This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json) Hash identifier: Iy6oyBKA626+QI8E6AYBpseqghh+z+cDciK2Hzeq7AM= Subject key identifier: 65:5E:D2:5E:EC:94:7A:FC:9B:33:F9:3C:E9:20:B3:C9:7D:71:AC:35 Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Certificate serial: 019B2C9CF5CD900AE5AD6A8AB9218DE27EB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft Manifest number: 14C7 Signing time: Wed 17 Dec 2025 14:00:42 +0000 Manifest this update: Wed 17 Dec 2025 14:00:42 +0000 Manifest next update: Thu 18 Dec 2025 14:00:42 +0000 Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: GKsYB58OpHDCYjFDrekkV2146sL+jZKhaZsg7ZEhZqA=) 2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9c:f5:cd:90:0a:e5:ad:6a:8a:b9:21:8d:e2:7e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Validity Not Before: Dec 17 14:00:42 2025 GMT Not After : Dec 18 14:00:42 2025 GMT Subject: CN=655ed25eec947afc9b33f93ce920b3c97d71ac35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:1d:83:6e:77:03:b0:e4:e1:49:7e:e4:87: fe:20:68:d6:b3:9f:fe:8b:17:53:ee:44:4f:93:ef: 47:3d:7a:4d:02:1e:cc:16:6f:f8:70:80:1c:c2:81: fc:e5:70:4b:7c:d5:5f:de:ca:40:1f:56:6f:73:94: 64:07:5d:45:9f:b9:86:77:9f:65:eb:63:9e:e2:5b: 83:9f:44:d1:3b:37:a4:1b:fc:f8:43:70:61:b5:09: 6f:6e:26:47:aa:51:68:51:3c:2b:d1:ab:6b:39:2e: b5:01:4e:64:02:38:7c:28:68:73:fe:40:af:7e:b4: 73:83:60:b2:1a:f9:a5:3b:10:46:23:a6:7e:17:12: ad:ec:bd:97:5d:22:13:f3:09:0a:62:2d:cc:04:57: ce:89:c1:04:9b:d8:1f:16:5b:9e:aa:4e:57:00:df: 2e:1f:8b:a1:6e:0d:16:3f:d8:e7:0c:26:95:c2:c5: d9:12:81:f2:1c:a0:14:0b:c2:2e:de:98:94:22:55: 65:3c:8a:09:44:39:13:b5:a9:d6:4c:51:05:4f:63: ef:3e:dd:db:c7:00:24:d6:d8:fd:ba:bf:79:15:81: 2a:2c:a5:7a:9c:e4:16:1f:ba:42:c8:b0:6c:4e:bd: 3f:b6:a2:e7:44:0c:7c:cd:2d:5b:4a:13:0f:43:1b: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5E:D2:5E:EC:94:7A:FC:9B:33:F9:3C:E9:20:B3:C9:7D:71:AC:35 X509v3 Authority Key Identifier: keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:15:82:4b:be:bd:8f:91:c9:25:5c:03:b6:85:49:d4:72:be: da:4a:17:32:37:a7:f8:67:6a:43:1d:76:b4:5d:d0:30:4d:96: b5:e8:48:78:fa:6d:f8:d7:40:11:00:15:f5:8d:62:ad:3a:c0: 96:dc:3b:59:ff:4c:79:56:65:a9:79:38:bf:60:f0:7e:00:cb: 25:c0:01:a0:c3:4a:66:e4:5b:ff:56:b3:33:dd:ca:35:a6:80: 8c:69:d0:b2:a2:47:94:69:18:31:e6:7f:e7:a6:66:15:bc:7f: 75:01:df:ae:c2:ef:28:7b:19:ca:de:3a:31:bc:61:d1:2a:8a: e5:b7:29:c8:ba:bc:29:9d:56:64:93:7b:52:b9:dd:a8:e3:91: 25:46:df:a3:fe:79:e8:fa:bc:6b:dc:80:ea:a4:aa:cf:57:ff: 4e:62:aa:46:d7:ec:46:82:7f:56:99:55:50:b7:36:fc:96:36: 56:02:6f:bc:88:b3:fe:91:3d:1a:be:93:5e:38:d1:37:dd:79: 87:4e:68:21:eb:61:38:1d:97:2f:d0:63:5e:9b:d6:5b:d0:0d: 77:f8:50:6a:bf:79:74:c5:c0:1f:f7:05:1c:59:77:86:5e:ae: ea:63:c5:c0:c6:53:49:6c:bc:b0:71:d7:49:e0:3b:e3:a4:28: e1:cf:2c:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnPXNkArlrWqKuSGN4n60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4 ZTk0OTAwHhcNMjUxMjE3MTQwMDQyWhcNMjUxMjE4MTQwMDQyWjAzMTEwLwYDVQQD Eyg2NTVlZDI1ZWVjOTQ3YWZjOWIzM2Y5M2NlOTIwYjNjOTdkNzFhYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn8dg253A7Dk4Ul+5If+IGjWs5/+ ixdT7kRPk+9HPXpNAh7MFm/4cIAcwoH85XBLfNVf3spAH1Zvc5RkB11Fn7mGd59l 62Oe4luDn0TROzekG/z4Q3BhtQlvbiZHqlFoUTwr0atrOS61AU5kAjh8KGhz/kCv frRzg2CyGvmlOxBGI6Z+FxKt7L2XXSIT8wkKYi3MBFfOicEEm9gfFlueqk5XAN8u H4uhbg0WP9jnDCaVwsXZEoHyHKAUC8Iu3piUIlVlPIoJRDkTtanWTFEFT2PvPt3b xwAk1tj9ur95FYEqLKV6nOQWH7pCyLBsTr0/tqLnRAx8zS1bShMPQxtDjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVe0l7slHr8mzP5POkgs8l9caw1MB8GA1UdIwQY MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt YjEwYTIyZDBhNDc2LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2 LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChWCS769 j5HJJVwDtoVJ1HK+2koXMjen+GdqQx12tF3QME2WtehIePpt+NdAEQAV9Y1irTrA ltw7Wf9MeVZlqXk4v2DwfgDLJcABoMNKZuRb/1azM93KNaaAjGnQsqJHlGkYMeZ/ 56ZmFbx/dQHfrsLvKHsZyt46Mbxh0SqK5bcpyLq8KZ1WZJN7UrndqOORJUbfo/55 6Pq8a9yA6qSqz1f/TmKqRtfsRoJ/VplVULc2/JY2VgJvvIiz/pE9Gr6TXjjRN915 h05oIethOB2XL9BjXpvWW9ANd/hQar95dMXAH/cFHFl3hl6u6mPFwMZTSWy8sHHX SeA746Qo4c8s7g== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:04 2025 by rpki-client