This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json) Hash identifier: Wx7GwSm/ruxAVYQCabdRPg6cdBszzSO69mC1MF8ZRPw= Subject key identifier: DC:53:06:24:1F:70:65:C2:6F:52:64:17:39:28:2F:AA:C7:5C:81:63 Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7 Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7 Certificate serial: 019AFE0DBFC8F30DED6B5D932D87ACF77727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft Manifest number: 0922 Signing time: Mon 08 Dec 2025 13:01:45 +0000 Manifest this update: Mon 08 Dec 2025 13:01:45 +0000 Manifest next update: Tue 09 Dec 2025 13:01:45 +0000 Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: eMFj/XGI8wHcdaIg3clV0UZHWvFlixPfNSwx3VyMi5A=) 2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=) 3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:0d:bf:c8:f3:0d:ed:6b:5d:93:2d:87:ac:f7:77:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7 Validity Not Before: Dec 8 13:01:45 2025 GMT Not After : Dec 9 13:01:45 2025 GMT Subject: CN=dc5306241f7065c26f52641739282faac75c8163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:f2:6a:56:27:63:a1:6f:59:fb:42:ff:e3: ab:cb:04:a3:71:8c:0c:68:36:7e:f9:80:88:5d:da: 50:a7:88:d7:8a:25:01:5d:5a:82:c2:fe:1d:b1:5b: fd:76:b0:16:92:52:e0:fc:0d:47:d5:92:c0:c8:0f: c1:32:74:c6:a0:64:28:a1:51:7c:2c:a7:98:bb:b8: 4d:9a:cc:9e:a6:4c:0b:5a:6e:a8:a0:6f:eb:f3:a1: 46:82:71:41:e3:44:23:21:58:2d:91:d1:00:f6:dd: c0:62:a5:13:85:3f:35:10:98:03:d2:eb:5f:2d:cd: 4f:08:4b:4b:e3:eb:10:41:ed:d0:2c:bd:86:b4:e7: 03:d0:44:fa:09:59:48:cb:eb:b9:16:54:90:a3:aa: 1f:6e:2d:d7:78:53:f0:d0:60:38:d1:6f:29:9b:97: 2f:f7:6b:5e:be:b0:86:be:2d:d8:22:80:fb:81:b1: 09:6e:2d:0a:ea:62:18:7b:58:51:ab:83:44:65:c0: 52:79:6d:8c:c7:7d:24:e0:73:7a:a7:f7:47:0e:a8: a4:64:6e:23:5c:db:9e:58:76:ee:7d:1b:68:78:b4: 00:c9:57:50:26:d3:9e:42:94:3d:ae:97:ee:2e:a8: 37:40:13:e5:af:aa:8b:d8:13:39:05:56:0c:01:1d: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:06:24:1F:70:65:C2:6F:52:64:17:39:28:2F:AA:C7:5C:81:63 X509v3 Authority Key Identifier: keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:09:5f:78:1a:53:9e:f5:3c:8e:90:81:07:4b:af:1c:57:8d: 1e:63:cb:7b:3b:3d:bc:4d:96:a3:7b:45:ab:1f:36:55:cc:ac: a0:1f:3b:07:3d:06:76:1a:67:1f:c4:ea:96:fb:0f:11:34:4c: b2:fe:e0:df:59:cc:41:7a:52:15:46:1f:28:be:a0:49:08:d2: 6b:78:cf:dd:83:54:74:69:e1:86:70:97:5a:4d:cb:59:91:43: 3a:c4:1c:3d:a0:d5:bf:f0:46:3c:80:65:9c:2e:cc:ac:80:db: d1:6f:22:04:ef:e3:92:30:e3:c2:b7:9d:7e:1c:78:b8:2c:75: b8:38:b8:6e:4a:71:55:1d:a6:69:35:cc:22:3a:24:a4:01:fd: 61:8a:17:42:29:05:98:2b:9c:6d:69:37:7d:7d:26:6a:c4:bb: 76:0e:11:b7:9f:ee:86:29:dc:e1:d6:0e:82:e7:9f:6f:34:86: 2e:e1:63:fe:03:3e:03:f7:04:8b:2a:0f:62:2b:ac:d3:07:2e: 1e:08:7f:9e:27:29:98:34:f6:da:9c:a5:be:24:e8:3f:36:a1: 98:61:84:64:c1:45:df:a5:00:0e:52:17:42:10:77:45:a2:37: a2:ca:f7:35:cb:82:26:13:7c:fd:02:4d:bc:1c:b1:ee:3f:04: f2:2f:07:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+Db/I8w3ta12TLYes93cnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDkwNmI5MGMxZDg1NjY3M2U0MTRmMzk4MDViZTU4M2Qy MzBiYTcwHhcNMjUxMjA4MTMwMTQ1WhcNMjUxMjA5MTMwMTQ1WjAzMTEwLwYDVQQD EyhkYzUzMDYyNDFmNzA2NWMyNmY1MjY0MTczOTI4MmZhYWM3NWM4MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G7yalYnY6FvWftC/+OrywSjcYwM aDZ++YCIXdpQp4jXiiUBXVqCwv4dsVv9drAWklLg/A1H1ZLAyA/BMnTGoGQooVF8 LKeYu7hNmsyepkwLWm6ooG/r86FGgnFB40QjIVgtkdEA9t3AYqUThT81EJgD0utf Lc1PCEtL4+sQQe3QLL2GtOcD0ET6CVlIy+u5FlSQo6ofbi3XeFPw0GA40W8pm5cv 92tevrCGvi3YIoD7gbEJbi0K6mIYe1hRq4NEZcBSeW2Mx30k4HN6p/dHDqikZG4j XNueWHbufRtoeLQAyVdQJtOeQpQ9rpfuLqg3QBPlr6qL2BM5BVYMAR05pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxTBiQfcGXCb1JkFzkoL6rHXIFjMB8GA1UdIwQY MBaAFCTZBrkMHYVmc+QU85gFvlg9IwunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEt NGZjMjhlNTA5OGM3LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEtNGZjMjhlNTA5OGM3 LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwlfeBpT nvU8jpCBB0uvHFeNHmPLezs9vE2Wo3tFqx82VcysoB87Bz0GdhpnH8TqlvsPETRM sv7g31nMQXpSFUYfKL6gSQjSa3jP3YNUdGnhhnCXWk3LWZFDOsQcPaDVv/BGPIBl nC7MrIDb0W8iBO/jkjDjwredfhx4uCx1uDi4bkpxVR2maTXMIjokpAH9YYoXQikF mCucbWk3fX0masS7dg4Rt5/uhinc4dYOguefbzSGLuFj/gM+A/cEiyoPYius0wcu Hgh/nicpmDT22pylviToPzahmGGEZMFF36UADlIXQhB3RaI3osr3NcuCJhN8/QJN vByx7j8E8i8Hnw== -----END CERTIFICATE-----Generated at Mon Dec 8 15:11:19 2025 by rpki-client