This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft File: JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json) Hash identifier: LkrLIjqlwB15A9MI5s57s4UvEdVZ63phssdDEgEMzMU= Subject key identifier: 2E:80:4D:95:4B:42:C8:3E:C9:A3:5F:08:54:2C:A0:94:79:5D:B0:11 Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7 Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7 Certificate serial: 019B4F60739DEEDCDA9AD40A42666967C337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft Manifest number: 12C5 Signing time: Wed 24 Dec 2025 08:01:19 +0000 Manifest this update: Wed 24 Dec 2025 08:01:19 +0000 Manifest next update: Thu 25 Dec 2025 08:01:19 +0000 Files and hashes: 1: BQcLEt_fhF3T8cK9G4llL9qzCF4.roa (hash: HsXDiNZ/6cIaXPnh2ptBxpxCA2P5yT/9b+aknpD6TWU=) 2: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: MZSwz0ZSqlz05zSjipXuN2E81ubn68FRyMoAT3dNGWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:73:9d:ee:dc:da:9a:d4:0a:42:66:69:67:c3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7 Validity Not Before: Dec 24 08:01:19 2025 GMT Not After : Dec 25 08:01:19 2025 GMT Subject: CN=2e804d954b42c83ec9a35f08542ca094795db011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:1d:43:e8:c8:a9:63:6a:5a:fd:2b:07:23: ef:09:b2:20:5e:49:76:b4:73:78:e5:fb:36:fb:40: 93:e1:b0:5d:ae:c1:bd:2a:af:e4:9e:93:98:2d:7a: 07:50:39:44:02:69:d7:41:39:92:82:76:6b:75:19: 7a:09:61:8e:c0:bd:9e:12:be:80:0a:96:2d:56:2d: 7b:c7:84:f7:43:72:ff:93:42:2b:02:47:df:fb:e2: 8c:f1:e4:dc:dc:39:74:1d:bd:d5:13:8a:24:1f:13: 51:c9:da:43:db:39:30:93:0e:71:50:21:ce:9a:52: 1d:65:8a:c7:6f:fd:c2:1f:7e:94:0a:07:ce:46:5c: 3c:54:39:9f:70:b4:fb:e7:cc:05:8f:53:61:9f:4d: fb:4d:7a:9b:3e:fd:3a:04:fc:6c:00:be:49:b5:b6: c1:91:43:94:24:17:c8:80:be:5c:29:2e:5d:9d:04: de:3c:24:5d:f0:6a:5f:53:c1:3b:62:b1:92:33:d5: 5b:93:c0:b6:4b:e5:8a:f1:22:2f:3b:bb:4d:8a:0b: 9d:49:ba:f2:c8:b6:ae:ec:40:4c:62:56:74:87:c3: 22:5e:93:dd:4b:94:82:c6:34:b4:83:43:72:b2:db: 3b:61:cc:b0:fa:24:5c:d4:b8:5a:5e:fc:54:e5:86: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:80:4D:95:4B:42:C8:3E:C9:A3:5F:08:54:2C:A0:94:79:5D:B0:11 X509v3 Authority Key Identifier: keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b4:63:97:71:83:90:ff:2d:c3:b9:a5:5a:ea:ae:7a:70:76: f2:33:25:0f:65:88:67:c7:56:8d:d2:14:a2:99:d9:8c:09:b9: e2:8d:db:96:78:f9:07:a8:dd:5e:1d:fc:b5:7b:8d:86:85:24: a8:b8:d3:c8:c8:dd:d6:de:11:ac:9e:fe:9e:f5:06:19:46:0c: 85:d8:6d:d7:d3:14:3d:80:c0:0c:96:78:82:e5:af:30:f5:4e: 92:3b:e4:9b:42:1d:7e:6c:6e:47:26:63:bb:92:ec:8c:21:b1: 40:ba:c8:5a:7c:f3:ee:af:9c:72:3d:d6:f2:90:29:76:9a:bd: e0:a2:cd:33:30:b1:b5:2e:76:0c:6b:fe:6c:3a:63:db:9e:fb: 6a:77:66:1c:53:63:ff:df:b0:2a:84:0b:7b:16:54:ff:b2:3f: 4b:da:d3:a8:17:09:4e:7b:4b:6f:d3:53:3c:61:a7:e9:b0:8b: 85:2a:e4:5d:02:9d:f7:a1:e8:cb:8f:08:29:d0:ea:5e:e2:28: ca:69:19:9c:fc:4e:b6:5e:9c:cd:16:58:e9:5f:98:9c:d8:a7: 32:b8:88:08:e7:fb:16:9f:7a:bc:f8:07:68:1c:90:25:7f:36: 5a:c3:66:ed:04:84:da:b5:ac:43:9e:4f:95:00:99:a7:f0:c3: 7d:37:db:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYHOd7tzamtQKQmZpZ8M3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTdmYTk1NmYwZjUzOTgwZDc5YzMyY2UxZTZlOTNlZmQ0 ODhmZDcwHhcNMjUxMjI0MDgwMTE5WhcNMjUxMjI1MDgwMTE5WjAzMTEwLwYDVQQD EygyZTgwNGQ5NTRiNDJjODNlYzlhMzVmMDg1NDJjYTA5NDc5NWRiMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKodQ+jIqWNqWv0rByPvCbIgXkl2 tHN45fs2+0CT4bBdrsG9Kq/knpOYLXoHUDlEAmnXQTmSgnZrdRl6CWGOwL2eEr6A CpYtVi17x4T3Q3L/k0IrAkff++KM8eTc3Dl0Hb3VE4okHxNRydpD2zkwkw5xUCHO mlIdZYrHb/3CH36UCgfORlw8VDmfcLT758wFj1Nhn037TXqbPv06BPxsAL5JtbbB kUOUJBfIgL5cKS5dnQTePCRd8GpfU8E7YrGSM9Vbk8C2S+WK8SIvO7tNigudSbry yLau7EBMYlZ0h8MiXpPdS5SCxjS0g0Nysts7Ycyw+iRc1LhaXvxU5Yb1QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6ATZVLQsg+yaNfCFQsoJR5XbARMB8GA1UdIwQY MBaAFCVX+pVvD1OYDXnDLOHm6T79SI/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MjBmZWEtM2M4ZC00OTc3LTgwMDAt NmQ3MTYzNDQyMjQ0LzEvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84MjBmZWEtM2M4ZC00OTc3LTgwMDAtNmQ3MTYzNDQyMjQ0 LzEvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLRjl3GD kP8tw7mlWuquenB28jMlD2WIZ8dWjdIUopnZjAm54o3blnj5B6jdXh38tXuNhoUk qLjTyMjd1t4RrJ7+nvUGGUYMhdht19MUPYDADJZ4guWvMPVOkjvkm0IdfmxuRyZj u5LsjCGxQLrIWnzz7q+ccj3W8pApdpq94KLNMzCxtS52DGv+bDpj2577andmHFNj /9+wKoQLexZU/7I/S9rTqBcJTntLb9NTPGGn6bCLhSrkXQKd96Hoy48IKdDqXuIo ymkZnPxOtl6czRZY6V+YnNinMriICOf7Fp96vPgHaByQJX82WsNm7QSE2rWsQ55P lQCZp/DDfTfbVA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:27 2025 by rpki-client