This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft File: JovHlTH32BXSsrUin5rJ9vi_68o.mft (raw, json) Hash identifier: wdkJ7lW5bE5nv9UtIJHW8rBcTWmYb7BEALNy3uzpzNU= Subject key identifier: 55:5D:8D:0B:A2:B0:D5:D2:89:4F:2F:2C:B1:5A:0B:56:26:CF:85:3E Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA Certificate issuer: /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca Certificate serial: 019B51BC79FE638EA50FD8F54F898653F2A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft Manifest number: 0248 Signing time: Wed 24 Dec 2025 19:01:04 +0000 Manifest this update: Wed 24 Dec 2025 19:01:04 +0000 Manifest next update: Thu 25 Dec 2025 19:01:04 +0000 Files and hashes: 1: JovHlTH32BXSsrUin5rJ9vi_68o.crl (hash: hbHgfG71NfDaK5hS4d7MjBm5vLPXEc+X64DAZdKwB1o=) 2: fbUeFXfkxWs40ix5vT2S2k90Z-k.roa (hash: UcP80IpCz9vBYWCvKMhbqTO9Etv9kTfCKFjSdIAUqCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:79:fe:63:8e:a5:0f:d8:f5:4f:89:86:53:f2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca Validity Not Before: Dec 24 19:01:04 2025 GMT Not After : Dec 25 19:01:04 2025 GMT Subject: CN=555d8d0ba2b0d5d2894f2f2cb15a0b5626cf853e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:68:e6:bd:d7:71:26:0a:a5:59:86:9c:c4: 1b:97:7c:c3:96:b0:2f:99:f8:d7:f9:2f:c7:fe:2d: 9a:ad:78:cd:fb:b0:97:f0:3b:1a:11:44:0f:78:82: 5b:86:c1:a9:fc:c9:c7:17:ef:23:4b:50:f0:5a:30: 01:27:a3:00:11:cc:49:3f:90:a6:f0:2a:18:bb:4c: ed:7a:42:ed:66:e8:ea:be:cf:1b:00:91:27:78:7b: 07:86:34:a2:7a:00:bb:08:42:c0:86:af:aa:96:4d: d2:9a:98:77:ac:b7:a7:c2:aa:6b:87:b1:f3:49:45: 5d:bf:48:d1:a2:4b:7d:36:a0:bb:57:52:a3:cc:39: 4e:8a:35:90:3b:39:74:b8:4a:50:92:f0:a2:b8:b4: 5d:e4:28:df:07:72:b3:3e:7e:4b:14:5f:49:6c:c4: 07:1c:ea:84:35:38:ad:50:41:47:1f:85:1b:bd:3b: 96:67:66:02:fd:40:10:e2:f2:cf:64:02:8e:d1:d2: 35:d7:f4:71:7d:28:8f:c0:92:09:52:74:94:aa:78: 89:ff:bc:a2:0a:65:e3:e7:29:9e:d0:0c:32:ef:cc: 5d:75:6c:b4:1b:b7:df:2f:57:92:b7:f0:51:d2:39: a8:3f:ea:99:05:22:b8:f8:3e:bb:25:91:3f:c8:40: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5D:8D:0B:A2:B0:D5:D2:89:4F:2F:2C:B1:5A:0B:56:26:CF:85:3E X509v3 Authority Key Identifier: keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:06:ea:02:86:89:ac:4f:34:57:1e:49:b3:95:50:c9:b5:5a: 42:ac:3d:3e:a6:3e:db:12:f7:1d:7f:46:ef:16:71:49:f0:bd: 66:21:57:e0:be:c2:51:a7:28:c3:c9:7c:70:34:a0:b5:f5:f8: 61:7e:0b:c8:57:24:4a:77:1a:36:f6:8d:4a:1a:0b:53:15:5a: 7a:fb:6c:e1:19:28:0d:10:ae:45:df:cf:75:5e:fe:d7:f0:8f: e1:d4:10:03:a0:75:53:53:f4:9b:14:6f:ee:b7:69:fd:f1:af: ce:90:5c:91:5d:14:d8:b7:82:52:8f:da:6a:f4:fc:2c:32:08: dd:6e:da:63:fb:ae:8c:3c:11:6c:d9:4b:3f:3f:4c:f0:fd:61: c1:27:dc:23:06:b0:c7:cf:79:3a:b2:c6:d7:14:ea:d7:3d:7c: 40:40:57:47:aa:61:67:1e:9f:82:41:59:19:58:51:b8:df:9a: ec:cf:6c:fe:44:5d:ed:c8:a9:a0:7a:ad:5d:48:1e:5e:cf:e6: b5:95:c0:77:ea:9e:ca:d5:67:36:07:57:a2:d5:9a:5f:23:42: ff:f0:6b:04:27:d8:82:72:7c:b3:16:10:e6:10:36:98:9b:e3: 4a:35:2c:54:5f:ea:cd:92:47:27:e9:e2:ee:5b:a6:3f:4f:01: 31:78:01:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvHn+Y46lD9j1T4mGU/KkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGJjNzk1MzFmN2Q4MTVkMmIyYjUyMjlmOWFjOWY2Zjhi ZmViY2EwHhcNMjUxMjI0MTkwMTA0WhcNMjUxMjI1MTkwMTA0WjAzMTEwLwYDVQQD Eyg1NTVkOGQwYmEyYjBkNWQyODk0ZjJmMmNiMTVhMGI1NjI2Y2Y4NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Zo5r3XcSYKpVmGnMQbl3zDlrAv mfjX+S/H/i2arXjN+7CX8DsaEUQPeIJbhsGp/MnHF+8jS1DwWjABJ6MAEcxJP5Cm 8CoYu0ztekLtZujqvs8bAJEneHsHhjSiegC7CELAhq+qlk3Smph3rLenwqprh7Hz SUVdv0jRokt9NqC7V1KjzDlOijWQOzl0uEpQkvCiuLRd5CjfB3KzPn5LFF9JbMQH HOqENTitUEFHH4UbvTuWZ2YC/UAQ4vLPZAKO0dI11/RxfSiPwJIJUnSUqniJ/7yi CmXj5yme0Awy78xddWy0G7ffL1eSt/BR0jmoP+qZBSK4+D67JZE/yECeZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVdjQuisNXSiU8vLLFaC1Ymz4U+MB8GA1UdIwQY MBaAFCaLx5Ux99gV0rK1Ip+ayfb4v+vKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZjA3ZTAtMDc1ZC00NTQ4LTljOWEt MTU1YjM1N2JkODgwLzEvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yZjA3ZTAtMDc1ZC00NTQ4LTljOWEtMTU1YjM1N2JkODgw LzEvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwbqAoaJ rE80Vx5Js5VQybVaQqw9PqY+2xL3HX9G7xZxSfC9ZiFX4L7CUacow8l8cDSgtfX4 YX4LyFckSncaNvaNShoLUxVaevts4RkoDRCuRd/PdV7+1/CP4dQQA6B1U1P0mxRv 7rdp/fGvzpBckV0U2LeCUo/aavT8LDII3W7aY/uujDwRbNlLPz9M8P1hwSfcIwaw x895OrLG1xTq1z18QEBXR6phZx6fgkFZGVhRuN+a7M9s/kRd7cipoHqtXUgeXs/m tZXAd+qeytVnNgdXotWaXyNC//BrBCfYgnJ8sxYQ5hA2mJvjSjUsVF/qzZJHJ+ni 7lumP08BMXgBNw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:19:41 2025 by rpki-client