This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json) Hash identifier: t2qgXeTwshOOShunNCbWyr2NsSIuM0RaKqGJWEuw8bw= Subject key identifier: 55:19:DF:98:73:64:AF:A0:E5:4B:86:A9:95:BD:03:C6:6C:79:D0:08 Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df Certificate serial: 019B3CB4B2F7775530381A3D8DAF21935294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft Manifest number: 14C3 Signing time: Sat 20 Dec 2025 17:00:33 +0000 Manifest this update: Sat 20 Dec 2025 17:00:33 +0000 Manifest next update: Sun 21 Dec 2025 17:00:33 +0000 Files and hashes: 1: 1-gZpOs3LH1weRxZdstqPTs_RNSg.roa (hash: Z5X+P39homZ9mxVyuxmWtTONjlTrK0M0M943Iro6YG4=) 2: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: CD3EJHDXefMandSBBIZudazJzKOwvxtxJr/+UbOGPcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:b2:f7:77:55:30:38:1a:3d:8d:af:21:93:52:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df Validity Not Before: Dec 20 17:00:33 2025 GMT Not After : Dec 21 17:00:33 2025 GMT Subject: CN=5519df987364afa0e54b86a995bd03c66c79d008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:bb:7d:1d:a3:bb:cc:dc:74:c9:bc:61:3a: 49:eb:2a:77:60:e0:c8:bf:dc:29:8a:36:9a:87:f3: 6c:4c:d4:00:f4:79:13:81:a3:51:52:b6:78:3f:a7: 04:b7:3c:81:ba:5d:1d:32:77:53:5a:12:1a:ca:bb: c3:cf:24:50:d9:97:ed:02:06:7e:cc:da:32:55:cd: 78:e2:37:de:7f:53:5f:74:19:0a:b0:d0:03:ee:76: e6:0b:2a:a6:23:9a:65:a5:a0:a5:1f:8c:ad:38:c6: 16:0f:cc:30:5f:68:79:78:9a:8c:c9:ed:30:94:14: 57:58:57:d2:63:bd:95:ed:68:9c:e3:81:38:a6:ad: ce:11:87:a5:1b:82:53:fd:79:e3:c3:a5:2b:0a:96: e8:6a:2b:e2:43:95:a0:81:da:62:37:23:45:c6:1a: 0c:18:f1:09:ac:01:a6:c4:38:d4:56:5a:67:56:b2: a5:26:76:15:5b:1d:7e:62:ce:33:ee:c2:78:ad:32: f0:c6:e9:d2:a5:09:59:cb:95:d0:e0:a5:6e:23:94: 5a:22:c7:40:99:82:59:56:78:9f:0c:4d:21:3f:2d: 89:09:72:11:5d:4d:01:97:8b:78:b6:55:0c:46:f8: 5e:97:d1:2d:52:75:54:96:60:14:42:b5:e9:3f:05: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:DF:98:73:64:AF:A0:E5:4B:86:A9:95:BD:03:C6:6C:79:D0:08 X509v3 Authority Key Identifier: keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d2:ae:4e:34:e5:a1:4a:4f:4f:03:24:b4:5f:e2:4c:8d:60: 7a:13:79:6a:07:32:64:6c:fa:bb:50:e4:7a:96:be:97:e3:f2: a0:cc:f1:45:38:04:d6:7c:f7:1d:de:2e:48:7f:6a:f1:4a:ee: 99:22:67:6d:4a:0a:cb:f1:0e:b9:6d:8a:2c:90:df:69:14:3e: 2b:92:24:0c:4f:6f:a8:12:c1:f8:ce:cd:7f:b6:a0:9d:bf:19: 7e:a3:18:1d:4c:dd:cc:2e:67:b0:95:f9:e5:03:ed:2b:9b:8a: b4:ef:8f:f7:ae:ab:e1:b9:c7:7c:87:07:19:da:0f:2e:56:c7: 4c:52:ea:14:22:31:45:42:12:4b:ef:ec:1b:21:2e:55:4e:e8: ea:7d:d7:4b:c5:c5:ca:e0:d3:36:13:1a:6e:92:b8:92:a8:f6: 5c:00:f1:a0:11:65:4e:79:df:97:8b:1e:a7:7d:2f:62:10:f2: 92:dc:ce:e4:af:31:ce:4a:5c:8d:99:31:31:07:21:f9:90:67: c9:ab:6d:9b:64:af:93:1d:16:75:cd:56:95:52:b9:89:ca:60: 7a:82:c5:b9:d9:da:d8:bd:07:43:49:45:6e:31:32:9c:26:55: 3a:81:f4:e1:5e:1b:45:e6:a2:91:6e:51:20:a7:1a:d9:0c:f1: 3d:9e:50:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLL3d1UwOBo9ja8hk1KUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4 NDkyZGYwHhcNMjUxMjIwMTcwMDMzWhcNMjUxMjIxMTcwMDMzWjAzMTEwLwYDVQQD Eyg1NTE5ZGY5ODczNjRhZmEwZTU0Yjg2YTk5NWJkMDNjNjZjNzlkMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cm7fR2ju8zcdMm8YTpJ6yp3YODI v9wpijaah/NsTNQA9HkTgaNRUrZ4P6cEtzyBul0dMndTWhIayrvDzyRQ2ZftAgZ+ zNoyVc144jfef1NfdBkKsNAD7nbmCyqmI5plpaClH4ytOMYWD8wwX2h5eJqMye0w lBRXWFfSY72V7Wic44E4pq3OEYelG4JT/Xnjw6UrCpboaiviQ5WggdpiNyNFxhoM GPEJrAGmxDjUVlpnVrKlJnYVWx1+Ys4z7sJ4rTLwxunSpQlZy5XQ4KVuI5RaIsdA mYJZVnifDE0hPy2JCXIRXU0Bl4t4tlUMRvhel9EtUnVUlmAUQrXpPwU3VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUZ35hzZK+g5UuGqZW9A8ZsedAIMB8GA1UdIwQY MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt YTI5ZWIxMzllNzlkLzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAtYTI5ZWIxMzllNzlk LzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdKuTjTl oUpPTwMktF/iTI1gehN5agcyZGz6u1Dkepa+l+PyoMzxRTgE1nz3Hd4uSH9q8Uru mSJnbUoKy/EOuW2KLJDfaRQ+K5IkDE9vqBLB+M7Nf7agnb8ZfqMYHUzdzC5nsJX5 5QPtK5uKtO+P966r4bnHfIcHGdoPLlbHTFLqFCIxRUISS+/sGyEuVU7o6n3XS8XF yuDTNhMabpK4kqj2XADxoBFlTnnfl4sep30vYhDyktzO5K8xzkpcjZkxMQch+ZBn yattm2Svkx0Wdc1WlVK5icpgeoLFudna2L0HQ0lFbjEynCZVOoH04V4bReaikW5R IKca2QzxPZ5Q5A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:38:49 2025 by rpki-client