This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft File: jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json) Hash identifier: Eb379CHhwxx1+1+/je29UCGIQS64CezowSSF11hbfTU= Subject key identifier: 7D:FD:6A:76:5D:0D:4F:1C:F4:0F:4B:12:58:E4:DC:CA:FA:CC:A4:77 Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 Certificate issuer: /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Certificate serial: 019B2EFABCCAA133462890CFE7C6C594DCCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft Manifest number: 0E62 Signing time: Thu 18 Dec 2025 01:02:22 +0000 Manifest this update: Thu 18 Dec 2025 01:02:22 +0000 Manifest next update: Fri 19 Dec 2025 01:02:22 +0000 Files and hashes: 1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=) 2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: ncVxHDxtzLwT1KN6HgvoDimt/43OGLIedebidiMKUZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:bc:ca:a1:33:46:28:90:cf:e7:c6:c5:94:dc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Validity Not Before: Dec 18 01:02:22 2025 GMT Not After : Dec 19 01:02:22 2025 GMT Subject: CN=7dfd6a765d0d4f1cf40f4b1258e4dccafacca477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:56:96:49:fa:f5:61:83:34:1f:1e:a2:5b:85: 37:f9:64:1f:9c:59:02:f1:40:ef:fd:6d:a8:78:c7: 4e:d7:64:62:11:3b:31:b8:05:65:af:be:98:24:a5: ec:a5:f8:fa:a6:55:8e:a5:38:85:fc:2b:34:e9:e7: 9b:ad:13:d9:02:84:5c:cc:32:0b:cf:c6:18:d7:5e: f4:96:11:32:dc:91:fa:74:aa:03:1f:90:f4:a4:87: 56:5b:77:ba:88:99:6b:3d:d9:1c:0d:a3:d1:5a:ca: b4:a6:ac:e4:61:bb:5d:65:db:68:7f:9e:72:a8:f2: b0:3e:da:3a:76:8b:8f:07:21:8b:06:cf:25:ab:36: 60:71:e2:94:1d:c8:56:dc:e4:e1:7a:47:6f:8e:cd: 6c:f4:00:0e:b6:61:66:4b:53:7f:cd:c8:74:51:4a: a0:0d:3e:fc:51:85:d9:55:79:4a:f7:79:a9:1c:79: 31:c1:87:24:9e:be:55:75:6e:82:b0:ad:1d:34:e0: 6b:42:f9:83:79:9b:e6:00:ce:58:9e:95:f5:d8:59: 51:2c:29:16:af:52:b0:54:cb:b9:d9:2e:35:21:58: 83:66:2b:3c:ae:fc:4c:4c:bd:58:81:29:9d:34:90: 0e:12:b3:c8:da:51:38:6a:9d:13:fe:75:81:d8:10: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FD:6A:76:5D:0D:4F:1C:F4:0F:4B:12:58:E4:DC:CA:FA:CC:A4:77 X509v3 Authority Key Identifier: keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bd:2b:4f:e9:f8:60:de:aa:0e:56:93:53:48:81:e1:8a:b3: 42:81:18:98:20:37:2e:aa:00:cc:c7:2e:b2:f6:3b:b4:ba:94: c9:cb:8b:38:64:a0:d4:8a:f4:03:16:33:82:aa:65:28:79:fb: d1:74:15:20:6f:92:d6:6f:d3:26:c3:87:dd:17:99:61:e0:9c: ca:71:34:e3:a0:35:82:00:23:c4:84:7e:14:ee:73:53:57:e1: 83:f3:4b:48:d9:e6:36:9f:71:d7:d6:60:b2:13:90:6b:c7:f6: a7:c5:b6:9f:a7:57:d7:19:47:e7:a9:2d:89:d0:29:86:2d:55: 05:7c:f0:e1:4e:cc:cb:3d:01:fb:b6:d2:66:ba:a0:5b:6a:c3: 00:ea:cd:67:33:95:be:0d:7d:58:5a:70:62:96:09:34:0e:e4: fe:5b:02:44:61:2a:70:1e:e5:e2:43:af:71:65:14:e6:2f:c8: fc:38:7f:0e:a0:29:53:73:43:d6:b3:1f:44:a3:e8:fc:d0:08: 6d:af:e2:fb:0e:11:bd:b5:50:1f:33:e9:b7:57:dc:c1:d4:04: 8d:c8:a6:bd:48:9f:fc:9e:a8:86:38:99:ac:03:35:4a:ad:23: 52:96:74:80:5a:7c:56:ac:5a:a4:ac:9f:b9:80:fe:9f:54:7d: a2:b7:5d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+rzKoTNGKJDP58bFlNzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjM3MDRkNTUwMWVkNzVhNmUyMDk2NmViZjA3YTM2NTU1 YjFhYjYwHhcNMjUxMjE4MDEwMjIyWhcNMjUxMjE5MDEwMjIyWjAzMTEwLwYDVQQD Eyg3ZGZkNmE3NjVkMGQ0ZjFjZjQwZjRiMTI1OGU0ZGNjYWZhY2NhNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11aWSfr1YYM0Hx6iW4U3+WQfnFkC 8UDv/W2oeMdO12RiETsxuAVlr76YJKXspfj6plWOpTiF/Cs06eebrRPZAoRczDIL z8YY1170lhEy3JH6dKoDH5D0pIdWW3e6iJlrPdkcDaPRWsq0pqzkYbtdZdtof55y qPKwPto6douPByGLBs8lqzZgceKUHchW3OThekdvjs1s9AAOtmFmS1N/zch0UUqg DT78UYXZVXlK93mpHHkxwYcknr5VdW6CsK0dNOBrQvmDeZvmAM5YnpX12FlRLCkW r1KwVMu52S41IViDZis8rvxMTL1YgSmdNJAOErPI2lE4ap0T/nWB2BBYxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH39anZdDU8c9A9LEljk3Mr6zKR3MB8GA1UdIwQY MBaAFI5jcE1VAe11puIJZuvwejZVWxq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUt Yzk0N2UxNmMyYzYxLzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUtYzk0N2UxNmMyYzYx LzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN70rT+n4 YN6qDlaTU0iB4YqzQoEYmCA3LqoAzMcusvY7tLqUycuLOGSg1Ir0AxYzgqplKHn7 0XQVIG+S1m/TJsOH3ReZYeCcynE046A1ggAjxIR+FO5zU1fhg/NLSNnmNp9x19Zg shOQa8f2p8W2n6dX1xlH56ktidAphi1VBXzw4U7Myz0B+7bSZrqgW2rDAOrNZzOV vg19WFpwYpYJNA7k/lsCRGEqcB7l4kOvcWUU5i/I/Dh/DqApU3ND1rMfRKPo/NAI ba/i+w4RvbVQHzPpt1fcwdQEjcimvUif/J6ohjiZrAM1Sq0jUpZ0gFp8VqxapKyf uYD+n1R9ordd5Q== -----END CERTIFICATE-----Generated at Thu Dec 18 06:56:32 2025 by rpki-client