This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json) Hash identifier: P7a8p6i/PrAPe9r5i9qid7oNpSUXUE18wydgFDJ4514= Subject key identifier: 9F:C5:C0:53:F3:0A:BE:26:D3:AF:C5:85:95:73:16:71:0F:17:05:CA Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Certificate serial: 019B4136901F7AAB8E69A18AE078CDC4ED1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft Manifest number: 165E Signing time: Sun 21 Dec 2025 14:00:53 +0000 Manifest this update: Sun 21 Dec 2025 14:00:53 +0000 Manifest next update: Mon 22 Dec 2025 14:00:53 +0000 Files and hashes: 1: 1-B2R-GqYD9hP7s0C3NBoCj-VNkE.roa (hash: ZOT8fcQn6mXuR7Nt7wxqiMRNnXCqSmMF7Ydjm3uUWkE=) 2: DlH0jnwMimmMsx3r3wdXB1L3uS8.roa (hash: dTJziSClbSkXGUrxk9IsoOjUfN1QvzrBS3O8it2Lahs=) 3: DwPSTi5dIPTLM8ktf-sdtoXF7qI.roa (hash: P8iiPec0Zpi09SNtPrSeFAi8fwt9MnKZ4qvy9bGC1D0=) 4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: 2CM8Elv1bjtRjo/ytTMEQJecOS3PCtOJbGQiQ26d3qM=) 5: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=) 6: arnRM2lSkUGUCk_xO-cIc8RCuRY.roa (hash: boEE4wT0kwQUB6JKZ1jq/E9huR7syRrDn9qtNkdgQ1o=) 7: fhDfnd1sxahgjYhOPaMH-zbPHNE.roa (hash: wgRkLUPLN9uGcU27XvQbCXpbgOex5MpWJQYXuSKlkNQ=) 8: lSVWT0vnWde53ZJnRkRtUAOgYzI.roa (hash: 4vpddIjkhrNsny6PNDuu90eXheVk6yuthDXnIN9HyQ8=) 9: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:90:1f:7a:ab:8e:69:a1:8a:e0:78:cd:c4:ed:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Validity Not Before: Dec 21 14:00:53 2025 GMT Not After : Dec 22 14:00:53 2025 GMT Subject: CN=9fc5c053f30abe26d3afc585957316710f1705ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:d9:b3:0f:52:89:57:21:e9:4d:96:a5:c6: 38:16:1e:e6:83:bb:14:f3:5b:22:0c:0f:43:a8:dc: 09:df:fe:e1:c2:bd:54:74:7d:ed:db:fb:80:3c:a6: ad:be:61:93:72:f9:0a:1a:ff:aa:c7:dc:2c:5b:c7: 10:9c:11:48:ed:9e:e7:bc:4f:48:90:29:12:7c:ea: c8:90:ff:86:cc:8d:c4:86:a5:b4:9c:46:43:1c:67: 4e:14:47:6f:fb:ec:32:e4:75:d5:68:57:b1:7c:1b: b2:03:69:83:06:39:28:75:b9:cc:2c:cc:80:a3:e7: d7:e6:48:16:56:8f:63:12:d4:25:10:31:d0:b6:eb: 9f:a6:46:53:cf:a8:8b:ef:83:c1:de:41:3b:d8:2b: 20:61:46:a0:e7:30:48:03:58:3e:4b:db:4c:b3:34: 35:44:8e:1c:0e:00:35:92:a2:a3:f4:7c:94:f7:74: e9:04:8f:c2:a6:a1:c3:00:6f:af:0b:34:f2:32:e0: 28:aa:67:87:b5:3b:ef:7f:33:f4:46:d2:ff:a0:d1: cb:70:68:a4:e8:7e:6c:08:1d:3f:a9:ad:11:7c:04: 77:e0:a0:9d:fd:df:7d:da:41:07:a6:b8:57:c2:51: b4:3f:f1:91:9f:2f:43:79:54:f0:b3:e8:71:59:39: 6e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C5:C0:53:F3:0A:BE:26:D3:AF:C5:85:95:73:16:71:0F:17:05:CA X509v3 Authority Key Identifier: keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:4d:5e:be:2e:c8:7e:4e:ae:d2:fe:48:f2:19:03:b4:9c:0c: 2a:f2:46:91:05:7d:d4:63:62:3b:6e:60:69:e0:32:72:a7:87: 6f:b2:51:8b:a5:37:26:0e:c2:7f:a4:d0:13:3f:44:b5:48:f5: 61:17:b9:0c:45:c2:97:f8:83:5d:78:2b:a6:2e:2d:c7:41:04: dc:6e:c1:58:cc:68:ee:6b:fc:4d:07:ac:94:49:05:3f:95:ab: 98:43:76:15:a0:a5:bd:23:3e:84:e9:16:9f:9e:30:c6:e4:b0: ff:af:d5:24:73:f4:d6:b1:b1:17:b6:1c:5d:c1:79:08:81:96: a0:ee:91:bc:7a:98:07:da:43:fb:f0:3d:0d:22:18:cc:74:ac: 26:bb:0e:bc:47:e3:bd:92:37:52:ad:c9:38:0a:dd:d4:eb:17: f9:2d:34:01:bc:c6:65:6b:f0:2d:b1:4d:32:5e:0c:a9:4d:c8: 2e:1c:5d:00:e3:6e:e8:c7:2b:97:1c:b2:30:b3:9e:d5:c4:43: fa:f5:59:38:5e:03:34:70:c8:e1:68:1a:da:3a:86:65:6a:32: 74:20:cd:fe:d1:a7:a6:79:17:a7:b1:ac:cd:a0:19:e2:53:64: 86:02:34:26:55:63:77:af:04:ac:52:30:02:a1:a5:95:5a:e4: 41:d2:25:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpAfequOaaGK4HjNxO0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm MmNmNGUwHhcNMjUxMjIxMTQwMDUzWhcNMjUxMjIyMTQwMDUzWjAzMTEwLwYDVQQD Eyg5ZmM1YzA1M2YzMGFiZTI2ZDNhZmM1ODU5NTczMTY3MTBmMTcwNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorjZsw9SiVch6U2WpcY4Fh7mg7sU 81siDA9DqNwJ3/7hwr1UdH3t2/uAPKatvmGTcvkKGv+qx9wsW8cQnBFI7Z7nvE9I kCkSfOrIkP+GzI3EhqW0nEZDHGdOFEdv++wy5HXVaFexfBuyA2mDBjkodbnMLMyA o+fX5kgWVo9jEtQlEDHQtuufpkZTz6iL74PB3kE72CsgYUag5zBIA1g+S9tMszQ1 RI4cDgA1kqKj9HyU93TpBI/CpqHDAG+vCzTyMuAoqmeHtTvvfzP0RtL/oNHLcGik 6H5sCB0/qa0RfAR34KCd/d992kEHprhXwlG0P/GRny9DeVTws+hxWTluhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/FwFPzCr4m06/FhZVzFnEPFwXKMB8GA1UdIwQY MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt ODY0MjM4YmMwNDliLzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA001evi7I fk6u0v5I8hkDtJwMKvJGkQV91GNiO25gaeAycqeHb7JRi6U3Jg7Cf6TQEz9EtUj1 YRe5DEXCl/iDXXgrpi4tx0EE3G7BWMxo7mv8TQeslEkFP5WrmEN2FaClvSM+hOkW n54wxuSw/6/VJHP01rGxF7YcXcF5CIGWoO6RvHqYB9pD+/A9DSIYzHSsJrsOvEfj vZI3Uq3JOArd1OsX+S00AbzGZWvwLbFNMl4MqU3ILhxdAONu6McrlxyyMLOe1cRD +vVZOF4DNHDI4Wga2jqGZWoydCDN/tGnpnkXp7GszaAZ4lNkhgI0JlVjd68ErFIw AqGllVrkQdIlQA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:21 2025 by rpki-client