This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json) Hash identifier: zbiDmQZXvdlvGAaKFbEfiTtunw5VSv1xUUjRObeFXjA= Subject key identifier: 2E:3F:06:A7:0F:AE:76:83:0A:5C:1A:57:59:FF:2C:56:94:6B:C3:D0 Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f Certificate serial: 019B4E16B514F5EC1E4DE89D61563DF2A9F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 02:01:09 +0000 Manifest this update: Wed 24 Dec 2025 02:01:09 +0000 Manifest next update: Thu 25 Dec 2025 02:01:09 +0000 Files and hashes: 1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=) 2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: qTHJauyh6n5fLC8ikvCPwihfmOwKkCKPAdyHiX7QH3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:b5:14:f5:ec:1e:4d:e8:9d:61:56:3d:f2:a9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f Validity Not Before: Dec 24 02:01:09 2025 GMT Not After : Dec 25 02:01:09 2025 GMT Subject: CN=2e3f06a70fae76830a5c1a5759ff2c56946bc3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:2e:67:cc:e4:94:51:19:4d:b4:c7:26:81: 2a:8b:c8:cd:0c:51:c2:be:53:6c:20:90:50:13:d7: 94:bf:81:03:70:96:ce:a8:18:30:73:09:4f:a1:10: 27:27:8b:9c:81:5a:b5:0f:d3:c4:64:3d:d9:73:18: 4c:77:36:b1:fb:c8:fe:b5:86:3b:13:7d:f5:76:db: 9d:01:2a:33:e1:62:04:2b:95:f5:09:2a:77:34:7b: b9:91:92:06:03:ef:d1:5c:d5:b5:b5:73:38:f4:c0: 9d:90:4c:1e:d5:40:5c:c3:bb:19:4f:cd:8e:ee:75: 31:6d:80:5c:00:49:b3:0a:b4:06:e3:b9:31:9f:48: 45:08:7e:77:d2:44:77:34:e3:1d:6c:79:3b:d8:16: 47:64:89:f9:f3:57:aa:c6:17:c2:86:6d:fc:b7:32: 25:56:bf:6e:0d:99:26:59:21:bd:4a:93:76:b0:e5: 18:c9:6e:2b:52:24:b7:3e:c3:c8:d7:47:27:2f:91: fa:b3:9d:b3:98:72:86:b0:4f:a1:75:17:6d:99:87: 94:aa:48:e5:17:e8:80:05:94:a9:c2:c9:89:15:e8: e6:1e:bd:86:9f:21:7e:9b:fd:d7:af:58:b8:32:fe: be:29:99:c2:04:ad:58:df:f5:76:1b:0d:01:33:77: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3F:06:A7:0F:AE:76:83:0A:5C:1A:57:59:FF:2C:56:94:6B:C3:D0 X509v3 Authority Key Identifier: keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b0:40:f0:19:31:15:9a:7b:37:85:54:c2:42:32:bd:5d:f9: cf:5c:fc:47:a8:a0:13:5a:c0:49:aa:fc:18:2f:82:bf:93:3f: e3:c7:3c:ab:93:48:13:54:ae:fb:15:66:08:00:ed:ab:15:ed: 70:71:0c:da:6e:82:d9:41:80:70:5c:f8:19:46:2f:ad:37:8e: 72:1d:8a:75:9d:e8:e0:72:2a:d5:56:17:d0:a6:2b:50:43:00: cb:69:dc:c4:7b:02:c4:be:cd:06:20:ca:6e:b6:81:c3:27:01: c7:59:01:5b:ae:e8:2c:37:d4:a7:82:70:1a:66:46:1c:30:3c: 3e:fd:04:3b:3c:8d:9e:97:7c:44:4e:bf:10:43:4d:b2:eb:58: 16:89:93:46:92:59:6f:35:64:fa:93:85:d7:ac:e2:10:af:fb: a3:1b:e6:cd:0f:34:a4:e6:38:43:fa:c1:27:29:6a:66:2e:6b: aa:35:dd:04:4c:b9:12:bf:0a:a6:50:86:7d:2c:17:3f:2f:49: ae:74:df:70:0e:d1:c6:9b:ad:ab:66:8e:8a:ed:78:13:bd:7b: 36:9f:f5:2a:74:c0:24:b5:93:37:2d:6d:d6:b7:90:9d:4a:9c: 0b:d4:d7:74:ab:65:30:d7:26:5e:95:bc:9e:33:a3:08:d5:2f: 14:fd:67:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFrUU9eweTeidYVY98qnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNWYwNjZhZjgwZDBlOWYwN2VhODdiMjRiZGFmYTU5ZDFm NWYyNmYwHhcNMjUxMjI0MDIwMTA5WhcNMjUxMjI1MDIwMTA5WjAzMTEwLwYDVQQD EygyZTNmMDZhNzBmYWU3NjgzMGE1YzFhNTc1OWZmMmM1Njk0NmJjM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqwuZ8zklFEZTbTHJoEqi8jNDFHC vlNsIJBQE9eUv4EDcJbOqBgwcwlPoRAnJ4ucgVq1D9PEZD3ZcxhMdzax+8j+tYY7 E331dtudASoz4WIEK5X1CSp3NHu5kZIGA+/RXNW1tXM49MCdkEwe1UBcw7sZT82O 7nUxbYBcAEmzCrQG47kxn0hFCH530kR3NOMdbHk72BZHZIn581eqxhfChm38tzIl Vr9uDZkmWSG9SpN2sOUYyW4rUiS3PsPI10cnL5H6s52zmHKGsE+hdRdtmYeUqkjl F+iABZSpwsmJFejmHr2GnyF+m/3Xr1i4Mv6+KZnCBK1Y3/V2Gw0BM3exsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4/BqcPrnaDClwaV1n/LFaUa8PQMB8GA1UdIwQY MBaAFI1fBmr4DQ6fB+qHskva+lnR9fJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMzBlNGQtYTlkOS00YjdlLTg2M2Mt NmYzYWE4OTQzZTY4LzEvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMzBlNGQtYTlkOS00YjdlLTg2M2MtNmYzYWE4OTQzZTY4 LzEvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbBA8Bkx FZp7N4VUwkIyvV35z1z8R6igE1rASar8GC+Cv5M/48c8q5NIE1Su+xVmCADtqxXt cHEM2m6C2UGAcFz4GUYvrTeOch2KdZ3o4HIq1VYX0KYrUEMAy2ncxHsCxL7NBiDK braBwycBx1kBW67oLDfUp4JwGmZGHDA8Pv0EOzyNnpd8RE6/EENNsutYFomTRpJZ bzVk+pOF16ziEK/7oxvmzQ80pOY4Q/rBJylqZi5rqjXdBEy5Er8KplCGfSwXPy9J rnTfcA7Rxputq2aOiu14E717Np/1KnTAJLWTNy1t1reQnUqcC9TXdKtlMNcmXpW8 njOjCNUvFP1nuQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:29:03 2025 by rpki-client