This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json) Hash identifier: 5HLPRQmUePrhtOZawNsd57xmiDxqBqpMlOpoc8RDp5A= Subject key identifier: A3:05:70:A6:2C:16:C7:DD:03:64:00:CC:38:3B:7E:10:01:03:3E:1D Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Certificate serial: 019B2E546D6820283B84246CB5FE26EAC3A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft Manifest number: 0A60 Signing time: Wed 17 Dec 2025 22:00:43 +0000 Manifest this update: Wed 17 Dec 2025 22:00:43 +0000 Manifest next update: Thu 18 Dec 2025 22:00:43 +0000 Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: xAgirkTSndnyUeTVzA6VMtq2cMXX90leXFKX6TBfU8s=) 2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:6d:68:20:28:3b:84:24:6c:b5:fe:26:ea:c3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Validity Not Before: Dec 17 22:00:43 2025 GMT Not After : Dec 18 22:00:43 2025 GMT Subject: CN=a30570a62c16c7dd036400cc383b7e1001033e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:cd:b1:2e:b7:c9:5a:06:3c:a6:7d:9b:6e: 33:c2:5d:82:13:d4:71:4e:6a:e6:15:29:ef:c1:50: 91:a2:69:d2:2f:66:4b:e4:7c:b5:86:5a:f6:3e:9f: 58:bc:54:ed:d3:fa:7c:ce:a5:84:5b:c3:a5:ec:e5: bf:9f:4d:26:14:f5:f0:b5:7a:d7:70:79:5a:24:da: b5:ab:96:6d:c4:66:ed:99:6e:c4:4e:ba:df:4d:05: d7:e0:fa:cd:ba:6a:f7:2f:69:87:e8:31:b7:f2:91: 94:d6:8e:b6:58:17:ef:04:81:25:23:32:1b:4c:26: 7a:44:95:46:cf:89:97:6c:15:0f:01:39:a7:78:9a: 77:c1:c4:7a:f8:d1:fe:a8:a5:06:b9:89:57:03:c9: 89:d7:7b:62:04:e7:42:a9:3c:fa:2f:d5:7a:79:3f: 85:d3:01:6f:3b:c2:9d:8f:78:7f:f2:fd:c6:08:85: 69:8f:ee:14:5f:ba:45:50:be:25:8e:6f:37:d2:0e: 94:fc:11:b3:e1:77:ec:36:fc:f5:08:85:e8:ba:79: 6a:a3:ac:cd:b7:0d:d8:92:ba:7c:79:af:23:7b:d2: c1:31:95:75:c1:b0:ec:d8:0c:21:ea:69:d5:c6:84: 29:29:f6:7a:78:87:21:43:5f:96:92:b0:d9:55:0f: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:05:70:A6:2C:16:C7:DD:03:64:00:CC:38:3B:7E:10:01:03:3E:1D X509v3 Authority Key Identifier: keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:83:e8:45:66:d7:1c:44:22:c9:b2:7a:7d:44:c4:c7:25:02: f8:d8:e7:a8:54:5b:fb:cd:bc:81:e3:6a:ec:0c:78:28:7d:47: 47:39:d4:18:f4:a0:11:58:b3:da:fa:9b:72:bc:36:8d:34:78: 8a:47:8d:a5:1c:0a:60:1e:28:81:1f:e5:4f:5d:00:46:ec:77: 7e:83:1e:05:b5:3e:ae:20:12:a7:b2:a1:b6:dd:e1:68:39:0f: c4:11:9c:8a:5e:6b:47:c2:93:4b:08:77:96:ab:0e:32:cf:1c: 19:39:92:51:86:9b:d5:12:00:e5:96:fe:eb:74:df:26:8d:a2: 56:a2:d6:37:93:8b:ab:26:a8:8a:2c:da:4f:a5:3c:e7:34:6f: 5a:a9:ec:67:72:f8:b8:f2:06:99:5e:c4:fe:e3:e4:30:46:ad: 6f:3b:43:94:e4:ec:07:af:11:65:c5:e3:80:9e:b3:ca:50:78: ff:5d:5e:b2:29:3c:8c:53:0c:bd:e4:1b:ec:89:9c:f0:ba:76: 26:79:9f:8f:54:7e:40:78:90:81:65:b8:40:06:e3:20:71:7c: ca:e6:29:b2:77:7a:11:0c:5c:c4:76:2b:48:39:e1:ce:b1:83: 08:d5:45:c3:2c:25:25:7e:59:f0:08:d9:58:89:8a:53:f9:a6: e5:22:d9:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVG1oICg7hCRstf4m6sOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1 ZjU2ZTQwHhcNMjUxMjE3MjIwMDQzWhcNMjUxMjE4MjIwMDQzWjAzMTEwLwYDVQQD EyhhMzA1NzBhNjJjMTZjN2RkMDM2NDAwY2MzODNiN2UxMDAxMDMzZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwnNsS63yVoGPKZ9m24zwl2CE9Rx TmrmFSnvwVCRomnSL2ZL5Hy1hlr2Pp9YvFTt0/p8zqWEW8Ol7OW/n00mFPXwtXrX cHlaJNq1q5ZtxGbtmW7ETrrfTQXX4PrNumr3L2mH6DG38pGU1o62WBfvBIElIzIb TCZ6RJVGz4mXbBUPATmneJp3wcR6+NH+qKUGuYlXA8mJ13tiBOdCqTz6L9V6eT+F 0wFvO8Kdj3h/8v3GCIVpj+4UX7pFUL4ljm830g6U/BGz4XfsNvz1CIXounlqo6zN tw3Ykrp8ea8je9LBMZV1wbDs2Awh6mnVxoQpKfZ6eIchQ1+WkrDZVQ+2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMFcKYsFsfdA2QAzDg7fhABAz4dMB8GA1UdIwQY MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYPoRWbX HEQiybJ6fUTExyUC+NjnqFRb+828geNq7Ax4KH1HRznUGPSgEViz2vqbcrw2jTR4 ikeNpRwKYB4ogR/lT10ARux3foMeBbU+riASp7Khtt3haDkPxBGcil5rR8KTSwh3 lqsOMs8cGTmSUYab1RIA5Zb+63TfJo2iVqLWN5OLqyaoiizaT6U85zRvWqnsZ3L4 uPIGmV7E/uPkMEatbztDlOTsB68RZcXjgJ6zylB4/11esik8jFMMveQb7Imc8Lp2 Jnmfj1R+QHiQgWW4QAbjIHF8yuYpsnd6EQxcxHYrSDnhzrGDCNVFwywlJX5Z8AjZ WImKU/mm5SLZJA== -----END CERTIFICATE-----Generated at Thu Dec 18 04:03:25 2025 by rpki-client