This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft File: JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json) Hash identifier: LOw8J/4cTzkI71GWuRNCOl/3lCBrgIGbCPCMRq6HwMI= Subject key identifier: 97:59:92:97:4A:63:E5:CE:9D:21:AE:81:9C:4B:16:A3:E0:B0:A0:48 Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2 Certificate serial: 019B514E22CE6711220025EF30441AEB964D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft Manifest number: 0C8A Signing time: Wed 24 Dec 2025 17:00:33 +0000 Manifest this update: Wed 24 Dec 2025 17:00:33 +0000 Manifest next update: Thu 25 Dec 2025 17:00:33 +0000 Files and hashes: 1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=) 2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: DrNCnUOZ9bnAmE5OV/lde1HIeua5G9Wmewdl8B4/xdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:22:ce:67:11:22:00:25:ef:30:44:1a:eb:96:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2 Validity Not Before: Dec 24 17:00:33 2025 GMT Not After : Dec 25 17:00:33 2025 GMT Subject: CN=975992974a63e5ce9d21ae819c4b16a3e0b0a048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:dc:0e:75:45:4d:9f:f0:e3:f7:e7:53:7a: 86:61:cf:87:15:f1:76:91:04:05:3e:b2:18:bc:55: f5:ac:df:03:ea:3e:09:f3:1a:41:aa:cf:57:73:1e: a0:20:0d:6d:50:bb:73:f2:b5:03:1c:83:a5:d4:cc: 33:4c:bc:66:7e:28:ef:01:1e:44:1a:d5:4b:ea:3c: ca:52:f7:68:26:da:b2:45:e0:b4:48:96:e5:08:a3: f8:e2:5b:99:c4:e6:68:27:8d:7f:68:2c:47:21:ac: 89:8a:c8:21:93:1c:d9:83:82:6e:53:c5:cb:2c:23: 13:b1:82:e2:d3:18:3d:2f:1b:2a:2b:33:01:d6:27: fe:03:c2:94:a8:43:f6:43:c0:ce:dc:70:26:8d:84: e1:f1:72:63:9c:6b:4f:b8:bb:7c:1d:ef:e7:36:c9: c8:39:0d:60:e1:6b:03:be:0f:f0:df:99:b0:c1:59: f6:f6:ec:71:65:ca:c2:6a:46:59:d7:5b:23:1f:0f: 04:8f:bc:7a:ae:02:2e:03:df:a7:2e:42:2c:fd:0a: 34:0b:5d:e8:3a:af:55:6f:8a:b8:14:a4:df:7a:33: d0:02:db:1f:64:94:82:ea:a8:56:49:78:f7:b5:c0: 69:08:27:d5:ff:c7:df:b3:c0:49:0d:8c:fd:02:78: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:59:92:97:4A:63:E5:CE:9D:21:AE:81:9C:4B:16:A3:E0:B0:A0:48 X509v3 Authority Key Identifier: keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:02:79:b9:96:fa:e2:a5:fb:f1:de:39:42:6e:84:bc:26:ea: 1b:a7:2c:bd:10:e9:70:9b:34:6d:01:16:66:3a:c2:af:59:e8: 23:83:82:f5:e6:ae:2c:f2:22:c1:cc:3e:e1:64:df:98:53:c3: 40:6c:01:58:9a:88:dc:a1:8a:80:44:17:31:8b:ba:dc:0e:74: bd:f8:28:64:f0:80:30:d7:6c:f2:54:cf:7a:68:ab:c2:0c:c1: 2b:cf:39:af:42:b3:e6:41:04:45:99:62:d0:7b:4b:63:1e:48: 70:17:29:cb:a7:de:19:b2:d4:51:b3:75:fd:d2:f4:9b:47:40: 06:16:87:18:65:7a:1c:ea:b2:34:85:c4:2f:6b:58:dc:63:db: be:dc:21:ed:5c:95:5b:57:89:9c:ff:a5:24:79:50:24:ab:31: b5:86:01:db:f0:1c:eb:43:a6:2d:18:3a:d6:13:6a:14:ba:67: b6:18:2e:9c:fe:b9:06:97:42:ea:08:5d:bd:46:56:d6:89:a8: ab:ed:b2:13:6b:8e:8c:06:de:56:75:e1:33:ee:34:2d:45:9b: 1d:fb:61:20:38:2f:d8:7a:cd:90:53:d4:3b:fe:7e:b1:6e:2f: 7b:b4:0e:09:34:7f:7b:af:86:ac:6c:17:5a:55:b5:b3:6a:e9: 74:d6:92:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTiLOZxEiACXvMEQa65ZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjU0NzIwODIwNmFkNTQ0NzRjNjlmY2NiZWRjMjRhYTU2 YTYyYzIwHhcNMjUxMjI0MTcwMDMzWhcNMjUxMjI1MTcwMDMzWjAzMTEwLwYDVQQD Eyg5NzU5OTI5NzRhNjNlNWNlOWQyMWFlODE5YzRiMTZhM2UwYjBhMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkPcDnVFTZ/w4/fnU3qGYc+HFfF2 kQQFPrIYvFX1rN8D6j4J8xpBqs9Xcx6gIA1tULtz8rUDHIOl1MwzTLxmfijvAR5E GtVL6jzKUvdoJtqyReC0SJblCKP44luZxOZoJ41/aCxHIayJisghkxzZg4JuU8XL LCMTsYLi0xg9LxsqKzMB1if+A8KUqEP2Q8DO3HAmjYTh8XJjnGtPuLt8He/nNsnI OQ1g4WsDvg/w35mwwVn29uxxZcrCakZZ11sjHw8Ej7x6rgIuA9+nLkIs/Qo0C13o Oq9Vb4q4FKTfejPQAtsfZJSC6qhWSXj3tcBpCCfV/8ffs8BJDYz9AnjENwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdZkpdKY+XOnSGugZxLFqPgsKBIMB8GA1UdIwQY MBaAFCZlRyCCBq1UR0xp/MvtwkqlamLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTIt ODIyZDE1OWE5N2FmLzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTItODIyZDE1OWE5N2Fm LzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgJ5uZb6 4qX78d45Qm6EvCbqG6csvRDpcJs0bQEWZjrCr1noI4OC9eauLPIiwcw+4WTfmFPD QGwBWJqI3KGKgEQXMYu63A50vfgoZPCAMNds8lTPemirwgzBK885r0Kz5kEERZli 0HtLYx5IcBcpy6feGbLUUbN1/dL0m0dABhaHGGV6HOqyNIXEL2tY3GPbvtwh7VyV W1eJnP+lJHlQJKsxtYYB2/Ac60OmLRg61hNqFLpnthgunP65BpdC6ghdvUZW1omo q+2yE2uOjAbeVnXhM+40LUWbHfthIDgv2HrNkFPUO/5+sW4ve7QOCTR/e6+GrGwX WlW1s2rpdNaS2g== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:57 2025 by rpki-client