This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: 4ZeLHOrKgqWh/dGFxPAnC5P+NvcTh+HC+//C8XzJWbw= Subject key identifier: B8:31:CF:7D:7B:DD:FC:5B:CE:EB:6F:2F:56:68:BF:02:7C:3D:D4:3B Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019B5C770D9906C57E851574FA95CBF8F1DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 046E Signing time: Fri 26 Dec 2025 21:01:04 +0000 Manifest this update: Fri 26 Dec 2025 21:01:04 +0000 Manifest next update: Sat 27 Dec 2025 21:01:04 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: rXHrzomTSh5YClmqGlMrtGFSQOA6M93mWysFarnlb0I=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:77:0d:99:06:c5:7e:85:15:74:fa:95:cb:f8:f1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Dec 26 21:01:04 2025 GMT Not After : Dec 27 21:01:04 2025 GMT Subject: CN=b831cf7d7bddfc5bceeb6f2f5668bf027c3dd43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:80:c9:6b:fe:9d:5c:f4:a4:5f:af:78:9a:cb: 84:4f:5b:c0:32:14:d4:5a:56:bf:0c:3f:e3:23:54: be:54:c8:4d:6b:c8:2a:90:45:62:a1:2c:76:46:83: 47:3f:d0:05:05:fd:04:e6:4e:d6:32:90:b1:7e:d4: 82:af:8f:0a:d2:b9:5a:45:71:97:37:0a:7f:71:b8: c1:59:66:4e:34:6f:b8:c8:42:63:31:ab:5d:b2:10: 42:01:c3:92:71:06:08:b9:87:9e:af:e4:bf:54:67: 40:42:d8:8a:46:4d:8d:62:ea:74:f2:3d:5f:79:0f: 52:5f:df:90:fb:16:31:ff:7a:41:ae:9d:4b:58:45: 3f:6a:5b:64:2e:22:7d:23:a8:9f:23:76:fc:41:40: 9b:1a:cc:ff:bd:83:b7:9e:bf:58:88:fb:24:31:7b: 0e:a7:0e:63:9d:77:8e:39:0b:94:10:ef:53:f4:e6: d2:fe:30:04:d6:1b:a2:fc:49:fc:9c:e2:be:5c:83: c9:85:96:34:20:6d:03:5c:fb:07:63:ef:8f:db:5f: e5:58:25:10:e2:7e:f6:b0:ad:fe:c8:e4:13:88:56: be:81:7f:d7:25:01:b4:2a:e6:10:e3:74:4f:c3:3e: 9a:82:ea:fa:9b:36:1c:e2:ef:2f:a2:7c:3c:7e:01: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:31:CF:7D:7B:DD:FC:5B:CE:EB:6F:2F:56:68:BF:02:7C:3D:D4:3B X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d6:10:75:ef:56:73:9f:fb:13:83:18:b8:34:75:1a:67:95: ac:79:8d:4f:ea:11:aa:26:a3:30:fa:41:ea:0a:7a:c2:16:63: 9e:e5:3d:80:dc:7c:9f:8e:12:77:cb:a1:e0:c8:53:80:d5:e9: 69:28:04:12:35:71:1b:29:9c:f3:c7:01:02:17:49:54:88:35: 98:a6:8d:81:53:47:b3:8d:1f:21:6f:50:9c:a0:51:4c:d3:06: be:42:03:6b:99:89:e8:a9:97:ec:53:25:41:11:29:c2:20:69: 66:d5:57:90:3a:b4:d8:81:58:87:29:08:01:d7:ac:b3:01:5f: 51:91:82:1b:cf:75:9e:90:69:1f:1a:d1:93:e8:93:dc:83:ad: 71:4e:89:7c:fe:58:6f:e0:d6:61:e5:1b:c3:68:19:3d:16:96: 8f:87:1f:4a:c7:68:de:91:72:b0:75:9e:8e:91:61:c1:ba:e1: a6:70:65:f5:98:90:4e:06:52:bb:2f:da:4c:56:83:1e:e1:c6: 80:c5:e0:26:12:97:5b:4c:8d:79:2b:98:0b:ac:3d:83:ef:e7: 88:bd:f2:91:93:d1:72:e9:a2:bd:0a:5b:61:4d:22:5f:5c:c9: 3c:2c:0a:c6:3e:11:34:ad:f1:0d:f1:d2:e1:5a:41:f1:b8:28: bd:75:8e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcdw2ZBsV+hRV0+pXL+PHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUxMjI2MjEwMTA0WhcNMjUxMjI3MjEwMTA0WjAzMTEwLwYDVQQD EyhiODMxY2Y3ZDdiZGRmYzViY2VlYjZmMmY1NjY4YmYwMjdjM2RkNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYDJa/6dXPSkX694msuET1vAMhTU Wla/DD/jI1S+VMhNa8gqkEVioSx2RoNHP9AFBf0E5k7WMpCxftSCr48K0rlaRXGX Nwp/cbjBWWZONG+4yEJjMatdshBCAcOScQYIuYeer+S/VGdAQtiKRk2NYup08j1f eQ9SX9+Q+xYx/3pBrp1LWEU/altkLiJ9I6ifI3b8QUCbGsz/vYO3nr9YiPskMXsO pw5jnXeOOQuUEO9T9ObS/jAE1hui/En8nOK+XIPJhZY0IG0DXPsHY++P21/lWCUQ 4n72sK3+yOQTiFa+gX/XJQG0KuYQ43RPwz6agur6mzYc4u8vonw8fgEwXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgxz3173fxbzutvL1ZovwJ8PdQ7MB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdYQde9W c5/7E4MYuDR1GmeVrHmNT+oRqiajMPpB6gp6whZjnuU9gNx8n44Sd8uh4MhTgNXp aSgEEjVxGymc88cBAhdJVIg1mKaNgVNHs40fIW9QnKBRTNMGvkIDa5mJ6KmX7FMl QREpwiBpZtVXkDq02IFYhykIAdesswFfUZGCG891npBpHxrRk+iT3IOtcU6JfP5Y b+DWYeUbw2gZPRaWj4cfSsdo3pFysHWejpFhwbrhpnBl9ZiQTgZSuy/aTFaDHuHG gMXgJhKXW0yNeSuYC6w9g+/niL3ykZPRcumivQpbYU0iX1zJPCwKxj4RNK3xDfHS 4VpB8bgovXWOfg== -----END CERTIFICATE-----Generated at Sat Dec 27 00:43:35 2025 by rpki-client