This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json) Hash identifier: n1r4tUd0VV49rch0rSn0IfI0OzWEzA0ga5JdEcW81CE= Subject key identifier: 32:1B:4F:66:AF:3C:69:EE:8B:10:0F:7C:F6:C5:D1:D1:62:E6:D1:CB Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Certificate serial: 019B0F37B086CE9C81E2B94529673912409B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft Manifest number: 16B8 Signing time: Thu 11 Dec 2025 21:01:06 +0000 Manifest this update: Thu 11 Dec 2025 21:01:06 +0000 Manifest next update: Fri 12 Dec 2025 21:01:06 +0000 Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: ePyiqR/pQbMo0DAgn0cPDUuRGs1MUFajiWyfwO/jtyI=) 2: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (hash: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=) 3: g_n97b-ezr2pU8M_arTz7b0GI28.roa (hash: f/1b/CBZ/cmdffSZ/BO1Ow8CLoficDzJ57IxUPZ8+ZA=) 4: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (hash: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b0:86:ce:9c:81:e2:b9:45:29:67:39:12:40:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Validity Not Before: Dec 11 21:01:06 2025 GMT Not After : Dec 12 21:01:06 2025 GMT Subject: CN=321b4f66af3c69ee8b100f7cf6c5d1d162e6d1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b5:7d:f5:45:98:57:55:52:f3:7d:c3:cc:62: 8d:94:88:f6:a1:84:ef:67:f7:92:c2:33:08:07:ce: ee:d8:92:6b:de:00:aa:da:d1:ee:ec:c1:7c:05:58: f7:9c:0e:9d:9a:d5:8a:a8:b5:5b:6b:54:71:ab:e0: 19:3f:25:9d:1e:3b:3b:dd:78:ee:b6:fc:a8:a1:a4: 53:22:30:22:88:d4:37:95:25:5b:5d:69:32:02:c1: b7:d0:9a:a3:d8:e9:fc:e9:d7:66:ff:7c:66:be:af: 2b:f9:a4:38:9f:5b:55:9c:d3:d3:46:c4:7d:14:14: 8e:e6:59:54:0a:ab:04:a6:8d:7c:df:63:f8:ae:cc: 76:6d:ec:32:4b:06:d9:7b:de:62:67:d4:92:d0:ab: 45:0e:01:df:57:27:11:ff:f4:2e:71:b5:d7:bd:09: f0:e7:ca:4d:52:55:cd:30:a7:67:66:a3:87:18:75: c0:fe:12:11:28:6b:8e:35:53:95:44:90:25:72:a5: 2f:85:62:3f:89:16:8a:af:ef:59:07:6c:53:7b:27: e7:8a:95:15:37:f2:e5:71:4e:79:93:0a:58:20:64: ed:7d:46:2a:fe:1c:e9:ac:d0:80:0b:8b:9f:98:93: e0:f1:a8:7a:83:3e:02:a8:3d:08:7c:64:ae:83:f7: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1B:4F:66:AF:3C:69:EE:8B:10:0F:7C:F6:C5:D1:D1:62:E6:D1:CB X509v3 Authority Key Identifier: keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:58:71:51:f9:ca:3b:6f:91:99:58:c2:7e:f6:69:5c:6c:f5: 8a:ff:f9:8f:b7:06:53:92:cb:d4:41:3f:87:92:fd:c4:b4:9a: d1:e5:c8:c3:94:d0:3e:ba:29:da:0c:86:b9:01:bc:20:6a:72: 6c:e6:70:68:2c:8a:d7:71:c4:10:29:01:c3:d7:0c:bc:da:55: 38:cc:70:58:31:3a:21:f0:04:d0:ef:4c:79:ca:6e:c2:00:9e: f3:4d:05:a3:82:ba:9c:57:44:7c:17:16:4b:61:35:9a:cc:78: 79:47:71:fa:b2:a6:36:75:fb:97:44:26:39:70:82:ad:30:67: 98:99:f1:5a:84:47:2f:26:b5:ec:67:bc:95:45:9d:b7:93:98: 21:12:48:7e:e8:b2:cc:d9:32:bd:4b:a0:27:26:1b:38:1d:57: d0:ba:cf:6b:b7:ec:64:0b:05:51:94:f5:47:1a:f8:a8:dc:79: 25:1d:2a:2b:ea:f8:35:bc:2a:3f:ed:9f:f7:11:3c:ce:89:ee: 2b:39:e6:85:92:74:10:90:f1:b4:56:0d:b5:1c:e2:f0:d6:0f: 5b:8b:db:fa:d7:cb:0c:44:1e:69:fb:f0:59:94:45:8d:5e:85: a9:be:71:ea:25:39:e0:f3:f9:ff:a8:3c:6b:fa:6d:56:1d:43: 71:80:9f:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7CGzpyB4rlFKWc5EkCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1 MTczMDgwHhcNMjUxMjExMjEwMTA2WhcNMjUxMjEyMjEwMTA2WjAzMTEwLwYDVQQD EygzMjFiNGY2NmFmM2M2OWVlOGIxMDBmN2NmNmM1ZDFkMTYyZTZkMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLV99UWYV1VS833DzGKNlIj2oYTv Z/eSwjMIB87u2JJr3gCq2tHu7MF8BVj3nA6dmtWKqLVba1Rxq+AZPyWdHjs73Xju tvyooaRTIjAiiNQ3lSVbXWkyAsG30Jqj2On86ddm/3xmvq8r+aQ4n1tVnNPTRsR9 FBSO5llUCqsEpo1832P4rsx2bewySwbZe95iZ9SS0KtFDgHfVycR//QucbXXvQnw 58pNUlXNMKdnZqOHGHXA/hIRKGuONVOVRJAlcqUvhWI/iRaKr+9ZB2xTeyfnipUV N/LlcU55kwpYIGTtfUYq/hzprNCAC4ufmJPg8ah6gz4CqD0IfGSug/dhewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIbT2avPGnuixAPfPbF0dFi5tHLMB8GA1UdIwQY MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct NTBkMGE1MzIzNjQxLzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlhxUfnK O2+RmVjCfvZpXGz1iv/5j7cGU5LL1EE/h5L9xLSa0eXIw5TQProp2gyGuQG8IGpy bOZwaCyK13HEECkBw9cMvNpVOMxwWDE6IfAE0O9MecpuwgCe800Fo4K6nFdEfBcW S2E1msx4eUdx+rKmNnX7l0QmOXCCrTBnmJnxWoRHLya17Ge8lUWdt5OYIRJIfuiy zNkyvUugJyYbOB1X0LrPa7fsZAsFUZT1Rxr4qNx5JR0qK+r4NbwqP+2f9xE8zonu KznmhZJ0EJDxtFYNtRzi8NYPW4vb+tfLDEQeafvwWZRFjV6Fqb5x6iU54PP5/6g8 a/ptVh1DcYCfsw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:40:12 2025 by rpki-client