This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json) Hash identifier: x2HAW8b9KpLR3FfJlN/tE7w5WrROh/KClHXh2mfo9x8= Subject key identifier: 80:E6:48:4E:19:24:40:F9:1E:20:5B:40:C5:3C:2D:D2:E1:8F:96:53 Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e Certificate serial: 019B66FC020A58A96C9BF535DBADE9B9C0AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 22:02:30 +0000 Manifest this update: Sun 28 Dec 2025 22:02:30 +0000 Manifest next update: Mon 29 Dec 2025 22:02:30 +0000 Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=) 2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: x0igN03X8kdSdSRiNyOU0yxWKBCu3nt0QtdZRR8twm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fc:02:0a:58:a9:6c:9b:f5:35:db:ad:e9:b9:c0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e Validity Not Before: Dec 28 22:02:30 2025 GMT Not After : Dec 29 22:02:30 2025 GMT Subject: CN=80e6484e192440f91e205b40c53c2dd2e18f9653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:49:c0:f7:f5:71:43:81:27:1f:9e:4d:5b: 61:2b:16:50:a6:bf:d3:51:ea:d6:dc:45:c1:6a:d5: 73:e2:5d:0f:4f:3c:24:a8:5a:8a:56:30:9e:f2:85: 3c:4b:de:5f:dc:33:c4:6d:36:f7:d4:d5:c3:6a:9c: 9f:92:96:c3:7e:da:78:b4:fa:8c:c1:33:5c:4a:77: 35:1d:87:5e:fe:e8:d0:ff:ab:f4:cc:79:91:1e:84: 88:fc:9c:b3:33:b4:0c:a1:a1:88:37:fb:02:bb:54: 3b:ef:44:8d:b6:3c:29:ad:65:ac:a8:45:47:68:3c: c9:4c:28:7a:e5:2d:0c:cf:79:d1:b7:ff:af:ed:05: 00:79:cf:be:48:d2:54:f3:22:fd:a6:fd:fb:ca:f9: 71:78:2c:42:5d:78:aa:b7:ea:01:ff:ef:1f:5a:2d: 58:72:b6:9c:b0:d7:d3:2d:38:15:43:00:a1:6d:21: f0:7b:13:db:ea:e9:ac:3f:c7:0c:23:57:7c:bf:e5: 58:22:58:3b:40:52:ce:f0:bd:cf:08:3c:8a:39:62: eb:5a:42:d0:5b:fa:2b:61:16:59:cb:c4:ef:f8:4a: d6:7b:1e:4a:d9:ce:92:e9:44:b1:92:79:a1:0a:b7: ba:08:03:11:95:7d:86:9c:fd:c8:91:9b:5d:61:db: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E6:48:4E:19:24:40:F9:1E:20:5B:40:C5:3C:2D:D2:E1:8F:96:53 X509v3 Authority Key Identifier: keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f3:05:01:e3:2b:5f:18:0a:8b:f6:97:73:34:07:02:8b:9f: 1e:b7:f6:45:cc:b7:9d:43:b7:7b:63:1a:c0:f5:cf:a6:4f:f6: 07:f8:2b:a0:3f:bf:17:15:05:3a:bf:59:e7:e9:22:e1:33:46: f0:88:bb:0f:13:0c:54:8d:6c:d0:46:ca:ed:33:21:35:cf:59: 69:e0:25:73:9f:41:f5:0a:fb:b3:c5:c1:3e:7e:ae:2b:e6:42: c0:86:bf:91:fa:cd:07:ec:fb:3d:ae:91:72:51:54:8c:41:8a: 69:0b:e0:b2:aa:b5:29:3a:64:10:22:b1:e0:58:ac:02:1d:27: 24:bd:ba:53:ec:96:03:4b:92:52:11:24:72:ae:80:81:3c:8c: 66:0b:54:ae:0f:86:cf:72:37:7b:45:ea:02:77:62:8c:22:b9: c2:0f:f0:00:2f:f9:7c:b6:72:85:1e:cb:74:a9:0e:89:7a:0c: db:48:15:98:57:61:e2:32:80:56:de:35:fe:a2:7d:ab:29:6f: 24:44:f5:49:cf:46:09:22:4b:59:42:87:26:d9:41:dd:53:8b: 81:c6:c9:84:06:46:ef:56:23:42:16:bb:8a:6a:8a:b1:a7:5a: 57:e7:72:44:2a:6f:d2:88:27:57:3a:bf:73:63:e3:18:83:f4: b5:e2:6a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm/AIKWKlsm/U1263pucCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTMwYjYwZDIzZDc0ZTgyMjZiY2Q1ZTE1ZGM1YmY3NzBh ZDMwN2UwHhcNMjUxMjI4MjIwMjMwWhcNMjUxMjI5MjIwMjMwWjAzMTEwLwYDVQQD Eyg4MGU2NDg0ZTE5MjQ0MGY5MWUyMDViNDBjNTNjMmRkMmUxOGY5NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1lJwPf1cUOBJx+eTVthKxZQpr/T UerW3EXBatVz4l0PTzwkqFqKVjCe8oU8S95f3DPEbTb31NXDapyfkpbDftp4tPqM wTNcSnc1HYde/ujQ/6v0zHmRHoSI/JyzM7QMoaGIN/sCu1Q770SNtjwprWWsqEVH aDzJTCh65S0Mz3nRt/+v7QUAec++SNJU8yL9pv37yvlxeCxCXXiqt+oB/+8fWi1Y cracsNfTLTgVQwChbSHwexPb6umsP8cMI1d8v+VYIlg7QFLO8L3PCDyKOWLrWkLQ W/orYRZZy8Tv+ErWex5K2c6S6USxknmhCre6CAMRlX2GnP3IkZtdYdvB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDmSE4ZJED5HiBbQMU8LdLhj5ZTMB8GA1UdIwQY MBaAFCSjC2DSPXToImvNXhXcW/dwrTB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmIt OGIzYmY4YmY5OGViLzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmItOGIzYmY4YmY5OGVi LzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfMFAeMr XxgKi/aXczQHAoufHrf2Rcy3nUO3e2MawPXPpk/2B/groD+/FxUFOr9Z5+ki4TNG 8Ii7DxMMVI1s0EbK7TMhNc9ZaeAlc59B9Qr7s8XBPn6uK+ZCwIa/kfrNB+z7Pa6R clFUjEGKaQvgsqq1KTpkECKx4FisAh0nJL26U+yWA0uSUhEkcq6AgTyMZgtUrg+G z3I3e0XqAndijCK5wg/wAC/5fLZyhR7LdKkOiXoM20gVmFdh4jKAVt41/qJ9qylv JET1Sc9GCSJLWUKHJtlB3VOLgcbJhAZG71YjQha7imqKsadaV+dyRCpv0ognVzq/ c2PjGIP0teJqZw== -----END CERTIFICATE-----Generated at Mon Dec 29 05:25:44 2025 by rpki-client