This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json) Hash identifier: FEN/2INfLzqkWUGunuJFk3TIsTlr+ncbB7079GriZRQ= Subject key identifier: 9E:89:CE:E8:1D:C8:8A:47:53:9F:7B:14:EE:6A:91:E0:34:47:B9:BA Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Certificate serial: 019B3A58812FC5603D9C41C598739D929458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft Manifest number: 0DDB Signing time: Sat 20 Dec 2025 06:00:37 +0000 Manifest this update: Sat 20 Dec 2025 06:00:37 +0000 Manifest next update: Sun 21 Dec 2025 06:00:37 +0000 Files and hashes: 1: 7iDgMFYJeqfOty-EbplS6nmhqag.roa (hash: lnzwDP7bYMBLvvlnlvzGX+PogfIf3OGZE5FGc501AfQ=) 2: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: XaRgP9kg5MCRLzShIe8A6imUqxMLzwcrSF/19NrR6CA=) 3: THD6dCAcQylh5j9TRPuNEYk_EF0.roa (hash: RLY2fSTdx8vREbBUWYofmuTLlTO7pJB3RnHvsPQUpgw=) 4: zi7h7UJYxNeBfgAfyuuPI1OuoNk.roa (hash: FGz1x4BgJx0vMr4BEPiY/HKABSWRvFlGzY+wA/fT1Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:81:2f:c5:60:3d:9c:41:c5:98:73:9d:92:94:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Validity Not Before: Dec 20 06:00:37 2025 GMT Not After : Dec 21 06:00:37 2025 GMT Subject: CN=9e89cee81dc88a47539f7b14ee6a91e03447b9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:16:24:90:0a:f3:70:0f:bc:60:be:19:bb: eb:30:7c:d9:f7:7a:6c:f3:cb:ec:19:fb:21:3e:78: e2:1d:ba:05:a4:96:c8:ac:19:81:49:ad:92:0d:d9: a3:a2:cb:2b:53:d8:d6:d6:9e:b7:26:cc:8f:62:c0: c9:66:4f:95:53:34:9d:4b:99:92:30:f9:f1:7d:2f: 07:12:bb:97:3d:d8:91:10:b1:49:1d:de:dc:54:31: d2:10:cb:90:0d:0e:ea:92:9a:6d:0a:11:19:99:58: 67:db:e9:f3:e3:e3:ff:a2:0a:93:22:d8:53:ed:64: a1:bd:e6:5d:1e:f6:63:2e:c5:50:7a:e9:22:46:fe: ea:98:9d:fc:cc:bf:ba:b3:9a:6b:88:6c:a6:b5:02: 5e:4b:ee:8f:88:e3:6e:e9:98:20:79:78:1f:c2:59: ae:22:d8:40:90:ee:31:61:4d:61:fa:45:89:27:f0: d4:69:98:30:56:a1:2f:41:94:2c:9e:49:ff:91:ba: b9:50:1a:9d:c1:10:80:49:79:dc:77:78:5a:92:b6: c3:e7:3c:95:82:af:55:a6:4e:56:1e:cc:f9:1b:47: 47:e4:b5:91:b5:31:be:ec:8c:89:4e:c8:d6:89:00: e2:a2:62:97:65:f4:30:71:b7:a1:de:9e:1d:16:65: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:89:CE:E8:1D:C8:8A:47:53:9F:7B:14:EE:6A:91:E0:34:47:B9:BA X509v3 Authority Key Identifier: keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:dd:21:4d:97:8b:1a:4e:75:c7:80:05:69:bd:8b:b5:6a:1c: c7:ca:9f:39:24:90:18:60:af:72:1d:ef:9a:3f:0a:f8:83:7a: 68:38:63:a7:d9:b0:55:79:43:9a:ec:4f:e8:35:9e:cf:01:3e: ef:a2:d0:80:92:89:d3:3a:a4:d2:c4:ff:cb:42:8a:ae:fc:4a: cd:c0:75:3a:80:d4:51:88:a4:79:45:3f:7c:36:2f:da:39:db: c0:76:47:6f:4d:42:fb:0a:b6:69:92:67:63:b9:c7:ee:14:d8: c3:0a:dd:86:40:07:b4:c1:a8:e6:71:5c:92:d4:d2:2f:e2:ba: 30:9f:98:77:5d:c6:e2:1c:5a:9a:ef:7b:9b:1c:ff:5d:f2:ff: 40:53:ae:45:a3:0d:1e:2d:fb:f5:38:a3:70:e0:87:40:c1:dd: 64:3f:c2:c1:6a:49:2a:72:7e:91:76:34:c8:c0:1f:1a:96:07: 71:12:a4:76:01:09:10:bb:70:94:ee:74:b3:66:65:da:4c:69: 1e:ba:75:c0:98:a7:ce:4b:2a:8b:0a:61:75:f9:d7:4b:7d:03: d0:a5:ee:61:f9:00:a2:18:e1:f3:1f:34:8c:66:82:76:7c:03: 8e:5d:22:4a:64:bd:d4:fc:a3:c0:31:95:4f:9c:c5:19:c0:c5: 17:a7:4f:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIEvxWA9nEHFmHOdkpRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0 YTZjMzAwHhcNMjUxMjIwMDYwMDM3WhcNMjUxMjIxMDYwMDM3WjAzMTEwLwYDVQQD Eyg5ZTg5Y2VlODFkYzg4YTQ3NTM5ZjdiMTRlZTZhOTFlMDM0NDdiOWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypIWJJAK83APvGC+GbvrMHzZ93ps 88vsGfshPnjiHboFpJbIrBmBSa2SDdmjossrU9jW1p63JsyPYsDJZk+VUzSdS5mS MPnxfS8HEruXPdiRELFJHd7cVDHSEMuQDQ7qkpptChEZmVhn2+nz4+P/ogqTIthT 7WShveZdHvZjLsVQeukiRv7qmJ38zL+6s5priGymtQJeS+6PiONu6ZggeXgfwlmu IthAkO4xYU1h+kWJJ/DUaZgwVqEvQZQsnkn/kbq5UBqdwRCASXncd3hakrbD5zyV gq9Vpk5WHsz5G0dH5LWRtTG+7IyJTsjWiQDiomKXZfQwcbeh3p4dFmXFmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6JzugdyIpHU597FO5qkeA0R7m6MB8GA1UdIwQY MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt NTcxN2I0NTQ0MjM3LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3 LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAft0hTZeL Gk51x4AFab2LtWocx8qfOSSQGGCvch3vmj8K+IN6aDhjp9mwVXlDmuxP6DWezwE+ 76LQgJKJ0zqk0sT/y0KKrvxKzcB1OoDUUYikeUU/fDYv2jnbwHZHb01C+wq2aZJn Y7nH7hTYwwrdhkAHtMGo5nFcktTSL+K6MJ+Yd13G4hxamu97mxz/XfL/QFOuRaMN Hi379TijcOCHQMHdZD/CwWpJKnJ+kXY0yMAfGpYHcRKkdgEJELtwlO50s2Zl2kxp Hrp1wJinzksqiwphdfnXS30D0KXuYfkAohjh8x80jGaCdnwDjl0iSmS91PyjwDGV T5zFGcDFF6dPfQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:47:17 2025 by rpki-client