This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft File: JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json) Hash identifier: 1K6tqodDM4sdcY6PmBprSO2RsOwWySVUAcybSMCR+oM= Subject key identifier: D9:7E:7A:A3:FB:A9:14:21:CD:04:02:9B:52:83:01:E4:45:32:D4:53 Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c Certificate serial: 019B32D7FC917B8E5E4C88A2DBF74F5E3665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 19:02:54 +0000 Manifest this update: Thu 18 Dec 2025 19:02:54 +0000 Manifest next update: Fri 19 Dec 2025 19:02:54 +0000 Files and hashes: 1: A60RBGadDjKdPHVlJg0uqTD974Q.roa (hash: 4fXWgPDCvs0uk8MBVH/S+SmZyRTmunHNR49bT2RcI7c=) 2: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: T0rJDs/FWjxGigy+6bbX4UbDhFLvc84QhsLUkMGYziQ=) 3: ai_RgbT0zKstqqt2SbvFvSaAldI.roa (hash: +RxVDzpwxX0PVjGcCVeFRTO/OITdBFvoCwZmWeh/ZW4=) 4: tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa (hash: NZpf0UeNwGFLjgoytkNM8IGey5uL4sin2yYuLpIaeRY=) 5: wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa (hash: OepYAELbBzS8mDh4vcbHfRlHazKGsQKZdJc2NWmplLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:fc:91:7b:8e:5e:4c:88:a2:db:f7:4f:5e:36:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c Validity Not Before: Dec 18 19:02:54 2025 GMT Not After : Dec 19 19:02:54 2025 GMT Subject: CN=d97e7aa3fba91421cd04029b528301e44532d453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:89:30:ae:c4:e5:0b:a4:d2:72:1e:c7:a6:36: 70:fd:c7:a6:81:2e:ad:d2:69:d0:45:5b:12:9d:c1: dc:f3:31:77:ad:30:b6:c9:19:84:dd:4d:00:ae:c3: 0f:36:f3:6e:1f:63:4c:cb:43:34:0f:63:6d:59:52: e0:7b:3b:24:6b:77:52:01:8a:11:bb:6d:36:49:b0: f3:00:36:11:12:d6:8b:5e:97:33:67:6a:b4:f9:fe: f9:13:28:e5:03:f1:13:27:75:37:9c:e1:58:88:46: e5:e9:89:4a:b4:89:06:74:7e:6a:a2:b2:24:da:95: 38:82:51:4d:49:07:84:0a:e4:fe:13:b5:44:8d:ae: fd:39:28:5e:40:59:62:e2:79:ea:27:e4:73:97:7a: 82:e2:a7:79:0e:c7:f6:73:c4:a9:40:72:70:44:06: 05:7d:50:b4:1d:85:8f:87:aa:a1:a9:63:72:3e:c3: ea:94:70:5f:cc:a6:89:57:46:78:28:2f:0c:42:00: 77:2a:89:2c:82:43:1e:6c:9c:07:80:72:fd:02:cc: 0d:fd:51:de:f8:d6:df:94:79:5e:69:7b:31:99:6d: 01:06:f3:56:ed:18:87:72:d6:3f:b8:a1:19:d0:7b: 2f:cf:54:31:dc:f0:4a:4d:3c:3b:2a:e4:7c:0d:9d: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7E:7A:A3:FB:A9:14:21:CD:04:02:9B:52:83:01:E4:45:32:D4:53 X509v3 Authority Key Identifier: keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2a:fe:17:c0:d5:05:de:87:42:9b:40:bd:2f:4e:46:6b:f0: 50:97:ed:08:35:e7:33:6e:0f:6e:f4:81:be:ae:22:03:01:1f: 1b:79:4c:51:33:be:e9:b9:96:37:2d:f5:f1:34:9c:dc:f5:28: 08:0e:34:b0:70:8e:27:31:a7:cd:87:f2:2b:db:d6:aa:ce:fd: 62:98:62:c1:37:c5:7c:16:ad:af:9b:74:39:24:b7:05:c1:38: ca:81:81:d3:be:2f:34:56:82:f9:b1:7c:f9:e0:f8:33:4a:12: 62:ad:79:a0:97:ba:04:b4:75:dd:50:b5:3c:3f:65:e8:7a:f8: 06:b4:8e:73:ac:6d:1e:5d:0d:5d:ed:8f:07:e0:33:f3:c8:af: bd:49:c6:9e:2d:3d:80:18:81:13:d8:d0:bc:f5:d5:8a:a2:75: a8:1c:ea:81:92:6d:a1:73:85:12:d0:a1:51:48:db:d6:8d:26: bb:1f:ea:67:56:88:c2:c8:fa:9b:f6:41:16:f0:e1:ac:a9:a7: b7:0d:0f:aa:67:21:95:f3:34:3c:96:1f:5b:cd:ff:04:71:e1: f6:35:26:40:f0:35:32:de:d8:ec:a2:a9:9a:f1:01:92:45:1c: 28:06:4b:e9:b2:cc:80:ed:0e:2e:9f:e9:da:69:fd:e2:12:2d: 29:d9:fd:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1/yRe45eTIii2/dPXjZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5MGY1ZjMxZjIzOGRmM2U4ZjNiZGZjYzA1NzUxY2My ZjE5MmMwHhcNMjUxMjE4MTkwMjU0WhcNMjUxMjE5MTkwMjU0WjAzMTEwLwYDVQQD EyhkOTdlN2FhM2ZiYTkxNDIxY2QwNDAyOWI1MjgzMDFlNDQ1MzJkNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IkwrsTlC6TSch7HpjZw/cemgS6t 0mnQRVsSncHc8zF3rTC2yRmE3U0ArsMPNvNuH2NMy0M0D2NtWVLgezska3dSAYoR u202SbDzADYREtaLXpczZ2q0+f75EyjlA/ETJ3U3nOFYiEbl6YlKtIkGdH5qorIk 2pU4glFNSQeECuT+E7VEja79OSheQFli4nnqJ+Rzl3qC4qd5Dsf2c8SpQHJwRAYF fVC0HYWPh6qhqWNyPsPqlHBfzKaJV0Z4KC8MQgB3KoksgkMebJwHgHL9AswN/VHe +NbflHleaXsxmW0BBvNW7RiHctY/uKEZ0Hsvz1Qx3PBKTTw7KuR8DZ2UHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl+eqP7qRQhzQQCm1KDAeRFMtRTMB8GA1UdIwQY MBaAFCcCkPXzHyON8+jzvfzAV1HMLxksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAt YjE0Y2M5MWM3NzZjLzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAtYjE0Y2M5MWM3NzZj LzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSr+F8DV Bd6HQptAvS9ORmvwUJftCDXnM24PbvSBvq4iAwEfG3lMUTO+6bmWNy318TSc3PUo CA40sHCOJzGnzYfyK9vWqs79YphiwTfFfBatr5t0OSS3BcE4yoGB074vNFaC+bF8 +eD4M0oSYq15oJe6BLR13VC1PD9l6Hr4BrSOc6xtHl0NXe2PB+Az88ivvUnGni09 gBiBE9jQvPXViqJ1qBzqgZJtoXOFEtChUUjb1o0mux/qZ1aIwsj6m/ZBFvDhrKmn tw0PqmchlfM0PJYfW83/BHHh9jUmQPA1Mt7Y7KKpmvEBkkUcKAZL6bLMgO0OLp/p 2mn94hItKdn92A== -----END CERTIFICATE-----Generated at Thu Dec 18 23:29:35 2025 by rpki-client