This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json) Hash identifier: 8TqrHy9h3hLkENZFKIRNxMH18byq0xVpchLIa2nkGZw= Subject key identifier: DB:5D:E8:C8:B6:94:EB:46:6E:39:61:A8:CB:6B:FA:56:CE:B5:87:07 Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Certificate serial: 019B4249AA51C6FABDCB55113180427188D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft Manifest number: 0651 Signing time: Sun 21 Dec 2025 19:01:22 +0000 Manifest this update: Sun 21 Dec 2025 19:01:22 +0000 Manifest next update: Mon 22 Dec 2025 19:01:22 +0000 Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: mknpaCsoRsLrx1GZL3MApACt84h9m/BgPk+e36Qn32E=) 2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:aa:51:c6:fa:bd:cb:55:11:31:80:42:71:88:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Validity Not Before: Dec 21 19:01:22 2025 GMT Not After : Dec 22 19:01:22 2025 GMT Subject: CN=db5de8c8b694eb466e3961a8cb6bfa56ceb58707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:c9:cf:fd:5c:d0:01:5e:2f:42:35:ce:ac: 12:0b:11:28:69:43:58:ff:af:d3:d6:28:ce:84:0d: 77:93:76:ab:98:05:56:07:f4:4e:cc:f2:aa:89:43: 94:08:38:4b:5d:0c:9b:dd:2b:93:a0:ec:cb:5d:f7: 92:d5:98:75:64:f6:ee:74:04:a0:73:15:3b:8d:11: 84:b5:7d:bc:6d:5e:b9:01:aa:66:7b:32:6b:2c:96: e3:ef:e4:37:34:7a:24:95:7e:3e:48:00:3c:4a:3c: a3:30:c1:c1:c9:6e:37:df:a3:ef:bc:7a:de:73:ed: 4b:4c:ec:18:83:07:d1:ac:6a:99:68:63:1e:46:60: 14:22:22:ad:2a:ff:13:1d:52:55:9c:3a:1a:d7:0a: e6:a8:65:4f:26:d8:bf:ea:e6:3d:07:eb:9e:6b:1a: 86:ca:fb:6d:08:60:ac:47:98:bd:97:cf:f0:97:ea: 98:fd:98:b2:6c:9f:65:2c:c6:aa:dd:16:f5:65:d9: 87:c8:c3:33:7b:55:6a:ed:f6:3d:f3:89:cd:82:d2: b2:3f:00:22:27:18:f3:6a:7c:50:af:04:ee:e4:63: e6:b5:b5:c6:43:2f:6e:50:22:65:9c:f2:ba:af:27: db:06:59:95:ee:f5:14:04:5d:38:5b:e2:a0:e6:59: 09:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5D:E8:C8:B6:94:EB:46:6E:39:61:A8:CB:6B:FA:56:CE:B5:87:07 X509v3 Authority Key Identifier: keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0f:a4:56:02:ae:54:6e:eb:02:f1:c3:e1:73:e2:36:76:a8: 66:56:88:4b:b2:27:46:92:ee:90:fa:90:28:0a:bf:54:06:7d: de:ee:52:d4:de:84:01:e4:b7:ab:2f:f5:98:c8:fa:b0:71:06: fd:97:0a:be:b7:65:f4:18:be:34:b0:ec:c4:07:6e:8c:89:63: 4a:9a:e7:7a:33:75:91:8d:4f:f3:d5:b9:db:c6:32:b9:2e:6d: fd:8b:49:c1:34:45:a2:10:f3:29:8b:4c:62:93:f0:1d:5e:e2: 29:de:6a:0b:d8:d6:e9:87:b9:3d:e6:04:7a:f2:1a:76:ea:c0: 7b:80:17:1d:9a:a1:13:97:4e:e4:03:9a:82:9e:ae:17:0c:97: 04:88:0a:7a:27:d1:fe:ee:0e:d9:8f:8b:63:95:b3:e1:a8:d5: 88:df:73:ed:a7:f8:a1:c1:a8:d1:3b:82:54:c8:e5:09:76:e1: 69:eb:6d:a4:8b:c7:49:94:68:e2:4a:3b:f6:8f:c8:35:dd:87: 36:5d:f9:12:95:40:fb:17:e8:14:78:9d:2d:23:82:4f:2e:67: 39:6d:44:ee:5e:c1:44:c3:12:5a:99:6f:36:b1:b9:b5:02:f5: 1f:e2:fb:a4:bb:d9:05:64:3c:02:0e:cc:d3:4f:62:7a:65:40: 94:87:af:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSapRxvq9y1URMYBCcYjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw YWFkMmYwHhcNMjUxMjIxMTkwMTIyWhcNMjUxMjIyMTkwMTIyWjAzMTEwLwYDVQQD EyhkYjVkZThjOGI2OTRlYjQ2NmUzOTYxYThjYjZiZmE1NmNlYjU4NzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytfJz/1c0AFeL0I1zqwSCxEoaUNY /6/T1ijOhA13k3armAVWB/ROzPKqiUOUCDhLXQyb3SuToOzLXfeS1Zh1ZPbudASg cxU7jRGEtX28bV65AapmezJrLJbj7+Q3NHoklX4+SAA8SjyjMMHByW4336PvvHre c+1LTOwYgwfRrGqZaGMeRmAUIiKtKv8THVJVnDoa1wrmqGVPJti/6uY9B+ueaxqG yvttCGCsR5i9l8/wl+qY/ZiybJ9lLMaq3Rb1ZdmHyMMze1Vq7fY984nNgtKyPwAi JxjzanxQrwTu5GPmtbXGQy9uUCJlnPK6ryfbBlmV7vUUBF04W+Kg5lkJJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtd6Mi2lOtGbjlhqMtr+lbOtYcHMB8GA1UdIwQY MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt ZjRkMzBhNzk0M2Y2LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2 LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQ+kVgKu VG7rAvHD4XPiNnaoZlaIS7InRpLukPqQKAq/VAZ93u5S1N6EAeS3qy/1mMj6sHEG /ZcKvrdl9Bi+NLDsxAdujIljSprnejN1kY1P89W528YyuS5t/YtJwTRFohDzKYtM YpPwHV7iKd5qC9jW6Ye5PeYEevIadurAe4AXHZqhE5dO5AOagp6uFwyXBIgKeifR /u4O2Y+LY5Wz4ajViN9z7af4ocGo0TuCVMjlCXbhaettpIvHSZRo4ko79o/INd2H Nl35EpVA+xfoFHidLSOCTy5nOW1E7l7BRMMSWplvNrG5tQL1H+L7pLvZBWQ8Ag7M 009iemVAlIeveg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:02:12 2025 by rpki-client