This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json) Hash identifier: blyRkVq0ooauJubGZG0w0AoE22X7x4kNvwcE1XE9Gko= Subject key identifier: FE:E0:FD:B8:E2:F1:55:BB:2C:B7:34:0C:CE:96:76:A4:34:1F:5A:BA Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b Certificate serial: 019B13F00F0AFB7EBCD18DDFC9AD96DA06CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft Manifest number: 025E Signing time: Fri 12 Dec 2025 19:00:58 +0000 Manifest this update: Fri 12 Dec 2025 19:00:58 +0000 Manifest next update: Sat 13 Dec 2025 19:00:58 +0000 Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: WoRuEoFxUSXuAgdJbUO25kWDAO93wOsVGOSfNwsKNho=) 2: KG8CBSi1ldaOc_7McAlQkyEmOQA.roa (hash: DpzAqMaMhdv82TzpA9vIGD7n6zlPP/KwSYGZ3tPypWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:f0:0f:0a:fb:7e:bc:d1:8d:df:c9:ad:96:da:06:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b Validity Not Before: Dec 12 19:00:58 2025 GMT Not After : Dec 13 19:00:58 2025 GMT Subject: CN=fee0fdb8e2f155bb2cb7340cce9676a4341f5aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:67:d0:e8:c6:87:6f:97:87:b5:f2:aa:62: b3:cb:45:8a:5c:44:70:7d:db:6c:7e:f9:04:86:9b: 2d:67:9d:25:05:a0:96:f1:d4:2f:fe:ac:89:34:59: 73:73:ca:0f:66:0a:f9:19:0e:e5:0d:7d:68:94:be: 8b:09:29:98:90:80:6f:85:69:b2:21:ad:c7:0e:f4: 20:8e:05:ff:8d:bd:0c:70:32:db:e1:fa:32:0a:ec: 3a:0a:c2:6a:7a:61:63:0e:9e:5e:70:f0:4a:54:52: df:2d:e5:b8:b3:b0:f6:e3:5e:b1:21:4d:14:05:0d: e5:5a:c4:f2:7b:76:4b:3c:68:ef:95:54:ff:f9:af: 60:a9:84:60:93:09:30:24:76:e1:b5:0f:7f:cb:c7: de:2f:9c:f3:c3:2c:d4:db:60:aa:f9:2a:86:7f:2b: 3e:32:af:2e:5f:1a:33:95:0b:b1:fb:8e:98:b2:94: 26:3a:47:27:11:77:1e:ad:b1:f2:2c:ce:fe:3a:04: 08:6d:d8:b2:c7:25:ee:ce:c5:86:73:4a:0d:7c:4e: 94:de:6f:9c:f3:60:c1:7c:6b:f8:12:14:e8:76:3e: c7:bc:24:6f:59:1f:b2:32:df:82:13:4a:74:a2:60: 3d:f0:7b:8a:5d:5a:f1:f4:41:51:4e:d0:cc:a5:1e: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E0:FD:B8:E2:F1:55:BB:2C:B7:34:0C:CE:96:76:A4:34:1F:5A:BA X509v3 Authority Key Identifier: keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:24:73:45:82:81:11:81:75:b5:82:a8:94:40:75:60:ed:59: dd:dc:b5:7c:fa:d3:23:7f:cb:2f:ca:c1:cc:6e:bd:1c:60:6f: 1e:91:b7:54:19:5c:da:7a:f7:61:66:7c:5e:5c:21:3e:18:52: 3f:98:3c:99:01:b7:af:9e:2d:c3:e4:be:94:93:64:e9:0d:d1: 85:cb:59:85:85:9f:47:31:2e:e3:46:d0:6a:d6:7f:85:89:7f: 76:2a:42:af:5c:2c:81:bb:b6:48:b5:61:4a:8f:d5:2d:b8:5b: cb:b5:c3:cb:6f:8d:ab:58:6c:f7:27:b0:37:4b:36:b5:a6:22: 69:43:48:af:3b:da:bb:0f:39:22:d9:40:da:2c:10:32:e2:90: 0a:e2:f4:ad:16:2e:59:67:f1:f9:db:01:44:76:b5:db:87:36: 0c:5f:e0:73:33:46:6d:cb:13:9a:2c:4e:bf:57:04:20:07:40: 3a:c7:08:2f:ba:a9:a2:67:04:84:cb:ac:8e:09:57:ed:b3:a7: ad:f2:82:d2:a1:25:9b:1d:40:7c:d8:dc:df:c1:b4:47:71:d8: cc:6a:c1:d8:c4:fc:6c:57:fd:b7:95:6b:6e:a8:f5:c7:4b:75: 47:ad:ee:eb:08:9e:1d:73:57:67:52:c3:e2:1c:04:3c:39:d5: ee:6f:a9:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT8A8K+3680Y3fya2W2gbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTlhZmZmN2U3ZmViMDZlMThkZTkyYzI3MzU2M2I5ODAz MzMxNmIwHhcNMjUxMjEyMTkwMDU4WhcNMjUxMjEzMTkwMDU4WjAzMTEwLwYDVQQD EyhmZWUwZmRiOGUyZjE1NWJiMmNiNzM0MGNjZTk2NzZhNDM0MWY1YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL9n0OjGh2+Xh7XyqmKzy0WKXERw fdtsfvkEhpstZ50lBaCW8dQv/qyJNFlzc8oPZgr5GQ7lDX1olL6LCSmYkIBvhWmy Ia3HDvQgjgX/jb0McDLb4foyCuw6CsJqemFjDp5ecPBKVFLfLeW4s7D2416xIU0U BQ3lWsTye3ZLPGjvlVT/+a9gqYRgkwkwJHbhtQ9/y8feL5zzwyzU22Cq+SqGfys+ Mq8uXxozlQux+46YspQmOkcnEXcerbHyLM7+OgQIbdiyxyXuzsWGc0oNfE6U3m+c 82DBfGv4EhTodj7HvCRvWR+yMt+CE0p0omA98HuKXVrx9EFRTtDMpR6T2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7g/bji8VW7LLc0DM6WdqQ0H1q6MB8GA1UdIwQY MBaAFCSpr/9+f+sG4Y3pLCc1Y7mAMzFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEt NzE2MTIwYWIyZGIyLzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEtNzE2MTIwYWIyZGIy LzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiRzRYKB EYF1tYKolEB1YO1Z3dy1fPrTI3/LL8rBzG69HGBvHpG3VBlc2nr3YWZ8XlwhPhhS P5g8mQG3r54tw+S+lJNk6Q3RhctZhYWfRzEu40bQatZ/hYl/dipCr1wsgbu2SLVh So/VLbhby7XDy2+Nq1hs9yewN0s2taYiaUNIrzvauw85ItlA2iwQMuKQCuL0rRYu WWfx+dsBRHa124c2DF/gczNGbcsTmixOv1cEIAdAOscIL7qpomcEhMusjglX7bOn rfKC0qElmx1AfNjc38G0R3HYzGrB2MT8bFf9t5Vrbqj1x0t1R63u6wieHXNXZ1LD 4hwEPDnV7m+pEw== -----END CERTIFICATE-----Generated at Sat Dec 13 02:20:56 2025 by rpki-client