This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json) Hash identifier: 662F4nzfSg2CDgz5M2Brwj1myNNBSVw0BA8/i8utfY4= Subject key identifier: 8B:95:0F:AA:95:81:48:07:3A:D2:96:E2:26:12:EB:FF:A2:68:D1:EF Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce Certificate serial: 019B3FED1B2A74D740F6F84744F59E45EB16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft Manifest number: 0E80 Signing time: Sun 21 Dec 2025 08:01:02 +0000 Manifest this update: Sun 21 Dec 2025 08:01:02 +0000 Manifest next update: Mon 22 Dec 2025 08:01:02 +0000 Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: +uUvy4iet/oF9w4Tgmps0WbdQjI6Z2YHnTxQlNOKiC4=) 2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=) 3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:1b:2a:74:d7:40:f6:f8:47:44:f5:9e:45:eb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce Validity Not Before: Dec 21 08:01:02 2025 GMT Not After : Dec 22 08:01:02 2025 GMT Subject: CN=8b950faa958148073ad296e22612ebffa268d1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:00:ea:7e:18:c7:4c:f6:b0:a4:20:c9:1f: df:cf:2d:88:5f:85:cb:92:55:87:32:00:9d:b2:b9: 71:4d:05:6b:f6:a3:41:13:0e:ad:f3:82:eb:d4:04: b2:d9:c0:96:f1:75:66:a7:04:33:a4:37:2c:dd:8a: 09:d2:d8:18:4c:e8:5a:70:76:5c:50:bf:5f:bd:b0: 82:6f:6f:ff:55:07:a7:89:e9:eb:e7:0b:f0:5e:75: aa:2f:77:a4:d7:cc:77:08:00:ae:3d:d9:a6:ef:0f: 9f:ed:97:8e:36:81:7e:a3:a8:c5:32:83:2f:76:3f: 8e:eb:b9:cd:d3:e6:c2:a4:a0:fc:e1:b9:a8:4a:93: 3a:e3:62:da:f1:3b:1b:53:7b:d9:26:99:cc:97:94: 7a:86:5c:e7:2e:71:b4:58:69:58:b8:de:05:f1:4b: 99:48:41:00:07:eb:5d:39:a5:99:83:54:76:d9:64: 81:f0:83:32:fc:75:05:15:94:bf:79:1b:bb:2b:a9: 0f:13:9e:ab:6b:2e:72:01:a8:ab:cb:f1:e3:54:a4: c5:b3:a7:f9:90:78:13:44:d2:32:c2:e6:70:b9:82: 06:2b:9b:49:3a:f0:a4:db:f3:a8:e4:5b:d4:12:fe: 48:1e:64:0f:ca:b2:bd:69:9c:59:06:bb:2c:7e:62: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:95:0F:AA:95:81:48:07:3A:D2:96:E2:26:12:EB:FF:A2:68:D1:EF X509v3 Authority Key Identifier: keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:00:53:5f:f1:b4:5a:b4:ba:12:fc:2d:f3:c0:c0:41:61:be: 12:7f:62:bc:b9:fc:c7:91:f4:76:f9:c8:b6:2a:74:58:49:7a: e3:23:94:08:87:b8:f4:a3:48:40:08:c9:eb:da:96:63:b9:4d: af:ca:f2:54:bf:b0:ed:81:db:96:33:b9:3d:b2:5c:f6:18:21: 06:fb:f6:a6:53:51:e9:18:90:e5:32:d7:36:c8:4c:7a:5d:07: 84:82:8e:0b:2c:ea:d0:84:80:9e:eb:9c:6e:35:2d:c0:c1:00: 52:ff:8b:9c:dd:d1:84:1e:00:b5:b8:15:c1:d8:4d:90:64:1b: 1f:ba:de:bd:1a:82:6f:c2:55:90:a8:44:23:05:c6:cf:5f:cf: 46:8d:f6:0b:e5:16:00:18:fe:43:76:57:aa:40:a7:ff:7b:34: 3c:e3:70:c1:94:c5:d4:b2:a1:db:3a:cd:2a:ec:15:39:b4:d2: a9:c4:cc:0f:ac:26:97:13:2c:ea:c2:d2:24:42:51:3a:1a:aa: 33:48:25:04:32:a0:c4:a0:c8:2e:e9:ef:82:fb:97:9e:96:1b: fe:22:84:6a:15:12:76:f9:d3:10:21:9f:e1:b4:8c:f9:9f:52: e8:a1:7c:06:cc:46:c5:7c:5c:79:fa:48:11:70:e3:6f:47:4b: 7a:01:f1:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7RsqdNdA9vhHRPWeResWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTU1YmQ2ODM5NzU2Njg5NWIxNWVjYjk3ZmMxZDY1YzBj ODc5Y2UwHhcNMjUxMjIxMDgwMTAyWhcNMjUxMjIyMDgwMTAyWjAzMTEwLwYDVQQD Eyg4Yjk1MGZhYTk1ODE0ODA3M2FkMjk2ZTIyNjEyZWJmZmEyNjhkMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXkA6n4Yx0z2sKQgyR/fzy2IX4XL klWHMgCdsrlxTQVr9qNBEw6t84Lr1ASy2cCW8XVmpwQzpDcs3YoJ0tgYTOhacHZc UL9fvbCCb2//VQenienr5wvwXnWqL3ek18x3CACuPdmm7w+f7ZeONoF+o6jFMoMv dj+O67nN0+bCpKD84bmoSpM642La8TsbU3vZJpnMl5R6hlznLnG0WGlYuN4F8UuZ SEEAB+tdOaWZg1R22WSB8IMy/HUFFZS/eRu7K6kPE56ray5yAairy/HjVKTFs6f5 kHgTRNIywuZwuYIGK5tJOvCk2/Oo5FvUEv5IHmQPyrK9aZxZBrssfmKhoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuVD6qVgUgHOtKW4iYS6/+iaNHvMB8GA1UdIwQY MBaAFCSlW9aDl1ZolbFey5f8HWXAyHnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQt YzM0ZTkwZDdmOGVhLzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQtYzM0ZTkwZDdmOGVh LzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaABTX/G0 WrS6Evwt88DAQWG+En9ivLn8x5H0dvnItip0WEl64yOUCIe49KNIQAjJ69qWY7lN r8ryVL+w7YHbljO5PbJc9hghBvv2plNR6RiQ5TLXNshMel0HhIKOCyzq0ISAnuuc bjUtwMEAUv+LnN3RhB4AtbgVwdhNkGQbH7revRqCb8JVkKhEIwXGz1/PRo32C+UW ABj+Q3ZXqkCn/3s0PONwwZTF1LKh2zrNKuwVObTSqcTMD6wmlxMs6sLSJEJROhqq M0glBDKgxKDILunvgvuXnpYb/iKEahUSdvnTECGf4bSM+Z9S6KF8BsxGxXxcefpI EXDjb0dLegHx9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 11:57:57 2025 by rpki-client