This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json) Hash identifier: oAIYEl1nj1gqcdIDgPd/jocVdFMItJFXa/SNLKtVIk8= Subject key identifier: C8:6C:DE:4B:5A:8D:92:1B:D8:5B:D1:32:7A:DA:4B:FC:00:30:E0:79 Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Certificate serial: 019B5305C19C23897301ACD76A13A8A42925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft Manifest number: 0A73 Signing time: Thu 25 Dec 2025 01:00:44 +0000 Manifest this update: Thu 25 Dec 2025 01:00:44 +0000 Manifest next update: Fri 26 Dec 2025 01:00:44 +0000 Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: U79+KbeMyhaAL++F8UqU2wC/gl11nIYP17EWVP4r27g=) 2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:c1:9c:23:89:73:01:ac:d7:6a:13:a8:a4:29:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Validity Not Before: Dec 25 01:00:44 2025 GMT Not After : Dec 26 01:00:44 2025 GMT Subject: CN=c86cde4b5a8d921bd85bd1327ada4bfc0030e079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:34:64:40:10:02:15:3d:1d:58:aa:a4:e3: 45:90:be:6f:f2:ec:c4:e7:cf:84:39:3a:f7:44:a2: 22:9d:8f:01:a0:04:5b:8c:bb:79:97:d5:00:a6:9b: 29:75:91:21:04:46:be:4e:ac:7b:0e:7b:60:dc:ed: 58:43:7e:d7:9c:cf:60:f2:60:02:5d:8d:94:89:af: 5e:1a:3d:e7:af:64:cb:f9:e0:75:28:4e:bb:4e:d9: 08:62:9f:31:3e:f0:34:99:02:32:ff:a0:c4:81:ea: 94:53:de:11:86:8f:43:69:3e:06:46:c6:9a:7c:21: d1:86:b3:9b:ae:f4:73:46:a0:f6:e2:d8:6c:b5:04: e4:69:6a:2e:b8:45:82:62:c0:ea:cd:22:3f:34:b9: b2:bc:16:c4:87:55:97:a2:83:d2:3d:8b:b4:f7:b2: 6c:9a:71:97:da:39:bf:02:eb:2d:03:c5:a9:80:5d: c6:24:84:77:b1:f1:fb:b8:42:a1:06:e9:10:87:3f: 6d:f9:ed:50:8a:fe:f1:7b:af:4a:0f:9f:49:74:d8: fe:b0:5a:65:0c:90:99:35:4d:20:45:5a:c2:ff:a8: 64:82:86:c7:10:65:ac:72:e2:27:a8:a5:c3:fe:ec: 9e:d7:6a:f7:24:ec:f6:a5:79:1c:13:08:3d:1e:ae: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6C:DE:4B:5A:8D:92:1B:D8:5B:D1:32:7A:DA:4B:FC:00:30:E0:79 X509v3 Authority Key Identifier: keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1d:09:70:2a:21:db:2a:65:79:f1:cd:79:48:a3:a0:7b:f9: b6:0d:f5:11:d8:90:59:4b:16:17:f9:64:e4:a5:e7:2b:a8:58: 76:db:d0:07:68:35:56:4d:ed:e2:49:e3:6d:79:a0:4c:ec:6b: ce:f0:85:6b:07:0a:ed:35:ab:85:6c:18:83:fb:9a:2d:50:04: 4a:ee:56:1e:70:ad:33:20:93:f8:65:e7:33:43:bc:c4:55:c7: a4:3d:88:bc:22:ab:ef:a0:bd:de:09:e4:71:8c:fd:e4:d1:e5: 72:df:cb:25:f6:04:79:fc:30:0d:d8:c2:bf:a4:3a:21:b3:e0: 91:97:cc:2c:af:fb:bf:76:2c:6b:68:aa:df:48:d2:23:00:3c: 25:3c:d1:be:be:5e:09:92:f2:26:51:81:c5:b9:34:5b:ed:9a: dd:b1:21:90:45:69:d6:80:3c:1f:fb:10:40:9c:f3:4f:76:2c: 9e:64:09:3d:e6:df:ac:e6:e6:8f:a1:32:e9:b4:0e:34:e6:43: 6f:d3:1e:d3:ce:6d:41:58:c9:65:11:a9:9d:0d:17:98:78:a1: 94:fa:b3:26:4e:87:3c:73:f1:44:6d:63:fb:98:4e:42:d9:67: 72:61:c9:2a:05:12:a7:aa:25:c5:3e:a8:63:83:0c:c3:a8:f8: 0b:35:1c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBcGcI4lzAazXahOopCklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1 ZjU2ZTQwHhcNMjUxMjI1MDEwMDQ0WhcNMjUxMjI2MDEwMDQ0WjAzMTEwLwYDVQQD EyhjODZjZGU0YjVhOGQ5MjFiZDg1YmQxMzI3YWRhNGJmYzAwMzBlMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZQ0ZEAQAhU9HViqpONFkL5v8uzE 58+EOTr3RKIinY8BoARbjLt5l9UAppspdZEhBEa+Tqx7Dntg3O1YQ37XnM9g8mAC XY2Uia9eGj3nr2TL+eB1KE67TtkIYp8xPvA0mQIy/6DEgeqUU94Rho9DaT4GRsaa fCHRhrObrvRzRqD24thstQTkaWouuEWCYsDqzSI/NLmyvBbEh1WXooPSPYu097Js mnGX2jm/AustA8WpgF3GJIR3sfH7uEKhBukQhz9t+e1Qiv7xe69KD59JdNj+sFpl DJCZNU0gRVrC/6hkgobHEGWscuInqKXD/uye12r3JOz2pXkcEwg9Hq4wSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhs3ktajZIb2FvRMnraS/wAMOB5MB8GA1UdIwQY MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeB0JcCoh 2yplefHNeUijoHv5tg31EdiQWUsWF/lk5KXnK6hYdtvQB2g1Vk3t4knjbXmgTOxr zvCFawcK7TWrhWwYg/uaLVAESu5WHnCtMyCT+GXnM0O8xFXHpD2IvCKr76C93gnk cYz95NHlct/LJfYEefwwDdjCv6Q6IbPgkZfMLK/7v3Ysa2iq30jSIwA8JTzRvr5e CZLyJlGBxbk0W+2a3bEhkEVp1oA8H/sQQJzzT3YsnmQJPebfrObmj6Ey6bQONOZD b9Me085tQVjJZRGpnQ0XmHihlPqzJk6HPHPxRG1j+5hOQtlncmHJKgUSp6olxT6o Y4MMw6j4CzUc9Q== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:54 2025 by rpki-client