This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft File: JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json) Hash identifier: 2Nrwmk2uQkuAqerI4urmOrBHm73wBsWci++24MUc7bg= Subject key identifier: CA:54:32:25:89:1C:DE:81:06:9E:82:D3:99:D1:CF:9C:B2:A7:E6:64 Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A Certificate issuer: /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a Certificate serial: 019B4136A5F5354F0E23D977A427D088D637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft Manifest number: 12A5 Signing time: Sun 21 Dec 2025 14:00:58 +0000 Manifest this update: Sun 21 Dec 2025 14:00:58 +0000 Manifest next update: Mon 22 Dec 2025 14:00:58 +0000 Files and hashes: 1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=) 2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: 6stPb0VuXSE9276hJ5ESFL26U90a44vyQt6DYqP52mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:a5:f5:35:4f:0e:23:d9:77:a4:27:d0:88:d6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a Validity Not Before: Dec 21 14:00:58 2025 GMT Not After : Dec 22 14:00:58 2025 GMT Subject: CN=ca543225891cde81069e82d399d1cf9cb2a7e664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:25:fa:ca:92:bb:f4:83:c0:c5:93:3b:7d:27: 3a:28:f7:2d:12:3f:42:bf:3f:51:a9:95:d7:1f:90: 4a:20:42:48:9d:51:61:cd:31:e6:5e:6a:c2:e6:f9: e1:4e:56:7d:7a:a3:ef:0b:ab:85:71:fe:fc:f2:69: 27:17:80:f4:0b:48:6a:79:b3:44:04:4d:61:90:67: a0:c5:36:4e:18:fe:d7:f4:b4:8e:7c:ef:e8:11:0b: fa:e9:88:50:52:18:e0:33:1c:5b:ff:8c:ca:55:dc: 66:5a:f7:53:b1:27:cd:e4:64:66:3a:7e:70:e8:3e: 9e:ca:8a:be:6e:17:c0:b7:24:3d:a7:21:f7:5c:74: 02:58:68:2b:0b:f1:e7:da:e9:53:bf:67:a3:6a:80: b4:ad:61:c0:24:18:93:66:51:92:27:e4:38:4d:37: e7:1a:71:e6:ed:f8:c1:90:7b:30:4f:1a:33:be:20: 4c:6c:d6:d2:a7:8b:da:09:0d:c1:dd:eb:de:c7:31: 2c:cc:8d:36:90:f9:c8:46:71:59:bd:19:34:7d:e0: bc:db:e2:b7:40:c8:59:10:1a:03:6b:83:46:57:b2: 24:aa:c0:88:6f:93:75:1f:64:b5:fe:63:46:93:7f: 5e:66:b0:43:89:59:40:a2:f0:5c:14:78:fd:db:8f: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:54:32:25:89:1C:DE:81:06:9E:82:D3:99:D1:CF:9C:B2:A7:E6:64 X509v3 Authority Key Identifier: keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:1c:b2:c9:a3:d3:a7:5a:6c:a8:90:91:57:95:00:e5:ef:b4: 7a:53:ca:3d:33:55:d5:81:96:8d:6c:f4:96:68:41:cb:c5:d1: 43:98:5c:60:c0:62:5a:fc:58:8f:06:c7:a3:53:9f:05:50:87: 57:2e:1f:50:14:8f:38:ef:81:47:46:e9:2a:57:fc:0e:72:84: 6b:5a:f9:62:f2:77:f4:cf:8c:3f:20:14:03:94:86:30:c0:88: cd:b5:f8:59:c7:3e:f9:39:69:3e:99:25:7c:e7:e2:c9:8f:b0: 3f:a6:cf:5a:32:c3:ff:85:5c:60:c4:8d:fc:f8:7d:95:23:05: 47:c1:98:97:39:f4:65:32:c2:d6:6d:68:2e:cc:f4:c0:b0:9f: 53:35:fd:ab:b6:e3:98:ac:7a:ba:ca:5e:3d:4b:bb:e7:0d:45: 03:ca:9b:bc:34:91:3d:4d:1d:70:c1:e2:d5:53:87:d2:09:66: 95:43:7a:dc:57:c1:52:87:54:fa:6d:3c:45:95:54:d4:f9:a7: a3:13:de:c0:dd:e0:68:a2:98:65:59:bf:71:00:8d:af:1c:7e: fe:74:45:78:2e:6a:62:67:d6:ed:1b:36:7b:9c:ca:c3:2c:a2: b4:17:85:02:97:79:b0:51:fe:d4:1a:d5:ad:23:f4:22:73:64: d0:4a:d5:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNqX1NU8OI9l3pCfQiNY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjcxZTUyZjdlOTdhMmVhNTNmNWVjYWJkNmI5NGJjOGMw NzVhNmEwHhcNMjUxMjIxMTQwMDU4WhcNMjUxMjIyMTQwMDU4WjAzMTEwLwYDVQQD EyhjYTU0MzIyNTg5MWNkZTgxMDY5ZTgyZDM5OWQxY2Y5Y2IyYTdlNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CX6ypK79IPAxZM7fSc6KPctEj9C vz9RqZXXH5BKIEJInVFhzTHmXmrC5vnhTlZ9eqPvC6uFcf788mknF4D0C0hqebNE BE1hkGegxTZOGP7X9LSOfO/oEQv66YhQUhjgMxxb/4zKVdxmWvdTsSfN5GRmOn5w 6D6eyoq+bhfAtyQ9pyH3XHQCWGgrC/Hn2ulTv2ejaoC0rWHAJBiTZlGSJ+Q4TTfn GnHm7fjBkHswTxozviBMbNbSp4vaCQ3B3evexzEszI02kPnIRnFZvRk0feC82+K3 QMhZEBoDa4NGV7IkqsCIb5N1H2S1/mNGk39eZrBDiVlAovBcFHj9249CMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpUMiWJHN6BBp6C05nRz5yyp+ZkMB8GA1UdIwQY MBaAFCZnHlL36XoupT9eyr1rlLyMB1pqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2Yt MjUxOThlMGVkNjg3LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2YtMjUxOThlMGVkNjg3 LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxyyyaPT p1psqJCRV5UA5e+0elPKPTNV1YGWjWz0lmhBy8XRQ5hcYMBiWvxYjwbHo1OfBVCH Vy4fUBSPOO+BR0bpKlf8DnKEa1r5YvJ39M+MPyAUA5SGMMCIzbX4Wcc++TlpPpkl fOfiyY+wP6bPWjLD/4VcYMSN/Ph9lSMFR8GYlzn0ZTLC1m1oLsz0wLCfUzX9q7bj mKx6uspePUu75w1FA8qbvDSRPU0dcMHi1VOH0glmlUN63FfBUodU+m08RZVU1Pmn oxPewN3gaKKYZVm/cQCNrxx+/nRFeC5qYmfW7Rs2e5zKwyyitBeFApd5sFH+1BrV rSP0InNk0ErVsg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:45:53 2025 by rpki-client