This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft File: JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json) Hash identifier: 8BqRdHimwrwmq0hMzJXpWYS1dTQkdgJXQH+qmVZopVE= Subject key identifier: 2F:1F:8C:75:E9:D4:78:E1:A5:34:0D:49:80:56:79:84:5F:BA:D9:62 Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2 Certificate serial: 019B3FECAC78F3D606AEE27F31A81F91C0D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft Manifest number: 0C81 Signing time: Sun 21 Dec 2025 08:00:33 +0000 Manifest this update: Sun 21 Dec 2025 08:00:33 +0000 Manifest next update: Mon 22 Dec 2025 08:00:33 +0000 Files and hashes: 1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=) 2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: N9PRxC5c3dKBwwWrhdoI9aEDQKhJ2jOMQI7IHMqxhHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ac:78:f3:d6:06:ae:e2:7f:31:a8:1f:91:c0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2 Validity Not Before: Dec 21 08:00:33 2025 GMT Not After : Dec 22 08:00:33 2025 GMT Subject: CN=2f1f8c75e9d478e1a5340d49805679845fbad962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:86:1b:cc:59:9c:1b:ef:c6:1e:ef:66:b3: 44:1b:a9:4e:97:5d:2c:37:96:0c:ee:f1:08:bf:0a: 1a:69:08:b7:3b:1b:21:2a:3e:01:d1:47:82:f3:36: e6:e1:0d:9a:f3:84:42:a8:53:d0:97:5d:bc:f9:84: ca:18:ea:6a:2f:23:9b:98:c8:42:b7:a8:f5:86:09: 86:8c:43:d4:1f:ad:35:58:78:7d:74:80:cc:ca:db: 1e:f9:fd:9b:12:81:c1:54:fa:53:27:71:05:fe:e0: 26:43:2e:c8:97:08:7c:9c:13:6d:a1:76:c5:e1:89: c6:d4:3e:11:7f:e1:fc:2b:fe:b8:ac:88:4c:22:b1: 13:2e:45:fb:01:28:d7:bf:78:b2:2e:16:88:8d:6a: 21:3f:03:38:ce:4e:0d:59:74:f0:2d:a4:a2:e9:a1: d6:54:31:ea:3a:3c:e7:21:7b:b5:77:77:23:01:70: 2a:f3:04:6a:c0:8f:88:7a:d8:77:1d:de:1b:cd:5e: 6f:0e:e4:a0:e4:0a:62:8b:23:f9:3d:a8:85:0a:2e: 43:e5:58:82:d4:a4:2d:3a:1c:7a:31:5e:cc:c0:d7: f9:29:11:51:fc:57:1c:ee:07:95:89:ba:5d:cf:cc: 9b:a2:8e:3b:c0:45:26:d5:99:e8:9f:9d:59:46:df: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1F:8C:75:E9:D4:78:E1:A5:34:0D:49:80:56:79:84:5F:BA:D9:62 X509v3 Authority Key Identifier: keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:24:a0:a9:68:d6:49:d3:8f:57:51:33:3e:a0:a7:9a:13:e7: 23:b5:6e:68:90:11:61:41:a2:8b:e0:04:72:cd:f4:0d:e7:ec: fa:47:5b:90:62:6f:20:17:ef:c1:c8:2a:7a:67:2f:9f:ab:6c: 5b:5e:ac:a8:f5:0e:c5:d9:54:ee:bd:1a:49:21:e4:84:00:bc: c0:83:4e:78:96:38:0b:1d:05:c9:48:75:43:d7:2b:2f:9e:a3: 9f:d3:61:a2:eb:48:c4:c6:03:2f:1c:0f:36:9d:ce:bc:8e:19: 84:e9:84:4f:a9:fd:3f:89:e2:2b:10:29:56:5f:93:a5:e2:1f: 9b:e2:5e:71:fa:16:df:a2:75:27:74:2e:4e:0b:7e:06:84:1e: cd:28:d2:96:30:1b:06:c2:24:c5:ff:ed:c0:08:46:4c:84:c9: cc:b6:1b:e6:89:19:bb:35:e8:39:04:bd:c2:e4:2d:43:bc:fc: 30:03:03:a8:67:5d:69:68:60:8b:69:9e:db:5a:67:95:b6:a9: 24:fe:9d:17:ad:56:0a:0b:7e:1c:9b:cb:2f:97:70:41:3d:dd: 4a:de:bc:71:32:e6:8a:91:12:40:a0:c4:5e:2e:d1:04:dc:da: f7:69:a6:98:3a:11:43:5e:c7:ed:b5:10:ce:31:e1:8a:41:38: 73:17:f3:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Kx489YGruJ/MagfkcDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjU0NzIwODIwNmFkNTQ0NzRjNjlmY2NiZWRjMjRhYTU2 YTYyYzIwHhcNMjUxMjIxMDgwMDMzWhcNMjUxMjIyMDgwMDMzWjAzMTEwLwYDVQQD EygyZjFmOGM3NWU5ZDQ3OGUxYTUzNDBkNDk4MDU2Nzk4NDVmYmFkOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhqGG8xZnBvvxh7vZrNEG6lOl10s N5YM7vEIvwoaaQi3OxshKj4B0UeC8zbm4Q2a84RCqFPQl128+YTKGOpqLyObmMhC t6j1hgmGjEPUH601WHh9dIDMytse+f2bEoHBVPpTJ3EF/uAmQy7Ilwh8nBNtoXbF 4YnG1D4Rf+H8K/64rIhMIrETLkX7ASjXv3iyLhaIjWohPwM4zk4NWXTwLaSi6aHW VDHqOjznIXu1d3cjAXAq8wRqwI+Ieth3Hd4bzV5vDuSg5ApiiyP5PaiFCi5D5ViC 1KQtOhx6MV7MwNf5KRFR/Fcc7geVibpdz8yboo47wEUm1Znon51ZRt9MBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8fjHXp1HjhpTQNSYBWeYRfutliMB8GA1UdIwQY MBaAFCZlRyCCBq1UR0xp/MvtwkqlamLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTIt ODIyZDE1OWE5N2FmLzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTItODIyZDE1OWE5N2Fm LzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiSgqWjW SdOPV1EzPqCnmhPnI7VuaJARYUGii+AEcs30Defs+kdbkGJvIBfvwcgqemcvn6ts W16sqPUOxdlU7r0aSSHkhAC8wINOeJY4Cx0FyUh1Q9crL56jn9NhoutIxMYDLxwP Np3OvI4ZhOmET6n9P4niKxApVl+TpeIfm+JecfoW36J1J3QuTgt+BoQezSjSljAb BsIkxf/twAhGTITJzLYb5okZuzXoOQS9wuQtQ7z8MAMDqGddaWhgi2me21pnlbap JP6dF61WCgt+HJvLL5dwQT3dSt68cTLmipESQKDEXi7RBNza92mmmDoRQ17H7bUQ zjHhikE4cxfzGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:59:15 2025 by rpki-client