This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft File: JovHlTH32BXSsrUin5rJ9vi_68o.mft (raw, json) Hash identifier: 7neSugpcE7flHbg3mS2ojC/JA++vLCGYEI82N2B+Jjk= Subject key identifier: 69:6D:E2:D1:C7:02:8D:71:0D:58:46:18:13:D2:3A:79:C8:E9:96:B6 Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA Certificate issuer: /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca Certificate serial: 019B34C5C1CE7C579A706710582EF104D56A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft Manifest number: 0239 Signing time: Fri 19 Dec 2025 04:02:13 +0000 Manifest this update: Fri 19 Dec 2025 04:02:13 +0000 Manifest next update: Sat 20 Dec 2025 04:02:13 +0000 Files and hashes: 1: JovHlTH32BXSsrUin5rJ9vi_68o.crl (hash: VmXnfNLvsc5pcWRyHyTu4VgASNtEV4eyCCYLuuMe79Q=) 2: fbUeFXfkxWs40ix5vT2S2k90Z-k.roa (hash: UcP80IpCz9vBYWCvKMhbqTO9Etv9kTfCKFjSdIAUqCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:c1:ce:7c:57:9a:70:67:10:58:2e:f1:04:d5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca Validity Not Before: Dec 19 04:02:13 2025 GMT Not After : Dec 20 04:02:13 2025 GMT Subject: CN=696de2d1c7028d710d58461813d23a79c8e996b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:63:5a:90:c1:5f:16:10:60:74:21:18:2d:62: 7a:c5:f2:77:81:c0:90:b9:d6:00:90:fa:63:f4:9f: 86:5e:3e:78:55:aa:9b:fc:8e:27:c5:39:74:3c:71: a4:1b:8b:9c:cc:d8:50:44:8a:61:53:44:03:53:da: 03:22:b6:95:66:65:0d:f0:24:65:36:00:72:75:89: fb:8e:22:57:fc:fa:d9:03:b9:61:c7:34:09:ae:fd: c6:29:66:d1:53:28:0e:3e:52:4f:b7:a7:52:54:4f: 1b:00:8a:16:49:b5:94:70:ba:0f:44:e7:a9:c0:70: 43:3b:08:e9:5e:56:b9:f0:a2:ba:b5:54:dd:20:3f: 13:fc:90:46:50:e4:c2:5e:2b:70:1f:2f:cd:7e:bb: 7a:fc:ae:ee:84:85:bc:e7:78:9c:b3:18:9a:7f:d1: 88:86:e8:40:c7:02:e6:54:3c:1d:83:e4:82:ae:4c: 9c:c2:b2:de:a5:b4:f7:d1:87:c3:e1:a7:ae:d5:07: 17:5f:39:f6:d7:33:bc:6f:c4:7f:bd:86:f3:88:a5: 4e:be:ca:56:b5:b8:5c:13:56:f8:17:8d:0e:e1:6b: d9:e1:fc:9b:0b:44:92:4f:45:cd:ce:26:9d:05:91: c7:de:ba:bc:59:f6:ee:04:84:c8:55:83:4e:88:9f: 01:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6D:E2:D1:C7:02:8D:71:0D:58:46:18:13:D2:3A:79:C8:E9:96:B6 X509v3 Authority Key Identifier: keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e9:e4:9f:42:08:54:48:44:b3:3e:72:9a:bb:e7:c6:df:5c: 32:e3:9d:0d:71:64:96:e8:60:d8:12:cd:9c:51:05:fc:fb:37: 12:b5:e1:7f:5a:dc:fc:2a:68:65:22:42:38:90:de:1e:22:0a: ef:b3:06:a6:60:a9:ec:03:fa:f5:09:9a:24:0c:a6:86:1e:b2: 1a:bf:d4:b4:8c:0b:68:9e:f2:7f:41:1b:2b:75:07:a9:61:b0: f7:ce:27:32:b8:62:bf:b2:b4:bf:3c:eb:5d:fa:c4:3d:27:9e: a5:f2:07:97:43:cb:96:c6:74:7d:7b:e6:ff:b2:f7:d7:ca:a5: 57:6d:8f:83:df:f7:fc:ee:af:61:21:56:2b:e7:e6:98:46:a2: d7:42:ea:93:f6:c9:93:b1:bb:36:a5:ab:65:e1:71:00:20:56: 56:24:66:5a:2f:26:63:76:25:1e:db:61:1c:d8:e1:00:f9:52: cf:2d:9f:6c:a3:65:6c:68:3e:2f:bf:69:0e:74:07:51:5e:f5: d9:d3:91:d1:3c:1c:90:89:fd:ae:ae:2b:bc:15:89:d3:e4:03: ea:54:9e:0f:00:85:d3:76:5e:1f:18:f3:9e:a5:86:9e:1f:e7: 0e:10:5f:f8:b5:52:e0:2b:1f:10:88:1e:c8:05:2e:f4:86:ad: c9:a9:4e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xcHOfFeacGcQWC7xBNVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGJjNzk1MzFmN2Q4MTVkMmIyYjUyMjlmOWFjOWY2Zjhi ZmViY2EwHhcNMjUxMjE5MDQwMjEzWhcNMjUxMjIwMDQwMjEzWjAzMTEwLwYDVQQD Eyg2OTZkZTJkMWM3MDI4ZDcxMGQ1ODQ2MTgxM2QyM2E3OWM4ZTk5NmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2NakMFfFhBgdCEYLWJ6xfJ3gcCQ udYAkPpj9J+GXj54Vaqb/I4nxTl0PHGkG4uczNhQRIphU0QDU9oDIraVZmUN8CRl NgBydYn7jiJX/PrZA7lhxzQJrv3GKWbRUygOPlJPt6dSVE8bAIoWSbWUcLoPROep wHBDOwjpXla58KK6tVTdID8T/JBGUOTCXitwHy/Nfrt6/K7uhIW853icsxiaf9GI huhAxwLmVDwdg+SCrkycwrLepbT30YfD4aeu1QcXXzn21zO8b8R/vYbziKVOvspW tbhcE1b4F40O4WvZ4fybC0SST0XNziadBZHH3rq8WfbuBITIVYNOiJ8BKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlt4tHHAo1xDVhGGBPSOnnI6Za2MB8GA1UdIwQY MBaAFCaLx5Ux99gV0rK1Ip+ayfb4v+vKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZjA3ZTAtMDc1ZC00NTQ4LTljOWEt MTU1YjM1N2JkODgwLzEvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yZjA3ZTAtMDc1ZC00NTQ4LTljOWEtMTU1YjM1N2JkODgw LzEvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOnkn0II VEhEsz5ymrvnxt9cMuOdDXFkluhg2BLNnFEF/Ps3ErXhf1rc/CpoZSJCOJDeHiIK 77MGpmCp7AP69QmaJAymhh6yGr/UtIwLaJ7yf0EbK3UHqWGw984nMrhiv7K0vzzr XfrEPSeepfIHl0PLlsZ0fXvm/7L318qlV22Pg9/3/O6vYSFWK+fmmEai10Lqk/bJ k7G7NqWrZeFxACBWViRmWi8mY3YlHtthHNjhAPlSzy2fbKNlbGg+L79pDnQHUV71 2dOR0TwckIn9rq4rvBWJ0+QD6lSeDwCF03ZeHxjznqWGnh/nDhBf+LVS4CsfEIge yAUu9IatyalOpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:53:29 2025 by rpki-client