This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json) Hash identifier: qxexOR5iR7c0Z/Yl/AAVoF2gCQwUGDw0s5ctcmqztXY= Subject key identifier: 2D:AB:73:53:94:AB:5B:7F:98:ED:E5:47:B3:D6:CB:C6:26:EE:09:99 Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Certificate serial: 019B3BA2C7507778A8AAADEEEC2DB9DFE5C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft Manifest number: 16CF Signing time: Sat 20 Dec 2025 12:01:22 +0000 Manifest this update: Sat 20 Dec 2025 12:01:22 +0000 Manifest next update: Sun 21 Dec 2025 12:01:22 +0000 Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: 9IU4FJ9500lkJ7u2RQI/UthIeW7p72EVZX5NN5wLU14=) 2: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (hash: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=) 3: g_n97b-ezr2pU8M_arTz7b0GI28.roa (hash: f/1b/CBZ/cmdffSZ/BO1Ow8CLoficDzJ57IxUPZ8+ZA=) 4: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (hash: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:c7:50:77:78:a8:aa:ad:ee:ec:2d:b9:df:e5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Validity Not Before: Dec 20 12:01:22 2025 GMT Not After : Dec 21 12:01:22 2025 GMT Subject: CN=2dab735394ab5b7f98ede547b3d6cbc626ee0999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:e9:93:f6:7e:e6:b0:a3:db:7f:db:06:02: c1:89:d0:4c:fa:d8:4a:79:17:24:25:cd:f6:dd:01: 55:ab:23:67:ac:5e:b7:75:b8:6c:4d:6a:a2:cc:76: 19:d7:be:38:2b:9b:4c:a3:10:d6:e7:10:87:a2:7d: 95:f0:e1:fc:c2:17:68:dd:d2:a8:b0:d5:83:fe:31: 24:d0:99:25:98:79:38:21:76:bd:b8:f7:8b:5d:e1: 12:f5:2b:2a:4b:18:02:ab:8b:0d:43:b7:6c:55:8b: db:ac:96:51:b6:b7:c1:b8:c2:2c:3e:73:b5:fa:e6: 1d:74:32:fd:15:13:4a:ba:85:e6:32:e7:f1:db:9a: 9c:d3:bc:b1:2c:cd:e9:a2:57:02:13:09:61:4b:8d: 20:8f:93:cf:cf:4d:05:cf:6b:c6:b6:79:24:16:0e: 4e:0d:44:87:59:a7:b5:0c:c6:b8:5b:95:99:2a:e2: 2b:4c:83:dd:21:99:7e:09:2c:9f:b8:dd:e5:2a:c9: 36:0f:9e:8b:f6:04:05:6c:ab:c3:f3:55:6b:70:1c: 43:b0:65:b3:af:8e:de:2b:33:e8:31:d1:c9:55:77: 40:a7:41:6f:48:29:13:44:95:f9:3e:bd:a5:5a:e9: cb:22:5b:dd:5a:4a:36:2d:88:91:ac:38:53:d7:dc: c7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AB:73:53:94:AB:5B:7F:98:ED:E5:47:B3:D6:CB:C6:26:EE:09:99 X509v3 Authority Key Identifier: keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:72:68:72:fb:f1:b6:4c:d4:bd:9b:86:6a:23:cc:e5:38:4a: 92:96:4b:8d:ed:73:e3:64:6f:e3:2f:5a:0d:65:0d:36:93:3d: 82:3a:00:90:a2:cc:20:48:e5:21:ad:dc:90:ef:d6:14:ad:e2: 77:f9:9b:aa:26:da:6f:df:57:91:30:0b:6e:78:ee:0d:03:d2: 00:75:3d:dd:40:ec:72:43:f4:7d:15:19:98:52:9d:8f:a9:b1: 3d:b6:a1:9f:db:31:23:be:76:7d:e5:30:0a:0b:28:69:51:e0: 95:c6:1a:18:eb:e3:b4:dd:e9:cf:df:71:3a:57:7d:26:8e:fe: 21:13:bd:bc:f2:ae:5e:e9:b6:3c:c6:21:41:7e:f5:65:1f:3e: b2:8a:18:57:6f:75:a2:f6:4d:50:dd:05:cc:42:40:5b:37:a3: e0:24:8b:8f:88:fe:94:a0:c5:07:41:3e:ab:58:a7:06:18:3b: 29:a4:45:25:fb:20:2e:12:16:2a:c0:e1:87:0f:a3:f2:3f:22: 3c:58:0b:02:d4:22:db:f6:08:54:36:4f:2a:38:96:60:98:ca: 5f:56:b8:6e:e5:7f:ba:cf:cf:72:3d:99:2d:3c:62:11:87:da: fd:84:ab:ce:7f:88:c4:94:6d:ee:8b:49:21:81:b8:30:8d:91: f5:0f:d2:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7osdQd3ioqq3u7C253+XCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1 MTczMDgwHhcNMjUxMjIwMTIwMTIyWhcNMjUxMjIxMTIwMTIyWjAzMTEwLwYDVQQD EygyZGFiNzM1Mzk0YWI1YjdmOThlZGU1NDdiM2Q2Y2JjNjI2ZWUwOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthTpk/Z+5rCj23/bBgLBidBM+thK eRckJc323QFVqyNnrF63dbhsTWqizHYZ1744K5tMoxDW5xCHon2V8OH8whdo3dKo sNWD/jEk0JklmHk4IXa9uPeLXeES9SsqSxgCq4sNQ7dsVYvbrJZRtrfBuMIsPnO1 +uYddDL9FRNKuoXmMufx25qc07yxLM3polcCEwlhS40gj5PPz00Fz2vGtnkkFg5O DUSHWae1DMa4W5WZKuIrTIPdIZl+CSyfuN3lKsk2D56L9gQFbKvD81VrcBxDsGWz r47eKzPoMdHJVXdAp0FvSCkTRJX5Pr2lWunLIlvdWko2LYiRrDhT19zHewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2rc1OUq1t/mO3lR7PWy8Ym7gmZMB8GA1UdIwQY MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct NTBkMGE1MzIzNjQxLzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3Jocvvx tkzUvZuGaiPM5ThKkpZLje1z42Rv4y9aDWUNNpM9gjoAkKLMIEjlIa3ckO/WFK3i d/mbqibab99XkTALbnjuDQPSAHU93UDsckP0fRUZmFKdj6mxPbahn9sxI752feUw CgsoaVHglcYaGOvjtN3pz99xOld9Jo7+IRO9vPKuXum2PMYhQX71ZR8+sooYV291 ovZNUN0FzEJAWzej4CSLj4j+lKDFB0E+q1inBhg7KaRFJfsgLhIWKsDhhw+j8j8i PFgLAtQi2/YIVDZPKjiWYJjKX1a4buV/us/Pcj2ZLTxiEYfa/YSrzn+IxJRt7otJ IYG4MI2R9Q/Sew== -----END CERTIFICATE-----Generated at Sat Dec 20 19:00:30 2025 by rpki-client