This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json) Hash identifier: URKFi2h0v8AJPlnbkf6fyouEJCA/1wcSpj2TUJp51ok= Subject key identifier: 46:8A:9C:0D:43:C9:D3:ED:14:6F:D8:8D:86:5A:2F:2D:20:2C:D9:D0 Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Certificate serial: 019B1B3B8B18F3F3061115BCB08FAE0F2C95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft Manifest number: 14BE Signing time: Sun 14 Dec 2025 05:00:45 +0000 Manifest this update: Sun 14 Dec 2025 05:00:45 +0000 Manifest next update: Mon 15 Dec 2025 05:00:45 +0000 Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: WFY8go0hGY8uWR7EEu+tMGzezIKdDEDvUi/acw6saHg=) 2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:8b:18:f3:f3:06:11:15:bc:b0:8f:ae:0f:2c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Validity Not Before: Dec 14 05:00:45 2025 GMT Not After : Dec 15 05:00:45 2025 GMT Subject: CN=468a9c0d43c9d3ed146fd88d865a2f2d202cd9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:73:67:e8:31:7f:b5:74:7e:d2:8b:98:c2: 35:5e:94:21:6e:9b:d0:89:8d:32:55:6d:da:3c:81: 10:bb:bd:ae:9b:09:4c:ec:3e:6b:31:82:60:9c:44: 1e:9f:1e:47:30:89:20:cb:1a:8b:69:6b:d6:89:04: 01:5e:15:4f:74:7d:fc:07:a3:19:af:90:96:a3:a7: db:ae:c8:af:28:bc:39:c9:15:d6:52:a2:23:1f:f6: 53:51:0c:e4:e8:6c:33:79:88:a5:65:7c:a3:83:ba: 0c:d6:e8:c1:06:03:4f:73:d6:30:ee:79:06:44:d1: 3f:97:fc:c3:73:84:3b:d0:25:e6:5f:b3:23:2d:81: 36:cb:8e:bc:1e:fb:e9:7e:32:0d:9a:89:89:53:d5: 3f:a1:74:b3:3a:63:b7:da:3b:fe:8b:54:9b:67:c2: 57:0a:48:a2:15:a1:c0:f4:be:8e:bf:55:47:3a:70: 47:c6:47:b3:16:c7:52:3c:2e:82:f6:6b:9d:68:53: b3:64:a3:0e:8d:b6:10:78:92:fd:70:fd:10:4f:ac: 24:c3:4f:88:3a:19:44:5e:99:fc:19:85:97:29:aa: 41:76:54:5c:84:3f:24:71:40:a3:af:98:2d:1e:c0: 54:90:a4:f5:95:e7:48:7f:db:18:98:56:87:51:5c: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8A:9C:0D:43:C9:D3:ED:14:6F:D8:8D:86:5A:2F:2D:20:2C:D9:D0 X509v3 Authority Key Identifier: keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1d:6b:37:d5:89:98:f6:b2:52:35:98:df:3b:ba:db:c1:8d: fe:3c:32:8c:b2:ab:d7:b9:03:99:17:03:50:8d:90:7a:57:84: f9:a5:a3:a1:a3:9f:8d:3e:5a:de:00:00:35:9e:7f:67:47:f9: 26:7a:f1:05:80:51:a0:77:bb:98:a1:01:2b:36:4d:62:4e:d9: 0f:c5:28:80:8e:55:71:98:56:f5:d4:35:ac:cd:a5:bd:d4:fd: a7:36:a8:f2:dc:ed:35:19:88:b1:72:d1:58:18:c8:4d:17:be: c9:ee:81:ec:0c:23:65:e7:06:3f:37:b7:de:9a:2b:6f:2e:4b: 4e:7a:52:eb:fe:3e:9e:14:ff:c5:49:56:bc:b2:76:96:d1:c1: 62:e7:3f:de:07:87:69:45:79:8d:16:93:b9:1c:c6:aa:fe:cf: ef:10:d2:cc:6a:ab:22:96:03:f8:4c:fb:52:d0:61:b3:1e:f3: df:51:9b:3f:f8:31:49:41:57:ff:27:a9:f2:8e:11:08:e9:9b: fa:fe:fa:39:4b:35:6c:9a:ad:24:94:bb:3d:fa:8a:10:44:a1: 85:76:37:25:b4:77:c4:01:b4:39:1f:a8:69:4d:5c:3d:94:dd: a0:e1:67:51:ec:a3:95:68:3e:aa:8e:c6:f4:27:26:c3:ec:28: 03:7f:c6:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO4sY8/MGERW8sI+uDyyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4 ZTk0OTAwHhcNMjUxMjE0MDUwMDQ1WhcNMjUxMjE1MDUwMDQ1WjAzMTEwLwYDVQQD Eyg0NjhhOWMwZDQzYzlkM2VkMTQ2ZmQ4OGQ4NjVhMmYyZDIwMmNkOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qpzZ+gxf7V0ftKLmMI1XpQhbpvQ iY0yVW3aPIEQu72umwlM7D5rMYJgnEQenx5HMIkgyxqLaWvWiQQBXhVPdH38B6MZ r5CWo6fbrsivKLw5yRXWUqIjH/ZTUQzk6GwzeYilZXyjg7oM1ujBBgNPc9Yw7nkG RNE/l/zDc4Q70CXmX7MjLYE2y468HvvpfjINmomJU9U/oXSzOmO32jv+i1SbZ8JX CkiiFaHA9L6Ov1VHOnBHxkezFsdSPC6C9mudaFOzZKMOjbYQeJL9cP0QT6wkw0+I OhlEXpn8GYWXKapBdlRchD8kcUCjr5gtHsBUkKT1ledIf9sYmFaHUVxJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaKnA1DydPtFG/YjYZaLy0gLNnQMB8GA1UdIwQY MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt YjEwYTIyZDBhNDc2LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2 LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMR1rN9WJ mPayUjWY3zu628GN/jwyjLKr17kDmRcDUI2QeleE+aWjoaOfjT5a3gAANZ5/Z0f5 JnrxBYBRoHe7mKEBKzZNYk7ZD8UogI5VcZhW9dQ1rM2lvdT9pzao8tztNRmIsXLR WBjITRe+ye6B7AwjZecGPze33porby5LTnpS6/4+nhT/xUlWvLJ2ltHBYuc/3geH aUV5jRaTuRzGqv7P7xDSzGqrIpYD+Ez7UtBhsx7z31GbP/gxSUFX/yep8o4RCOmb +v76OUs1bJqtJJS7PfqKEEShhXY3JbR3xAG0OR+oaU1cPZTdoOFnUeyjlWg+qo7G 9Ccmw+woA3/GWA== -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:34 2025 by rpki-client