This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft File: JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json) Hash identifier: pmesG6gGzafRfLOaN5bAzfy6HLp4Qo7YrPgt5LX5cQw= Subject key identifier: A8:3E:24:B2:6C:C5:8D:F8:E8:78:85:2F:E0:87:A1:A9:7C:33:3E:E8 Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2 Certificate serial: 019B22F4ECBCCDDB20636C59AE32B101B4C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft Manifest number: 0C72 Signing time: Mon 15 Dec 2025 17:00:35 +0000 Manifest this update: Mon 15 Dec 2025 17:00:35 +0000 Manifest next update: Tue 16 Dec 2025 17:00:35 +0000 Files and hashes: 1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=) 2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: DG4FXtmoMQmYGN+jpwIbSI5MZZqNr3MduEM4EghpKWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f4:ec:bc:cd:db:20:63:6c:59:ae:32:b1:01:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2 Validity Not Before: Dec 15 17:00:35 2025 GMT Not After : Dec 16 17:00:35 2025 GMT Subject: CN=a83e24b26cc58df8e878852fe087a1a97c333ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:58:5f:ea:e9:bb:e3:ad:62:18:fb:89:de:20: b6:f4:3f:14:2a:16:48:18:e1:d4:fc:1b:de:4c:e5: 3b:85:ae:07:b5:d7:37:9b:bc:45:d0:dd:f5:77:31: 60:a3:10:ca:9d:2f:f2:d2:27:5d:da:24:1d:18:50: 86:31:d9:22:f4:8f:0d:eb:e2:0a:3d:ea:40:d5:4f: b7:c6:4c:81:58:ae:90:c3:23:11:ff:b6:2e:88:11: 76:a0:97:dc:38:30:d8:b6:5c:15:cd:1e:04:ac:56: cc:0d:f5:e8:4e:c7:06:b4:94:03:94:d0:b3:7e:e7: 9b:5f:b6:16:6b:31:84:05:a8:5b:73:48:42:77:56: 6e:30:aa:70:08:c6:fe:40:eb:ab:f5:14:10:95:df: 5c:e9:86:09:ba:c0:f1:25:25:a8:d6:08:d5:95:06: b5:f9:86:a3:fd:5d:ca:0b:4d:c1:4f:61:ce:e2:c7: 17:23:79:63:02:8e:17:12:44:28:dd:d2:48:06:45: e4:49:d4:ed:85:a7:16:e9:70:1c:a7:40:be:24:ca: 09:07:ca:e6:3a:82:77:32:7c:49:48:3b:7d:c1:fa: ab:89:9c:0b:4b:ad:16:ac:fa:9e:e7:5a:a3:08:85: 19:2b:6c:b2:f1:62:9f:1e:78:da:eb:fd:24:a1:d2: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3E:24:B2:6C:C5:8D:F8:E8:78:85:2F:E0:87:A1:A9:7C:33:3E:E8 X509v3 Authority Key Identifier: keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a7:8b:3f:54:41:f4:0b:1f:64:49:e3:f0:51:12:f0:51:6a: 88:15:ce:d7:63:d2:71:3a:51:93:00:c7:ee:b3:94:7c:6a:80: 0d:51:47:6f:d8:5e:e2:e5:1a:0c:a0:64:57:0c:df:bf:d7:7c: 43:50:6f:96:55:66:44:dd:7b:13:60:0f:d6:55:12:a7:97:ea: 32:58:ce:3a:c5:34:d5:14:53:92:76:4c:09:ad:8c:93:11:a3: 8a:3f:2f:e0:21:c0:4d:3d:fe:99:4f:58:33:1d:b8:43:ab:42: c9:5e:c1:98:13:64:01:ee:39:61:b7:4f:52:84:17:46:68:c5: da:83:b4:6c:55:37:4b:c1:05:5e:7d:20:1b:16:c7:b6:a6:99: 6a:d5:ca:b6:36:44:22:c9:42:db:dd:c8:54:f9:a2:e8:3e:b0: 66:3e:85:9d:55:fb:eb:17:4e:7e:8a:38:90:d0:0c:c3:5c:12: 3f:35:86:02:cc:79:34:10:a4:2f:0a:e5:2b:8c:f4:35:b8:36: 9f:2f:a9:03:76:28:e6:f1:7d:89:a1:63:5d:62:80:58:64:34: ea:61:b9:bc:84:e3:cd:9a:3a:85:b7:0e:ed:28:c5:46:99:9a: 38:3d:32:b1:22:dc:ba:c0:b6:a9:09:e9:d8:a3:3a:4a:3c:07: ba:1d:7b:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9Oy8zdsgY2xZrjKxAbTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjU0NzIwODIwNmFkNTQ0NzRjNjlmY2NiZWRjMjRhYTU2 YTYyYzIwHhcNMjUxMjE1MTcwMDM1WhcNMjUxMjE2MTcwMDM1WjAzMTEwLwYDVQQD EyhhODNlMjRiMjZjYzU4ZGY4ZTg3ODg1MmZlMDg3YTFhOTdjMzMzZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vhf6um7461iGPuJ3iC29D8UKhZI GOHU/BveTOU7ha4Htdc3m7xF0N31dzFgoxDKnS/y0idd2iQdGFCGMdki9I8N6+IK PepA1U+3xkyBWK6QwyMR/7YuiBF2oJfcODDYtlwVzR4ErFbMDfXoTscGtJQDlNCz fuebX7YWazGEBahbc0hCd1ZuMKpwCMb+QOur9RQQld9c6YYJusDxJSWo1gjVlQa1 +Yaj/V3KC03BT2HO4scXI3ljAo4XEkQo3dJIBkXkSdTthacW6XAcp0C+JMoJB8rm OoJ3MnxJSDt9wfqriZwLS60WrPqe51qjCIUZK2yy8WKfHnja6/0kodJTeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg+JLJsxY346HiFL+CHoal8Mz7oMB8GA1UdIwQY MBaAFCZlRyCCBq1UR0xp/MvtwkqlamLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTIt ODIyZDE1OWE5N2FmLzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTItODIyZDE1OWE5N2Fm LzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKeLP1RB 9AsfZEnj8FES8FFqiBXO12PScTpRkwDH7rOUfGqADVFHb9he4uUaDKBkVwzfv9d8 Q1BvllVmRN17E2AP1lUSp5fqMljOOsU01RRTknZMCa2MkxGjij8v4CHATT3+mU9Y Mx24Q6tCyV7BmBNkAe45YbdPUoQXRmjF2oO0bFU3S8EFXn0gGxbHtqaZatXKtjZE IslC293IVPmi6D6wZj6FnVX76xdOfoo4kNAMw1wSPzWGAsx5NBCkLwrlK4z0Nbg2 ny+pA3Yo5vF9iaFjXWKAWGQ06mG5vITjzZo6hbcO7SjFRpmaOD0ysSLcusC2qQnp 2KM6SjwHuh17SA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:55:57 2025 by rpki-client