This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json) Hash identifier: HivF10AO0xfALt1mzi3DlP2nIZY3GJBDZbDWLaIec28= Subject key identifier: 70:5D:71:5C:75:28:E2:92:72:8C:56:4F:D6:27:A7:C3:7D:CB:7E:6C Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a Certificate serial: 019B3BA280E0A120845D5AE4E70F70AE4FF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 12:01:04 +0000 Manifest this update: Sat 20 Dec 2025 12:01:04 +0000 Manifest next update: Sun 21 Dec 2025 12:01:04 +0000 Files and hashes: 1: 5QHAsQaUMAZIN1n6-pxK5K91a3o.roa (hash: AkFm08Afa/vhsA4n14Vo1RO04eK70G8MZ4yY3wwGuE0=) 2: 8__4CSysP9ewpgBTT4RjqVsmoag.roa (hash: 6Vh8B3R0vOjHWshOtYFXsA9V6+E+ovifthcqX5LH5AY=) 3: H0T0W0xTBnh83HIo130u3lMx0z8.roa (hash: EnvalVHH06GgGOutMJeFEacXQsa/Sw9Z2kcRlIH1HNM=) 4: HUjFpkDkE9aRW0oytyocQloUy9o.roa (hash: mq8+b8jC5/4J8LuF6BxD7TMcx7W9gEcExeXo6od8rqM=) 5: Hsa9B01wYzQuVgyvO2-bkNj0_wY.roa (hash: DdezXk60i94ZF2OulsTAeuZBcNuFWBHgNv3S98ro9B8=) 6: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: uk1D3KSEWIA4ecK9BDJvvrusoblwVB5rpX3nmx4/bsQ=) 7: KzhPBfzs40BMsYPfoaIPI29P5yo.roa (hash: 95zWAjg8ne0IL6qdhZTUSVplXSRiePGkqfZ93e5qlhw=) 8: dwkhaAERSm6uhMOz5nNpmKDQ82E.roa (hash: LJZ+/v8dXlJSBiFG/37Ys6az1iYi7KSm0TcOpKjllW4=) 9: uZ2FUQIy4-BglbDIW_Uj_e4ZY2c.roa (hash: cy6Tl3qgTi1iMP0dxF44E6e2zGcGBO8MstsvupGrtLU=) 10: wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa (hash: hbL9mJeeAk3YwSAmT6WsY7K2Gkz/S4wOy9jWJcZcNps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:80:e0:a1:20:84:5d:5a:e4:e7:0f:70:ae:4f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a Validity Not Before: Dec 20 12:01:04 2025 GMT Not After : Dec 21 12:01:04 2025 GMT Subject: CN=705d715c7528e292728c564fd627a7c37dcb7e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:17:2b:28:73:d5:11:2c:27:4a:60:5b:08: ee:c8:47:39:ed:74:46:6f:86:aa:e7:fc:4e:b8:4c: 2b:80:28:41:b8:83:1d:15:25:58:15:87:ab:71:a8: 4e:f8:1b:15:56:fb:dd:26:72:f8:c1:56:7b:38:ea: 5b:30:2f:6b:00:51:07:e7:83:e8:13:aa:ae:24:2d: 56:28:11:68:47:65:fc:75:42:95:86:d1:5e:56:4d: 28:8b:6c:9d:75:32:07:21:ee:ee:dd:40:49:c0:66: fc:c9:0e:c9:f6:fa:41:3a:95:3e:2e:f2:44:21:44: db:4f:ad:1b:d8:fd:b6:29:51:c2:6e:e2:b8:ef:77: d9:0e:45:ef:24:82:8b:0e:ef:f8:99:22:59:2c:69: 2c:ba:73:11:6d:d5:42:83:5b:bc:77:6c:3e:04:ba: bb:3a:82:94:69:48:99:4f:f3:bc:1a:35:5c:cf:81: 20:6b:b9:e8:17:aa:9e:b6:1c:56:2a:96:86:8d:e2: 47:23:25:2d:7b:a0:0a:46:b7:7c:2b:f8:47:24:42: d0:cb:a5:87:7e:7f:a8:d1:24:f7:9c:d7:ac:3a:45: cd:fd:a3:92:d4:9e:05:f0:98:19:df:0e:47:4b:f8: 07:95:1d:de:c9:46:8d:cb:c5:71:7a:8b:6e:7f:32: d1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5D:71:5C:75:28:E2:92:72:8C:56:4F:D6:27:A7:C3:7D:CB:7E:6C X509v3 Authority Key Identifier: keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:93:dd:09:0b:85:c7:f9:76:4d:32:85:1c:6e:61:15:41:f2: 0c:b1:77:fb:2b:2c:1a:93:7e:57:bd:0a:c6:e8:1c:1d:66:e8: 4f:f7:9e:ef:67:fd:41:2e:5f:73:7e:78:3e:f5:d8:4a:da:3d: 0c:de:a4:e3:1e:29:14:6e:35:52:6b:57:b0:47:dd:2a:0a:e1: 7c:ea:d7:f7:b8:d5:1b:7e:72:1d:d4:7d:57:9b:76:e5:e7:13: 8b:a5:39:d5:dc:c9:5b:5b:04:99:e7:14:4d:f8:63:2e:b9:a0: 51:80:b0:9f:10:f8:60:33:08:73:1e:0b:9b:ff:f8:9e:1d:6f: 97:8c:72:e3:52:59:cc:1f:d9:47:1a:ad:bc:6f:55:61:0b:9d: e1:81:33:8a:d7:09:bb:fe:bc:af:c2:dd:e7:24:92:cd:65:df: 04:b9:82:93:97:c1:5e:70:f9:a3:78:f7:00:75:59:0d:e8:7b: 92:c8:67:45:77:0f:21:3f:7c:90:59:9c:62:91:ea:cf:51:e1: db:ef:f0:a6:a5:27:71:fa:f9:eb:fa:12:c7:8c:02:f0:85:60: e4:79:a7:c9:3c:11:38:94:a7:dc:5f:c2:71:4c:4a:63:e4:ba: 18:9a:ec:71:6d:8c:0c:e0:87:11:7e:b9:22:b6:2f:4c:46:f8: 2c:e2:f3:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ooDgoSCEXVrk5w9wrk/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh N2VkNmEwHhcNMjUxMjIwMTIwMTA0WhcNMjUxMjIxMTIwMTA0WjAzMTEwLwYDVQQD Eyg3MDVkNzE1Yzc1MjhlMjkyNzI4YzU2NGZkNjI3YTdjMzdkY2I3ZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV4XKyhz1REsJ0pgWwjuyEc57XRG b4aq5/xOuEwrgChBuIMdFSVYFYercahO+BsVVvvdJnL4wVZ7OOpbMC9rAFEH54Po E6quJC1WKBFoR2X8dUKVhtFeVk0oi2yddTIHIe7u3UBJwGb8yQ7J9vpBOpU+LvJE IUTbT60b2P22KVHCbuK473fZDkXvJIKLDu/4mSJZLGksunMRbdVCg1u8d2w+BLq7 OoKUaUiZT/O8GjVcz4Ega7noF6qethxWKpaGjeJHIyUte6AKRrd8K/hHJELQy6WH fn+o0ST3nNesOkXN/aOS1J4F8JgZ3w5HS/gHlR3eyUaNy8VxeotufzLRwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBdcVx1KOKScoxWT9Ynp8N9y35sMB8GA1UdIwQY MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt Yjg5YTI2MTk5OTc2LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2 LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5PdCQuF x/l2TTKFHG5hFUHyDLF3+yssGpN+V70KxugcHWboT/ee72f9QS5fc354PvXYSto9 DN6k4x4pFG41UmtXsEfdKgrhfOrX97jVG35yHdR9V5t25ecTi6U51dzJW1sEmecU TfhjLrmgUYCwnxD4YDMIcx4Lm//4nh1vl4xy41JZzB/ZRxqtvG9VYQud4YEzitcJ u/68r8Ld5ySSzWXfBLmCk5fBXnD5o3j3AHVZDeh7kshnRXcPIT98kFmcYpHqz1Hh 2+/wpqUncfr56/oSx4wC8IVg5HmnyTwROJSn3F/CcUxKY+S6GJrscW2MDOCHEX65 IrYvTEb4LOLz8w== -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:25 2025 by rpki-client