This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft File: JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json) Hash identifier: j8Q2cd4Fz+lGawAXhJFxB0M3p6Fak9KU6hxkA7WTDzM= Subject key identifier: C4:E9:F5:FC:3A:9E:17:3B:A3:FD:FD:74:74:FA:BE:0A:7C:D7:0A:35 Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B Certificate issuer: /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b Certificate serial: 019B5A1A53819F229D06F5CDD9B2CD5BA8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft Manifest number: 0E77 Signing time: Fri 26 Dec 2025 10:00:33 +0000 Manifest this update: Fri 26 Dec 2025 10:00:33 +0000 Manifest next update: Sat 27 Dec 2025 10:00:33 +0000 Files and hashes: 1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: OPlF/28PG5sFmmGuO7yewgu6TJVBrLyem2+fkJVrmgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:53:81:9f:22:9d:06:f5:cd:d9:b2:cd:5b:a8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b Validity Not Before: Dec 26 10:00:33 2025 GMT Not After : Dec 27 10:00:33 2025 GMT Subject: CN=c4e9f5fc3a9e173ba3fdfd7474fabe0a7cd70a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:54:26:23:8a:74:fe:87:8c:c7:96:4e:a6: 38:76:bb:7b:13:19:2b:cd:11:2f:58:cc:3f:a8:16: 25:08:1a:0f:76:c6:c3:82:48:1b:a5:05:54:20:31: 97:29:31:c3:bb:f9:ea:53:64:5b:bf:de:d4:38:e7: c3:76:15:4d:e2:c0:25:13:b3:86:b2:7a:32:cf:28: ff:2f:a8:9d:f4:5f:51:34:d5:e9:85:b7:16:69:b9: 16:0a:d1:95:3e:3d:b6:91:80:04:a0:8e:52:8f:36: db:31:74:11:1f:c4:58:d0:73:c1:48:8b:ea:c4:c2: bd:b2:26:83:4c:fe:02:df:35:3f:7b:12:ac:ca:14: 1e:a5:ce:94:d8:af:67:b5:7c:83:60:ac:42:a4:18: 17:52:e5:cc:53:4a:e7:c0:e0:99:44:6d:5e:a0:3c: e9:db:f4:c3:37:66:14:28:19:12:cd:1e:f7:39:83: da:e5:a0:84:77:ee:a2:b8:ea:e3:fd:57:bb:19:0b: c0:3f:90:53:ae:23:56:12:cf:87:c5:c8:69:dd:11: 52:02:a9:fb:b3:b2:2a:de:35:40:d5:91:50:4d:40: 5c:4c:57:a9:20:35:27:ad:a7:e1:2d:39:02:1a:1f: c4:41:a9:33:c9:9a:ec:7a:9b:ef:06:2d:da:7b:33: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E9:F5:FC:3A:9E:17:3B:A3:FD:FD:74:74:FA:BE:0A:7C:D7:0A:35 X509v3 Authority Key Identifier: keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:4f:0f:74:43:ed:16:77:4e:ae:86:16:de:16:fb:d7:ad: 33:4e:ba:0c:b5:55:0e:9a:33:13:b9:d2:e5:2c:e2:49:52:8c: 59:4d:cb:ac:72:8b:77:b0:5a:ac:f9:e9:01:f3:e0:ca:b1:90: a5:a5:b1:db:37:e1:e4:ce:b3:1c:9d:78:14:a9:ce:5a:4a:fe: 04:ec:b2:a8:92:26:49:ec:f6:67:76:3e:68:72:bb:37:4b:da: b6:7c:e1:f1:2a:43:4b:9e:74:05:14:9a:9d:c9:1c:98:a7:58: 0f:3b:ed:cd:9a:78:43:3b:b7:6a:ed:64:04:9a:3c:a8:aa:36: 7e:33:5b:3a:06:e3:8e:6f:ed:8f:d7:d8:14:0b:b7:6a:88:ec: b9:cf:d5:4a:26:a8:fc:c0:40:fb:fa:66:73:83:07:7c:7d:98: f0:1e:37:0d:78:1a:cc:fa:21:1d:e5:a2:ea:f6:09:52:1b:b6: ac:13:95:3b:ab:57:63:57:81:13:8a:bb:69:89:92:0c:a2:c1: fa:44:10:32:9f:4e:aa:19:47:bf:fc:df:95:e1:ce:79:13:b9: 33:81:e3:a4:c3:fa:14:7d:95:68:43:e0:a8:31:9d:57:d0:d2: 8e:7c:2e:c7:67:32:c2:91:95:4c:6e:2a:0e:a5:dc:57:d8:e1: b6:fa:fe:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlOBnyKdBvXN2bLNW6izMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Zjk4ODhlNzNkZWU3Y2I1Y2RjZmQ5M2IyNjI4ZmJjMTBh M2U5MGIwHhcNMjUxMjI2MTAwMDMzWhcNMjUxMjI3MTAwMDMzWjAzMTEwLwYDVQQD EyhjNGU5ZjVmYzNhOWUxNzNiYTNmZGZkNzQ3NGZhYmUwYTdjZDcwYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GxUJiOKdP6HjMeWTqY4drt7Exkr zREvWMw/qBYlCBoPdsbDgkgbpQVUIDGXKTHDu/nqU2Rbv97UOOfDdhVN4sAlE7OG snoyzyj/L6id9F9RNNXphbcWabkWCtGVPj22kYAEoI5SjzbbMXQRH8RY0HPBSIvq xMK9siaDTP4C3zU/exKsyhQepc6U2K9ntXyDYKxCpBgXUuXMU0rnwOCZRG1eoDzp 2/TDN2YUKBkSzR73OYPa5aCEd+6iuOrj/Ve7GQvAP5BTriNWEs+Hxchp3RFSAqn7 s7Iq3jVA1ZFQTUBcTFepIDUnrafhLTkCGh/EQakzyZrsepvvBi3aezMv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTp9fw6nhc7o/39dHT6vgp81wo1MB8GA1UdIwQY MBaAFCb5iI5z3ufLXNz9k7Jij7wQo+kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NGEyM2QtYjRlOS00NjBlLWEzZGIt MWY4MmJhZGY1YzFlLzEvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi80NGEyM2QtYjRlOS00NjBlLWEzZGItMWY4MmJhZGY1YzFl LzEvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmRPD3RD 7RZ3Tq6GFt4W+9etM066DLVVDpozE7nS5SziSVKMWU3LrHKLd7BarPnpAfPgyrGQ paWx2zfh5M6zHJ14FKnOWkr+BOyyqJImSez2Z3Y+aHK7N0vatnzh8SpDS550BRSa nckcmKdYDzvtzZp4Qzu3au1kBJo8qKo2fjNbOgbjjm/tj9fYFAu3aojsuc/VSiao /MBA+/pmc4MHfH2Y8B43DXgazPohHeWi6vYJUhu2rBOVO6tXY1eBE4q7aYmSDKLB +kQQMp9OqhlHv/zfleHOeRO5M4HjpMP6FH2VaEPgqDGdV9DSjnwux2cywpGVTG4q DqXcV9jhtvr+gA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:21 2025 by rpki-client