This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft File: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json) Hash identifier: oZO8EhoptHI5R5944pHNQeGYQqIpU9EC2v0tCqtvFCs= Subject key identifier: 0E:AF:65:41:A6:EA:A8:D3:B5:19:D6:71:88:82:B8:4D:AC:36:5A:64 Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d Certificate serial: 019B273FB411A292E2DD3B0971BF4A58939E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 13:00:44 +0000 Manifest this update: Tue 16 Dec 2025 13:00:44 +0000 Manifest next update: Wed 17 Dec 2025 13:00:44 +0000 Files and hashes: 1: 1-nkq1gI9c-xmhnINJKTO0eY1F-c.roa (hash: esI7VyyO9I62Rhxi2p/PfcbKRFK2dputujGVLb2DIKs=) 2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: tRc9/3rEyNL3+XoRWons0PFDZIa3YqANuYCbpAhg6yo=) 3: NLCollhjrEEQOE-PDJFwvSEkpWg.roa (hash: MVYofLmObC6krPDdhLIsoczQc+WblQhfU3QgFVWsECQ=) 4: ngBNYl-whCyGIde-bD1GXnCv6tc.roa (hash: jOzkj1FabBPArbWH4CC715VSys+dMBcuG0O5ZOY3nPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:b4:11:a2:92:e2:dd:3b:09:71:bf:4a:58:93:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d Validity Not Before: Dec 16 13:00:44 2025 GMT Not After : Dec 17 13:00:44 2025 GMT Subject: CN=0eaf6541a6eaa8d3b519d6718882b84dac365a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:20:df:82:50:80:41:c5:46:d6:74:e8:12: 48:9f:0d:83:b0:0f:b4:38:fa:f6:21:b0:98:5c:99: 10:a8:59:f9:ca:ee:67:79:d2:02:1a:8d:ea:85:24: 22:4b:00:4a:6d:e4:b4:11:ac:e9:2d:d2:6a:78:e4: ae:97:63:8c:99:80:2e:0d:36:b8:33:63:5e:f7:55: 64:35:9f:f3:6e:33:43:49:06:fb:0a:f6:ae:eb:b3: 6a:35:db:75:20:97:f4:3b:d7:53:71:41:e5:4f:05: a4:86:ac:43:f0:f1:f5:b2:d7:51:7e:1e:0b:ae:e7: f5:9e:ca:67:de:55:26:36:6f:1d:8e:09:e2:4d:2f: 9d:bf:99:35:1e:d5:dd:5a:df:90:43:99:5f:31:77: 97:b5:b6:ef:e3:63:4c:60:73:57:87:31:95:65:eb: 1d:a6:ce:11:fd:c3:fd:84:30:51:3e:91:84:da:04: 56:2a:e3:66:4e:93:bf:b3:53:ea:0a:47:8e:77:03: 7b:0f:e2:59:34:d0:f8:47:92:9b:1b:1e:52:9c:51: 1e:75:f8:70:b9:e4:c6:13:fb:cb:af:02:8c:29:8f: 7b:02:48:da:fe:64:9e:1a:6f:6f:2b:ea:41:a6:99: 2b:69:52:28:8e:e6:ad:6a:a4:9c:a4:66:f9:37:18: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:65:41:A6:EA:A8:D3:B5:19:D6:71:88:82:B8:4D:AC:36:5A:64 X509v3 Authority Key Identifier: keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7f:44:a1:c4:2a:90:59:ff:8b:8d:6e:ec:19:30:2c:5e:62: 5b:ca:0f:b7:07:a3:4a:4a:82:70:fa:1b:8b:b4:06:94:43:3d: 96:5e:3b:4e:ec:a0:36:b7:c6:5c:e6:09:c4:5f:04:ea:ed:29: 26:40:0d:54:a1:80:fd:17:10:ab:f3:f8:71:cc:55:62:a8:42: ec:f9:27:5a:fd:48:0d:31:c1:66:e5:f2:80:f7:2f:7f:22:a6: 0d:4f:67:b1:44:b6:7f:09:90:25:a6:94:b3:63:78:6f:1b:4f: dc:05:13:23:1f:9e:67:52:af:07:1f:94:b8:e5:6b:b4:14:5e: 67:b8:0d:69:88:5f:98:d4:b8:17:ef:3a:eb:b8:d3:c7:01:13: 20:c2:cb:b6:9c:55:f1:fa:1d:3a:f5:15:d2:89:de:9f:ea:3f: 0e:dd:96:fb:1a:22:61:21:77:aa:5f:26:5b:3f:fd:c7:dd:11: c2:c1:b6:a7:e3:00:a0:98:5a:29:33:bb:06:fc:b9:30:8a:1d: d5:5b:a4:03:91:e6:f3:22:58:94:97:d3:ba:fc:a4:da:24:c4: f3:df:e1:20:e3:fe:93:28:30:33:e2:ec:bf:cb:de:1c:5b:4f: df:f9:97:4d:ed:73:92:ee:85:c1:3c:91:e2:1e:7f:71:00:ea: 5c:6b:ef:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP7QRopLi3TsJcb9KWJOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTBiZmJmNzk4ZmFlYWE3ZDZhMzYwNThkMDEzZTI0ZDRi YjFkOWQwHhcNMjUxMjE2MTMwMDQ0WhcNMjUxMjE3MTMwMDQ0WjAzMTEwLwYDVQQD EygwZWFmNjU0MWE2ZWFhOGQzYjUxOWQ2NzE4ODgyYjg0ZGFjMzY1YTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF0g34JQgEHFRtZ06BJInw2DsA+0 OPr2IbCYXJkQqFn5yu5nedICGo3qhSQiSwBKbeS0EazpLdJqeOSul2OMmYAuDTa4 M2Ne91VkNZ/zbjNDSQb7Cvau67NqNdt1IJf0O9dTcUHlTwWkhqxD8PH1stdRfh4L ruf1nspn3lUmNm8djgniTS+dv5k1HtXdWt+QQ5lfMXeXtbbv42NMYHNXhzGVZesd ps4R/cP9hDBRPpGE2gRWKuNmTpO/s1PqCkeOdwN7D+JZNND4R5KbGx5SnFEedfhw ueTGE/vLrwKMKY97Akja/mSeGm9vK+pBppkraVIojuataqScpGb5Nxj6ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6vZUGm6qjTtRnWcYiCuE2sNlpkMB8GA1UdIwQY MBaAFCRQv795j66qfWo2BY0BPiTUux2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOWM3NmYtMmY2Ny00MjFjLTg0YWUt ZGQ1NDlmM2I4M2JmLzEvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xOWM3NmYtMmY2Ny00MjFjLTg0YWUtZGQ1NDlmM2I4M2Jm LzEvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY39EocQq kFn/i41u7BkwLF5iW8oPtwejSkqCcPobi7QGlEM9ll47TuygNrfGXOYJxF8E6u0p JkANVKGA/RcQq/P4ccxVYqhC7PknWv1IDTHBZuXygPcvfyKmDU9nsUS2fwmQJaaU s2N4bxtP3AUTIx+eZ1KvBx+UuOVrtBReZ7gNaYhfmNS4F+8667jTxwETIMLLtpxV 8fodOvUV0onen+o/Dt2W+xoiYSF3ql8mWz/9x90RwsG2p+MAoJhaKTO7Bvy5MIod 1VukA5Hm8yJYlJfTuvyk2iTE89/hIOP+kygwM+Lsv8veHFtP3/mXTe1zku6FwTyR 4h5/cQDqXGvvNg== -----END CERTIFICATE-----Generated at Tue Dec 16 20:19:47 2025 by rpki-client