This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json) Hash identifier: YJztGp8s3S5Jl6ZAP0uX0AVXWQFiy9bshNPNLM8w+pg= Subject key identifier: F2:67:D7:C9:5F:F1:6C:68:B8:BB:95:28:98:BB:D7:65:9E:1A:A8:DA Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Certificate serial: 019B26D1F1D941E23FEA5634467C64B89F76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft Manifest number: 07DA Signing time: Tue 16 Dec 2025 11:00:51 +0000 Manifest this update: Tue 16 Dec 2025 11:00:51 +0000 Manifest next update: Wed 17 Dec 2025 11:00:51 +0000 Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: zsYzqpivIy5NTbEMyc3bpNwLYN54vyRLdZV59tZa0wQ=) 2: pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa (hash: YNYcfocsMawW3njWrgaZfKy0b3fCRuRw7rODR3Kt6t8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d1:f1:d9:41:e2:3f:ea:56:34:46:7c:64:b8:9f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Validity Not Before: Dec 16 11:00:51 2025 GMT Not After : Dec 17 11:00:51 2025 GMT Subject: CN=f267d7c95ff16c68b8bb952898bbd7659e1aa8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a8:d4:e6:54:cb:62:96:7d:05:5e:0a:bc:c8: e3:53:19:c8:cb:81:ca:91:d0:26:3b:81:d6:12:08: 30:00:27:44:c0:3f:ef:a6:94:d6:44:78:4b:e5:4d: 6f:6e:69:e2:d5:a2:90:54:54:58:af:10:4a:0e:81: e9:49:c3:e2:95:af:65:21:b2:b6:2e:21:05:0e:a2: 6f:c1:d6:aa:04:18:08:db:45:5e:7a:3c:97:a7:bf: 3e:bb:d4:ac:cf:20:e6:88:b1:ae:c0:97:b0:4b:1c: b4:fc:f6:5a:c9:79:01:b8:13:2b:96:f2:a0:19:ec: a7:a7:78:76:0b:ec:1d:c8:70:44:7c:26:cb:1d:0a: 46:33:96:89:6f:d3:ac:12:ca:1b:41:a4:cf:a7:5b: f5:4c:3b:3f:3d:87:b3:bd:c9:5a:dc:ca:42:f4:bc: 3c:99:bc:08:2a:3d:c9:de:ab:45:37:17:8d:86:cc: 60:85:fa:93:01:1d:3d:35:80:53:4f:4c:d6:4e:cf: 83:d7:c7:4d:67:ed:d0:14:33:6e:26:e9:a8:94:88: 0f:ef:f0:41:3e:eb:c6:8b:6e:72:f1:96:4c:41:6c: 8d:ba:b9:77:d2:22:71:a7:ea:60:2a:5f:ff:41:bf: a2:43:76:ba:e2:e4:fc:60:be:05:ce:f7:a3:77:42: 40:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:67:D7:C9:5F:F1:6C:68:B8:BB:95:28:98:BB:D7:65:9E:1A:A8:DA X509v3 Authority Key Identifier: keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2a:62:87:be:00:f2:c3:7d:14:56:a5:e4:cf:c7:a5:cf:4b: 9a:34:77:94:24:94:2c:53:e0:cc:7d:b2:97:8f:4a:29:5f:ff: 74:ef:39:09:97:57:d7:cb:4d:6c:a7:de:09:e9:db:6d:50:fb: 53:e5:a8:1f:52:f0:e7:07:67:b0:bf:4d:fe:7e:d3:13:26:83: 03:2e:20:8b:eb:dd:1d:d7:4c:95:bd:11:7e:42:e8:7e:45:a6: a8:b8:b7:74:f9:7a:b2:5d:c2:f5:d8:fa:e5:1e:f4:c3:fb:33: 45:42:f2:b2:71:c0:cb:0f:d5:7f:73:8a:54:65:07:73:33:44: 06:15:03:6f:be:24:c9:43:7c:4c:b4:61:9a:fa:50:a3:99:36: b3:a9:7a:c4:e9:0c:fe:2d:e0:7e:02:c3:69:a9:0b:98:bd:74: 2a:65:40:bd:b1:9c:ae:99:35:65:ff:cf:77:2f:b6:94:38:c0: 9d:4f:e7:80:e9:49:ae:5c:34:2f:bd:83:63:c4:c9:dc:cb:e0: a7:4d:b1:58:c2:e1:c9:f9:5e:f3:b6:0b:e4:85:1e:c9:35:c8: 1b:6d:e8:03:fb:f6:68:b7:11:95:cc:55:cc:7c:8d:b6:53:8e: 5a:97:3a:4e:ba:bd:11:79:71:34:00:77:48:d4:c5:79:48:ef: 08:b5:32:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0fHZQeI/6lY0RnxkuJ92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl YjVhODQwHhcNMjUxMjE2MTEwMDUxWhcNMjUxMjE3MTEwMDUxWjAzMTEwLwYDVQQD EyhmMjY3ZDdjOTVmZjE2YzY4YjhiYjk1Mjg5OGJiZDc2NTllMWFhOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ajU5lTLYpZ9BV4KvMjjUxnIy4HK kdAmO4HWEggwACdEwD/vppTWRHhL5U1vbmni1aKQVFRYrxBKDoHpScPila9lIbK2 LiEFDqJvwdaqBBgI20VeejyXp78+u9SszyDmiLGuwJewSxy0/PZayXkBuBMrlvKg Geynp3h2C+wdyHBEfCbLHQpGM5aJb9OsEsobQaTPp1v1TDs/PYezvcla3MpC9Lw8 mbwIKj3J3qtFNxeNhsxghfqTAR09NYBTT0zWTs+D18dNZ+3QFDNuJumolIgP7/BB PuvGi25y8ZZMQWyNurl30iJxp+pgKl//Qb+iQ3a64uT8YL4Fzvejd0JAHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJn18lf8WxouLuVKJi712WeGqjaMB8GA1UdIwQY MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt MjEyNzJiODc3MjhiLzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCpih74A 8sN9FFal5M/Hpc9LmjR3lCSULFPgzH2yl49KKV//dO85CZdX18tNbKfeCenbbVD7 U+WoH1Lw5wdnsL9N/n7TEyaDAy4gi+vdHddMlb0RfkLofkWmqLi3dPl6sl3C9dj6 5R70w/szRULysnHAyw/Vf3OKVGUHczNEBhUDb74kyUN8TLRhmvpQo5k2s6l6xOkM /i3gfgLDaakLmL10KmVAvbGcrpk1Zf/Pdy+2lDjAnU/ngOlJrlw0L72DY8TJ3Mvg p02xWMLhyfle87YL5IUeyTXIG23oA/v2aLcRlcxVzHyNtlOOWpc6Trq9EXlxNAB3 SNTFeUjvCLUykA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:51:42 2025 by rpki-client