This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json) Hash identifier: lgDXfBpVq/IpvniLxawXmwQacgVOF9eO0H6CVkYJ0Ag= Subject key identifier: 9C:F1:BE:CF:62:29:02:21:9B:01:64:F9:2A:72:7D:0C:5D:69:D3:65 Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73 Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73 Certificate serial: 019B3CEBE5C9447114FAE490FC7C223E4EB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 18:00:51 +0000 Manifest this update: Sat 20 Dec 2025 18:00:51 +0000 Manifest next update: Sun 21 Dec 2025 18:00:51 +0000 Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=) 2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: FH3Ztn9UTyVmtntIRBMqDZcyNJSb3RSPlGjJ8Zc+aaY=) 3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:e5:c9:44:71:14:fa:e4:90:fc:7c:22:3e:4e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73 Validity Not Before: Dec 20 18:00:51 2025 GMT Not After : Dec 21 18:00:51 2025 GMT Subject: CN=9cf1becf622902219b0164f92a727d0c5d69d365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:f0:8b:31:52:21:4b:33:f8:0e:80:a0:0c: 99:62:fa:dd:1e:e2:d5:da:78:5f:12:f6:16:60:e8: 73:28:81:8e:a2:f4:ea:44:48:b4:60:d2:de:e1:7f: 0e:c9:b5:26:5a:e5:32:2d:74:ad:a9:05:a7:fc:92: 2f:d6:d7:9b:a4:9c:60:ba:ea:4c:76:a7:cf:eb:83: db:20:35:97:03:7e:2b:17:3a:96:e9:2d:14:43:7e: 21:46:96:0a:ae:37:4b:10:4e:41:02:a0:aa:f7:a4: 57:73:45:02:32:13:90:f1:d9:10:33:28:1b:4c:df: 16:8f:19:c0:50:43:93:8b:3c:4a:bd:3c:99:4b:58: da:82:37:d6:41:ef:69:3f:08:aa:2c:8f:ce:79:05: 31:f2:ab:8f:85:8d:cd:37:f4:06:50:06:e9:81:4d: db:9c:50:92:89:94:78:36:59:8a:e4:09:0f:60:33: 30:12:71:ff:bd:38:19:6b:1f:0f:03:b5:3b:12:de: bc:3c:ce:7e:c0:1e:34:c0:62:d8:60:fb:15:17:fc: f2:de:75:63:cf:92:83:07:bc:b3:37:a4:70:e4:6e: 44:fa:85:a3:59:3a:a2:a8:86:5c:37:d9:11:b5:1e: 61:e0:d5:a6:98:a5:0c:c3:d2:dc:cb:93:a3:a4:79: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F1:BE:CF:62:29:02:21:9B:01:64:F9:2A:72:7D:0C:5D:69:D3:65 X509v3 Authority Key Identifier: keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9e:30:ca:ca:04:4d:83:08:00:a7:15:e0:50:d2:7a:e1:b0: 3b:9d:33:17:3b:cf:3b:71:4c:9d:ea:fd:d9:c4:8a:33:f0:c4: 01:60:78:c3:0e:f5:e0:b2:18:f6:b6:a1:b9:72:34:d0:33:28: 74:eb:f4:20:87:de:99:2d:1d:7f:78:c9:01:95:43:e8:a4:95: 11:0f:21:f1:c0:43:cd:5b:83:42:5e:71:15:45:3e:da:05:fe: 9e:66:61:f0:1c:11:85:f2:2f:0b:cb:84:07:60:2b:db:83:b8: 56:70:0b:60:92:a5:de:24:e3:71:7f:19:9e:f7:65:55:9c:7f: 42:c4:b5:8e:46:ee:29:f6:d0:ce:de:43:d8:80:7f:53:ef:3a: 28:f4:d8:6d:04:5e:eb:aa:7a:bd:0f:ac:5e:9e:af:fb:88:1a: 2a:af:d1:a4:71:66:2c:8c:d8:39:27:e1:7b:93:36:78:64:8e: 87:76:a1:be:b3:56:1d:c4:9a:3f:24:cd:22:7a:8f:fe:dd:2a: f1:32:7b:76:f5:b1:f8:7d:33:85:ec:e5:28:6a:22:14:7c:fe: 30:16:57:81:a6:2d:2c:04:9a:c1:e9:a9:12:ce:72:37:a7:e4: 6e:81:70:52:83:bc:87:67:03:9d:6d:4b:77:0e:f4:ea:94:af: 94:e6:cb:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+XJRHEU+uSQ/HwiPk6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NmUwYzQwZTRlOTM3MGRiOTlhZDI3YTk3Mjk4ZDdkMDU1 OThmNzMwHhcNMjUxMjIwMTgwMDUxWhcNMjUxMjIxMTgwMDUxWjAzMTEwLwYDVQQD Eyg5Y2YxYmVjZjYyMjkwMjIxOWIwMTY0ZjkyYTcyN2QwYzVkNjlkMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wzwizFSIUsz+A6AoAyZYvrdHuLV 2nhfEvYWYOhzKIGOovTqREi0YNLe4X8OybUmWuUyLXStqQWn/JIv1tebpJxguupM dqfP64PbIDWXA34rFzqW6S0UQ34hRpYKrjdLEE5BAqCq96RXc0UCMhOQ8dkQMygb TN8WjxnAUEOTizxKvTyZS1jagjfWQe9pPwiqLI/OeQUx8quPhY3NN/QGUAbpgU3b nFCSiZR4NlmK5AkPYDMwEnH/vTgZax8PA7U7Et68PM5+wB40wGLYYPsVF/zy3nVj z5KDB7yzN6Rw5G5E+oWjWTqiqIZcN9kRtR5h4NWmmKUMw9Lcy5OjpHnq2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzxvs9iKQIhmwFk+SpyfQxdadNlMB8GA1UdIwQY MBaAFCZuDEDk6TcNuZrSepcpjX0FWY9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUt OWMxYTUzNTgwZTM5LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUtOWMxYTUzNTgwZTM5 LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjp4wysoE TYMIAKcV4FDSeuGwO50zFzvPO3FMner92cSKM/DEAWB4ww714LIY9rahuXI00DMo dOv0IIfemS0df3jJAZVD6KSVEQ8h8cBDzVuDQl5xFUU+2gX+nmZh8BwRhfIvC8uE B2Ar24O4VnALYJKl3iTjcX8ZnvdlVZx/QsS1jkbuKfbQzt5D2IB/U+86KPTYbQRe 66p6vQ+sXp6v+4gaKq/RpHFmLIzYOSfhe5M2eGSOh3ahvrNWHcSaPyTNInqP/t0q 8TJ7dvWx+H0zhezlKGoiFHz+MBZXgaYtLASawempEs5yN6fkboFwUoO8h2cDnW1L dw706pSvlObLVw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:36 2025 by rpki-client