This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: 8LYhdzSaRrp2Uix6W3D3Jbcpam1lXEqJaz/kFtLHYaM= Subject key identifier: 52:01:99:CB:E7:A7:BE:7F:5F:B1:F7:FD:23:51:17:AB:0B:DF:74:5F Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019B3BA2140E6F8CA52BFD98D14C712CFFFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 045D Signing time: Sat 20 Dec 2025 12:00:36 +0000 Manifest this update: Sat 20 Dec 2025 12:00:36 +0000 Manifest next update: Sun 21 Dec 2025 12:00:36 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: q5Uj+Bm78Dzol+19LtAJZqxiN4tcQc1QQTKyNJrBITE=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:14:0e:6f:8c:a5:2b:fd:98:d1:4c:71:2c:ff:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Dec 20 12:00:36 2025 GMT Not After : Dec 21 12:00:36 2025 GMT Subject: CN=520199cbe7a7be7f5fb1f7fd235117ab0bdf745f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:32:63:35:bc:66:81:c9:16:a4:d2:8e:70: 88:cb:d9:fc:9f:47:55:db:93:8d:97:b3:12:84:9d: 3c:ad:55:73:e9:e3:81:79:76:0e:1e:59:85:84:9e: ba:06:60:2e:32:ff:93:60:16:25:5e:f0:7a:b6:dd: 31:9c:bc:8a:44:9b:01:9f:bb:c3:fe:9a:86:7e:24: 61:30:6a:0a:19:d6:b6:22:00:07:02:12:b3:fc:4e: 24:cf:a4:e5:5f:e7:76:6c:90:33:ba:f9:7e:6f:b4: e5:f2:82:86:da:6c:0f:89:c8:ef:91:4b:92:4b:ea: f1:3a:14:b1:23:16:87:9f:21:3a:eb:81:2c:8e:1a: c5:35:7e:a4:ac:bc:63:7e:92:ea:4a:32:61:8a:b2: e4:24:c0:0d:74:83:0e:01:3d:90:96:ae:e8:9a:e4: d2:2f:0c:39:80:9e:8b:2e:25:d8:a9:e6:b4:f5:a2: 4b:ad:23:63:8b:06:73:af:e9:7b:86:f1:8e:88:6a: 30:b7:30:7f:34:83:fc:27:73:42:c3:b6:62:61:bd: 93:aa:1d:63:4d:f7:4b:ea:06:04:00:5a:f1:cc:0f: 40:e7:20:15:d1:0e:b7:76:e3:0a:f6:59:b8:d0:bc: bd:46:f1:84:62:df:2a:c4:34:cb:40:59:b1:32:fc: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:01:99:CB:E7:A7:BE:7F:5F:B1:F7:FD:23:51:17:AB:0B:DF:74:5F X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:3e:f9:c5:8b:9e:3c:e8:ee:1a:0f:3e:f7:93:cc:f5:bd:52: 3c:6e:b9:7b:01:aa:32:9c:7c:aa:c9:d1:6d:24:70:6c:df:9f: c7:44:8f:2f:ac:c7:a5:56:9a:ec:7c:f5:66:e3:0b:e1:69:06: 2d:ae:1c:f0:b2:9c:88:ac:d1:8b:18:b4:e9:67:05:f0:a5:a3: b1:a9:cd:c6:aa:46:d7:81:6c:74:de:48:29:aa:7a:00:2e:09: f7:8a:7e:22:94:9f:fc:a8:71:9a:c1:41:8d:38:e9:51:0e:07: fd:3f:6f:3c:5a:c4:73:3c:bc:d3:96:19:cd:55:c4:1b:23:4d: 79:db:b8:fd:47:d3:59:79:60:b8:35:e6:fa:ce:26:89:ef:65: 6c:b0:b6:22:3c:1e:0a:09:bd:e9:28:67:36:87:33:17:09:42: 68:27:7b:53:9a:45:46:34:2f:b5:4f:b5:c3:5c:20:13:04:fd: 9a:75:1a:26:2e:c3:a5:31:91:0b:57:40:9d:0e:ec:7f:c7:7e: fd:e0:5f:2c:da:58:fc:67:68:df:38:cd:87:60:c5:c4:f8:78: c0:e9:d1:b8:cd:68:5f:f0:61:74:e3:07:7d:1e:28:e4:0f:b9: 38:9e:3c:1c:1e:d4:c3:70:e4:07:6d:6c:c8:2b:df:7c:0a:fd: 5a:b1:d3:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohQOb4ylK/2Y0UxxLP/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUxMjIwMTIwMDM2WhcNMjUxMjIxMTIwMDM2WjAzMTEwLwYDVQQD Eyg1MjAxOTljYmU3YTdiZTdmNWZiMWY3ZmQyMzUxMTdhYjBiZGY3NDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUUyYzW8ZoHJFqTSjnCIy9n8n0dV 25ONl7MShJ08rVVz6eOBeXYOHlmFhJ66BmAuMv+TYBYlXvB6tt0xnLyKRJsBn7vD /pqGfiRhMGoKGda2IgAHAhKz/E4kz6TlX+d2bJAzuvl+b7Tl8oKG2mwPicjvkUuS S+rxOhSxIxaHnyE664EsjhrFNX6krLxjfpLqSjJhirLkJMANdIMOAT2Qlq7omuTS Lww5gJ6LLiXYqea09aJLrSNjiwZzr+l7hvGOiGowtzB/NIP8J3NCw7ZiYb2Tqh1j TfdL6gYEAFrxzA9A5yAV0Q63duMK9lm40Ly9RvGEYt8qxDTLQFmxMvzK5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIBmcvnp75/X7H3/SNRF6sL33RfMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvj75xYue POjuGg8+95PM9b1SPG65ewGqMpx8qsnRbSRwbN+fx0SPL6zHpVaa7Hz1ZuML4WkG La4c8LKciKzRixi06WcF8KWjsanNxqpG14FsdN5IKap6AC4J94p+IpSf/KhxmsFB jTjpUQ4H/T9vPFrEczy805YZzVXEGyNNedu4/UfTWXlguDXm+s4mie9lbLC2Ijwe Cgm96ShnNoczFwlCaCd7U5pFRjQvtU+1w1wgEwT9mnUaJi7DpTGRC1dAnQ7sf8d+ /eBfLNpY/Gdo3zjNh2DFxPh4wOnRuM1oX/BhdOMHfR4o5A+5OJ48HB7Uw3DkB21s yCvffAr9WrHT8g== -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:33 2025 by rpki-client