This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft File: JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json) Hash identifier: dW/1Kw3i31rXZrPErmZSClPS8TCaJpMNpYVAInw5F84= Subject key identifier: 11:0A:8A:44:35:AC:7B:FF:66:EA:FB:C2:5E:E9:D1:E9:F2:67:59:CE Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39 Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039 Certificate serial: 019B3E6D164E574A27506E27C5EE775323D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft Manifest number: 1228 Signing time: Sun 21 Dec 2025 01:01:34 +0000 Manifest this update: Sun 21 Dec 2025 01:01:34 +0000 Manifest next update: Mon 22 Dec 2025 01:01:34 +0000 Files and hashes: 1: DS8Rbt69Y278qge_4Hmc5o4yuwU.roa (hash: tTLyP2JhBCp2p2WsUyjl7JOVm5G5UBP2M/82U2+yJ6c=) 2: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: /c0VeUpiNaw0KHgBGT7EFItniTcq2SXkeC0JXekS090=) 3: U8zXsGEWCBH4_8YcgXmHjVER-wA.roa (hash: QGCHO7XwYCcbkNmS/y1pKg7c9YRHZM93ZZOJP0WiYK0=) 4: rzDuEXo0h15tN1onQfvdfKOerNI.roa (hash: Rm0BFvhI+es2ozBderkrcSg2LqNFRQ+VOueKD9tKZoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:16:4e:57:4a:27:50:6e:27:c5:ee:77:53:23:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039 Validity Not Before: Dec 21 01:01:34 2025 GMT Not After : Dec 22 01:01:34 2025 GMT Subject: CN=110a8a4435ac7bff66eafbc25ee9d1e9f26759ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:45:36:79:d4:91:57:c0:e8:19:de:fd:ac: 6e:99:8e:4b:f1:59:3d:57:35:2d:90:f9:14:f3:8c: 08:e6:67:b8:04:3e:3c:f6:46:e9:b2:78:e5:4e:46: 5e:06:50:35:15:9b:98:a2:26:f6:6f:ce:89:31:b3: 64:f5:9a:c5:a9:2e:21:3e:68:76:7a:4a:11:c5:b8: a0:93:d5:3e:1c:1e:1a:c5:bc:81:16:fc:8c:62:7d: 07:36:03:fd:69:0c:d0:80:ee:86:4f:51:5c:22:1a: eb:1d:94:51:13:9c:3e:f9:d7:b9:c3:61:4e:66:62: 00:4c:32:20:d6:52:2b:c3:35:1d:f6:a3:f5:37:a7: 3d:ef:1b:c0:ea:86:5f:ae:e8:58:87:f9:21:7a:ae: d3:40:05:2b:5b:16:56:c3:23:af:c9:31:b2:0e:27: 59:c0:2a:8a:bf:01:cf:c3:bd:21:22:89:6d:3e:1b: 2f:8d:4d:2f:77:b2:23:75:a6:73:57:00:2b:6e:19: 0c:f2:7c:4e:7d:7c:94:06:e0:5c:07:fb:0c:59:72: 49:41:fa:d9:89:fd:b9:bf:2a:ca:b3:ef:37:ef:22: db:17:a8:93:85:ae:05:ca:b8:ba:b3:b9:bd:72:0f: 9d:03:4e:19:33:9f:6e:be:c4:4e:01:80:d3:de:cd: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0A:8A:44:35:AC:7B:FF:66:EA:FB:C2:5E:E9:D1:E9:F2:67:59:CE X509v3 Authority Key Identifier: keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:60:93:37:09:73:72:8a:92:3a:ea:90:61:d9:3c:38:83:96: a4:04:51:91:69:e8:3d:b7:e1:92:4d:ae:ee:33:86:1c:b2:db: 07:40:d4:91:c2:fb:da:15:0b:b2:6c:54:e6:7d:fe:7f:44:67: b7:9f:97:8e:5f:e8:90:51:b9:a6:d6:4a:a1:8d:fc:d5:ac:e4: 39:7d:7b:54:e0:12:ac:09:1f:c6:94:76:e7:92:55:fc:d7:f7: fb:2b:0a:b8:80:80:3d:7b:90:a3:d5:c3:4e:04:c4:b7:fe:b5: 67:da:39:28:a6:15:cd:a6:d3:4a:c8:40:87:28:73:74:4e:dd: 27:02:16:f4:ba:aa:b0:be:81:e5:ee:ec:d8:cc:79:da:27:5e: 61:1e:2c:c7:fd:12:15:b6:eb:23:26:8c:d9:23:ec:df:c5:aa: 57:97:69:43:a8:74:99:63:3e:81:ad:cb:63:f2:07:dd:be:60: dd:d4:e7:45:7e:ee:97:5e:78:fc:30:71:a5:fd:82:82:bf:a4: 81:02:53:44:b4:fc:4d:1e:fe:06:d3:6b:d3:5a:d2:40:e5:c2: ba:89:f3:be:31:f0:61:2f:3e:72:49:a8:02:ac:2a:ca:4d:5b: 64:f2:b5:d8:a5:95:65:99:90:96:ad:13:c8:6d:0f:c3:29:52: dd:e3:27:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bRZOV0onUG4nxe53UyPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODJjODE2ZjcyNjg2ZmY3YWVkZTUzNTM4NjE4Y2MyZTg4 NjEwMzkwHhcNMjUxMjIxMDEwMTM0WhcNMjUxMjIyMDEwMTM0WjAzMTEwLwYDVQQD EygxMTBhOGE0NDM1YWM3YmZmNjZlYWZiYzI1ZWU5ZDFlOWYyNjc1OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkURFNnnUkVfA6Bne/axumY5L8Vk9 VzUtkPkU84wI5me4BD489kbpsnjlTkZeBlA1FZuYoib2b86JMbNk9ZrFqS4hPmh2 ekoRxbigk9U+HB4axbyBFvyMYn0HNgP9aQzQgO6GT1FcIhrrHZRRE5w++de5w2FO ZmIATDIg1lIrwzUd9qP1N6c97xvA6oZfruhYh/kheq7TQAUrWxZWwyOvyTGyDidZ wCqKvwHPw70hIoltPhsvjU0vd7IjdaZzVwArbhkM8nxOfXyUBuBcB/sMWXJJQfrZ if25vyrKs+837yLbF6iTha4Fyri6s7m9cg+dA04ZM59uvsROAYDT3s2iNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEKikQ1rHv/Zur7wl7p0enyZ1nOMB8GA1UdIwQY MBaAFCaCyBb3Job/eu3lNThhjMLohhA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmIt NjYxZThmZTNjMWU5LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmItNjYxZThmZTNjMWU5 LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2CTNwlz coqSOuqQYdk8OIOWpARRkWnoPbfhkk2u7jOGHLLbB0DUkcL72hULsmxU5n3+f0Rn t5+Xjl/okFG5ptZKoY381azkOX17VOASrAkfxpR255JV/Nf3+ysKuICAPXuQo9XD TgTEt/61Z9o5KKYVzabTSshAhyhzdE7dJwIW9LqqsL6B5e7s2Mx52ideYR4sx/0S FbbrIyaM2SPs38WqV5dpQ6h0mWM+ga3LY/IH3b5g3dTnRX7ul154/DBxpf2Cgr+k gQJTRLT8TR7+BtNr01rSQOXCuonzvjHwYS8+ckmoAqwqyk1bZPK12KWVZZmQlq0T yG0PwylS3eMn4w== -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:49 2025 by rpki-client