This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json) Hash identifier: 4i6aZ5tB7uF7700n2R218TDzXUXc4196cibmHUDHKyI= Subject key identifier: 5B:EE:7B:72:F5:CB:99:63:66:CB:10:AD:4C:19:A5:05:A5:40:F3:7F Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89 Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889 Certificate serial: 019B3757AB2788185657E6E72B4A424FDAA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft Manifest number: 1150 Signing time: Fri 19 Dec 2025 16:00:50 +0000 Manifest this update: Fri 19 Dec 2025 16:00:50 +0000 Manifest next update: Sat 20 Dec 2025 16:00:50 +0000 Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: qocw/ecWy0vWgmeKX+FWCbQcrZaGq7Twlr+9A0WioNE=) 2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:ab:27:88:18:56:57:e6:e7:2b:4a:42:4f:da:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889 Validity Not Before: Dec 19 16:00:50 2025 GMT Not After : Dec 20 16:00:50 2025 GMT Subject: CN=5bee7b72f5cb996366cb10ad4c19a505a540f37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:40:b9:5a:38:8c:49:d3:cc:94:4f:57:c9:65: 3d:e7:2c:7f:7c:7f:41:27:87:ea:a3:a5:11:1f:44: 67:b9:b7:c4:75:b0:38:81:64:39:89:92:0f:4e:b3: 22:06:d2:0f:8e:91:dd:93:2c:79:05:ef:58:1a:23: 5b:81:fe:ed:fa:63:b4:4e:67:64:61:b8:f4:6f:c7: 59:4f:58:ee:fa:74:51:d4:82:69:4d:2f:3a:e6:9e: 88:c3:65:43:2a:aa:80:16:29:45:d3:2c:6e:83:a4: dc:53:ee:25:af:34:7f:ae:bd:84:8c:ca:d8:c4:db: 23:9a:86:ac:2d:23:2d:35:78:27:91:a8:04:92:28: f7:22:35:d1:59:f9:47:53:0a:2a:f9:ba:a0:51:30: be:1d:70:6c:89:c2:4c:14:48:bc:15:d1:12:75:14: 50:08:03:2a:b1:e4:9c:fe:3a:c5:11:56:04:74:e5: 5c:d9:e7:bf:69:ab:71:d0:67:36:e6:c8:7b:b1:19: b2:32:01:19:fd:02:73:10:ad:8a:77:f9:37:8b:d7: 2d:43:8b:c6:4a:f5:35:b7:1b:8f:55:bb:f7:ac:d4: 61:fe:1a:e4:bd:f6:17:9d:41:17:9c:23:48:79:24: e3:e3:2b:69:a9:c2:7b:e4:10:31:06:ed:68:c6:51: 9f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EE:7B:72:F5:CB:99:63:66:CB:10:AD:4C:19:A5:05:A5:40:F3:7F X509v3 Authority Key Identifier: keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:03:ec:77:a5:c0:e9:0f:28:f0:c8:c6:2e:19:9c:59:68:d0: fc:78:26:25:0b:fe:77:bc:96:78:fa:bc:14:d7:f9:d1:f2:49: 7e:0c:ba:5c:d0:e7:04:c3:02:dc:c8:c8:fb:9f:02:1f:47:ae: 65:23:37:0e:03:55:09:5a:6d:0c:4c:49:48:90:3a:04:19:b1: 4f:c9:a5:61:85:40:3f:19:00:4a:ce:6d:da:af:c4:29:8c:d7: fd:eb:f4:f9:0c:66:34:36:c2:8c:8f:e0:a7:06:f2:bf:c3:a2: 36:28:18:d0:e4:3e:de:e5:58:44:1f:e2:2b:fe:8d:70:d2:b2: 51:77:19:94:b9:2b:eb:be:48:55:46:a3:ee:c3:2e:a4:d1:8a: 40:11:f2:24:a7:8c:e5:a5:39:29:f7:03:60:c1:5b:e0:0a:96: cd:24:70:e1:0a:52:bc:7c:cf:38:41:2b:35:93:27:8c:ef:90: 27:72:df:01:e5:f2:3a:ad:de:e6:21:ba:84:89:f4:b2:dd:76: 6e:3d:cb:67:6b:6b:c9:84:54:11:5e:2f:7e:91:43:ba:78:d5: b5:31:72:67:8a:62:d0:ee:f8:81:a9:2c:5a:84:ef:8e:bf:44: 5d:8a:7f:d6:3a:f4:49:7e:13:01:65:55:f8:69:bc:3a:45:fa: 98:99:e6:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V6sniBhWV+bnK0pCT9qmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZDk4YzA1NzBhZmU5ZjFhYWViZDBkOWVhMmZjMjhjMWRm ZDk4ODkwHhcNMjUxMjE5MTYwMDUwWhcNMjUxMjIwMTYwMDUwWjAzMTEwLwYDVQQD Eyg1YmVlN2I3MmY1Y2I5OTYzNjZjYjEwYWQ0YzE5YTUwNWE1NDBmMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0C5WjiMSdPMlE9XyWU95yx/fH9B J4fqo6URH0RnubfEdbA4gWQ5iZIPTrMiBtIPjpHdkyx5Be9YGiNbgf7t+mO0Tmdk Ybj0b8dZT1ju+nRR1IJpTS865p6Iw2VDKqqAFilF0yxug6TcU+4lrzR/rr2EjMrY xNsjmoasLSMtNXgnkagEkij3IjXRWflHUwoq+bqgUTC+HXBsicJMFEi8FdESdRRQ CAMqseSc/jrFEVYEdOVc2ee/aatx0Gc25sh7sRmyMgEZ/QJzEK2Kd/k3i9ctQ4vG SvU1txuPVbv3rNRh/hrkvfYXnUEXnCNIeSTj4ytpqcJ75BAxBu1oxlGfRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvue3L1y5ljZssQrUwZpQWlQPN/MB8GA1UdIwQY MBaAFI7ZjAVwr+nxquvQ2eovwowd/ZiJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMt NDBmOGE4Y2QxYmRkLzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMtNDBmOGE4Y2QxYmRk LzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwPsd6XA 6Q8o8MjGLhmcWWjQ/HgmJQv+d7yWePq8FNf50fJJfgy6XNDnBMMC3MjI+58CH0eu ZSM3DgNVCVptDExJSJA6BBmxT8mlYYVAPxkASs5t2q/EKYzX/ev0+QxmNDbCjI/g pwbyv8OiNigY0OQ+3uVYRB/iK/6NcNKyUXcZlLkr675IVUaj7sMupNGKQBHyJKeM 5aU5KfcDYMFb4AqWzSRw4QpSvHzPOEErNZMnjO+QJ3LfAeXyOq3e5iG6hIn0st12 bj3LZ2tryYRUEV4vfpFDunjVtTFyZ4pi0O74gaksWoTvjr9EXYp/1jr0SX4TAWVV +Gm8OkX6mJnmqg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:12:47 2025 by rpki-client