This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json) Hash identifier: 4l4r67DCs5YTQoAXqcl3Hy4y7/TSZR1K6dq2y96iDDg= Subject key identifier: 05:E9:F2:20:56:78:72:80:45:D4:EE:4B:82:3D:5B:E5:28:E7:A4:B1 Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f Certificate serial: 019B5A1B201B3060D73AA6106D045550E7C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft Manifest number: 01CB Signing time: Fri 26 Dec 2025 10:01:25 +0000 Manifest this update: Fri 26 Dec 2025 10:01:25 +0000 Manifest next update: Sat 27 Dec 2025 10:01:25 +0000 Files and hashes: 1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=) 2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: ed/ddRJrm+C/f8ufAXJIptaf5d24fagGi+zXh8hOqQk=) 3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:20:1b:30:60:d7:3a:a6:10:6d:04:55:50:e7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f Validity Not Before: Dec 26 10:01:25 2025 GMT Not After : Dec 27 10:01:25 2025 GMT Subject: CN=05e9f2205678728045d4ee4b823d5be528e7a4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:c6:66:93:fb:78:49:85:05:b9:ab:6e:94: 54:aa:e7:d6:3f:3a:47:ba:1a:37:0a:89:c9:49:ca: 4b:aa:0d:3b:12:05:60:de:46:ec:4d:e9:4c:85:85: 11:99:85:7d:47:f8:0e:59:48:c4:6b:9b:9c:e6:2b: 63:f2:d5:b6:eb:9c:d6:b3:d9:30:5d:c5:a4:63:74: 55:ba:e1:3b:2f:31:7b:5a:35:8c:56:dd:8a:bd:7b: c9:82:b5:10:95:d1:4f:d3:23:ab:54:d9:9b:c6:32: 44:c5:e7:d2:c1:7b:ae:d1:61:23:cb:e1:32:3d:9a: c8:aa:3d:76:55:0e:44:b7:3d:42:e9:5b:86:b4:5c: 02:fd:5a:9d:83:17:38:bc:7c:e5:a2:9d:e8:bd:43: 80:5a:e5:81:33:ac:c6:2e:44:05:08:71:95:6b:73: a0:64:b7:71:dc:9e:f7:33:db:47:87:69:a4:aa:df: ab:ea:ea:a3:c2:6f:a6:c3:f6:cc:71:c2:91:a5:21: 0d:38:9b:5a:1d:2e:f8:0d:17:bd:c0:b6:e8:8a:13: 8b:8c:e0:fa:86:91:ae:2e:1c:ed:a9:90:cf:ac:40: 06:26:ca:e9:b7:68:9f:39:61:06:46:d0:31:2b:bd: 0f:d2:e7:d8:59:10:33:db:73:72:8a:c2:77:64:13: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E9:F2:20:56:78:72:80:45:D4:EE:4B:82:3D:5B:E5:28:E7:A4:B1 X509v3 Authority Key Identifier: keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:17:37:62:b0:66:eb:8b:91:d4:cc:3e:ba:d1:cb:a7:4f:75: c8:34:5c:0e:74:e8:88:f1:d4:54:a9:0b:5b:30:a0:22:96:a3: dd:60:da:31:66:6c:10:6e:05:81:99:24:58:f6:b6:94:13:d2: a2:a8:82:51:1f:72:82:ac:69:70:0f:3c:c0:69:4b:be:d2:c4: b9:d5:96:07:c7:fd:a7:f4:83:fd:05:d0:9c:96:dc:0d:45:aa: 2c:71:b9:49:b8:37:ac:f5:12:bb:06:38:5c:d3:91:52:fc:65: 3e:8e:59:41:84:43:32:6f:1c:87:4e:5f:59:20:c7:2b:85:db: 34:26:6e:57:3e:36:6d:e2:91:cb:45:cb:6e:33:62:8a:4c:be: 1d:e5:74:6d:41:08:81:4a:60:18:44:52:0a:a2:4a:0e:98:48: 38:82:da:3c:38:44:bc:0d:59:62:85:4e:ea:03:91:1a:a0:96: 20:f6:37:9b:9b:0a:bf:b3:1f:34:49:a3:82:4e:06:bb:a8:24: 06:74:1d:83:66:4b:d9:2f:b6:cf:ce:99:fb:31:ec:d0:28:03: 1f:a8:f6:f5:6c:6c:41:8f:34:1a:28:b3:97:40:56:b5:51:c8: 35:b1:9a:9a:d2:17:c7:b3:2b:9e:1f:bf:31:6f:c8:a9:2c:f1: d6:19:28:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGyAbMGDXOqYQbQRVUOfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NWRlNjVmMzc1MTVkZjhjYzI0MmYzNmRiYmVmMzIwYzZk OTBiNGYwHhcNMjUxMjI2MTAwMTI1WhcNMjUxMjI3MTAwMTI1WjAzMTEwLwYDVQQD EygwNWU5ZjIyMDU2Nzg3MjgwNDVkNGVlNGI4MjNkNWJlNTI4ZTdhNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03jGZpP7eEmFBbmrbpRUqufWPzpH uho3ConJScpLqg07EgVg3kbsTelMhYURmYV9R/gOWUjEa5uc5itj8tW265zWs9kw XcWkY3RVuuE7LzF7WjWMVt2KvXvJgrUQldFP0yOrVNmbxjJExefSwXuu0WEjy+Ey PZrIqj12VQ5Etz1C6VuGtFwC/Vqdgxc4vHzlop3ovUOAWuWBM6zGLkQFCHGVa3Og ZLdx3J73M9tHh2mkqt+r6uqjwm+mw/bMccKRpSENOJtaHS74DRe9wLboihOLjOD6 hpGuLhztqZDPrEAGJsrpt2ifOWEGRtAxK70P0ufYWRAz23NyisJ3ZBPFQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXp8iBWeHKARdTuS4I9W+Uo56SxMB8GA1UdIwQY MBaAFCRd5l83UV34zCQvNtu+8yDG2QtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTkt MzE3Mjc5ODE4YWNjLzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTktMzE3Mjc5ODE4YWNj LzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRc3YrBm 64uR1Mw+utHLp091yDRcDnToiPHUVKkLWzCgIpaj3WDaMWZsEG4FgZkkWPa2lBPS oqiCUR9ygqxpcA88wGlLvtLEudWWB8f9p/SD/QXQnJbcDUWqLHG5Sbg3rPUSuwY4 XNORUvxlPo5ZQYRDMm8ch05fWSDHK4XbNCZuVz42beKRy0XLbjNiiky+HeV0bUEI gUpgGERSCqJKDphIOILaPDhEvA1ZYoVO6gORGqCWIPY3m5sKv7MfNEmjgk4Gu6gk BnQdg2ZL2S+2z86Z+zHs0CgDH6j29WxsQY80Giizl0BWtVHINbGamtIXx7Mrnh+/ MW/IqSzx1hko8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:51 2025 by rpki-client