This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json) Hash identifier: OmcttBZMGB4GF12iRlIQcgHRJxR2Kx00FC34xSwtxcQ= Subject key identifier: E5:C7:48:9E:78:00:1D:41:13:56:FF:F0:CF:FE:05:C3:B8:4D:F3:4C Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf Certificate serial: 019B59E38C0FAE8706D065F7CA1687DECC68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:00:43 +0000 Manifest this update: Fri 26 Dec 2025 09:00:43 +0000 Manifest next update: Sat 27 Dec 2025 09:00:43 +0000 Files and hashes: 1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: beCrYJs/2dNzhnwtH16EZLq2+OOpg2kPlIOUAPpOPvs=) 2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=) 3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:8c:0f:ae:87:06:d0:65:f7:ca:16:87:de:cc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf Validity Not Before: Dec 26 09:00:43 2025 GMT Not After : Dec 27 09:00:43 2025 GMT Subject: CN=e5c7489e78001d411356fff0cffe05c3b84df34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:37:30:b4:ba:12:5e:3e:2f:0c:2f:43:15: d9:fa:77:fa:0a:6d:0e:19:d5:68:12:b7:80:11:d5: cb:42:b0:a1:d3:43:dc:fd:20:52:04:f9:12:24:8c: a3:0d:8d:5d:ba:30:c9:2d:e0:8c:53:ee:7b:c1:7c: c4:72:63:c5:22:8a:ab:e7:36:93:42:05:79:a7:cd: fa:9d:4a:89:66:c6:fc:a0:66:8c:aa:17:2b:68:4e: f4:e4:06:5b:0d:5f:da:e4:48:03:9a:3d:bb:ed:62: 52:e0:26:3a:62:13:5b:ae:be:6c:5d:9a:5d:21:7d: da:7d:35:f4:67:7d:0e:5d:f7:fc:f3:19:40:9a:b6: 17:c3:7d:4a:ed:cd:71:ac:36:1c:2a:bf:b3:a7:8e: 91:9d:d2:0b:ea:3d:cc:86:6f:24:0e:8d:d1:c0:70: 58:63:5d:50:26:5b:6b:05:56:ee:ad:fb:0f:7e:6b: 9f:14:95:fe:26:7f:d3:b6:8e:e6:fa:7e:1c:8d:5c: a3:f0:28:d9:56:0f:66:f7:c8:0b:8a:8f:6d:d8:d2: 24:74:71:71:62:62:31:bb:50:9a:58:41:19:9e:a7: 0a:4b:74:85:27:0c:25:a1:0d:30:c5:08:24:89:5f: 13:d2:cc:ee:f4:21:70:39:e4:63:59:ce:0e:17:93: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C7:48:9E:78:00:1D:41:13:56:FF:F0:CF:FE:05:C3:B8:4D:F3:4C X509v3 Authority Key Identifier: keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d7:a9:f7:2e:cb:5d:b7:e5:2d:1b:c7:4c:67:67:60:10:58: 12:c3:61:51:f7:82:56:eb:84:05:48:e5:f9:30:87:b9:89:04: e4:f2:6a:5d:4d:f1:15:5f:cd:16:a6:83:dd:48:b0:12:6d:93: cb:e0:92:ed:02:42:49:54:50:76:d7:7f:6d:2e:86:18:1c:c1: b2:af:e0:1d:ef:36:f1:28:66:66:30:30:ff:ca:b0:b9:c2:86: 95:ac:7d:26:af:43:bc:79:4f:2f:e8:0f:4a:f4:ba:54:9b:68: 60:89:80:ce:d9:39:42:f9:93:86:15:3a:d8:20:df:23:4c:e8: e0:64:ea:d6:6c:6b:9b:85:af:e1:67:1b:1c:95:d4:fd:f6:e7: 85:3b:9f:0b:c0:70:9b:38:25:aa:e2:86:ed:77:a8:01:ee:8d: f3:9d:6b:95:3c:e7:6d:d4:24:76:8e:a6:8a:c0:42:bb:84:13: 9d:39:9c:65:20:be:ed:6a:8e:d5:5e:52:e1:76:e0:36:2f:c8: 2a:41:7e:d5:25:0b:34:de:80:e9:f7:ed:12:ce:5c:3c:51:23: c0:07:f9:22:c7:c5:6d:55:d2:9f:78:7f:a6:83:54:86:50:73: c9:3b:34:70:4c:9d:4f:01:f6:db:75:3a:7a:6f:ea:60:e0:04: 8c:29:f5:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44wProcG0GX3yhaH3sxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTkxOGYxYjEwZWMxZDY2MGIxY2ZjYjFiZmUxOTZjMmZl YjA2YmYwHhcNMjUxMjI2MDkwMDQzWhcNMjUxMjI3MDkwMDQzWjAzMTEwLwYDVQQD EyhlNWM3NDg5ZTc4MDAxZDQxMTM1NmZmZjBjZmZlMDVjM2I4NGRmMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsQ3MLS6El4+LwwvQxXZ+nf6Cm0O GdVoEreAEdXLQrCh00Pc/SBSBPkSJIyjDY1dujDJLeCMU+57wXzEcmPFIoqr5zaT QgV5p836nUqJZsb8oGaMqhcraE705AZbDV/a5EgDmj277WJS4CY6YhNbrr5sXZpd IX3afTX0Z30OXff88xlAmrYXw31K7c1xrDYcKr+zp46RndIL6j3Mhm8kDo3RwHBY Y11QJltrBVburfsPfmufFJX+Jn/Tto7m+n4cjVyj8CjZVg9m98gLio9t2NIkdHFx YmIxu1CaWEEZnqcKS3SFJwwloQ0wxQgkiV8T0szu9CFwOeRjWc4OF5OyPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXHSJ54AB1BE1b/8M/+BcO4TfNMMB8GA1UdIwQY MBaAFCSpGPGxDsHWYLHPyxv+GWwv6wa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYt MWYyNjJkOWM5YjA3LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYtMWYyNjJkOWM5YjA3 LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdep9y7L XbflLRvHTGdnYBBYEsNhUfeCVuuEBUjl+TCHuYkE5PJqXU3xFV/NFqaD3UiwEm2T y+CS7QJCSVRQdtd/bS6GGBzBsq/gHe828ShmZjAw/8qwucKGlax9Jq9DvHlPL+gP SvS6VJtoYImAztk5QvmThhU62CDfI0zo4GTq1mxrm4Wv4WcbHJXU/fbnhTufC8Bw mzglquKG7XeoAe6N851rlTznbdQkdo6misBCu4QTnTmcZSC+7WqO1V5S4XbgNi/I KkF+1SULNN6A6fftEs5cPFEjwAf5IsfFbVXSn3h/poNUhlBzyTs0cEydTwH223U6 em/qYOAEjCn1nw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:25 2025 by rpki-client