This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft File: jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json) Hash identifier: 8JDcy301ohs3sFZsebL75sVFXsssJN3y5RoBXTkzY2w= Subject key identifier: 96:35:A4:4C:1D:E9:70:62:CA:E6:16:11:94:A8:B9:C2:6F:7B:0C:D9 Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 Certificate issuer: /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Certificate serial: 019B34C5FA412E5E5E66B2557417E975EB4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft Manifest number: 0E65 Signing time: Fri 19 Dec 2025 04:02:28 +0000 Manifest this update: Fri 19 Dec 2025 04:02:28 +0000 Manifest next update: Sat 20 Dec 2025 04:02:28 +0000 Files and hashes: 1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=) 2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: qsfti5hLkfWA3tk4Zs7vwXrK3IhbRQ7pCjLPJ0sznBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:fa:41:2e:5e:5e:66:b2:55:74:17:e9:75:eb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Validity Not Before: Dec 19 04:02:28 2025 GMT Not After : Dec 20 04:02:28 2025 GMT Subject: CN=9635a44c1de97062cae6161194a8b9c26f7b0cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:7d:b4:71:a7:df:b0:b1:a6:c5:7b:18:17: e6:39:cc:9b:7c:ff:c8:47:55:90:ca:9f:fa:ae:ed: c4:c6:37:c9:bb:79:50:8c:bc:5d:3e:1a:64:26:05: f5:0e:21:24:5a:b6:ec:37:de:a0:3a:e5:6d:d3:dc: 3f:5f:ab:3a:61:88:fd:41:ab:91:84:b2:7c:89:d1: 6c:73:49:a9:da:43:42:cb:3a:e3:76:73:cb:50:21: b5:c5:36:81:45:db:84:9e:3c:ec:7f:52:57:43:93: b8:9c:73:fd:d6:87:01:c8:85:ba:28:8b:31:c6:5e: 75:f0:d1:8e:17:4b:8c:93:b8:ac:92:22:66:45:c4: 96:8e:c1:93:62:85:3a:28:50:0b:c6:9d:c2:05:cf: 75:e4:92:ac:51:18:52:f1:58:a3:fd:b7:db:d6:7d: cf:d4:2a:f9:c9:10:4d:4f:d1:bb:02:38:a6:62:f9: 69:27:cd:2d:f4:28:bf:55:b4:ab:d6:c6:1e:85:01: b9:9d:74:a5:88:32:fd:d5:8c:32:f0:2c:3e:e8:da: 5f:7e:0e:c8:8b:95:48:22:05:e4:39:e8:a5:a2:3e: 74:ca:ec:b5:76:ba:db:b1:48:56:ef:ce:ce:fb:99: 4b:a8:6a:68:c0:d9:2d:fe:ac:f7:b1:66:9b:06:b1: c6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:35:A4:4C:1D:E9:70:62:CA:E6:16:11:94:A8:B9:C2:6F:7B:0C:D9 X509v3 Authority Key Identifier: keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d6:e2:eb:15:73:a2:6e:a2:92:fe:83:cc:10:14:af:52:9d: 8b:25:3a:b1:a2:2d:39:cf:69:86:49:24:8f:35:02:ab:1d:2b: 22:b2:2a:18:7c:45:eb:03:06:f6:57:17:76:cb:54:16:0b:ac: 68:23:7c:07:ca:ea:dc:9a:ad:1e:85:92:7a:b4:d7:0b:29:d2: 8d:97:12:12:81:4e:ef:1c:bd:e8:e4:92:a3:fd:cc:1a:85:2e: 03:ca:6c:9e:8a:74:d1:31:a4:4f:70:9c:e7:0a:fc:fc:72:ba: 05:00:34:01:8b:3d:dd:69:a0:46:cb:57:b4:84:16:18:0f:4e: 9d:1d:dd:c5:d7:b6:dc:b6:08:07:c6:9c:cb:e1:d4:6c:d5:93: 67:85:65:8f:ea:f0:78:2f:60:17:49:35:e8:03:a4:fc:8b:a7: f1:ac:5e:47:11:35:52:a2:98:4c:65:5b:1f:9c:94:ba:08:5a: 99:5b:96:37:3e:1e:c0:12:33:92:01:03:fb:06:5e:34:48:e9: b2:3d:ed:ba:13:7c:ba:79:63:02:f5:e7:e6:0c:38:4a:f6:6f: 1d:a4:ae:b5:30:20:26:c0:4f:a6:07:31:68:28:f2:c5:64:df: ad:1b:c4:14:0d:bf:ec:93:1d:d5:89:9c:9b:25:ba:77:89:78: a3:44:cc:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xfpBLl5eZrJVdBfpdetOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjM3MDRkNTUwMWVkNzVhNmUyMDk2NmViZjA3YTM2NTU1 YjFhYjYwHhcNMjUxMjE5MDQwMjI4WhcNMjUxMjIwMDQwMjI4WjAzMTEwLwYDVQQD Eyg5NjM1YTQ0YzFkZTk3MDYyY2FlNjE2MTE5NGE4YjljMjZmN2IwY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspl9tHGn37CxpsV7GBfmOcybfP/I R1WQyp/6ru3ExjfJu3lQjLxdPhpkJgX1DiEkWrbsN96gOuVt09w/X6s6YYj9QauR hLJ8idFsc0mp2kNCyzrjdnPLUCG1xTaBRduEnjzsf1JXQ5O4nHP91ocByIW6KIsx xl518NGOF0uMk7iskiJmRcSWjsGTYoU6KFALxp3CBc915JKsURhS8Vij/bfb1n3P 1Cr5yRBNT9G7AjimYvlpJ80t9Ci/VbSr1sYehQG5nXSliDL91Ywy8Cw+6Npffg7I i5VIIgXkOeiloj50yuy1drrbsUhW787O+5lLqGpowNkt/qz3sWabBrHGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJY1pEwd6XBiyuYWEZSoucJvewzZMB8GA1UdIwQY MBaAFI5jcE1VAe11puIJZuvwejZVWxq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUt Yzk0N2UxNmMyYzYxLzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUtYzk0N2UxNmMyYzYx LzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltbi6xVz om6ikv6DzBAUr1KdiyU6saItOc9phkkkjzUCqx0rIrIqGHxF6wMG9lcXdstUFgus aCN8B8rq3JqtHoWSerTXCynSjZcSEoFO7xy96OSSo/3MGoUuA8psnop00TGkT3Cc 5wr8/HK6BQA0AYs93WmgRstXtIQWGA9OnR3dxde23LYIB8acy+HUbNWTZ4Vlj+rw eC9gF0k16AOk/Iun8axeRxE1UqKYTGVbH5yUughamVuWNz4ewBIzkgED+wZeNEjp sj3tuhN8unljAvXn5gw4SvZvHaSutTAgJsBPpgcxaCjyxWTfrRvEFA2/7JMd1Ymc myW6d4l4o0TM9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 08:20:56 2025 by rpki-client