This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json) Hash identifier: /jD7g0xi+Di1WJHKeK3kDSUbJ7lVMH0iZtLylzY6oMc= Subject key identifier: 4E:7B:C6:9F:96:B6:00:3A:61:F6:6E:B5:11:48:F3:04:41:0F:E2:DF Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b Certificate serial: 019B32D65C1C21F7A97737E2089998B78B83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft Manifest number: 0B6F Signing time: Thu 18 Dec 2025 19:01:07 +0000 Manifest this update: Thu 18 Dec 2025 19:01:07 +0000 Manifest next update: Fri 19 Dec 2025 19:01:07 +0000 Files and hashes: 1: I6XJQzPuO4BQutj9l3SUjZVMBQs.roa (hash: SpNx9acwJnfAUoxlUrPZol91rF8aW3VEekG+fCM8uiI=) 2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: T3HfP22zmbNoEO4uualBsdcHmYoKT0C1lsC3rdyr6VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:5c:1c:21:f7:a9:77:37:e2:08:99:98:b7:8b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b Validity Not Before: Dec 18 19:01:07 2025 GMT Not After : Dec 19 19:01:07 2025 GMT Subject: CN=4e7bc69f96b6003a61f66eb51148f304410fe2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:90:a9:a7:0c:fa:3a:3d:da:7c:31:6f:d7: 78:81:47:87:e3:8e:e1:6e:70:d4:10:81:05:86:b1: 89:97:1f:5e:5e:1e:77:2c:2b:82:ae:08:ae:15:f8: 5c:e5:ce:24:d7:06:82:88:c8:25:9c:6b:d6:2e:47: a5:48:d9:ea:c2:64:d0:69:8d:03:11:12:68:2e:21: be:12:5f:60:23:ce:7f:72:15:d3:a1:3a:39:15:6d: 40:90:0d:1e:23:f4:af:92:3b:d9:8f:c6:53:94:78: 87:89:3a:29:d5:e1:75:e4:4e:55:00:ab:1f:f1:2e: 50:0c:8e:44:67:0a:8a:e4:11:5b:15:9d:c1:f6:25: ab:91:63:18:9d:3b:3b:6d:0c:34:71:b2:1c:da:29: 0e:87:2e:94:bd:79:45:ab:56:d4:89:0d:66:36:31: d6:73:53:47:27:bb:ba:9b:94:11:75:58:f1:41:5c: fc:c7:a4:c1:90:4c:6a:ec:89:aa:6e:6a:72:0a:0e: fb:0c:21:8f:a7:4d:fe:ce:dc:ef:67:1f:24:21:4d: db:a1:cc:b0:5b:95:18:df:8a:cc:c9:48:b8:a1:bf: b7:3b:e3:8a:da:e7:09:11:21:7f:6d:d1:c8:ab:9c: 09:0b:5b:9f:bc:9c:39:96:bc:82:02:a8:fa:c0:4e: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7B:C6:9F:96:B6:00:3A:61:F6:6E:B5:11:48:F3:04:41:0F:E2:DF X509v3 Authority Key Identifier: keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e5:e8:3c:d8:41:34:75:fa:1b:6a:77:d6:56:61:38:16:7b: c3:65:24:e7:f2:24:5e:e5:3e:71:6c:97:d0:43:16:c8:56:91: 20:5d:e6:e9:c9:46:b5:42:47:88:bb:34:14:03:ff:88:49:35: c8:30:8e:89:f8:72:30:ca:83:af:77:1d:f4:7e:6f:79:11:90: 6c:f2:ce:67:be:02:8b:70:43:8d:45:16:77:c2:82:eb:d9:0a: d7:7f:e4:59:54:fc:b9:56:d5:4e:91:40:7a:3f:9d:d3:a1:b8: 68:8f:5a:8f:b5:e3:18:71:6a:55:0a:f3:39:1c:ed:89:90:6b: 00:86:7a:3a:e2:14:71:ce:a3:0f:d2:58:da:d0:7c:7a:d1:6e: 53:08:a9:c4:e8:24:7c:f6:09:9b:0a:bf:16:79:b4:a7:48:d6: 37:13:a6:57:dd:2a:6b:7f:aa:59:d2:f9:b3:5b:b4:8f:65:ed: 5a:22:86:c1:f0:84:2c:14:3f:bb:7d:15:65:37:54:ff:4e:e0: 11:d9:8d:d0:81:65:9e:c6:e9:bc:cf:2a:82:aa:a1:04:ed:4e: ad:c2:46:33:d5:8f:9e:08:12:96:9c:3b:fe:d4:3c:f5:1b:41: ea:c3:cd:10:bc:b5:85:40:de:f1:70:5a:e3:5a:3a:93:99:77: 7d:8e:7b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1lwcIfepdzfiCJmYt4uDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjY0NTc3MGQyOTE0NDAyZDZjOTViOGRhZjUxZjdmZmUx Mjc3MmIwHhcNMjUxMjE4MTkwMTA3WhcNMjUxMjE5MTkwMTA3WjAzMTEwLwYDVQQD Eyg0ZTdiYzY5Zjk2YjYwMDNhNjFmNjZlYjUxMTQ4ZjMwNDQxMGZlMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiaQqacM+jo92nwxb9d4gUeH447h bnDUEIEFhrGJlx9eXh53LCuCrgiuFfhc5c4k1waCiMglnGvWLkelSNnqwmTQaY0D ERJoLiG+El9gI85/chXToTo5FW1AkA0eI/SvkjvZj8ZTlHiHiTop1eF15E5VAKsf 8S5QDI5EZwqK5BFbFZ3B9iWrkWMYnTs7bQw0cbIc2ikOhy6UvXlFq1bUiQ1mNjHW c1NHJ7u6m5QRdVjxQVz8x6TBkExq7ImqbmpyCg77DCGPp03+ztzvZx8kIU3bocyw W5UY34rMyUi4ob+3O+OK2ucJESF/bdHIq5wJC1ufvJw5lryCAqj6wE61lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE57xp+WtgA6YfZutRFI8wRBD+LfMB8GA1UdIwQY MBaAFI72RXcNKRRALWyVuNr1H3/+EncrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDkt NjU2OTU3ZjM4NjdlLzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDktNjU2OTU3ZjM4Njdl LzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeXoPNhB NHX6G2p31lZhOBZ7w2Uk5/IkXuU+cWyX0EMWyFaRIF3m6clGtUJHiLs0FAP/iEk1 yDCOifhyMMqDr3cd9H5veRGQbPLOZ74Ci3BDjUUWd8KC69kK13/kWVT8uVbVTpFA ej+d06G4aI9aj7XjGHFqVQrzORztiZBrAIZ6OuIUcc6jD9JY2tB8etFuUwipxOgk fPYJmwq/Fnm0p0jWNxOmV90qa3+qWdL5s1u0j2XtWiKGwfCELBQ/u30VZTdU/07g EdmN0IFlnsbpvM8qgqqhBO1OrcJGM9WPnggSlpw7/tQ89RtB6sPNELy1hUDe8XBa 41o6k5l3fY57FA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:49 2025 by rpki-client