This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json) Hash identifier: hmqmMHGPsTY3kIcXq5E/p0JdNyeK7Y7rIJNWfTAjwkM= Subject key identifier: 86:81:F3:FF:62:4E:2F:9A:AF:6D:3D:BF:D4:21:7B:B3:99:31:C3:55 Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Certificate serial: 019AEBCFD8A3B6A58F518A5539690BD6D508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft Manifest number: 0DB2 Signing time: Fri 05 Dec 2025 00:00:58 +0000 Manifest this update: Fri 05 Dec 2025 00:00:58 +0000 Manifest next update: Sat 06 Dec 2025 00:00:58 +0000 Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: 5m5+dHxhd+tGqwViycSk8RXFmJR4NustURhjzAMofCk=) 2: THD6dCAcQylh5j9TRPuNEYk_EF0.roa (hash: RLY2fSTdx8vREbBUWYofmuTLlTO7pJB3RnHvsPQUpgw=) 3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=) 4: zi7h7UJYxNeBfgAfyuuPI1OuoNk.roa (hash: FGz1x4BgJx0vMr4BEPiY/HKABSWRvFlGzY+wA/fT1Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:cf:d8:a3:b6:a5:8f:51:8a:55:39:69:0b:d6:d5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Validity Not Before: Dec 5 00:00:58 2025 GMT Not After : Dec 6 00:00:58 2025 GMT Subject: CN=8681f3ff624e2f9aaf6d3dbfd4217bb39931c355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:7a:8a:c0:90:96:ec:d2:a0:6c:a3:54:f2: 85:ab:63:ee:51:08:10:72:09:91:dc:0e:07:77:7f: fd:85:df:2a:30:a9:a2:ed:78:21:9a:66:52:23:66: 4f:7a:5b:97:97:4a:f9:4e:46:bf:28:ac:53:0d:40: 66:f0:6b:6f:50:fc:c0:95:69:51:38:71:51:79:0e: b4:2b:16:dc:79:ea:60:85:1d:08:87:c5:5d:0e:97: a7:76:b7:fb:28:e7:c1:f0:bd:ac:c6:5b:b4:41:4f: 41:9e:56:ed:46:70:a4:9e:05:7d:ab:6e:9d:f1:b0: 3c:3e:ac:b3:92:d1:a3:29:33:29:a9:b2:32:67:9e: 14:16:40:9d:7a:48:c7:d5:db:f5:cb:ca:e2:92:7b: 06:cd:20:b9:b0:de:3a:67:6e:1c:a7:9e:1d:73:34: ff:05:1e:39:89:48:31:c5:6e:76:70:17:a2:fe:47: 8c:f8:52:87:74:2d:d6:55:93:58:f5:d4:66:b7:9a: f5:fc:e5:6b:1e:4d:93:2a:80:f9:ac:4d:b2:92:34: 13:cb:a0:31:e1:ea:62:a2:c8:6f:24:df:38:07:0b: 57:d3:d6:25:b5:42:c0:a4:2c:f0:72:f5:7c:91:c8: 14:ea:96:1a:6b:01:61:12:cf:76:ff:7b:0b:69:c4: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:81:F3:FF:62:4E:2F:9A:AF:6D:3D:BF:D4:21:7B:B3:99:31:C3:55 X509v3 Authority Key Identifier: keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:53:d0:91:a0:de:0f:29:b6:08:b7:de:b9:02:99:f3:20:de: 46:ce:df:ce:30:a3:38:fd:ad:0f:b0:b7:c1:9b:9e:b8:bf:3b: 6b:49:e6:04:36:88:e6:f4:32:2b:04:5b:45:56:38:9d:95:95: 95:b0:47:10:dc:01:09:c9:5a:9e:26:56:90:5b:b2:5a:34:ac: 98:54:c1:ef:c6:7c:2a:f8:43:2c:21:b9:eb:cb:41:66:dd:af: 03:2a:25:0d:9d:1e:9a:11:ad:69:bd:21:63:1f:2f:9a:f1:d1: ad:8c:bd:83:58:cb:97:82:de:6e:e0:4c:50:9c:03:74:cd:29: d4:37:26:2e:d4:16:a3:1a:03:68:4b:17:19:35:00:3e:34:9b: 54:e5:07:53:e8:9d:b1:c8:91:8d:74:2c:a8:d4:7c:30:b3:d3: 1b:22:21:ab:ee:ae:15:38:0f:2d:32:5c:04:21:ac:a4:b5:ca: fd:18:7d:32:5e:ab:8e:b3:60:7f:33:e1:45:ee:f2:7a:39:f1: cc:ec:92:02:85:d3:1e:03:c1:81:76:67:a3:2a:5e:7e:4d:0f: 85:ae:19:a2:c5:3b:c5:96:65:e6:75:5f:3d:39:d5:0a:ed:d0: 4a:c1:e7:db:32:25:37:cb:85:e8:a5:ff:a7:07:91:ab:70:c5: fe:35:30:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrrz9ijtqWPUYpVOWkL1tUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0 YTZjMzAwHhcNMjUxMjA1MDAwMDU4WhcNMjUxMjA2MDAwMDU4WjAzMTEwLwYDVQQD Eyg4NjgxZjNmZjYyNGUyZjlhYWY2ZDNkYmZkNDIxN2JiMzk5MzFjMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSB6isCQluzSoGyjVPKFq2PuUQgQ cgmR3A4Hd3/9hd8qMKmi7XghmmZSI2ZPeluXl0r5Tka/KKxTDUBm8GtvUPzAlWlR OHFReQ60KxbceepghR0Ih8VdDpendrf7KOfB8L2sxlu0QU9BnlbtRnCkngV9q26d 8bA8PqyzktGjKTMpqbIyZ54UFkCdekjH1dv1y8riknsGzSC5sN46Z24cp54dczT/ BR45iUgxxW52cBei/keM+FKHdC3WVZNY9dRmt5r1/OVrHk2TKoD5rE2ykjQTy6Ax 4epioshvJN84BwtX09YltULApCzwcvV8kcgU6pYaawFhEs92/3sLacRluQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaB8/9iTi+ar209v9Qhe7OZMcNVMB8GA1UdIwQY MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt NTcxN2I0NTQ0MjM3LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3 LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFPQkaDe Dym2CLfeuQKZ8yDeRs7fzjCjOP2tD7C3wZueuL87a0nmBDaI5vQyKwRbRVY4nZWV lbBHENwBCclaniZWkFuyWjSsmFTB78Z8KvhDLCG568tBZt2vAyolDZ0emhGtab0h Yx8vmvHRrYy9g1jLl4LebuBMUJwDdM0p1DcmLtQWoxoDaEsXGTUAPjSbVOUHU+id sciRjXQsqNR8MLPTGyIhq+6uFTgPLTJcBCGspLXK/Rh9Ml6rjrNgfzPhRe7yejnx zOySAoXTHgPBgXZnoypefk0Pha4ZosU7xZZl5nVfPTnVCu3QSsHn2zIlN8uF6KX/ pweRq3DF/jUwaQ== -----END CERTIFICATE-----Generated at Fri Dec 5 05:07:15 2025 by rpki-client