This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json) Hash identifier: ldwQO8crFuYCZ5CyfwrDY7/HJZWUF9hKDR5smTYeBeI= Subject key identifier: 17:5B:69:86:73:62:27:16:F2:53:39:A2:A2:66:A7:29:E8:09:3A:EF Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Certificate serial: 019B378EEE230C13A87CEFFEB445DE46D1D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft Manifest number: 1659 Signing time: Fri 19 Dec 2025 17:01:12 +0000 Manifest this update: Fri 19 Dec 2025 17:01:12 +0000 Manifest next update: Sat 20 Dec 2025 17:01:12 +0000 Files and hashes: 1: 1-B2R-GqYD9hP7s0C3NBoCj-VNkE.roa (hash: ZOT8fcQn6mXuR7Nt7wxqiMRNnXCqSmMF7Ydjm3uUWkE=) 2: DlH0jnwMimmMsx3r3wdXB1L3uS8.roa (hash: dTJziSClbSkXGUrxk9IsoOjUfN1QvzrBS3O8it2Lahs=) 3: DwPSTi5dIPTLM8ktf-sdtoXF7qI.roa (hash: P8iiPec0Zpi09SNtPrSeFAi8fwt9MnKZ4qvy9bGC1D0=) 4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: rTEftDG+/fgwnhjjA06nEYaX7/I5piYVvpBF/jP+M6Y=) 5: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=) 6: arnRM2lSkUGUCk_xO-cIc8RCuRY.roa (hash: boEE4wT0kwQUB6JKZ1jq/E9huR7syRrDn9qtNkdgQ1o=) 7: fhDfnd1sxahgjYhOPaMH-zbPHNE.roa (hash: wgRkLUPLN9uGcU27XvQbCXpbgOex5MpWJQYXuSKlkNQ=) 8: lSVWT0vnWde53ZJnRkRtUAOgYzI.roa (hash: 4vpddIjkhrNsny6PNDuu90eXheVk6yuthDXnIN9HyQ8=) 9: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:ee:23:0c:13:a8:7c:ef:fe:b4:45:de:46:d1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Validity Not Before: Dec 19 17:01:12 2025 GMT Not After : Dec 20 17:01:12 2025 GMT Subject: CN=175b698673622716f25339a2a266a729e8093aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:e6:29:70:da:3a:c1:65:ec:c0:09:e6:a9: 6d:3c:27:16:23:0e:47:16:ae:8c:d8:41:3e:93:95: 6d:19:ea:57:43:b5:29:3f:0c:2f:22:dc:ca:fc:f7: fe:f0:39:0e:2d:c7:fa:24:a8:62:12:7c:67:26:5c: cc:3e:f3:d7:4c:eb:a8:5b:f7:64:37:d3:51:1f:f7: b4:84:70:d6:a3:94:80:ab:b2:5d:bd:c9:8b:c7:ad: 35:21:fd:a1:11:1c:0e:dc:72:5a:23:08:e7:43:19: ff:ca:35:c2:13:fa:7d:19:b1:8d:0f:58:c8:a2:92: 65:af:ca:a7:49:44:f3:17:7c:c7:a4:f7:74:a6:e5: d2:21:11:bb:9b:ae:34:ad:14:ea:68:c9:ec:aa:19: 30:3e:d2:45:90:c6:9e:82:3f:d0:5b:f6:ff:cd:5e: 4c:8e:d2:24:83:ac:0a:07:29:53:e3:86:3b:25:af: 12:73:ef:31:d5:67:84:8f:bd:b5:9d:56:ce:8c:f9: 45:b2:12:bb:34:83:6c:b6:92:bc:05:d6:69:a6:d2: 3a:89:e9:7a:85:96:5d:9b:86:cb:79:06:03:b3:10: 10:43:8d:4c:32:69:65:90:46:35:ce:42:73:2b:3d: c7:e2:8e:50:ab:99:1e:5f:d6:65:97:fc:cf:86:e5: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5B:69:86:73:62:27:16:F2:53:39:A2:A2:66:A7:29:E8:09:3A:EF X509v3 Authority Key Identifier: keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:00:e8:28:b3:40:1c:33:26:7c:0a:3d:ae:10:3b:53:56:66: e2:c9:e6:c7:6f:e0:08:71:d5:9d:bf:77:e3:8e:05:50:29:f5: 01:dd:48:9f:e1:ef:d7:a6:79:81:ce:0d:4f:ed:c5:c5:c9:92: 29:56:36:9b:26:1b:00:c3:78:0b:36:4a:93:81:40:6f:36:e7: 7e:dc:88:0f:93:90:c6:85:6e:f9:19:ce:27:8b:2a:7e:f5:0d: f1:e8:7d:ec:5d:8f:57:35:ca:a7:00:ae:97:27:a6:60:48:8a: 85:b2:2e:4c:4e:d7:3b:5f:8c:cf:40:aa:8e:b6:54:4a:13:5d: 22:b3:91:e2:4b:d1:9e:db:91:11:df:18:d3:31:e6:db:fa:35: c0:2f:b7:3a:86:be:2c:0c:66:e5:e9:ca:09:30:1b:bf:8e:ab: 08:db:94:e9:e4:1d:12:44:b9:59:32:86:9c:77:d9:4c:95:ae: d8:15:f7:2e:92:fe:2b:b8:24:3b:28:45:80:31:1b:be:67:12: 47:1a:eb:c4:fe:91:b1:51:4f:8c:1d:0c:21:43:99:1f:3c:8b: 71:ef:bd:74:86:d4:6b:fa:93:bf:9f:0e:09:12:22:79:b9:73: cc:9b:95:08:dd:13:19:ea:a4:00:fd:fd:b0:ce:31:75:43:b0: 69:f1:bf:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ju4jDBOofO/+tEXeRtHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm MmNmNGUwHhcNMjUxMjE5MTcwMTEyWhcNMjUxMjIwMTcwMTEyWjAzMTEwLwYDVQQD EygxNzViNjk4NjczNjIyNzE2ZjI1MzM5YTJhMjY2YTcyOWU4MDkzYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmzmKXDaOsFl7MAJ5qltPCcWIw5H Fq6M2EE+k5VtGepXQ7UpPwwvItzK/Pf+8DkOLcf6JKhiEnxnJlzMPvPXTOuoW/dk N9NRH/e0hHDWo5SAq7JdvcmLx601If2hERwO3HJaIwjnQxn/yjXCE/p9GbGND1jI opJlr8qnSUTzF3zHpPd0puXSIRG7m640rRTqaMnsqhkwPtJFkMaegj/QW/b/zV5M jtIkg6wKBylT44Y7Ja8Sc+8x1WeEj721nVbOjPlFshK7NINstpK8BdZpptI6iel6 hZZdm4bLeQYDsxAQQ41MMmllkEY1zkJzKz3H4o5Qq5keX9Zll/zPhuVSaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdbaYZzYicW8lM5oqJmpynoCTrvMB8GA1UdIwQY MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt ODY0MjM4YmMwNDliLzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwADoKLNA HDMmfAo9rhA7U1Zm4snmx2/gCHHVnb93444FUCn1Ad1In+Hv16Z5gc4NT+3FxcmS KVY2myYbAMN4CzZKk4FAbzbnftyID5OQxoVu+RnOJ4sqfvUN8eh97F2PVzXKpwCu lyemYEiKhbIuTE7XO1+Mz0CqjrZUShNdIrOR4kvRntuREd8Y0zHm2/o1wC+3Ooa+ LAxm5enKCTAbv46rCNuU6eQdEkS5WTKGnHfZTJWu2BX3LpL+K7gkOyhFgDEbvmcS RxrrxP6RsVFPjB0MIUOZHzyLce+9dIbUa/qTv58OCRIieblzzJuVCN0TGeqkAP39 sM4xdUOwafG/3A== -----END CERTIFICATE-----Generated at Sat Dec 20 02:58:47 2025 by rpki-client