This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json) Hash identifier: PBRxP9/Lw1UY12wrMInh4UFBRB/hg4Q7e9urPXz6Zjk= Subject key identifier: 0A:E2:A0:72:1B:26:0B:A4:82:A2:C5:78:43:51:06:F3:D6:99:27:23 Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b Certificate serial: 019B38A239C8F3F8DBCC7CBC24CDB123B439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft Manifest number: 0B94 Signing time: Fri 19 Dec 2025 22:01:54 +0000 Manifest this update: Fri 19 Dec 2025 22:01:54 +0000 Manifest next update: Sat 20 Dec 2025 22:01:54 +0000 Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=) 2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: SK3s5HKVOaxDzmncOVAA0h5T0Zg1e0Y+MTTJlECtKSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:39:c8:f3:f8:db:cc:7c:bc:24:cd:b1:23:b4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b Validity Not Before: Dec 19 22:01:54 2025 GMT Not After : Dec 20 22:01:54 2025 GMT Subject: CN=0ae2a0721b260ba482a2c578435106f3d6992723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:db:32:4f:9c:d5:08:6d:39:c5:32:4b:e8: c7:4d:44:d0:28:23:33:0b:21:f3:44:db:bf:f4:bc: ba:00:e8:e1:8a:ee:6b:1b:d1:3f:9e:db:82:bd:25: 40:cc:c6:90:79:46:f0:0b:fc:3d:c8:88:74:1e:95: 3b:ce:ca:76:e4:8c:7d:51:8d:0f:57:39:9d:70:f7: 98:7a:af:2d:1a:17:45:1c:6e:e7:db:da:b9:93:fb: ad:b7:70:4e:19:02:be:b4:3b:b2:07:72:d5:74:1e: 6e:68:31:74:f3:fb:4d:76:5a:f4:3a:d3:79:7d:d2: 62:14:7f:fd:be:58:a0:2a:21:66:cd:d6:e0:a3:5b: 49:bc:63:3a:9e:07:37:44:3f:57:5f:52:b7:f6:f7: 9f:f2:ad:81:a5:fc:f1:a8:5d:c5:49:af:13:60:52: 61:10:d0:ee:22:c2:c0:d2:78:38:03:4b:7c:d9:a0: c9:17:00:ee:ec:65:43:ad:bd:df:bb:0e:be:27:45: 99:ca:f8:7f:46:95:16:40:6a:8b:4c:c2:15:24:15: 85:27:4e:d6:32:06:dc:f9:f8:df:00:be:0a:87:7d: e4:ce:0c:f3:cc:12:52:b2:0a:47:50:df:5b:f2:9f: da:8a:99:c9:3a:37:b5:28:20:db:42:b2:af:0a:06: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E2:A0:72:1B:26:0B:A4:82:A2:C5:78:43:51:06:F3:D6:99:27:23 X509v3 Authority Key Identifier: keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ab:73:b0:63:db:87:1f:cc:10:de:b3:95:f1:b3:68:f1:74: 58:c5:97:64:0a:df:ae:e6:3a:ad:8e:62:fe:39:f4:af:89:7e: 31:7d:4c:55:d1:8d:0f:88:36:f9:ad:44:00:cb:87:7b:2f:6b: a6:57:4d:23:9e:7a:90:5c:d9:ec:fd:8e:ef:db:33:5e:a6:4e: d5:6b:a8:1a:e0:1d:ef:f2:f7:15:8b:46:18:c7:90:12:9e:b8: 54:47:d7:2a:c5:6d:37:ab:0b:8b:36:b1:b0:a6:dc:94:a6:a6: 90:48:f1:46:11:cf:ff:b3:d5:cb:8b:19:fb:3f:3e:50:ec:26: 17:d1:bf:8e:cc:5a:c4:8d:8c:fd:a8:19:16:e1:25:dc:70:54: 14:9c:16:d0:0a:3a:0b:bb:f0:e6:3d:6a:08:85:a9:45:ef:9a: 10:f5:d5:71:ef:a9:fa:02:fd:f6:ef:d5:40:01:ca:23:89:de: db:aa:35:55:dc:25:e1:76:6d:7b:6a:7b:09:8f:6c:ac:2c:05: d1:84:eb:5f:9e:96:54:ee:1a:56:e8:0a:69:6c:1f:86:09:e1: f1:c1:ef:94:ee:85:9a:e6:c4:c8:46:ea:e1:70:6d:72:5f:a6: 44:0d:da:00:d5:3b:6a:62:ab:f3:52:a3:8b:dc:81:93:3e:a8: 44:c4:1e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ojnI8/jbzHy8JM2xI7Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZjAwN2U0ZmJkNWE2MjJhYTg1M2M0MjVhMDEwZWU3ODlm NzExNWIwHhcNMjUxMjE5MjIwMTU0WhcNMjUxMjIwMjIwMTU0WjAzMTEwLwYDVQQD EygwYWUyYTA3MjFiMjYwYmE0ODJhMmM1Nzg0MzUxMDZmM2Q2OTkyNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBbbMk+c1QhtOcUyS+jHTUTQKCMz CyHzRNu/9Ly6AOjhiu5rG9E/ntuCvSVAzMaQeUbwC/w9yIh0HpU7zsp25Ix9UY0P VzmdcPeYeq8tGhdFHG7n29q5k/utt3BOGQK+tDuyB3LVdB5uaDF08/tNdlr0OtN5 fdJiFH/9vligKiFmzdbgo1tJvGM6ngc3RD9XX1K39vef8q2BpfzxqF3FSa8TYFJh ENDuIsLA0ng4A0t82aDJFwDu7GVDrb3fuw6+J0WZyvh/RpUWQGqLTMIVJBWFJ07W Mgbc+fjfAL4Kh33kzgzzzBJSsgpHUN9b8p/aipnJOje1KCDbQrKvCga7KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArioHIbJgukgqLFeENRBvPWmScjMB8GA1UdIwQY MBaAFCXwB+T71aYiqoU8QloBDueJ9xFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEt ZWM2OGUzNWE3MWVmLzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEtZWM2OGUzNWE3MWVm LzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKtzsGPb hx/MEN6zlfGzaPF0WMWXZArfruY6rY5i/jn0r4l+MX1MVdGND4g2+a1EAMuHey9r pldNI556kFzZ7P2O79szXqZO1WuoGuAd7/L3FYtGGMeQEp64VEfXKsVtN6sLizax sKbclKamkEjxRhHP/7PVy4sZ+z8+UOwmF9G/jsxaxI2M/agZFuEl3HBUFJwW0Ao6 C7vw5j1qCIWpRe+aEPXVce+p+gL99u/VQAHKI4ne26o1Vdwl4XZte2p7CY9srCwF 0YTrX56WVO4aVugKaWwfhgnh8cHvlO6FmubEyEbq4XBtcl+mRA3aANU7amKr81Kj i9yBkz6oRMQe5g== -----END CERTIFICATE-----Generated at Sat Dec 20 06:53:35 2025 by rpki-client