This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json) Hash identifier: jR3tQBHynox0Zhg2JEayyfscjRjUGvWPkv53ozVK+g8= Subject key identifier: A0:6D:A0:B6:87:81:BF:F4:85:96:C1:40:94:06:FD:B1:32:7B:AB:CE Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b Certificate serial: 019B405AE7C8461B37CF3775DC1919B10C08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft Manifest number: 0275 Signing time: Sun 21 Dec 2025 10:00:57 +0000 Manifest this update: Sun 21 Dec 2025 10:00:57 +0000 Manifest next update: Mon 22 Dec 2025 10:00:57 +0000 Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: ydZsgJII/iN/RWW64ykunkc1wNtom4EFqcpmDL7vu4g=) 2: KG8CBSi1ldaOc_7McAlQkyEmOQA.roa (hash: DpzAqMaMhdv82TzpA9vIGD7n6zlPP/KwSYGZ3tPypWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:e7:c8:46:1b:37:cf:37:75:dc:19:19:b1:0c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b Validity Not Before: Dec 21 10:00:57 2025 GMT Not After : Dec 22 10:00:57 2025 GMT Subject: CN=a06da0b68781bff48596c1409406fdb1327babce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:f0:e5:94:a9:a2:22:4f:d2:fd:79:3c:bf: e8:9f:e2:e4:51:7a:59:c4:20:4b:88:a3:92:4f:6f: 33:38:9b:92:b8:63:33:1a:bc:34:6a:d3:b8:ac:e4: 35:ca:47:55:3d:1f:c2:ad:82:58:9e:f9:bf:b4:00: 36:c7:7d:66:d2:63:4a:e3:99:ba:22:8d:07:41:a7: c8:91:8e:51:a6:2e:49:5b:69:39:22:50:76:97:ae: 60:48:f5:1e:77:f8:06:f9:6e:ad:7e:33:54:49:75: 83:78:f0:aa:3e:9f:ee:96:4b:24:83:e1:a3:51:c9: a3:25:f2:6e:9e:be:78:14:f7:10:98:3f:9e:86:a0: 82:a3:ea:09:e0:12:87:14:3b:10:4b:bb:1d:ee:85: ab:2d:0e:62:6a:bc:14:0b:a1:25:58:54:b8:e8:c1: 58:8a:90:2c:25:bc:07:c2:83:b6:c3:98:2c:12:3f: 0b:7c:58:b2:23:40:cc:55:40:c2:b1:54:a6:ea:51: 30:a4:1d:40:17:2c:11:81:00:14:2f:ff:a7:e0:8a: 16:c9:31:c7:5c:fa:71:4e:7d:8f:af:2e:f0:c9:87: bd:0f:23:01:f8:84:6f:0e:5e:52:51:f3:f3:22:01: 46:dd:c1:0f:97:68:e5:95:f8:1e:ec:7e:eb:88:20: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6D:A0:B6:87:81:BF:F4:85:96:C1:40:94:06:FD:B1:32:7B:AB:CE X509v3 Authority Key Identifier: keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:49:73:32:b2:41:79:ed:f3:dc:c3:5f:03:6b:eb:d6:b3:23: ba:47:6d:c9:d4:72:a9:3c:18:53:eb:f9:c1:24:d0:81:d0:82: 5f:fb:e8:1f:26:63:0a:5e:b0:e6:75:8c:f3:28:42:20:ec:77: b2:2d:4d:1a:ae:a4:89:ae:32:a9:5c:04:1d:a1:fe:5b:7c:cd: 66:aa:1e:08:44:84:e2:42:90:86:2e:48:03:67:c5:71:ad:c9: a3:35:d0:69:8c:9f:e4:b0:ad:77:7f:cf:e8:6b:1b:e5:b8:46: 38:2a:d6:3b:6c:69:86:18:16:80:e2:67:d8:92:cd:c9:29:52: e7:30:4c:4f:34:39:4c:25:84:b5:58:fd:f6:4e:bb:c6:49:30: cb:b8:b6:78:52:ab:74:33:8f:b4:bd:e2:ec:83:f3:ca:3d:cc: db:85:35:53:3d:60:81:3d:bc:4f:c0:fc:80:47:ff:c5:c6:84: 67:e2:55:02:b1:de:2d:c4:f1:c2:16:29:97:67:45:b8:cd:ea: 27:62:4e:7e:32:08:28:88:fc:47:5c:5d:bf:0c:e6:ab:2a:1b: 88:d1:9b:6f:6a:3d:0b:00:7a:62:6d:65:7a:67:2f:67:00:89: f8:df:6f:fc:74:8d:92:c9:7e:41:46:0c:99:df:91:9d:dc:d5: f7:83:86:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWufIRhs3zzd13BkZsQwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTlhZmZmN2U3ZmViMDZlMThkZTkyYzI3MzU2M2I5ODAz MzMxNmIwHhcNMjUxMjIxMTAwMDU3WhcNMjUxMjIyMTAwMDU3WjAzMTEwLwYDVQQD EyhhMDZkYTBiNjg3ODFiZmY0ODU5NmMxNDA5NDA2ZmRiMTMyN2JhYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTTw5ZSpoiJP0v15PL/on+LkUXpZ xCBLiKOST28zOJuSuGMzGrw0atO4rOQ1ykdVPR/CrYJYnvm/tAA2x31m0mNK45m6 Io0HQafIkY5Rpi5JW2k5IlB2l65gSPUed/gG+W6tfjNUSXWDePCqPp/ulkskg+Gj UcmjJfJunr54FPcQmD+ehqCCo+oJ4BKHFDsQS7sd7oWrLQ5iarwUC6ElWFS46MFY ipAsJbwHwoO2w5gsEj8LfFiyI0DMVUDCsVSm6lEwpB1AFywRgQAUL/+n4IoWyTHH XPpxTn2Pry7wyYe9DyMB+IRvDl5SUfPzIgFG3cEPl2jllfge7H7riCDCSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBtoLaHgb/0hZbBQJQG/bEye6vOMB8GA1UdIwQY MBaAFCSpr/9+f+sG4Y3pLCc1Y7mAMzFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEt NzE2MTIwYWIyZGIyLzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEtNzE2MTIwYWIyZGIy LzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALElzMrJB ee3z3MNfA2vr1rMjukdtydRyqTwYU+v5wSTQgdCCX/voHyZjCl6w5nWM8yhCIOx3 si1NGq6kia4yqVwEHaH+W3zNZqoeCESE4kKQhi5IA2fFca3JozXQaYyf5LCtd3/P 6Gsb5bhGOCrWO2xphhgWgOJn2JLNySlS5zBMTzQ5TCWEtVj99k67xkkwy7i2eFKr dDOPtL3i7IPzyj3M24U1Uz1ggT28T8D8gEf/xcaEZ+JVArHeLcTxwhYpl2dFuM3q J2JOfjIIKIj8R1xdvwzmqyobiNGbb2o9CwB6Ym1lemcvZwCJ+N9v/HSNksl+QUYM md+RndzV94OGOA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:26 2025 by rpki-client