This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json) Hash identifier: shSKkTaW6IsIzHFUb2bu/BsHTB7MNHnIeXyAA1g5jcw= Subject key identifier: 97:FF:85:8E:8F:95:0D:51:16:01:C7:03:11:A9:3E:0C:9B:B3:02:FB Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Certificate serial: 019B4D3B193BAAE1F23BAB71DC964233620A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft Manifest number: 0A70 Signing time: Tue 23 Dec 2025 22:01:17 +0000 Manifest this update: Tue 23 Dec 2025 22:01:17 +0000 Manifest next update: Wed 24 Dec 2025 22:01:17 +0000 Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: rcyGy5VFQWd9i/+kQEah7l2qTurNnYYngIeD3afeb3k=) 2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3b:19:3b:aa:e1:f2:3b:ab:71:dc:96:42:33:62:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Validity Not Before: Dec 23 22:01:17 2025 GMT Not After : Dec 24 22:01:17 2025 GMT Subject: CN=97ff858e8f950d511601c70311a93e0c9bb302fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:a1:10:9a:a8:c1:c8:9d:15:87:2b:81:d4: 97:3e:fd:46:5b:98:66:19:12:98:05:e6:1b:10:cb: 04:c7:e6:17:51:5d:bd:1c:9a:56:6d:ad:02:a5:c1: 3b:10:0a:0c:d4:f6:da:d0:ca:3f:fc:24:15:02:d6: de:5d:40:be:9f:68:65:74:cf:13:ac:93:9e:45:eb: 08:10:fd:61:04:16:05:85:94:c6:67:9a:5f:8b:c2: 2f:19:7a:33:a8:ae:10:cc:6e:fd:68:e2:f6:c8:67: ea:25:ca:c2:9e:ea:9c:03:6f:37:a0:32:e0:cc:7a: 18:1e:c1:81:33:89:e5:02:d6:3b:9e:20:62:29:1e: ff:d7:16:db:6f:c2:7b:d7:3e:21:be:e6:2f:0e:35: 4c:6b:c0:26:d3:e7:fb:48:bd:c7:f7:00:6c:c5:c2: 6b:94:0e:1d:da:ff:b2:44:e1:3b:53:6c:f0:de:67: 89:ce:cb:ea:21:c9:7a:2d:42:9d:27:43:fe:7b:44: 99:97:b7:ed:d4:21:c0:41:87:8f:19:65:c8:64:c4: 59:88:3c:a3:bc:e4:e5:0e:27:2f:e4:b7:1d:67:22: eb:b2:65:a1:70:bb:8a:ca:48:47:c0:0d:4e:d3:29: 19:aa:e2:48:f2:9f:03:24:c4:8a:10:86:59:b7:15: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:85:8E:8F:95:0D:51:16:01:C7:03:11:A9:3E:0C:9B:B3:02:FB X509v3 Authority Key Identifier: keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f2:d8:d8:e3:83:5e:d5:53:08:16:54:b3:37:d3:ab:a6:6b: fe:52:3c:8d:bd:31:3d:12:de:5c:6b:4e:11:cf:b0:c2:d4:c9: 9d:56:f5:4f:c8:9d:d0:71:82:78:60:6b:07:1a:be:09:75:ce: 19:d0:c0:c0:48:86:50:b0:40:c5:05:c0:c5:b0:9c:08:4f:c8: 47:b5:ce:c7:e0:d3:74:6c:3d:bb:be:f2:5a:57:61:31:b5:e3: 8f:97:b7:c6:58:45:69:c5:fe:f0:2f:43:16:48:e6:1c:9d:49: 26:90:a5:b7:fe:d7:54:e1:cd:34:4c:61:50:8d:c6:18:4c:82: aa:cf:bb:97:c9:78:f7:14:95:82:62:d7:32:df:f9:c2:3d:c2: d1:a2:39:78:42:80:8c:9b:d5:4d:ec:71:b8:f9:36:b6:e0:a9: 1a:a2:f4:79:72:bb:46:8a:35:80:ee:6a:6b:5b:00:45:d3:5e: ba:01:10:b1:f5:c0:7c:75:6f:35:d0:da:78:21:b8:fd:eb:6a: be:45:7b:b3:5b:c5:da:99:10:e3:d6:2e:e1:aa:fd:3c:31:49: c8:58:b5:68:bc:3e:85:d8:b3:b9:e1:b9:66:16:d6:61:68:d0: 61:79:c4:ad:f3:c1:d1:2d:0a:4e:30:ff:b5:df:96:35:f4:05: 33:33:0d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOxk7quHyO6tx3JZCM2IKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1 ZjU2ZTQwHhcNMjUxMjIzMjIwMTE3WhcNMjUxMjI0MjIwMTE3WjAzMTEwLwYDVQQD Eyg5N2ZmODU4ZThmOTUwZDUxMTYwMWM3MDMxMWE5M2UwYzliYjMwMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlehEJqowcidFYcrgdSXPv1GW5hm GRKYBeYbEMsEx+YXUV29HJpWba0CpcE7EAoM1Pba0Mo//CQVAtbeXUC+n2hldM8T rJOeResIEP1hBBYFhZTGZ5pfi8IvGXozqK4QzG79aOL2yGfqJcrCnuqcA283oDLg zHoYHsGBM4nlAtY7niBiKR7/1xbbb8J71z4hvuYvDjVMa8Am0+f7SL3H9wBsxcJr lA4d2v+yROE7U2zw3meJzsvqIcl6LUKdJ0P+e0SZl7ft1CHAQYePGWXIZMRZiDyj vOTlDicv5LcdZyLrsmWhcLuKykhHwA1O0ykZquJI8p8DJMSKEIZZtxVtzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJf/hY6PlQ1RFgHHAxGpPgybswL7MB8GA1UdIwQY MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfLY2OOD XtVTCBZUszfTq6Zr/lI8jb0xPRLeXGtOEc+wwtTJnVb1T8id0HGCeGBrBxq+CXXO GdDAwEiGULBAxQXAxbCcCE/IR7XOx+DTdGw9u77yWldhMbXjj5e3xlhFacX+8C9D FkjmHJ1JJpClt/7XVOHNNExhUI3GGEyCqs+7l8l49xSVgmLXMt/5wj3C0aI5eEKA jJvVTexxuPk2tuCpGqL0eXK7Roo1gO5qa1sARdNeugEQsfXAfHVvNdDaeCG4/etq vkV7s1vF2pkQ49Yu4ar9PDFJyFi1aLw+hdizueG5ZhbWYWjQYXnErfPB0S0KTjD/ td+WNfQFMzMNOw== -----END CERTIFICATE-----Generated at Wed Dec 24 02:16:11 2025 by rpki-client