This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json) Hash identifier: pH2f8s7HeRdCb8fuNx4LE4DpVj3U8wjy2T1OzUM9rDs= Subject key identifier: D2:29:E4:91:5F:BF:C7:1D:2E:97:CF:B5:31:4C:32:64:A2:2C:27:78 Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df Certificate serial: 019B10147697674992A8D8A612D88815E203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft Manifest number: 14AB Signing time: Fri 12 Dec 2025 01:02:14 +0000 Manifest this update: Fri 12 Dec 2025 01:02:14 +0000 Manifest next update: Sat 13 Dec 2025 01:02:14 +0000 Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: PJQYOEvSsIQm29UfqyM//RaKMPaehTg3gy5HEE0wm/I=) 2: YiL-LgYwYTCjIbiHkUVBG7tfFRY.roa (hash: SRcC32x7R1pMAtrHALKFJDhDvfNieE3sp+OsJIw5r3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:76:97:67:49:92:a8:d8:a6:12:d8:88:15:e2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df Validity Not Before: Dec 12 01:02:14 2025 GMT Not After : Dec 13 01:02:14 2025 GMT Subject: CN=d229e4915fbfc71d2e97cfb5314c3264a22c2778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:14:01:69:d3:29:ff:74:16:f0:08:80:98: 1d:86:0c:fc:61:b7:28:f4:9b:07:f5:b4:68:26:ba: 39:07:b3:5a:d5:54:ac:ae:9a:64:e8:0d:53:3f:f3: c5:68:1b:22:5c:5a:7a:7a:15:0b:ce:be:3a:bc:af: 65:6b:ae:23:4c:11:ee:28:3b:d5:8e:ed:8a:e6:72: 80:94:9d:58:d5:a0:ae:d5:34:45:62:b3:a4:b2:42: 5f:e9:e2:94:11:17:09:dc:31:83:e6:1d:02:e5:17: e8:c5:d1:96:1a:aa:27:ea:3d:3b:db:26:4d:3f:bf: e5:4f:e5:ee:d0:6e:60:a9:80:d0:ed:ac:7c:31:7b: 2e:b2:a6:ff:d3:7c:0f:80:a9:57:37:73:58:41:35: ed:ae:2e:8a:c7:dd:de:bc:02:6d:8e:1f:0a:ad:23: 10:94:99:a5:13:2d:71:20:a4:2c:2d:ab:2c:22:9a: 6f:6e:a6:11:5c:75:7e:97:f4:30:6e:db:6a:01:9c: 07:75:a7:97:1c:19:09:74:c8:ff:39:f4:d4:9a:6a: b6:11:48:e3:1b:d3:75:8a:a9:68:5b:38:d0:11:54: 64:25:6e:ba:d6:31:e1:89:3d:08:e5:98:87:49:18: 09:be:a2:fd:cc:5b:82:2f:af:a7:4b:46:1e:1c:60: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:E4:91:5F:BF:C7:1D:2E:97:CF:B5:31:4C:32:64:A2:2C:27:78 X509v3 Authority Key Identifier: keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:7d:77:e4:55:b5:76:a8:c7:df:2f:32:2c:94:1c:aa:76:4a: 31:28:6e:2d:f2:fa:6d:9d:b5:ac:1e:ff:0d:3f:ab:92:bd:ea: f1:54:b9:00:eb:24:a2:2b:19:7d:14:94:d8:be:ec:52:14:54: 72:a7:f6:0f:f9:66:85:ac:34:c8:f7:b3:71:1f:79:41:92:2a: 23:5d:ad:d9:33:f2:fe:b1:78:31:f2:10:b5:bb:2a:44:a5:5f: 71:b4:bb:e8:1d:be:1a:cd:11:ed:e4:08:ff:6a:2c:df:8b:85: ee:a8:c0:a6:6d:70:62:a8:91:f9:b9:19:b0:e2:28:53:9a:de: b0:d5:aa:76:37:f8:a4:3c:88:a7:e3:62:83:50:57:3d:ff:4e: 25:7c:61:be:7e:d6:80:41:ff:69:a5:cf:a8:80:a2:54:15:04: 11:87:f5:e6:fd:b3:76:f8:fd:75:d1:f3:1d:d7:48:b3:ed:cb: 88:a0:ef:a0:2a:ab:47:b7:44:e7:52:c7:46:f9:12:6e:8f:1e: 5b:bd:8a:c5:d3:ac:e8:30:26:76:c5:2e:01:98:a0:a6:1b:e4: ee:77:c7:72:6a:fc:6c:e4:5f:66:05:f5:d4:a0:25:9e:06:1d: 99:9e:73:76:fe:06:42:df:95:0e:7c:2c:5e:81:db:26:a2:5c: aa:91:71:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFHaXZ0mSqNimEtiIFeIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4 NDkyZGYwHhcNMjUxMjEyMDEwMjE0WhcNMjUxMjEzMDEwMjE0WjAzMTEwLwYDVQQD EyhkMjI5ZTQ5MTVmYmZjNzFkMmU5N2NmYjUzMTRjMzI2NGEyMmMyNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcwUAWnTKf90FvAIgJgdhgz8Ybco 9JsH9bRoJro5B7Na1VSsrppk6A1TP/PFaBsiXFp6ehULzr46vK9la64jTBHuKDvV ju2K5nKAlJ1Y1aCu1TRFYrOkskJf6eKUERcJ3DGD5h0C5RfoxdGWGqon6j072yZN P7/lT+Xu0G5gqYDQ7ax8MXsusqb/03wPgKlXN3NYQTXtri6Kx93evAJtjh8KrSMQ lJmlEy1xIKQsLassIppvbqYRXHV+l/QwbttqAZwHdaeXHBkJdMj/OfTUmmq2EUjj G9N1iqloWzjQEVRkJW661jHhiT0I5ZiHSRgJvqL9zFuCL6+nS0YeHGCwOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIp5JFfv8cdLpfPtTFMMmSiLCd4MB8GA1UdIwQY MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt YTI5ZWIxMzllNzlkLzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAtYTI5ZWIxMzllNzlk LzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJX135FW1 dqjH3y8yLJQcqnZKMShuLfL6bZ21rB7/DT+rkr3q8VS5AOskoisZfRSU2L7sUhRU cqf2D/lmhaw0yPezcR95QZIqI12t2TPy/rF4MfIQtbsqRKVfcbS76B2+Gs0R7eQI /2os34uF7qjApm1wYqiR+bkZsOIoU5resNWqdjf4pDyIp+Nig1BXPf9OJXxhvn7W gEH/aaXPqICiVBUEEYf15v2zdvj9ddHzHddIs+3LiKDvoCqrR7dE51LHRvkSbo8e W72KxdOs6DAmdsUuAZigphvk7nfHcmr8bORfZgX11KAlngYdmZ5zdv4GQt+VDnws XoHbJqJcqpFx+g== -----END CERTIFICATE-----Generated at Fri Dec 12 06:36:31 2025 by rpki-client