This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json) Hash identifier: nmEDIcy8UG/NRA+LhgACv3CBsAPTGBcj1crgMr9+eoc= Subject key identifier: DE:B1:06:FA:8B:8D:80:FE:AA:3B:78:D3:CF:5A:8D:7A:39:5A:96:D4 Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b Certificate serial: 019B59777D11F1E97482723EC2F11D87C6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft Manifest number: 0BA5 Signing time: Fri 26 Dec 2025 07:02:41 +0000 Manifest this update: Fri 26 Dec 2025 07:02:41 +0000 Manifest next update: Sat 27 Dec 2025 07:02:41 +0000 Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=) 2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: PvidcRHzy/wFrKp79VfT59MlwV3zzykoY9KZQ0X7IhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:7d:11:f1:e9:74:82:72:3e:c2:f1:1d:87:c6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b Validity Not Before: Dec 26 07:02:41 2025 GMT Not After : Dec 27 07:02:41 2025 GMT Subject: CN=deb106fa8b8d80feaa3b78d3cf5a8d7a395a96d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:61:f1:9b:50:8c:c3:a3:d5:36:4d:3f:8d: 73:bd:53:fb:07:bd:ff:2c:6c:c9:ed:77:16:09:4e: 4a:a4:72:7e:b8:6a:5d:f5:2c:ca:f1:17:bf:6f:13: f6:e6:c2:2a:4c:cb:42:8c:06:19:97:3f:dd:c1:28: f7:ff:7f:86:6e:55:eb:14:61:ac:89:f4:3a:0d:a1: 89:38:00:71:e4:7e:b1:f1:e3:5a:8b:50:27:52:94: fb:71:05:ca:f4:25:49:ec:47:4f:db:21:3b:40:9b: ed:15:17:e4:36:fe:3e:b5:c8:7b:3e:7b:0e:5a:eb: 06:bc:75:9e:e1:f2:57:5a:37:4e:0e:c7:f8:3a:88: 8d:68:6c:a9:bd:88:e9:81:ce:8c:15:77:f9:a0:de: fc:d5:a3:0f:9b:f0:57:55:0c:86:c8:11:8a:31:80: ff:fb:d1:52:9d:85:09:df:fe:55:cd:5c:4a:c9:56: c5:78:e8:c7:82:93:22:1c:42:86:0c:09:39:56:6a: 5a:58:bf:88:c8:89:b9:bd:37:3a:d8:68:9e:50:fc: 32:fa:f0:32:fc:a3:90:d5:8e:be:44:91:c3:f1:88: 87:25:09:8c:6b:33:5a:f8:88:7e:c1:f2:d1:46:f3: c7:90:c1:1e:46:76:77:52:1d:a6:e0:44:9e:41:85: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:06:FA:8B:8D:80:FE:AA:3B:78:D3:CF:5A:8D:7A:39:5A:96:D4 X509v3 Authority Key Identifier: keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d8:58:ff:5f:50:ab:e4:d0:ce:ec:a5:1e:1c:95:0b:77:33: fc:7e:f0:87:ca:8a:58:3c:59:75:44:42:ea:e2:38:dd:d7:5d: aa:6a:8e:3c:2c:37:75:81:cf:de:c6:34:2c:88:59:2f:13:67: 97:e3:c5:75:6a:d7:d2:77:2a:a4:5b:2a:4d:41:c0:46:15:48: 2c:83:fb:64:4a:45:6c:47:f6:bd:62:64:b7:ae:83:1e:f2:bc: f0:5f:12:07:b8:4f:18:dc:88:53:d0:e4:3d:bf:c8:22:65:cd: 9d:a3:6d:2c:39:11:fd:f2:9e:a5:bd:4c:52:60:a5:d3:70:77: ae:f0:2a:4b:90:cc:36:8b:a2:57:43:a8:98:0d:9a:46:5a:86: 2b:a2:06:a6:f4:33:aa:fe:e7:b7:cc:1e:68:01:c1:af:b8:13: 45:2a:17:c6:ad:39:2f:c6:6f:c6:e5:8a:f8:6f:9f:c8:22:80: 59:aa:4c:52:57:93:78:86:c5:e1:f0:f7:ae:98:10:f3:de:a1: f3:95:f1:76:c1:94:17:9d:bf:2b:e1:a9:ee:12:80:a4:0a:52: 0b:88:85:ce:8d:71:60:85:e9:b8:f1:e4:72:c9:ad:84:97:aa: ad:fc:8a:3c:b3:d1:8a:0e:25:20:73:c0:ad:40:29:16:e1:a6: d8:12:cc:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd30R8el0gnI+wvEdh8bPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZjAwN2U0ZmJkNWE2MjJhYTg1M2M0MjVhMDEwZWU3ODlm NzExNWIwHhcNMjUxMjI2MDcwMjQxWhcNMjUxMjI3MDcwMjQxWjAzMTEwLwYDVQQD EyhkZWIxMDZmYThiOGQ4MGZlYWEzYjc4ZDNjZjVhOGQ3YTM5NWE5NmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lNh8ZtQjMOj1TZNP41zvVP7B73/ LGzJ7XcWCU5KpHJ+uGpd9SzK8Re/bxP25sIqTMtCjAYZlz/dwSj3/3+GblXrFGGs ifQ6DaGJOABx5H6x8eNai1AnUpT7cQXK9CVJ7EdP2yE7QJvtFRfkNv4+tch7PnsO WusGvHWe4fJXWjdODsf4OoiNaGypvYjpgc6MFXf5oN781aMPm/BXVQyGyBGKMYD/ +9FSnYUJ3/5VzVxKyVbFeOjHgpMiHEKGDAk5VmpaWL+IyIm5vTc62GieUPwy+vAy /KOQ1Y6+RJHD8YiHJQmMazNa+Ih+wfLRRvPHkMEeRnZ3Uh2m4ESeQYWNWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6xBvqLjYD+qjt4089ajXo5WpbUMB8GA1UdIwQY MBaAFCXwB+T71aYiqoU8QloBDueJ9xFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEt ZWM2OGUzNWE3MWVmLzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEtZWM2OGUzNWE3MWVm LzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdhY/19Q q+TQzuylHhyVC3cz/H7wh8qKWDxZdURC6uI43dddqmqOPCw3dYHP3sY0LIhZLxNn l+PFdWrX0ncqpFsqTUHARhVILIP7ZEpFbEf2vWJkt66DHvK88F8SB7hPGNyIU9Dk Pb/IImXNnaNtLDkR/fKepb1MUmCl03B3rvAqS5DMNouiV0OomA2aRlqGK6IGpvQz qv7nt8weaAHBr7gTRSoXxq05L8ZvxuWK+G+fyCKAWapMUleTeIbF4fD3rpgQ896h 85XxdsGUF52/K+Gp7hKApApSC4iFzo1xYIXpuPHkcsmthJeqrfyKPLPRig4lIHPA rUApFuGm2BLMJQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:33 2025 by rpki-client