This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: NFNf3YIX4792hSQg8PVc49SXaCizSuiQ2P2s355U/7w= Subject key identifier: DB:C9:E5:58:D8:F6:29:A4:0F:B3:8F:ED:D7:7E:AA:E6:C1:58:96:9A Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019B6BEA298BA99A278AFF1645A511BDAABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 0476 Signing time: Mon 29 Dec 2025 21:01:06 +0000 Manifest this update: Mon 29 Dec 2025 21:01:06 +0000 Manifest next update: Tue 30 Dec 2025 21:01:06 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: 692W0TBXnYOEzisSaxQtnb++QX17nBisZ2Lo7M7EGAc=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:ea:29:8b:a9:9a:27:8a:ff:16:45:a5:11:bd:aa:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Dec 29 21:01:06 2025 GMT Not After : Dec 30 21:01:06 2025 GMT Subject: CN=dbc9e558d8f629a40fb38fedd77eaae6c158969a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:16:14:6b:56:69:c8:b6:df:a3:80:ac:06: d9:72:fa:3b:88:f0:e2:5a:d9:16:05:f2:3c:87:1d: 48:75:46:e1:9e:1b:b6:2b:54:38:36:ca:d0:4d:13: 78:cb:8e:ec:23:5b:ae:6c:66:ab:61:38:6b:57:69: 33:23:46:16:47:9a:0d:db:cc:6b:0f:fe:30:c9:7e: 38:56:39:e2:19:2e:de:86:70:8d:de:96:a5:6d:05: df:43:3e:ce:27:5b:b6:21:01:a4:37:39:57:fe:99: ee:ea:e3:fa:da:eb:2f:b1:1d:76:82:ee:a2:3c:11: 63:ba:9b:d2:34:07:bd:8c:15:ca:ba:bc:83:cc:24: 5b:38:73:ec:30:7b:56:01:f8:f5:ba:6c:42:cd:a4: a5:96:f5:ad:14:12:92:53:17:4e:1b:22:d0:73:73: 2b:81:34:f7:a9:85:c8:b2:af:24:aa:7c:45:56:29: 5f:7a:9c:61:e8:e8:06:bf:48:41:a9:54:22:86:fe: 69:8b:a7:2b:f4:c0:bc:81:44:a8:16:f9:cc:dd:dd: 83:4a:dd:1d:d4:d3:fc:f2:c2:ca:0a:3c:be:0a:95: 44:a4:5b:4f:00:14:25:64:c7:22:a7:4e:80:01:8b: 3d:ca:d4:1a:0c:30:22:5b:62:83:39:14:0d:bf:f4: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C9:E5:58:D8:F6:29:A4:0F:B3:8F:ED:D7:7E:AA:E6:C1:58:96:9A X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d2:32:fd:bf:53:d2:2e:5e:10:0a:a4:c6:e7:d2:e2:7a:7d: 80:fd:f4:c1:86:30:47:5b:ed:de:aa:b1:9c:33:a8:11:3c:5c: ad:3b:12:50:62:c4:09:78:05:e2:fc:45:93:37:dd:a3:f2:93: 84:c6:1c:a5:bc:de:10:ab:ba:d2:0a:88:d1:c3:c0:0e:96:00: c6:8f:42:47:60:0b:9b:a8:d7:12:b3:d7:a4:a1:3c:05:f3:f1: ec:5f:62:78:c9:b6:8d:ba:5b:86:ac:f7:2c:7c:50:5a:1d:da: ba:f7:1a:e7:1e:3a:59:ae:91:08:1e:86:4c:a7:c2:3f:cc:36: be:62:ae:a1:8b:14:c2:9a:fb:fd:30:f7:67:a6:98:08:eb:78: 5a:72:f4:c5:04:a7:56:61:e8:1d:18:bc:8f:49:29:ae:10:00: b4:20:21:86:da:51:0a:98:2f:a4:a9:11:f7:5b:4e:99:1d:7d: c8:e7:06:3c:a8:09:56:5e:3e:de:dc:7c:48:f4:14:e6:ba:9a: e4:f9:85:55:0e:9a:69:6a:8c:45:f2:29:d0:e1:ff:a0:40:91: 09:41:c9:11:45:18:47:c5:1a:05:92:d5:2d:31:97:c4:6b:ca: 49:db:95:40:89:82:64:bb:2f:64:64:58:58:80:cc:88:8d:d7: f4:08:ce:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6imLqZoniv8WRaURvaq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUxMjI5MjEwMTA2WhcNMjUxMjMwMjEwMTA2WjAzMTEwLwYDVQQD EyhkYmM5ZTU1OGQ4ZjYyOWE0MGZiMzhmZWRkNzdlYWFlNmMxNTg5NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9UWFGtWaci236OArAbZcvo7iPDi WtkWBfI8hx1IdUbhnhu2K1Q4NsrQTRN4y47sI1uubGarYThrV2kzI0YWR5oN28xr D/4wyX44VjniGS7ehnCN3palbQXfQz7OJ1u2IQGkNzlX/pnu6uP62usvsR12gu6i PBFjupvSNAe9jBXKuryDzCRbOHPsMHtWAfj1umxCzaSllvWtFBKSUxdOGyLQc3Mr gTT3qYXIsq8kqnxFVilfepxh6OgGv0hBqVQihv5pi6cr9MC8gUSoFvnM3d2DSt0d 1NP88sLKCjy+CpVEpFtPABQlZMcip06AAYs9ytQaDDAiW2KDORQNv/QEbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvJ5VjY9imkD7OP7dd+qubBWJaaMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9Iy/b9T 0i5eEAqkxufS4np9gP30wYYwR1vt3qqxnDOoETxcrTsSUGLECXgF4vxFkzfdo/KT hMYcpbzeEKu60gqI0cPADpYAxo9CR2ALm6jXErPXpKE8BfPx7F9ieMm2jbpbhqz3 LHxQWh3auvca5x46Wa6RCB6GTKfCP8w2vmKuoYsUwpr7/TD3Z6aYCOt4WnL0xQSn VmHoHRi8j0kprhAAtCAhhtpRCpgvpKkR91tOmR19yOcGPKgJVl4+3tx8SPQU5rqa 5PmFVQ6aaWqMRfIp0OH/oECRCUHJEUUYR8UaBZLVLTGXxGvKSduVQImCZLsvZGRY WIDMiI3X9AjOAw== -----END CERTIFICATE-----Generated at Tue Dec 30 06:22:13 2025 by rpki-client