This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json) Hash identifier: wpDgTF+iQ8antuagfxmCLbwout0ugMTQhB7YQ6zZ7Cs= Subject key identifier: 96:F9:55:2B:39:6C:8E:C9:93:99:32:98:73:F0:4A:0C:EF:D5:F8:4D Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Certificate serial: 019B3FED52AF53D34F765047AC3E49C1D027 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft Manifest number: 07E7 Signing time: Sun 21 Dec 2025 08:01:16 +0000 Manifest this update: Sun 21 Dec 2025 08:01:16 +0000 Manifest next update: Mon 22 Dec 2025 08:01:16 +0000 Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: FnTQRp7lYT/Hk4CEvuFWcFMA/GyiRfo7I5w/Hs5p/6U=) 2: pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa (hash: YNYcfocsMawW3njWrgaZfKy0b3fCRuRw7rODR3Kt6t8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:52:af:53:d3:4f:76:50:47:ac:3e:49:c1:d0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Validity Not Before: Dec 21 08:01:16 2025 GMT Not After : Dec 22 08:01:16 2025 GMT Subject: CN=96f9552b396c8ec99399329873f04a0cefd5f84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:0c:d5:4c:fa:a8:f9:47:6a:17:66:bc:ec: 8b:d9:b3:c8:75:28:cd:d1:80:0d:31:51:3f:33:f7: 90:f6:83:18:53:53:5b:cd:90:a8:8e:cf:bb:39:7a: bb:de:e6:13:88:c6:07:25:21:89:3e:6e:a0:46:15: 4d:90:1d:18:63:2e:95:d2:4e:f0:c6:17:d2:73:9f: 9b:8e:df:81:ec:66:e2:e8:1a:1f:16:52:b4:b3:14: c4:a5:e9:f9:0c:83:09:ba:e9:7f:bd:0c:af:4b:33: eb:ff:8f:9e:1e:65:e0:b6:70:09:98:08:bd:af:64: 34:3c:c9:c6:e1:9b:2d:16:a5:78:c8:f0:41:f9:c6: 32:de:2a:4a:51:72:65:21:74:ca:a2:6a:5d:bd:7f: 24:64:fb:ea:a9:6d:8d:6f:42:e2:b2:c5:1d:65:e4: fc:4d:7f:8b:9c:be:9d:6c:a9:c0:84:b1:4f:f4:73: ed:f5:19:14:43:96:eb:89:56:b9:4c:7c:98:51:93: c8:04:1e:1f:f5:a5:10:f6:8c:7b:2e:a1:19:35:7f: c6:11:72:08:ce:2d:3b:1c:0f:37:36:f5:d7:1d:4a: 47:c1:97:13:fa:8f:54:4b:09:51:27:a9:9c:e0:87: d0:94:17:24:95:7f:37:69:e0:99:f1:cd:2c:4f:0c: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F9:55:2B:39:6C:8E:C9:93:99:32:98:73:F0:4A:0C:EF:D5:F8:4D X509v3 Authority Key Identifier: keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9f:55:4d:53:2b:fd:8a:4d:65:63:4b:b0:39:4a:52:3a:9c: a5:a1:83:f1:b0:b1:8c:39:e1:97:9a:07:c9:8d:72:b9:09:cd: 5b:f8:5a:bc:92:d4:b0:48:13:8f:45:3e:14:68:7c:9d:d2:76: 05:86:5b:0e:70:a0:4b:cd:b4:fe:34:79:6b:4b:db:10:d5:00: 60:b9:f9:9b:d6:f2:6e:24:70:c6:80:ba:fe:c5:d5:33:31:25: 1f:67:d0:39:40:e4:00:48:96:9b:dd:29:f1:0e:a6:e3:b2:7f: 23:1a:01:5f:64:d1:18:0e:04:d9:08:2d:22:44:b7:c4:2f:1f: fe:96:c7:7d:71:5b:37:c0:76:d7:d8:9e:91:7d:ee:d4:c2:c3: 37:51:80:0d:c8:97:08:1e:9b:0e:52:7c:55:71:a7:85:56:14: a8:5c:fe:0b:65:d2:5b:dc:04:84:6c:d5:46:f9:80:66:94:91: c9:17:ca:a1:02:b0:e2:19:0d:fb:94:c7:cf:37:5f:fb:68:2e: 00:b1:31:f2:bd:27:83:4e:93:ec:b7:f5:c3:5b:13:49:73:b7: c7:bd:67:20:57:9a:33:4f:b2:81:db:b5:2f:3c:8a:c1:d5:0c: ff:64:b0:b8:8c:b5:19:d9:d0:11:0c:fa:c0:72:88:73:15:dc: 2c:53:90:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7VKvU9NPdlBHrD5JwdAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl YjVhODQwHhcNMjUxMjIxMDgwMTE2WhcNMjUxMjIyMDgwMTE2WjAzMTEwLwYDVQQD Eyg5NmY5NTUyYjM5NmM4ZWM5OTM5OTMyOTg3M2YwNGEwY2VmZDVmODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLkM1Uz6qPlHahdmvOyL2bPIdSjN 0YANMVE/M/eQ9oMYU1NbzZCojs+7OXq73uYTiMYHJSGJPm6gRhVNkB0YYy6V0k7w xhfSc5+bjt+B7Gbi6BofFlK0sxTEpen5DIMJuul/vQyvSzPr/4+eHmXgtnAJmAi9 r2Q0PMnG4ZstFqV4yPBB+cYy3ipKUXJlIXTKompdvX8kZPvqqW2Nb0LissUdZeT8 TX+LnL6dbKnAhLFP9HPt9RkUQ5briVa5THyYUZPIBB4f9aUQ9ox7LqEZNX/GEXII zi07HA83NvXXHUpHwZcT+o9USwlRJ6mc4IfQlBcklX83aeCZ8c0sTwzhwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJb5VSs5bI7Jk5kymHPwSgzv1fhNMB8GA1UdIwQY MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt MjEyNzJiODc3MjhiLzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFp9VTVMr /YpNZWNLsDlKUjqcpaGD8bCxjDnhl5oHyY1yuQnNW/havJLUsEgTj0U+FGh8ndJ2 BYZbDnCgS820/jR5a0vbENUAYLn5m9bybiRwxoC6/sXVMzElH2fQOUDkAEiWm90p 8Q6m47J/IxoBX2TRGA4E2QgtIkS3xC8f/pbHfXFbN8B219iekX3u1MLDN1GADciX CB6bDlJ8VXGnhVYUqFz+C2XSW9wEhGzVRvmAZpSRyRfKoQKw4hkN+5THzzdf+2gu ALEx8r0ng06T7Lf1w1sTSXO3x71nIFeaM0+ygdu1LzyKwdUM/2SwuIy1GdnQEQz6 wHKIcxXcLFOQFA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:47:59 2025 by rpki-client