This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json) Hash identifier: QnlKSgk6BR6GyQT5E3cGYVMME/Sh5pZ++ptxGJUzH/M= Subject key identifier: 1A:AF:60:9C:FC:F2:15:B4:4D:94:1B:A6:9E:FF:A7:AD:B0:F5:F6:22 Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84 Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84 Certificate serial: 019B42EE556E7A1806AFEDBEC1E1C8FC71B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft Manifest number: 099B Signing time: Sun 21 Dec 2025 22:01:14 +0000 Manifest this update: Sun 21 Dec 2025 22:01:14 +0000 Manifest next update: Mon 22 Dec 2025 22:01:14 +0000 Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: OiLi85LbBqJvI3R0ENvBoOyDrIlBnP32Z4Or9woybUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:55:6e:7a:18:06:af:ed:be:c1:e1:c8:fc:71:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d26a5146996d220461081072c76396582fca84 Validity Not Before: Dec 21 22:01:14 2025 GMT Not After : Dec 22 22:01:14 2025 GMT Subject: CN=1aaf609cfcf215b44d941ba69effa7adb0f5f622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:a4:28:e7:09:71:51:06:0d:79:a8:a1:a2: 0f:71:2e:c1:a7:dd:72:b3:02:c1:7e:e7:e9:49:4c: c2:68:fb:b3:8a:7f:21:76:8d:4c:c8:92:d8:e8:ac: 52:38:1b:aa:2c:a8:94:66:01:66:07:b4:a5:2a:7a: 2b:36:fb:ea:69:0e:7c:fe:c3:d7:f9:70:a5:61:0d: 5a:e8:c5:08:2c:fc:8a:ff:d1:92:81:fb:7b:75:73: 0b:c9:c6:c1:82:c2:e3:b4:6f:cb:5a:90:6b:f6:85: 69:d0:4b:29:22:1e:a0:0e:c6:68:7e:df:f1:6b:93: 2d:95:be:44:d4:cd:13:18:ce:2e:56:8c:6d:3a:f3: 17:1d:41:d3:27:ce:60:56:60:6f:94:a6:73:0e:02: f0:82:87:bf:77:e1:02:0c:fc:bc:d1:9d:b9:ba:5a: 56:99:d9:09:11:36:5f:31:e1:06:cf:35:82:82:49: 93:e2:a4:0d:c3:cd:9d:fa:06:2f:66:11:40:27:4c: e6:45:a4:32:6f:f8:2f:e5:5f:98:97:24:12:21:9f: 63:d3:7f:fa:b8:0f:cc:01:51:e1:70:39:d6:8d:be: 1e:a6:87:22:c3:a9:e3:a5:42:95:fa:19:0c:47:01: 9c:0f:d2:a8:cd:fa:27:7d:28:03:00:ca:b8:99:f8: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AF:60:9C:FC:F2:15:B4:4D:94:1B:A6:9E:FF:A7:AD:B0:F5:F6:22 X509v3 Authority Key Identifier: keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:97:a6:1d:52:22:7f:5d:5a:68:20:95:48:23:c2:9e:49:d2: 04:b7:bd:2d:5d:82:a9:3e:f2:22:2c:32:8d:12:fc:5d:ff:16: 82:b6:1c:94:60:28:44:82:19:e8:62:eb:b2:63:e5:19:8c:c8: 49:7b:47:41:8b:e5:17:47:62:b7:84:50:fb:1c:0c:4a:b7:e5: 12:eb:14:59:7c:03:4f:fb:11:56:d1:c2:10:06:96:3c:ac:8d: 59:8c:12:1a:00:69:d4:b0:95:90:20:9a:07:63:f7:7a:b5:37: ba:f4:6a:7e:f9:9a:3d:74:a6:21:21:f7:ea:a0:a3:ba:03:e7: 93:ae:47:56:7f:31:3b:17:a3:91:bc:98:23:61:df:c9:fe:fd: f7:56:42:f5:44:a3:fa:d4:6f:7b:e6:25:bb:01:cc:3c:81:2b: c4:e5:e7:1b:95:44:c7:2e:0b:a7:1c:02:05:ef:38:94:ff:b7: 0a:f5:f7:56:ec:58:c4:df:dc:c7:15:10:fe:b9:6e:9e:89:1b: b1:b2:4d:4f:f4:50:16:ff:47:94:4f:8c:89:67:61:65:0b:5d: e8:35:02:43:80:7f:dd:a3:f4:eb:18:02:ee:a0:bc:ff:df:92: fa:cb:4f:08:5f:4d:4b:09:88:9a:b4:b1:f9:9d:6f:73:dd:dc: 65:e5:7a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7lVuehgGr+2+weHI/HG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI2YTUxNDY5OTZkMjIwNDYxMDgxMDcyYzc2Mzk2NTgy ZmNhODQwHhcNMjUxMjIxMjIwMTE0WhcNMjUxMjIyMjIwMTE0WjAzMTEwLwYDVQQD EygxYWFmNjA5Y2ZjZjIxNWI0NGQ5NDFiYTY5ZWZmYTdhZGIwZjVmNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYakKOcJcVEGDXmooaIPcS7Bp91y swLBfufpSUzCaPuzin8hdo1MyJLY6KxSOBuqLKiUZgFmB7SlKnorNvvqaQ58/sPX +XClYQ1a6MUILPyK/9GSgft7dXMLycbBgsLjtG/LWpBr9oVp0EspIh6gDsZoft/x a5Mtlb5E1M0TGM4uVoxtOvMXHUHTJ85gVmBvlKZzDgLwgoe/d+ECDPy80Z25ulpW mdkJETZfMeEGzzWCgkmT4qQNw82d+gYvZhFAJ0zmRaQyb/gv5V+YlyQSIZ9j03/6 uA/MAVHhcDnWjb4epociw6njpUKV+hkMRwGcD9KozfonfSgDAMq4mfgNLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqvYJz88hW0TZQbpp7/p62w9fYiMB8GA1UdIwQY MBaAFCTSalFGmW0iBGEIEHLHY5ZYL8qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEt NWI5ODk2MjczNzg5LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEtNWI5ODk2MjczNzg5 LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJemHVIi f11aaCCVSCPCnknSBLe9LV2CqT7yIiwyjRL8Xf8WgrYclGAoRIIZ6GLrsmPlGYzI SXtHQYvlF0dit4RQ+xwMSrflEusUWXwDT/sRVtHCEAaWPKyNWYwSGgBp1LCVkCCa B2P3erU3uvRqfvmaPXSmISH36qCjugPnk65HVn8xOxejkbyYI2Hfyf7991ZC9USj +tRve+YluwHMPIErxOXnG5VExy4LpxwCBe84lP+3CvX3VuxYxN/cxxUQ/rlunokb sbJNT/RQFv9HlE+MiWdhZQtd6DUCQ4B/3aP06xgC7qC8/9+S+stPCF9NSwmImrSx +Z1vc93cZeV6KA== -----END CERTIFICATE-----Generated at Mon Dec 22 05:33:57 2025 by rpki-client