This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json) Hash identifier: LHX3+hIpUf3A6tfvRVuIB1Evh7agxz8GAUL6DXxCpC8= Subject key identifier: BB:D6:88:64:F1:09:56:C7:2E:C6:89:12:07:7E:FE:64:66:A1:4A:29 Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df Certificate serial: 019B330CC40C72F6C62DEA981F985EFFE7D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft Manifest number: 14BE Signing time: Thu 18 Dec 2025 20:00:33 +0000 Manifest this update: Thu 18 Dec 2025 20:00:33 +0000 Manifest next update: Fri 19 Dec 2025 20:00:33 +0000 Files and hashes: 1: 1-gZpOs3LH1weRxZdstqPTs_RNSg.roa (hash: Z5X+P39homZ9mxVyuxmWtTONjlTrK0M0M943Iro6YG4=) 2: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: v4HeuRpL3lmtG9b82kt6XtXknK/IOOOqeNlwfieXDzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:c4:0c:72:f6:c6:2d:ea:98:1f:98:5e:ff:e7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df Validity Not Before: Dec 18 20:00:33 2025 GMT Not After : Dec 19 20:00:33 2025 GMT Subject: CN=bbd68864f10956c72ec68912077efe6466a14a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:2b:3e:d9:99:f1:a2:3d:12:75:a2:a8:69: 60:94:6a:19:56:6f:2a:77:af:94:a2:54:a2:82:97: 15:33:10:6b:80:d1:6e:e8:18:ed:20:97:b0:d8:a8: d6:3e:d8:6b:e9:30:c0:9f:6f:83:6e:fb:09:d0:e9: 49:8a:35:44:84:6e:a5:df:d9:9f:bb:78:a3:3b:87: 4a:fb:5a:2b:16:99:6e:43:a3:f2:d5:da:1d:9a:c5: 89:bd:5d:e8:e0:09:70:53:ad:5f:58:88:ee:00:15: 9a:9e:51:e7:4e:d3:c8:25:32:9a:74:6c:84:71:d9: b5:e9:75:e8:44:c1:93:54:4d:92:98:89:3d:3d:90: 66:52:b4:60:eb:54:7b:d2:86:03:ca:7c:19:c3:d7: 8c:75:a0:36:c2:fe:ca:23:c3:50:e9:3c:4f:75:4d: 3f:aa:77:3f:ab:f4:c0:b4:a8:d7:83:9c:f3:7a:08: cb:f2:31:27:cf:58:7d:26:94:52:70:47:6b:20:50: 52:ff:64:ac:f1:69:0c:68:c8:11:8c:5b:cf:27:c9: 20:2a:50:2c:73:b0:f3:bc:b2:3d:b8:00:78:37:a9: 74:09:54:2f:ef:2b:6c:20:09:dd:74:c6:d0:7a:d3: 9d:3d:14:f0:1c:10:a9:6b:05:64:cb:8f:ca:d3:87: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D6:88:64:F1:09:56:C7:2E:C6:89:12:07:7E:FE:64:66:A1:4A:29 X509v3 Authority Key Identifier: keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0b:ca:a5:33:b6:6a:38:81:e5:4c:95:3a:34:5e:56:44:9c: 75:33:41:59:16:2c:f7:1a:5f:8a:38:ba:21:82:b6:58:12:43: 29:6b:c0:79:16:96:6b:dd:47:f7:9a:a8:2c:5b:b5:8d:bf:15: 70:c5:f2:08:0c:41:44:27:28:41:8e:8b:43:20:0d:b5:54:25: c3:96:13:b3:fc:de:ad:05:91:e3:ec:f3:49:89:f6:cf:94:52: 3d:30:70:ea:76:0f:cd:be:1d:7c:35:1c:b8:7f:bd:1e:8c:dd: 59:4b:2f:5c:84:48:c9:b1:92:1d:fd:7e:da:5a:28:3f:49:90: 3b:15:14:5f:cb:87:7c:8f:c7:f3:30:27:52:09:b8:5c:1f:ab: 41:dd:86:0e:69:ae:00:ae:8b:38:13:db:25:c7:50:eb:4a:5e: a6:bb:a2:4b:98:de:1e:c4:62:af:69:6b:18:bf:aa:d2:1b:1d: 47:d1:48:87:c7:70:7d:0f:75:0c:fa:c5:b4:8e:8f:48:f5:52: d1:b7:7c:53:06:15:e0:e7:7d:60:9e:1a:9f:92:09:97:16:b4: da:00:1c:5f:18:62:3a:8e:b5:24:1f:ed:19:75:80:9d:9e:c8: df:15:ba:dd:1a:68:2a:d3:56:83:b1:53:bb:c8:4e:af:1e:de: 93:7b:f9:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDMQMcvbGLeqYH5he/+fQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4 NDkyZGYwHhcNMjUxMjE4MjAwMDMzWhcNMjUxMjE5MjAwMDMzWjAzMTEwLwYDVQQD EyhiYmQ2ODg2NGYxMDk1NmM3MmVjNjg5MTIwNzdlZmU2NDY2YTE0YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RkrPtmZ8aI9EnWiqGlglGoZVm8q d6+UolSigpcVMxBrgNFu6BjtIJew2KjWPthr6TDAn2+DbvsJ0OlJijVEhG6l39mf u3ijO4dK+1orFpluQ6Py1dodmsWJvV3o4AlwU61fWIjuABWanlHnTtPIJTKadGyE cdm16XXoRMGTVE2SmIk9PZBmUrRg61R70oYDynwZw9eMdaA2wv7KI8NQ6TxPdU0/ qnc/q/TAtKjXg5zzegjL8jEnz1h9JpRScEdrIFBS/2Ss8WkMaMgRjFvPJ8kgKlAs c7DzvLI9uAB4N6l0CVQv7ytsIAnddMbQetOdPRTwHBCpawVky4/K04cgowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvWiGTxCVbHLsaJEgd+/mRmoUopMB8GA1UdIwQY MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt YTI5ZWIxMzllNzlkLzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAtYTI5ZWIxMzllNzlk LzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAvKpTO2 ajiB5UyVOjReVkScdTNBWRYs9xpfiji6IYK2WBJDKWvAeRaWa91H95qoLFu1jb8V cMXyCAxBRCcoQY6LQyANtVQlw5YTs/zerQWR4+zzSYn2z5RSPTBw6nYPzb4dfDUc uH+9HozdWUsvXIRIybGSHf1+2looP0mQOxUUX8uHfI/H8zAnUgm4XB+rQd2GDmmu AK6LOBPbJcdQ60pepruiS5jeHsRir2lrGL+q0hsdR9FIh8dwfQ91DPrFtI6PSPVS 0bd8UwYV4Od9YJ4an5IJlxa02gAcXxhiOo61JB/tGXWAnZ7I3xW63RpoKtNWg7FT u8hOrx7ek3v5Vw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:37:57 2025 by rpki-client