This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json) Hash identifier: KA3D6LZA/XyoNiH9d8AHvPyUar6DON7PLS3emrMFf4I= Subject key identifier: 01:92:CD:73:DC:EE:2C:4D:2C:17:02:5C:4F:8F:1C:4E:A3:89:BB:8B Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b Certificate serial: 019B3A90F66E7B4EC7FF21BDEE22039CDAD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft Manifest number: 0B95 Signing time: Sat 20 Dec 2025 07:02:17 +0000 Manifest this update: Sat 20 Dec 2025 07:02:17 +0000 Manifest next update: Sun 21 Dec 2025 07:02:17 +0000 Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=) 2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: Nb6mTDBuNJqtlKiCG1b8826DpbskjbHLvrUtbtcXe78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:f6:6e:7b:4e:c7:ff:21:bd:ee:22:03:9c:da:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b Validity Not Before: Dec 20 07:02:17 2025 GMT Not After : Dec 21 07:02:17 2025 GMT Subject: CN=0192cd73dcee2c4d2c17025c4f8f1c4ea389bb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6b:23:94:46:f5:33:64:11:29:d1:bb:7d:3e: fe:c8:e5:90:41:ee:f9:f4:f3:7a:3b:19:3f:5b:35: 0e:ea:b7:c8:91:02:54:4f:4a:74:34:8b:33:43:5c: 9b:95:64:80:7a:cf:15:75:f5:4b:3c:04:11:bb:59: 82:64:19:5a:bf:66:c3:2a:ec:3a:3a:fb:b0:f6:0b: fb:a1:c1:ac:df:5f:46:c9:b5:52:f8:17:d4:ec:2c: 44:00:3f:95:6e:80:d9:3f:45:7c:4d:80:47:c2:da: dd:1c:4f:80:86:89:a4:30:bc:7c:7d:8d:4b:56:71: 30:e7:ff:d5:1b:87:f9:d2:03:d5:8b:49:fa:73:9b: 0c:49:48:21:8b:9e:72:1d:08:36:97:74:b3:ef:e0: 97:2e:a1:fe:8e:74:07:29:ce:c8:e5:af:ba:67:0e: f3:de:1a:de:94:44:ac:12:a5:d0:c2:a5:8e:1b:9b: 2a:e5:9a:dd:ee:d0:10:36:6a:2b:46:05:64:aa:a9: e3:f1:cf:d9:eb:7c:e8:77:0b:67:f6:02:74:97:7d: b5:a9:0f:e8:62:7a:ec:10:5f:ad:d9:a4:33:36:fc: 98:f2:b6:bf:7f:aa:50:78:df:32:33:bb:24:c6:60: 84:79:d4:d1:2e:9a:b1:6e:f0:53:9f:c7:e7:a8:13: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:92:CD:73:DC:EE:2C:4D:2C:17:02:5C:4F:8F:1C:4E:A3:89:BB:8B X509v3 Authority Key Identifier: keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b3:0e:83:0d:28:53:f4:3d:f9:7e:94:a2:48:7a:c9:4d:03: e4:d2:66:9e:33:30:0a:25:02:75:d1:43:37:6f:85:f2:0a:43: 68:d2:48:d2:37:12:07:28:42:fa:95:4e:5c:19:c6:29:af:ab: e2:aa:a6:ec:c4:c9:b8:d7:fd:24:78:ca:22:e9:63:9d:79:0f: fb:3f:0f:7f:c1:58:7e:78:2f:08:af:7d:af:a7:74:e1:51:ab: b9:ea:6b:ba:39:b4:8c:91:1a:e8:0f:4a:51:a6:9a:4b:bb:ba: 56:c8:67:aa:f0:37:56:70:bb:dd:f4:a7:b4:5f:75:fd:1d:a5: a8:fc:92:1c:f7:3f:7d:d8:6f:25:2d:81:c9:a5:71:59:80:22: b5:92:48:08:03:47:3f:87:71:16:b4:f6:27:d0:bf:7d:c8:5a: c3:2e:e5:42:f3:11:12:5d:e4:78:ec:7c:82:3c:84:84:2d:fa: 3e:97:e3:a6:f6:3b:cc:c1:9d:ab:bd:a2:7c:2e:4e:fb:e8:53: c0:d2:26:c2:29:a7:25:55:76:f6:3d:fc:cb:c6:64:f4:19:20: 3c:22:90:87:bf:e6:2e:96:d0:4a:d9:f2:ae:3f:ae:8b:04:55: 08:2f:91:56:18:8b:67:39:22:7c:5b:35:4c:2d:d6:3a:36:d5: 60:b7:d2:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kPZue07H/yG97iIDnNrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZjAwN2U0ZmJkNWE2MjJhYTg1M2M0MjVhMDEwZWU3ODlm NzExNWIwHhcNMjUxMjIwMDcwMjE3WhcNMjUxMjIxMDcwMjE3WjAzMTEwLwYDVQQD EygwMTkyY2Q3M2RjZWUyYzRkMmMxNzAyNWM0ZjhmMWM0ZWEzODliYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52sjlEb1M2QRKdG7fT7+yOWQQe75 9PN6Oxk/WzUO6rfIkQJUT0p0NIszQ1yblWSAes8VdfVLPAQRu1mCZBlav2bDKuw6 Ovuw9gv7ocGs319GybVS+BfU7CxEAD+VboDZP0V8TYBHwtrdHE+AhomkMLx8fY1L VnEw5//VG4f50gPVi0n6c5sMSUghi55yHQg2l3Sz7+CXLqH+jnQHKc7I5a+6Zw7z 3hrelESsEqXQwqWOG5sq5Zrd7tAQNmorRgVkqqnj8c/Z63zodwtn9gJ0l321qQ/o YnrsEF+t2aQzNvyY8ra/f6pQeN8yM7skxmCEedTRLpqxbvBTn8fnqBMZqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGSzXPc7ixNLBcCXE+PHE6jibuLMB8GA1UdIwQY MBaAFCXwB+T71aYiqoU8QloBDueJ9xFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEt ZWM2OGUzNWE3MWVmLzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEtZWM2OGUzNWE3MWVm LzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbMOgw0o U/Q9+X6Uokh6yU0D5NJmnjMwCiUCddFDN2+F8gpDaNJI0jcSByhC+pVOXBnGKa+r 4qqm7MTJuNf9JHjKIuljnXkP+z8Pf8FYfngvCK99r6d04VGrueprujm0jJEa6A9K UaaaS7u6VshnqvA3VnC73fSntF91/R2lqPySHPc/fdhvJS2ByaVxWYAitZJICANH P4dxFrT2J9C/fchawy7lQvMREl3keOx8gjyEhC36PpfjpvY7zMGdq72ifC5O++hT wNImwimnJVV29j38y8Zk9BkgPCKQh7/mLpbQStnyrj+uiwRVCC+RVhiLZzkifFs1 TC3WOjbVYLfSjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:28 2025 by rpki-client