This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json) Hash identifier: N6YZIeXuhKJFIanGsHvr4lZY6o78l3LM/02NgpE1PbQ= Subject key identifier: 89:96:18:B9:66:D6:B3:F2:EC:0E:3D:B4:43:B4:1B:94:36:82:4B:D0 Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Certificate serial: 019AF72EFA81B2870EE0A7D483B6D2B98825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft Manifest number: 13F9 Signing time: Sun 07 Dec 2025 05:00:42 +0000 Manifest this update: Sun 07 Dec 2025 05:00:42 +0000 Manifest next update: Mon 08 Dec 2025 05:00:42 +0000 Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: 3VTCGuOVBxM2lnDdTQ0JDunO3w8PfrqEoUKc7oUIO8U=) 2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2e:fa:81:b2:87:0e:e0:a7:d4:83:b6:d2:b9:88:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Validity Not Before: Dec 7 05:00:42 2025 GMT Not After : Dec 8 05:00:42 2025 GMT Subject: CN=899618b966d6b3f2ec0e3db443b41b9436824bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:50:43:25:29:76:da:ef:bd:3c:27:a8:c9: be:76:14:6f:c8:6f:f7:06:86:ea:9f:5a:2d:38:66: 65:c7:14:98:ab:db:34:2d:2c:bf:1d:6f:ad:3e:72: bb:a7:24:58:34:da:8e:00:bf:9d:fa:a1:fd:42:72: 73:9e:97:74:ba:03:80:2b:de:ae:22:63:ac:ec:ec: 9c:42:25:32:22:ca:f2:39:f8:40:27:12:76:89:ce: 88:da:68:f9:f8:4e:9a:3d:7e:4a:b6:59:98:6d:df: fc:7b:24:f2:42:51:8a:a9:7a:e2:64:cd:51:69:92: c5:50:a3:2e:fd:38:4d:5d:00:d7:4f:0c:33:a6:2d: 3c:6e:93:0d:3c:7f:5c:af:87:89:d7:64:a5:14:4b: 8e:67:be:63:f8:ee:03:92:b0:c4:6a:29:ff:1d:3a: 50:af:5e:8d:1e:1e:0d:cc:67:57:c1:0f:e9:3d:64: 0d:ba:48:db:d5:68:57:b3:77:26:e6:a0:60:48:58: d1:8a:5c:be:e3:36:ba:b2:90:92:2a:a7:7b:55:4b: c2:0a:1f:1b:0d:d3:ec:db:cb:3c:c2:cf:a4:55:44: cf:fe:cd:6b:b2:33:79:3f:e0:23:82:13:f0:dd:3b: 50:d0:19:9d:01:20:d5:b2:69:33:11:e4:b6:06:bf: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:96:18:B9:66:D6:B3:F2:EC:0E:3D:B4:43:B4:1B:94:36:82:4B:D0 X509v3 Authority Key Identifier: keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:91:03:d8:ec:be:44:58:9b:99:77:c3:ba:d6:a7:47:b3:99: 5d:97:bf:44:2b:36:8e:97:32:85:8f:61:04:29:06:89:a7:0a: ef:21:ed:68:b2:7d:9f:73:63:dd:7a:96:47:7a:c8:9f:84:8d: 1f:66:40:c5:c7:90:40:02:b7:60:79:81:2d:56:42:ec:c8:86: 79:29:7e:5b:64:25:b3:89:84:f4:6f:5f:43:f6:0c:2b:25:ac: 91:84:a8:7f:97:c2:d4:7d:08:0b:f5:bc:80:8c:c7:f4:29:53: 58:cc:cb:5e:27:c8:3c:fc:55:a9:d1:74:a2:3c:ca:9f:35:7e: c6:76:e5:51:9e:5a:46:6d:a8:16:26:b9:5f:e6:60:ca:c1:b2: 33:24:c1:0d:e3:41:a5:f5:19:65:94:34:40:81:d1:a0:8b:3f: 6a:2b:3c:77:57:76:48:62:08:09:6f:c4:ed:f5:e8:23:9b:ae: 07:d4:12:04:a0:ed:0d:a5:b6:20:40:66:61:65:de:13:0a:f9: c0:11:bb:5a:58:46:7d:4b:17:2a:c0:ad:4c:c4:ef:b9:f5:5d: 38:df:c8:67:c5:24:4e:f3:f5:28:0a:cd:11:70:b0:06:38:f1: 52:d5:7d:ab:ad:ae:3b:8b:72:8a:ce:0e:61:d5:9c:6d:8f:c6: c5:b0:f3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LvqBsocO4KfUg7bSuYglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2 ZmE3ZTMwHhcNMjUxMjA3MDUwMDQyWhcNMjUxMjA4MDUwMDQyWjAzMTEwLwYDVQQD Eyg4OTk2MThiOTY2ZDZiM2YyZWMwZTNkYjQ0M2I0MWI5NDM2ODI0YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0JQQyUpdtrvvTwnqMm+dhRvyG/3 Bobqn1otOGZlxxSYq9s0LSy/HW+tPnK7pyRYNNqOAL+d+qH9QnJznpd0ugOAK96u ImOs7OycQiUyIsryOfhAJxJ2ic6I2mj5+E6aPX5KtlmYbd/8eyTyQlGKqXriZM1R aZLFUKMu/ThNXQDXTwwzpi08bpMNPH9cr4eJ12SlFEuOZ75j+O4DkrDEain/HTpQ r16NHh4NzGdXwQ/pPWQNukjb1WhXs3cm5qBgSFjRily+4za6spCSKqd7VUvCCh8b DdPs28s8ws+kVUTP/s1rsjN5P+AjghPw3TtQ0BmdASDVsmkzEeS2Br9WrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImWGLlm1rPy7A49tEO0G5Q2gkvQMB8GA1UdIwQY MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZED2Oy+ RFibmXfDutanR7OZXZe/RCs2jpcyhY9hBCkGiacK7yHtaLJ9n3Nj3XqWR3rIn4SN H2ZAxceQQAK3YHmBLVZC7MiGeSl+W2Qls4mE9G9fQ/YMKyWskYSof5fC1H0IC/W8 gIzH9ClTWMzLXifIPPxVqdF0ojzKnzV+xnblUZ5aRm2oFia5X+ZgysGyMyTBDeNB pfUZZZQ0QIHRoIs/ais8d1d2SGIICW/E7fXoI5uuB9QSBKDtDaW2IEBmYWXeEwr5 wBG7WlhGfUsXKsCtTMTvufVdON/IZ8UkTvP1KArNEXCwBjjxUtV9q62uO4tyis4O YdWcbY/GxbDzMg== -----END CERTIFICATE-----Generated at Sun Dec 7 10:26:14 2025 by rpki-client