This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json) Hash identifier: Oj4Id56Olbov7oki/N6I0WnMKi3UaRUA19cWZ255pAI= Subject key identifier: A5:D0:86:3A:C1:64:6B:3B:41:95:75:48:AB:C8:4D:52:94:2F:66:7B Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73 Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73 Certificate serial: 019B04EB19E838153B22513B865F708EF852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft Manifest number: 176D Signing time: Tue 09 Dec 2025 21:01:14 +0000 Manifest this update: Tue 09 Dec 2025 21:01:14 +0000 Manifest next update: Wed 10 Dec 2025 21:01:14 +0000 Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=) 2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: KO4KG+DstJ3Q9g9yzLwody3UH7qHctemumVe4MAs9X8=) 3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:eb:19:e8:38:15:3b:22:51:3b:86:5f:70:8e:f8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73 Validity Not Before: Dec 9 21:01:14 2025 GMT Not After : Dec 10 21:01:14 2025 GMT Subject: CN=a5d0863ac1646b3b41957548abc84d52942f667b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:be:20:b1:35:3e:d7:04:f8:ae:9f:0a:51: fe:47:e8:a2:43:bf:85:ba:8a:02:48:6d:04:0d:72: e9:51:b1:c9:4b:1d:ec:69:3a:75:10:5a:44:06:1f: a7:da:7a:9d:07:90:00:b5:8d:5d:9b:af:c2:02:af: 49:df:87:df:2d:12:bc:dd:0c:2c:fe:0a:2c:0a:01: f5:84:5a:d0:ff:ca:7b:c0:f7:e5:a6:65:2a:db:63: 7f:b2:0f:74:90:d5:37:d3:3c:fd:de:fc:f8:26:50: b4:73:2c:bf:36:20:16:52:de:33:b7:54:89:d0:b7: eb:54:d3:b2:05:50:e7:69:9f:60:cf:71:65:04:28: 12:46:f8:36:bb:ce:c7:0f:b6:61:b0:b6:34:1a:62: 8f:26:f9:3a:7a:03:5c:ef:64:2b:6e:61:44:03:96: ac:08:35:1e:72:b5:ee:8c:b9:2e:7d:9a:2c:bf:cf: cd:ab:03:da:87:d4:ed:7e:ff:a2:fa:ae:c4:08:0e: 06:ae:a5:ee:09:02:6c:34:ee:56:20:c0:0f:d9:e1: 30:bb:05:84:43:53:f3:81:36:70:1b:d6:7d:96:24: da:40:f1:c0:c5:69:ad:39:2d:22:e9:dc:61:58:ba: db:6b:6d:c6:72:c8:90:4c:c2:6b:ee:15:c8:54:bd: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D0:86:3A:C1:64:6B:3B:41:95:75:48:AB:C8:4D:52:94:2F:66:7B X509v3 Authority Key Identifier: keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ab:a9:af:a3:d2:5c:76:2c:3e:86:58:19:aa:7d:bd:6c:bf: d3:f7:87:fe:db:15:1b:1e:a0:29:46:53:f3:05:74:ae:2d:4a: 1e:ee:a2:68:4a:7d:32:58:23:3b:5f:7f:d2:97:f2:58:36:17: 5c:96:be:a7:82:49:93:5a:0a:a5:ed:29:2d:63:26:27:7d:74: c3:d7:73:9e:b3:cb:48:89:64:c4:24:91:40:50:77:24:79:5f: 4f:ab:56:63:a2:9e:88:5c:7a:f6:75:d5:9a:00:8d:42:4c:ac: 79:39:86:cd:1b:08:94:d0:0e:2c:ec:4b:60:a9:ad:da:71:74: 14:77:cf:20:cd:a9:bb:c6:56:fd:60:fb:4b:1d:e4:b7:c0:17: db:c7:f7:14:12:e0:f6:43:14:fc:01:a5:54:c8:4c:7b:d6:a4: b0:4e:5f:8f:0c:20:c3:d8:e5:54:04:2e:8e:1f:94:cd:85:00: b3:fe:8c:5d:58:9f:e9:22:8a:fa:fa:0b:90:5d:07:2f:44:4a: 46:9a:e1:70:60:85:a8:3d:a8:68:dc:f6:e8:3d:71:0a:00:0f: 1c:ec:f6:48:34:3b:f8:0e:48:0b:0c:90:d8:b1:4b:8d:95:04: e4:34:90:16:7a:dd:b8:bf:02:0a:fa:c6:25:b8:02:a8:f4:4f: 22:90:98:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsE6xnoOBU7IlE7hl9wjvhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NmUwYzQwZTRlOTM3MGRiOTlhZDI3YTk3Mjk4ZDdkMDU1 OThmNzMwHhcNMjUxMjA5MjEwMTE0WhcNMjUxMjEwMjEwMTE0WjAzMTEwLwYDVQQD EyhhNWQwODYzYWMxNjQ2YjNiNDE5NTc1NDhhYmM4NGQ1Mjk0MmY2NjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyS+ILE1PtcE+K6fClH+R+iiQ7+F uooCSG0EDXLpUbHJSx3saTp1EFpEBh+n2nqdB5AAtY1dm6/CAq9J34ffLRK83Qws /gosCgH1hFrQ/8p7wPflpmUq22N/sg90kNU30zz93vz4JlC0cyy/NiAWUt4zt1SJ 0LfrVNOyBVDnaZ9gz3FlBCgSRvg2u87HD7ZhsLY0GmKPJvk6egNc72QrbmFEA5as CDUecrXujLkufZosv8/NqwPah9Ttfv+i+q7ECA4GrqXuCQJsNO5WIMAP2eEwuwWE Q1PzgTZwG9Z9liTaQPHAxWmtOS0i6dxhWLrba23GcsiQTMJr7hXIVL2ELwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXQhjrBZGs7QZV1SKvITVKUL2Z7MB8GA1UdIwQY MBaAFCZuDEDk6TcNuZrSepcpjX0FWY9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUt OWMxYTUzNTgwZTM5LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUtOWMxYTUzNTgwZTM5 LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKupr6PS XHYsPoZYGap9vWy/0/eH/tsVGx6gKUZT8wV0ri1KHu6iaEp9MlgjO19/0pfyWDYX XJa+p4JJk1oKpe0pLWMmJ310w9dznrPLSIlkxCSRQFB3JHlfT6tWY6KeiFx69nXV mgCNQkyseTmGzRsIlNAOLOxLYKmt2nF0FHfPIM2pu8ZW/WD7Sx3kt8AX28f3FBLg 9kMU/AGlVMhMe9aksE5fjwwgw9jlVAQujh+UzYUAs/6MXVif6SKK+voLkF0HL0RK RprhcGCFqD2oaNz26D1xCgAPHOz2SDQ7+A5ICwyQ2LFLjZUE5DSQFnrduL8CCvrG JbgCqPRPIpCYrA== -----END CERTIFICATE-----Generated at Wed Dec 10 01:27:39 2025 by rpki-client