This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft File: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json) Hash identifier: eLvGpT+VH9sa3jp+JiMoRuMuuhG9HmW1VRBb9zZ14Rg= Subject key identifier: 6D:95:99:45:30:ED:6E:B5:5B:1B:D9:38:6F:6A:10:20:F2:8E:4F:9D Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F Certificate issuer: /CN=27032f79023052100c4393c9e690f97d7896926f Certificate serial: 019B424A9BA692CDD85A462457BA1ADE095D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft Manifest number: 1782 Signing time: Sun 21 Dec 2025 19:02:24 +0000 Manifest this update: Sun 21 Dec 2025 19:02:24 +0000 Manifest next update: Mon 22 Dec 2025 19:02:24 +0000 Files and hashes: 1: 0CjJkWjNBNTUeoDrNQPuYSnwMLQ.roa (hash: rMAMLQ6zW01Wu80wVa2CdSK+UNAIR1vD+Et52F6+MjE=) 2: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: AO+t0Pe//3eELDErSkvypKrHKI6CNdQVKeVD5nfo+/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:9b:a6:92:cd:d8:5a:46:24:57:ba:1a:de:09:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27032f79023052100c4393c9e690f97d7896926f Validity Not Before: Dec 21 19:02:24 2025 GMT Not After : Dec 22 19:02:24 2025 GMT Subject: CN=6d95994530ed6eb55b1bd9386f6a1020f28e4f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:82:a8:b3:d9:1b:62:cc:ab:bd:84:9c:e4: 8d:62:a5:50:4b:7b:54:d2:c7:d1:e6:01:20:7e:3d: 7a:7d:65:a7:fd:91:83:53:c8:5a:a8:5d:4c:9e:8b: bd:24:31:35:03:89:29:05:86:35:f8:6d:99:0e:8f: 9b:73:c3:b1:c9:7f:7e:05:99:af:5d:2a:e4:71:e8: b6:af:17:53:b6:c0:30:ea:a0:ae:d7:1b:4d:43:10: ec:3d:55:91:86:88:a4:bf:1d:4c:e8:93:9d:c8:91: 4f:39:84:dc:53:7a:8d:b8:26:3f:7d:fa:e8:fc:62: f4:2b:9b:4d:46:2f:5d:c7:4c:31:bd:1b:59:51:4b: f4:b7:64:7a:89:2f:2f:3b:4c:82:c8:0e:d1:ce:46: b9:e5:0c:49:80:9e:46:66:df:ea:b6:dd:6c:bf:83: d3:ec:13:00:38:61:6c:33:5f:97:99:95:4a:d7:8a: db:db:9a:d9:3b:ee:43:47:61:99:28:b6:1d:25:b6: 29:ba:1f:1e:38:74:77:d2:fc:41:90:71:bf:97:78: 9b:dd:9e:76:8c:42:32:2d:af:4f:31:10:98:10:28: 5b:5b:28:bf:0c:43:19:c3:ab:ee:b1:2e:8a:04:01: ff:27:fa:7f:48:d9:d5:0a:91:47:bd:d5:87:40:5f: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:95:99:45:30:ED:6E:B5:5B:1B:D9:38:6F:6A:10:20:F2:8E:4F:9D X509v3 Authority Key Identifier: keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:bc:91:b0:36:80:a6:5a:21:52:3a:1f:e2:97:d0:bb:ee:78: 9c:ce:23:c8:dd:d1:4c:17:de:5e:fb:22:af:46:e6:93:15:c7: 43:d8:f4:dc:f5:e6:d3:33:69:4c:c1:2c:04:2c:3c:86:57:8b: e0:92:20:1d:c6:ca:a1:74:75:ed:c6:84:81:61:61:d8:61:5b: d7:55:b8:39:ac:f9:08:ec:a7:0a:dc:9a:04:38:b2:cd:e0:6c: 1c:cb:d6:63:7b:66:25:da:d5:79:0b:17:86:71:44:63:1a:59: db:c0:ec:22:a1:2f:32:09:9a:41:02:a9:79:3e:21:40:78:d6: 15:a9:fa:17:9c:fa:8f:61:2c:01:3e:b6:db:fa:59:42:81:93: 9a:09:0c:24:3e:8c:c7:74:e1:4d:2c:65:ef:04:24:6a:78:c2: f6:5a:d6:4d:1e:4e:c2:60:0e:72:61:b6:7b:86:f0:ed:ad:c1: 4e:6f:0a:8f:92:8d:b0:a1:ed:89:2c:c7:49:72:25:e0:cc:de: 6e:81:fa:5c:6e:c5:4e:9c:51:1b:1a:59:34:47:6b:b6:5b:2a: c3:a8:a0:10:c4:15:89:63:a3:a6:e9:f5:7b:67:c4:ba:71:80: 1d:21:fb:58:b8:73:81:c4:bc:a8:fb:be:1d:8f:1d:d6:cc:ec: e0:89:04:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSpumks3YWkYkV7oa3gldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDMyZjc5MDIzMDUyMTAwYzQzOTNjOWU2OTBmOTdkNzg5 NjkyNmYwHhcNMjUxMjIxMTkwMjI0WhcNMjUxMjIyMTkwMjI0WjAzMTEwLwYDVQQD Eyg2ZDk1OTk0NTMwZWQ2ZWI1NWIxYmQ5Mzg2ZjZhMTAyMGYyOGU0ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx6CqLPZG2LMq72EnOSNYqVQS3tU 0sfR5gEgfj16fWWn/ZGDU8haqF1Mnou9JDE1A4kpBYY1+G2ZDo+bc8OxyX9+BZmv XSrkcei2rxdTtsAw6qCu1xtNQxDsPVWRhoikvx1M6JOdyJFPOYTcU3qNuCY/ffro /GL0K5tNRi9dx0wxvRtZUUv0t2R6iS8vO0yCyA7Rzka55QxJgJ5GZt/qtt1sv4PT 7BMAOGFsM1+XmZVK14rb25rZO+5DR2GZKLYdJbYpuh8eOHR30vxBkHG/l3ib3Z52 jEIyLa9PMRCYEChbWyi/DEMZw6vusS6KBAH/J/p/SNnVCpFHvdWHQF9C0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2VmUUw7W61WxvZOG9qECDyjk+dMB8GA1UdIwQY MBaAFCcDL3kCMFIQDEOTyeaQ+X14lpJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNGZmNTItNjRiYS00MjBiLWJmZjQt ZjA3ZGQyNjA2MjY3LzEvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mNGZmNTItNjRiYS00MjBiLWJmZjQtZjA3ZGQyNjA2MjY3 LzEvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLyRsDaA plohUjof4pfQu+54nM4jyN3RTBfeXvsir0bmkxXHQ9j03PXm0zNpTMEsBCw8hleL 4JIgHcbKoXR17caEgWFh2GFb11W4Oaz5COynCtyaBDiyzeBsHMvWY3tmJdrVeQsX hnFEYxpZ28DsIqEvMgmaQQKpeT4hQHjWFan6F5z6j2EsAT622/pZQoGTmgkMJD6M x3ThTSxl7wQkanjC9lrWTR5OwmAOcmG2e4bw7a3BTm8Kj5KNsKHtiSzHSXIl4Mze boH6XG7FTpxRGxpZNEdrtlsqw6igEMQViWOjpun1e2fEunGAHSH7WLhzgcS8qPu+ HY8d1szs4IkESA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:59:48 2025 by rpki-client