This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json) Hash identifier: 3RSszFDqyi6JuAs5K2tF/0UsVLNd7g3lvAyiiibjP0w= Subject key identifier: AA:EA:EA:66:64:DC:44:CA:BE:3D:6F:44:C5:DB:DE:47:84:65:5A:DB Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Certificate serial: 019B3DFED8056504642622D66713BFB5AD35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft Manifest number: 05BE Signing time: Sat 20 Dec 2025 23:01:10 +0000 Manifest this update: Sat 20 Dec 2025 23:01:10 +0000 Manifest next update: Sun 21 Dec 2025 23:01:10 +0000 Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: JZ9D2V8q43Cv+feDQEtm5p7WpsDd7FU0TRJTac2H0nY=) 2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=) 3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d8:05:65:04:64:26:22:d6:67:13:bf:b5:ad:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Validity Not Before: Dec 20 23:01:10 2025 GMT Not After : Dec 21 23:01:10 2025 GMT Subject: CN=aaeaea6664dc44cabe3d6f44c5dbde4784655adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:0f:71:05:7d:bc:87:2d:2c:ce:86:ac:ef: 8d:2e:be:15:ba:19:2b:23:1e:2f:7a:b4:f5:c2:d7: 51:4e:af:11:c1:bd:56:f6:8f:a5:c7:4f:e6:4c:cd: 45:72:1e:ae:ad:be:76:b3:87:54:07:6a:bf:e3:e3: 55:61:32:02:d0:bc:c4:0d:fd:4e:e2:ae:81:2f:28: 79:09:60:f2:b8:a8:68:fc:b8:02:39:46:2d:cb:30: a4:e3:f7:79:b5:df:41:86:6c:6b:3c:3d:f4:7f:68: e7:09:97:13:89:39:25:6c:43:fb:2b:c5:32:4d:f1: 28:94:0d:c9:6b:79:fb:1e:d6:57:37:75:7f:e0:f0: 02:4e:16:15:ce:dd:1b:72:b7:a5:fd:9a:3a:6d:da: d4:01:c9:e5:0b:32:4e:e9:23:0c:bc:7a:9d:5f:74: 31:b0:cc:8e:fc:e9:86:2c:20:c5:3f:8a:50:e5:1c: b4:92:ed:13:42:e3:92:bf:67:a6:e2:c4:81:46:37: 7e:25:0e:cf:4a:ed:0b:08:c7:16:37:b2:52:0f:28: 6e:53:c7:13:28:fb:95:a4:9f:71:10:65:af:8e:66: 83:8b:86:46:20:55:95:7c:4e:0b:b9:c5:ad:44:67: 53:d5:4a:6e:5d:0f:74:ae:d5:15:a7:ef:06:8a:e5: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EA:EA:66:64:DC:44:CA:BE:3D:6F:44:C5:DB:DE:47:84:65:5A:DB X509v3 Authority Key Identifier: keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6a:bf:0e:01:25:d0:4a:c6:e7:a5:b3:cb:98:74:0f:43:6e: 88:29:32:0b:c7:87:be:b2:3d:42:33:41:c3:7c:63:80:5c:75: 9f:67:f5:18:d8:3c:45:0b:1a:fc:bb:da:5f:7a:23:cf:06:16: f8:ec:c8:07:70:54:90:d7:e6:5c:48:63:26:45:e4:bb:6c:9e: f4:97:08:a2:23:e6:bd:6f:98:75:a7:1f:58:f4:71:2e:ef:5f: 62:0a:ae:52:b2:82:3d:cd:d3:d9:5a:67:bb:61:90:4d:a5:8a: 74:1c:d9:45:9d:e8:2a:0b:c7:3a:ea:d0:33:11:46:b9:91:a5: 20:1e:31:b4:33:3d:53:e5:95:a1:ed:d8:58:ef:4b:ed:aa:d2: 7e:7c:d3:d9:36:16:f0:8d:e1:29:b0:6e:ed:92:c1:98:d3:b7: 98:0b:94:2e:98:eb:9f:c4:4c:89:00:78:db:b8:49:58:11:04: 70:a9:e4:7a:ac:27:57:e3:56:f1:92:ce:0e:72:63:37:35:2e: 3b:20:6f:2f:62:e5:d6:b7:48:24:0e:93:fe:e2:71:96:33:3b: df:b1:ad:73:ae:79:47:67:0f:76:f6:0a:23:ce:06:de:31:34: 8c:9b:b5:6c:b1:0d:9a:2b:6a:cf:40:d5:17:66:0e:c5:bf:e2: 02:3e:2d:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tgFZQRkJiLWZxO/ta01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3 ZjFhYTcwHhcNMjUxMjIwMjMwMTEwWhcNMjUxMjIxMjMwMTEwWjAzMTEwLwYDVQQD EyhhYWVhZWE2NjY0ZGM0NGNhYmUzZDZmNDRjNWRiZGU0Nzg0NjU1YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQYPcQV9vIctLM6GrO+NLr4Vuhkr Ix4verT1wtdRTq8Rwb1W9o+lx0/mTM1Fch6urb52s4dUB2q/4+NVYTIC0LzEDf1O 4q6BLyh5CWDyuKho/LgCOUYtyzCk4/d5td9BhmxrPD30f2jnCZcTiTklbEP7K8Uy TfEolA3Ja3n7HtZXN3V/4PACThYVzt0bcrel/Zo6bdrUAcnlCzJO6SMMvHqdX3Qx sMyO/OmGLCDFP4pQ5Ry0ku0TQuOSv2em4sSBRjd+JQ7PSu0LCMcWN7JSDyhuU8cT KPuVpJ9xEGWvjmaDi4ZGIFWVfE4LucWtRGdT1UpuXQ90rtUVp+8GiuWq5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrq6mZk3ETKvj1vRMXb3keEZVrbMB8GA1UdIwQY MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3 LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWq/DgEl 0ErG56Wzy5h0D0NuiCkyC8eHvrI9QjNBw3xjgFx1n2f1GNg8RQsa/LvaX3ojzwYW +OzIB3BUkNfmXEhjJkXku2ye9JcIoiPmvW+YdacfWPRxLu9fYgquUrKCPc3T2Vpn u2GQTaWKdBzZRZ3oKgvHOurQMxFGuZGlIB4xtDM9U+WVoe3YWO9L7arSfnzT2TYW 8I3hKbBu7ZLBmNO3mAuULpjrn8RMiQB427hJWBEEcKnkeqwnV+NW8ZLODnJjNzUu OyBvL2Ll1rdIJA6T/uJxljM737Gtc655R2cPdvYKI84G3jE0jJu1bLENmitqz0DV F2YOxb/iAj4tGA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:06:51 2025 by rpki-client