This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft File: jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json) Hash identifier: gyy6BaLzNIE3TVXJgmgfEoZeLn4KSOFHpTdVH78Rr7E= Subject key identifier: 4C:07:99:87:4D:2E:F5:DD:D0:8D:99:AC:E9:71:FF:F9:BD:28:8A:6E Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 Certificate issuer: /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Certificate serial: 019B0E24D45DAF142184301135CF99D84752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 16:00:52 +0000 Manifest this update: Thu 11 Dec 2025 16:00:52 +0000 Manifest next update: Fri 12 Dec 2025 16:00:52 +0000 Files and hashes: 1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=) 2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: ZfiI9OXZugfBRhU8LDdvmOdUGaC6qvNFO7KxcY5lpMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:d4:5d:af:14:21:84:30:11:35:cf:99:d8:47:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Validity Not Before: Dec 11 16:00:52 2025 GMT Not After : Dec 12 16:00:52 2025 GMT Subject: CN=4c0799874d2ef5ddd08d99ace971fff9bd288a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:52:b8:10:4c:e2:00:6d:a1:fa:31:b2:27:97: 7b:6e:72:b0:64:d4:ab:68:3f:0d:c4:0a:4b:e0:81: 31:37:f2:d3:49:24:89:7c:47:9f:14:ff:0b:08:56: 60:af:a1:3a:97:e7:4a:ea:fb:a4:a8:ea:26:27:15: 06:7b:36:4a:86:af:2d:df:5b:ce:4c:82:2e:95:ec: 36:3a:f1:1d:2c:a5:7a:52:d2:61:c4:3a:60:34:b4: 38:8e:11:71:c4:9b:e9:16:56:27:82:b5:ca:0f:fd: 50:86:87:1c:5c:9c:ed:bb:a3:e2:d0:e1:6a:bb:03: 1f:f4:a1:45:84:9b:87:22:0f:e5:c3:e9:4d:db:ec: b7:9e:44:8c:13:d5:c0:32:f4:c4:db:31:61:10:23: 87:37:48:2b:0d:a9:85:18:56:47:ba:d4:46:d9:c7: f6:48:8e:37:a3:91:52:60:35:20:5b:05:47:76:ba: 54:88:d0:d6:e4:3e:cb:dc:df:c3:3f:61:37:0f:b7: 8a:97:64:de:a3:31:95:43:6e:fa:e3:a9:2c:ad:81: 99:03:6c:e9:f2:46:f6:6a:e6:9f:57:e6:36:8e:c2: 27:8f:2e:8a:e3:9d:05:62:e3:79:19:ba:98:cf:0e: 04:87:dc:09:2f:c5:4a:62:34:91:fc:64:84:e0:a8: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:07:99:87:4D:2E:F5:DD:D0:8D:99:AC:E9:71:FF:F9:BD:28:8A:6E X509v3 Authority Key Identifier: keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:07:9d:09:f4:17:70:35:6f:72:f5:23:f0:71:47:20:41:37: 08:37:85:70:f8:cf:8a:24:ac:47:6f:38:7a:9a:69:eb:8b:e0: 42:14:97:7b:25:d7:d9:ef:8a:bb:b3:cc:e9:8f:33:d9:84:41: 4d:05:44:83:33:06:a0:69:3b:9f:0c:86:87:f7:ae:79:f7:d1: cb:01:c9:bd:8f:36:c6:dd:92:60:fb:93:f4:60:d7:d8:7d:a9: ed:00:82:65:c8:58:ef:75:ce:de:87:cb:ea:2b:2b:96:f6:b1: 7f:2c:cb:9d:58:ed:96:de:9b:79:89:c5:ac:e4:e4:5c:0e:c3: 92:28:31:a1:01:b2:32:f8:f1:b5:a4:eb:35:08:a4:ae:92:ac: 4a:42:a2:30:fa:1e:09:4c:df:53:1c:6c:38:ad:94:1b:53:3c: a3:e2:a1:81:84:57:39:a0:b3:35:de:f6:bf:c1:f7:2c:7a:99: b3:8f:9e:82:87:40:10:88:1d:b1:52:59:0a:f1:54:91:51:15: 27:2c:20:6e:b7:1f:4f:d3:62:e4:71:fe:f8:97:cc:85:4d:c6: fd:04:ed:19:dc:c4:4d:08:c9:7a:d4:51:f8:d9:37:b5:c5:67: bb:88:bc:ae:9e:2e:a5:de:35:63:69:f0:2b:ae:4a:af:a3:b6: 0b:78:cf:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJNRdrxQhhDARNc+Z2EdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjM3MDRkNTUwMWVkNzVhNmUyMDk2NmViZjA3YTM2NTU1 YjFhYjYwHhcNMjUxMjExMTYwMDUyWhcNMjUxMjEyMTYwMDUyWjAzMTEwLwYDVQQD Eyg0YzA3OTk4NzRkMmVmNWRkZDA4ZDk5YWNlOTcxZmZmOWJkMjg4YTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FK4EEziAG2h+jGyJ5d7bnKwZNSr aD8NxApL4IExN/LTSSSJfEefFP8LCFZgr6E6l+dK6vukqOomJxUGezZKhq8t31vO TIIulew2OvEdLKV6UtJhxDpgNLQ4jhFxxJvpFlYngrXKD/1QhoccXJztu6Pi0OFq uwMf9KFFhJuHIg/lw+lN2+y3nkSME9XAMvTE2zFhECOHN0grDamFGFZHutRG2cf2 SI43o5FSYDUgWwVHdrpUiNDW5D7L3N/DP2E3D7eKl2TeozGVQ27646ksrYGZA2zp 8kb2auafV+Y2jsInjy6K450FYuN5GbqYzw4Eh9wJL8VKYjSR/GSE4KhIYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwHmYdNLvXd0I2ZrOlx//m9KIpuMB8GA1UdIwQY MBaAFI5jcE1VAe11puIJZuvwejZVWxq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUt Yzk0N2UxNmMyYzYxLzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUtYzk0N2UxNmMyYzYx LzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQedCfQX cDVvcvUj8HFHIEE3CDeFcPjPiiSsR284eppp64vgQhSXeyXX2e+Ku7PM6Y8z2YRB TQVEgzMGoGk7nwyGh/eueffRywHJvY82xt2SYPuT9GDX2H2p7QCCZchY73XO3ofL 6isrlvaxfyzLnVjtlt6beYnFrOTkXA7DkigxoQGyMvjxtaTrNQikrpKsSkKiMPoe CUzfUxxsOK2UG1M8o+KhgYRXOaCzNd72v8H3LHqZs4+egodAEIgdsVJZCvFUkVEV JywgbrcfT9Ni5HH++JfMhU3G/QTtGdzETQjJetRR+Nk3tcVnu4i8rp4upd41Y2nw K65Kr6O2C3jPjw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:58 2025 by rpki-client