This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json) Hash identifier: 22Vnvc60EBtYzBSBSHXcp/6CXU4LnQslKh8St2sX6Gc= Subject key identifier: F5:93:5F:0B:98:C8:0B:5F:27:3C:9C:91:F6:FE:24:9F:43:FE:C3:69 Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11 Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611 Certificate serial: 019B0F6E60F81241921A95E2ACFDF2B73E7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 22:00:50 +0000 Manifest this update: Thu 11 Dec 2025 22:00:50 +0000 Manifest next update: Fri 12 Dec 2025 22:00:50 +0000 Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: XygDZ0o7JmCuNoWMnqzqkN2AsB1WSCe8ma18cN/2FBs=) 2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:60:f8:12:41:92:1a:95:e2:ac:fd:f2:b7:3e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256be176b313e1a8a050f670af576771b655d611 Validity Not Before: Dec 11 22:00:50 2025 GMT Not After : Dec 12 22:00:50 2025 GMT Subject: CN=f5935f0b98c80b5f273c9c91f6fe249f43fec369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:fd:bc:15:26:a0:56:fd:89:d8:63:75:6f: db:bd:55:bd:e4:4d:6d:7a:5f:83:e5:d1:f3:e4:0d: 4f:53:03:71:70:05:a0:50:66:80:37:13:d6:bb:0d: 62:a0:64:b7:ea:fa:b1:4f:0e:b8:c1:b3:84:90:94: 6d:c1:d3:3b:a2:30:c8:8b:11:dd:0d:6d:9f:6f:20: b1:1b:f7:04:75:83:0d:fb:13:22:c6:a4:fc:a6:d7: 29:8c:07:f7:76:f4:b2:a9:42:a2:a6:db:45:6a:11: 11:65:0c:52:7e:d1:3f:03:1f:f2:45:d3:23:45:6f: de:68:7a:9d:5d:68:53:0c:a0:84:67:b5:76:28:2a: 57:dc:d0:a1:76:1d:9e:61:e6:6a:82:e0:87:50:6a: 57:2b:3d:91:99:96:e2:0b:56:ff:d2:e9:ac:4c:3c: 41:e5:72:54:6e:1d:b7:b7:7b:3a:d8:91:20:f5:fe: 14:e9:d6:a9:7d:55:7c:02:a7:53:60:fd:7a:88:4a: b0:9f:41:06:e4:1e:24:48:de:6f:ae:7c:f3:93:b7: 9d:96:00:48:22:6f:bd:b7:20:ec:8b:93:3b:75:b6: 5d:3d:a1:c4:93:77:06:96:78:92:b8:de:14:c7:46: 9d:eb:6d:1b:37:2a:0e:17:ff:a3:69:b2:a0:68:b6: 8a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:93:5F:0B:98:C8:0B:5F:27:3C:9C:91:F6:FE:24:9F:43:FE:C3:69 X509v3 Authority Key Identifier: keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:10:69:ff:6a:2b:a3:32:53:1b:79:b8:bf:80:48:5c:8e:89: 40:42:95:fe:d6:7c:49:6d:7b:29:0b:8b:80:25:23:01:df:37: 2a:f8:e0:10:5e:4c:35:74:7c:f3:41:b2:08:ce:ff:26:4d:09: cf:c0:bd:43:25:77:42:6b:01:73:7f:29:11:79:f7:64:6f:da: 0c:4d:5d:77:5e:08:be:62:ab:e9:5b:c4:70:f2:13:53:7d:34: 04:b0:14:b3:7f:9a:01:02:19:0a:cc:0c:e0:06:cb:7e:09:3c: 70:a7:e7:17:60:41:0a:83:81:5f:06:58:73:8f:11:1f:80:c3: f3:70:6c:b1:e8:b2:9c:a5:7f:97:02:ae:dc:0c:34:8e:71:45: 39:ae:76:01:f3:e6:09:33:f3:10:ed:71:f1:2f:fc:d3:be:34: 96:a9:88:8b:02:a6:ec:4c:bb:28:85:86:47:08:86:5e:bd:0e: 16:e8:b3:e1:e7:dd:92:92:07:11:71:ba:2e:ec:76:6b:95:79: 9e:73:e2:4f:1b:d6:6e:13:e1:f9:7e:1c:75:06:8f:11:ed:ac: 82:01:c0:09:81:92:20:ed:3b:63:5e:e4:37:a9:3f:2e:fc:06: db:fa:2d:03:53:f8:04:d0:05:69:f5:5c:07:ff:cb:33:e8:7c: b7:93:5a:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbmD4EkGSGpXirP3ytz5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NmJlMTc2YjMxM2UxYThhMDUwZjY3MGFmNTc2NzcxYjY1 NWQ2MTEwHhcNMjUxMjExMjIwMDUwWhcNMjUxMjEyMjIwMDUwWjAzMTEwLwYDVQQD EyhmNTkzNWYwYjk4YzgwYjVmMjczYzljOTFmNmZlMjQ5ZjQzZmVjMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLz9vBUmoFb9idhjdW/bvVW95E1t el+D5dHz5A1PUwNxcAWgUGaANxPWuw1ioGS36vqxTw64wbOEkJRtwdM7ojDIixHd DW2fbyCxG/cEdYMN+xMixqT8ptcpjAf3dvSyqUKipttFahERZQxSftE/Ax/yRdMj RW/eaHqdXWhTDKCEZ7V2KCpX3NChdh2eYeZqguCHUGpXKz2RmZbiC1b/0umsTDxB 5XJUbh23t3s62JEg9f4U6dapfVV8AqdTYP16iEqwn0EG5B4kSN5vrnzzk7edlgBI Im+9tyDsi5M7dbZdPaHEk3cGlniSuN4Ux0ad620bNyoOF/+jabKgaLaKMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWTXwuYyAtfJzyckfb+JJ9D/sNpMB8GA1UdIwQY MBaAFCVr4XazE+GooFD2cK9XZ3G2VdYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMt ZTBiYWM0MTYxOTUzLzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMtZTBiYWM0MTYxOTUz LzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBBp/2or ozJTG3m4v4BIXI6JQEKV/tZ8SW17KQuLgCUjAd83KvjgEF5MNXR880GyCM7/Jk0J z8C9QyV3QmsBc38pEXn3ZG/aDE1dd14IvmKr6VvEcPITU300BLAUs3+aAQIZCswM 4AbLfgk8cKfnF2BBCoOBXwZYc48RH4DD83BsseiynKV/lwKu3Aw0jnFFOa52AfPm CTPzEO1x8S/80740lqmIiwKm7Ey7KIWGRwiGXr0OFuiz4efdkpIHEXG6Lux2a5V5 nnPiTxvWbhPh+X4cdQaPEe2sggHACYGSIO07Y17kN6k/LvwG2/otA1P4BNAFafVc B//LM+h8t5NaqA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:13:02 2025 by rpki-client