This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json) Hash identifier: xJVYUnVUKkfuv5EJohL9ADQWcNQfD9g45jK3nmVI8Cs= Subject key identifier: A8:91:C4:8A:E7:7D:CA:BC:D3:3E:34:BE:09:B6:86:74:63:88:AB:1E Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e Certificate serial: 019B1F86B7D8A8DF4F53EE5712D384AF5C50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 01:01:20 +0000 Manifest this update: Mon 15 Dec 2025 01:01:20 +0000 Manifest next update: Tue 16 Dec 2025 01:01:20 +0000 Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=) 2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: sZvNvg7CkNv4OT1mkt7Uf7GCi4OofOtw9101AytGq70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:b7:d8:a8:df:4f:53:ee:57:12:d3:84:af:5c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e Validity Not Before: Dec 15 01:01:20 2025 GMT Not After : Dec 16 01:01:20 2025 GMT Subject: CN=a891c48ae77dcabcd33e34be09b686746388ab1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:b6:3e:d8:37:5f:fc:80:90:99:fe:76:1e: c5:be:9a:dd:ef:ce:c8:d9:ac:dd:07:00:de:37:6f: 22:f5:98:b9:36:e1:41:3c:54:8c:f2:c9:e3:ef:b2: c6:43:e3:2a:19:ea:da:8b:1e:0e:4c:5d:3a:85:90: 57:3d:91:31:c1:0b:a4:dd:e3:2c:3f:60:53:71:c2: 17:c4:60:b3:99:eb:31:ce:7b:ff:4a:5b:4a:d4:11: c7:f9:b0:27:eb:4d:0a:91:16:94:a3:8c:e0:f1:2f: d0:70:57:09:bd:ca:f4:53:f3:2f:87:3b:33:e3:f1: bd:7c:47:65:c6:10:08:e8:0e:1f:52:31:13:4f:87: 6e:c2:00:8a:c3:7d:6e:9d:8f:8f:b1:be:5e:40:68: d7:2a:67:73:1a:74:59:1e:cd:07:c2:04:81:33:b4: 40:bc:50:81:ff:2c:7f:0d:d9:f1:8c:28:11:74:f6: 51:97:8b:24:9e:30:09:70:83:c9:fe:d5:81:c3:5f: 21:a1:2b:8d:26:54:19:18:8b:f7:46:e0:75:5b:85: 68:c3:09:bd:74:23:0b:3f:97:01:a9:ac:cb:7c:a7: 9d:97:92:9c:1f:e2:53:7a:bf:5a:86:3c:c3:b8:05: 0e:55:40:de:39:8a:36:84:43:96:a6:37:57:f5:b5: de:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:91:C4:8A:E7:7D:CA:BC:D3:3E:34:BE:09:B6:86:74:63:88:AB:1E X509v3 Authority Key Identifier: keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:01:88:3a:8d:90:33:7a:bd:ca:20:a1:cf:19:60:3a:f9:5e: a9:be:b4:d2:56:76:94:e0:42:8f:62:c1:0f:25:d6:db:bc:bd: ef:62:65:e4:d6:b3:0d:1c:1e:af:78:dd:c5:23:20:41:6f:e0: 41:f5:1f:c7:6f:bb:13:c6:f0:71:fc:53:7b:b0:27:01:2e:46: 2d:6d:26:75:f0:a5:8d:08:dc:04:80:83:49:af:db:9a:1f:23: f1:bd:f2:a7:8d:47:5e:c9:dd:0e:ef:87:33:77:a2:7e:64:01: d1:fe:33:e6:3b:4e:98:41:48:31:36:5d:2b:5a:f0:3c:59:8e: 76:15:f5:87:f8:06:b4:82:ed:d2:f7:0e:8b:77:77:ba:cc:4a: c7:c5:e8:94:fd:9d:a8:d9:10:9a:ce:a4:c0:cd:b4:1d:66:ec: d3:89:12:92:32:b0:ab:8c:fe:e3:bc:2f:8d:d8:5d:c0:15:e4: 3f:1f:67:35:4a:eb:1d:41:c7:e9:3f:94:ef:10:fb:2e:bc:2d: 78:05:ee:13:d3:f2:e8:48:0e:0a:3b:9e:0d:14:2b:31:17:01: cd:b2:81:5a:0a:da:11:ae:05:66:5d:6d:7e:7f:0e:ea:cd:53: f0:e3:66:2d:32:69:a2:76:6b:7e:d0:b3:fb:67:31:e0:cc:96: 9f:0d:7f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhrfYqN9PU+5XEtOEr1xQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTMwYjYwZDIzZDc0ZTgyMjZiY2Q1ZTE1ZGM1YmY3NzBh ZDMwN2UwHhcNMjUxMjE1MDEwMTIwWhcNMjUxMjE2MDEwMTIwWjAzMTEwLwYDVQQD EyhhODkxYzQ4YWU3N2RjYWJjZDMzZTM0YmUwOWI2ODY3NDYzODhhYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ62Ptg3X/yAkJn+dh7Fvprd787I 2azdBwDeN28i9Zi5NuFBPFSM8snj77LGQ+MqGeraix4OTF06hZBXPZExwQuk3eMs P2BTccIXxGCzmesxznv/SltK1BHH+bAn600KkRaUo4zg8S/QcFcJvcr0U/Mvhzsz 4/G9fEdlxhAI6A4fUjETT4duwgCKw31unY+Psb5eQGjXKmdzGnRZHs0HwgSBM7RA vFCB/yx/DdnxjCgRdPZRl4sknjAJcIPJ/tWBw18hoSuNJlQZGIv3RuB1W4Vowwm9 dCMLP5cBqazLfKedl5KcH+JTer9ahjzDuAUOVUDeOYo2hEOWpjdX9bXeBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiRxIrnfcq80z40vgm2hnRjiKseMB8GA1UdIwQY MBaAFCSjC2DSPXToImvNXhXcW/dwrTB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmIt OGIzYmY4YmY5OGViLzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmItOGIzYmY4YmY5OGVi LzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwGIOo2Q M3q9yiChzxlgOvleqb600lZ2lOBCj2LBDyXW27y972Jl5NazDRwer3jdxSMgQW/g QfUfx2+7E8bwcfxTe7AnAS5GLW0mdfCljQjcBICDSa/bmh8j8b3yp41HXsndDu+H M3eifmQB0f4z5jtOmEFIMTZdK1rwPFmOdhX1h/gGtILt0vcOi3d3usxKx8XolP2d qNkQms6kwM20HWbs04kSkjKwq4z+47wvjdhdwBXkPx9nNUrrHUHH6T+U7xD7Lrwt eAXuE9Py6EgOCjueDRQrMRcBzbKBWgraEa4FZl1tfn8O6s1T8ONmLTJponZrftCz +2cx4MyWnw1/EA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:31 2025 by rpki-client