This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json) Hash identifier: 0cZ7nZpUQL0ZghNNKst47uq3uzKOoQ1ix/khWOON40U= Subject key identifier: E3:62:9F:E7:1C:00:DC:D4:1B:4E:72:4B:8B:AB:EE:CA:5F:C2:B9:27 Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11 Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611 Certificate serial: 019B4F2922AAA44AFDBFB123C2485362000F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 07:00:54 +0000 Manifest this update: Wed 24 Dec 2025 07:00:54 +0000 Manifest next update: Thu 25 Dec 2025 07:00:54 +0000 Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: /NNAr/MM6P3tHg2K8/rRLbwgRogqo2s6kP+tn8f4SZQ=) 2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:22:aa:a4:4a:fd:bf:b1:23:c2:48:53:62:00:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256be176b313e1a8a050f670af576771b655d611 Validity Not Before: Dec 24 07:00:54 2025 GMT Not After : Dec 25 07:00:54 2025 GMT Subject: CN=e3629fe71c00dcd41b4e724b8babeeca5fc2b927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:77:db:59:dd:67:8e:35:7e:f8:55:27:a4: 53:3a:70:99:0f:70:85:70:26:90:7c:56:71:e1:ff: bf:8d:ce:b5:86:6d:60:1b:ad:d8:e6:53:52:ca:89: a4:f6:63:cd:85:75:92:84:cb:df:44:f7:29:9f:7b: 31:7e:3a:79:16:f9:61:dd:83:4e:63:95:ef:33:3d: 47:55:3e:ed:38:ea:19:ee:11:4c:dc:38:d5:1d:69: 62:8c:79:42:25:f2:cf:8b:ef:5e:61:cc:72:90:6d: 82:83:09:0d:64:a3:8c:a0:c1:88:01:14:ca:f5:f3: 3d:fd:3f:b4:66:c9:d7:b7:7d:46:93:bc:72:eb:49: ea:1c:bf:37:5c:32:ed:41:49:3c:d6:0a:62:f5:8c: 31:ea:61:cd:c6:8a:b3:36:3e:0a:39:ce:f6:2a:4a: 5e:cb:50:d9:b6:eb:da:81:f4:42:b3:ea:8f:29:5a: 5b:ce:10:9e:96:22:55:a0:4b:ca:2c:03:00:5b:6e: 77:40:59:fe:b5:bf:65:f5:53:9c:67:80:ac:20:90: 4c:63:81:28:31:62:fb:11:c8:f8:eb:cc:ab:33:e0: 21:1d:62:4e:f0:53:77:32:5e:bf:ff:3a:e6:74:a1: d9:86:ef:7d:81:d1:c4:fe:e8:d3:fd:09:63:eb:4d: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:62:9F:E7:1C:00:DC:D4:1B:4E:72:4B:8B:AB:EE:CA:5F:C2:B9:27 X509v3 Authority Key Identifier: keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:19:a2:58:b5:1a:34:43:71:43:8a:d6:86:8d:a1:3a:ae:40: 0b:cb:67:fd:c9:97:e3:65:d4:06:59:a3:0d:80:f5:47:d7:c2: ab:fd:eb:19:06:81:63:d1:b7:57:54:d0:2d:99:ef:d7:70:d3: d7:2f:d0:5b:5e:83:8c:50:b6:2c:b5:32:e5:a8:ed:bc:ec:4e: b1:61:cb:4f:d7:82:d9:74:b0:2b:ec:ad:55:8a:4c:ad:13:e3: 0c:7c:10:a4:6d:ff:05:3e:e1:7c:c0:50:ce:77:e4:47:42:44: fd:b8:25:4d:82:61:28:3f:88:3f:7b:5f:38:7d:13:9f:4f:ee: 15:25:8b:eb:6b:2b:e2:bd:1b:24:14:7e:11:73:0c:fb:1a:d0: f5:d4:33:08:66:ce:2f:55:98:8a:de:18:ea:b0:17:fc:ea:09: bc:0f:ab:09:bd:dc:8b:3d:d0:84:7e:9b:27:9e:50:a5:05:ea: f6:0e:7d:be:38:9d:d1:64:ce:7a:73:d2:83:40:a4:6b:14:f5: 36:d3:8c:48:f5:1c:96:75:99:df:4b:a1:f6:e4:60:a8:71:6e: dd:92:9c:5e:22:b0:b2:97:67:46:7c:47:d8:47:4e:f3:7c:2b: fb:fb:04:c5:17:50:df:04:cf:3a:f9:dc:73:8f:77:0f:38:40: bd:35:1c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKSKqpEr9v7EjwkhTYgAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NmJlMTc2YjMxM2UxYThhMDUwZjY3MGFmNTc2NzcxYjY1 NWQ2MTEwHhcNMjUxMjI0MDcwMDU0WhcNMjUxMjI1MDcwMDU0WjAzMTEwLwYDVQQD EyhlMzYyOWZlNzFjMDBkY2Q0MWI0ZTcyNGI4YmFiZWVjYTVmYzJiOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ip321ndZ441fvhVJ6RTOnCZD3CF cCaQfFZx4f+/jc61hm1gG63Y5lNSyomk9mPNhXWShMvfRPcpn3sxfjp5Fvlh3YNO Y5XvMz1HVT7tOOoZ7hFM3DjVHWlijHlCJfLPi+9eYcxykG2CgwkNZKOMoMGIARTK 9fM9/T+0ZsnXt31Gk7xy60nqHL83XDLtQUk81gpi9Ywx6mHNxoqzNj4KOc72Kkpe y1DZtuvagfRCs+qPKVpbzhCeliJVoEvKLAMAW253QFn+tb9l9VOcZ4CsIJBMY4Eo MWL7Ecj468yrM+AhHWJO8FN3Ml6//zrmdKHZhu99gdHE/ujT/Qlj603ZuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONin+ccANzUG05yS4ur7spfwrknMB8GA1UdIwQY MBaAFCVr4XazE+GooFD2cK9XZ3G2VdYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMt ZTBiYWM0MTYxOTUzLzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMtZTBiYWM0MTYxOTUz LzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRmiWLUa NENxQ4rWho2hOq5AC8tn/cmX42XUBlmjDYD1R9fCq/3rGQaBY9G3V1TQLZnv13DT 1y/QW16DjFC2LLUy5ajtvOxOsWHLT9eC2XSwK+ytVYpMrRPjDHwQpG3/BT7hfMBQ znfkR0JE/bglTYJhKD+IP3tfOH0Tn0/uFSWL62sr4r0bJBR+EXMM+xrQ9dQzCGbO L1WYit4Y6rAX/OoJvA+rCb3ciz3QhH6bJ55QpQXq9g59vjid0WTOenPSg0CkaxT1 NtOMSPUclnWZ30uh9uRgqHFu3ZKcXiKwspdnRnxH2EdO83wr+/sExRdQ3wTPOvnc c493DzhAvTUc3Q== -----END CERTIFICATE-----Generated at Wed Dec 24 09:01:55 2025 by rpki-client