMd1BqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDA2Y2Q0ZWFiYzU1YjM2YzkzMDg5ZjE0ZDBmYTZlMGZh MGNjNmQwHhcNMjUxMjIzMTEwMTIzWhcNMjUxMjI0MTEwMTIzWjAzMTEwLwYDVQQD EygxMGEzMDhlYzkxM2YwNDViYzkwM2VlMWYwZjE4OWYyNWMxMzc0YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjExKRuy2/6/kXZTYxucUk/AHCZ/ 4lbnJXYAN/oxbsNWLpnVFNaHCzstIDEvENQCsMCY1iW+OVmsTgVSuiCzQN1Agiju WHCyzs6UJpLgyKeXui0zMwzAHpRH7tWW0vBZ6+hgGZ6iDaJG408bWhcNGeXVNaG/ O/AoANT00jI4CeUOMw5UjCctsCW4BQzOuqZpF/bO2SDif0tvRAtYcYhVf9SzAzvg eK9Q14bj7EEf6ByoBJGstdW9g6YbXxAgyk7XezihekEB21UFFrkawDO/6HCzHmIp L9wOZV9D7Axe0PoOvYrTBCh2g7LcGNTmkaashb0CkVYiaZcW6+GWosl0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCjCOyRPwRbyQPuHw8YnyXBN0vaMB8GA1UdIwQY MBaAFCcAbNTqvFWzbJMInxTQ+m4PoMxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNTcwODEtZTE2Zi00N2NlLWJkOTgt ZGNlMTI4MDIyYWM0LzEvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNTcwODEtZTE2Zi00N2NlLWJkOTgtZGNlMTI4MDIyYWM0 LzEvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXIwEy1W NcFDTEaZq6TEyPeenEIqcZNswZn7qUY06K3saYXdG8dk5uw1Nzvageqo9uQhFhf4 EWGTcp/TZ644Oabs0Az68u3Ad1rkpLZXO9zN/fCEeJjmzpwC+qHyZy/tCRn4X1an vjDOMcCWM0cZiGxz1qtsPr/5JfbEkgf9vuPQyJKaoMpLTSHD+JFiomcfmU8GZlkH pH7lOoB+a02vfRmnveSaJWqV9jbj2s2IM3IaqF+ysSbnd/OImHycCrFy4BUtH2vE 9Au7nG6C4Sn35lzKQy7CWItoOA+eszrXpSNCCbqfawEeNX34enAHzoSp/06h2oKD H02skx0FdQFmyA== -----END CERTIFICATE-----Generated at Tue Dec 23 12:58:43 2025 by rpki-client