This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json) Hash identifier: wBCi9VONl9I8s8RXGMNTqcii7gsPKiZy+ZohH+KSipY= Subject key identifier: AF:AC:C8:C9:2C:B1:46:D2:B1:E5:66:8B:07:4F:C7:DC:B5:2F:B9:76 Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Certificate serial: 019B397D76AA4E25569A0266DEE715E69B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft Manifest number: 165A Signing time: Sat 20 Dec 2025 02:01:22 +0000 Manifest this update: Sat 20 Dec 2025 02:01:22 +0000 Manifest next update: Sun 21 Dec 2025 02:01:22 +0000 Files and hashes: 1: 1-B2R-GqYD9hP7s0C3NBoCj-VNkE.roa (hash: ZOT8fcQn6mXuR7Nt7wxqiMRNnXCqSmMF7Ydjm3uUWkE=) 2: DlH0jnwMimmMsx3r3wdXB1L3uS8.roa (hash: dTJziSClbSkXGUrxk9IsoOjUfN1QvzrBS3O8it2Lahs=) 3: DwPSTi5dIPTLM8ktf-sdtoXF7qI.roa (hash: P8iiPec0Zpi09SNtPrSeFAi8fwt9MnKZ4qvy9bGC1D0=) 4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: tFpZiY/Tw4QSyX7SBRgGlNkPBl8+EVTyZMWp6GQPQy0=) 5: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=) 6: arnRM2lSkUGUCk_xO-cIc8RCuRY.roa (hash: boEE4wT0kwQUB6JKZ1jq/E9huR7syRrDn9qtNkdgQ1o=) 7: fhDfnd1sxahgjYhOPaMH-zbPHNE.roa (hash: wgRkLUPLN9uGcU27XvQbCXpbgOex5MpWJQYXuSKlkNQ=) 8: lSVWT0vnWde53ZJnRkRtUAOgYzI.roa (hash: 4vpddIjkhrNsny6PNDuu90eXheVk6yuthDXnIN9HyQ8=) 9: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:76:aa:4e:25:56:9a:02:66:de:e7:15:e6:9b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Validity Not Before: Dec 20 02:01:22 2025 GMT Not After : Dec 21 02:01:22 2025 GMT Subject: CN=afacc8c92cb146d2b1e5668b074fc7dcb52fb976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:59:92:99:2a:22:45:4c:f0:ea:aa:0c:cd: 99:26:b4:5b:ba:4a:65:59:f2:cc:2c:af:e0:13:02: b9:5d:38:7e:55:35:99:5c:a5:10:71:e0:45:13:55: a4:9a:4c:b6:50:c5:7c:d0:d1:21:85:4f:7e:9f:d5: 74:ec:1d:ca:3f:05:53:24:07:3f:be:cb:f9:46:63: 6b:74:de:d0:47:8b:af:b0:85:e8:3e:16:26:0d:e9: 70:07:27:88:f8:10:79:be:3c:7b:a4:61:be:a8:27: d1:68:1f:67:ed:e5:82:8c:59:0f:ba:44:45:48:ef: a6:d4:e5:3f:92:83:d7:1c:2d:85:ca:f9:5a:19:b5: 58:dd:38:97:38:fc:e2:f2:f7:fb:cc:c9:ad:96:6f: cf:5e:cf:d6:65:12:2a:8a:5d:63:27:1f:cb:c6:40: f8:61:e5:e5:b9:b8:fd:96:52:01:37:45:8a:8c:53: 92:04:e5:7b:ef:94:f8:2b:c1:a2:fa:b6:cb:a8:12: 21:e0:30:66:5b:36:74:f4:bc:70:19:67:b1:1b:06: e8:0d:ee:42:5f:8a:48:76:06:0d:b4:1f:a4:ce:ac: 39:4e:56:2a:4e:2d:1e:c7:fe:a9:1d:bf:1b:b2:00: 4f:f2:d4:46:26:08:b7:09:ff:f2:de:ef:96:36:bc: 49:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:C8:C9:2C:B1:46:D2:B1:E5:66:8B:07:4F:C7:DC:B5:2F:B9:76 X509v3 Authority Key Identifier: keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:57:c7:26:cd:26:9b:ea:b7:e1:1e:25:de:c0:dc:32:2c:64: b5:e9:61:4c:55:d6:fe:6d:23:6c:b0:49:3b:cb:f0:1b:02:37: eb:de:a6:d3:c7:90:e3:bd:d6:d9:be:d8:0b:02:5d:be:f4:4e: 47:f5:ea:ad:e9:f7:2b:3e:e0:c8:8a:68:36:f3:f9:0e:cf:2c: dd:75:7a:6c:be:a8:70:c4:e5:a4:b5:f8:90:75:b8:59:10:66: 7f:c0:36:f4:bc:5d:a0:59:54:99:f1:25:4e:76:2d:ea:22:79: 3a:2a:71:46:e7:44:c8:f0:16:ee:3c:d5:06:d8:46:ff:4d:f2: 3f:08:78:3f:6e:41:a9:52:e2:4b:2d:ca:82:fa:59:24:7d:4e: 8f:1c:87:83:f0:ac:42:28:8a:4e:62:76:24:81:06:8c:3b:6e: 03:b4:0a:58:e6:da:06:0a:bf:7c:4e:43:47:86:18:42:45:6f: f2:a0:a6:dd:1b:db:34:28:52:b3:b7:b3:87:6a:95:d2:7f:b7: 7c:bd:b9:1c:83:56:32:c9:d0:91:14:2d:28:51:13:b3:2d:4b: 7d:e7:9d:0f:d6:9c:4e:38:3f:a2:0d:cc:54:4d:81:92:24:3d: 5f:4b:4b:de:61:76:be:97:26:c4:dc:35:50:8c:61:99:59:30: 96:6e:ea:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fXaqTiVWmgJm3ucV5pteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm MmNmNGUwHhcNMjUxMjIwMDIwMTIyWhcNMjUxMjIxMDIwMTIyWjAzMTEwLwYDVQQD EyhhZmFjYzhjOTJjYjE0NmQyYjFlNTY2OGIwNzRmYzdkY2I1MmZiOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBBZkpkqIkVM8OqqDM2ZJrRbukpl WfLMLK/gEwK5XTh+VTWZXKUQceBFE1Wkmky2UMV80NEhhU9+n9V07B3KPwVTJAc/ vsv5RmNrdN7QR4uvsIXoPhYmDelwByeI+BB5vjx7pGG+qCfRaB9n7eWCjFkPukRF SO+m1OU/koPXHC2FyvlaGbVY3TiXOPzi8vf7zMmtlm/PXs/WZRIqil1jJx/LxkD4 YeXlubj9llIBN0WKjFOSBOV775T4K8Gi+rbLqBIh4DBmWzZ09LxwGWexGwboDe5C X4pIdgYNtB+kzqw5TlYqTi0ex/6pHb8bsgBP8tRGJgi3Cf/y3u+WNrxJJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+syMkssUbSseVmiwdPx9y1L7l2MB8GA1UdIwQY MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt ODY0MjM4YmMwNDliLzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFfHJs0m m+q34R4l3sDcMixktelhTFXW/m0jbLBJO8vwGwI3696m08eQ473W2b7YCwJdvvRO R/Xqren3Kz7gyIpoNvP5Ds8s3XV6bL6ocMTlpLX4kHW4WRBmf8A29LxdoFlUmfEl TnYt6iJ5OipxRudEyPAW7jzVBthG/03yPwh4P25BqVLiSy3KgvpZJH1OjxyHg/Cs QiiKTmJ2JIEGjDtuA7QKWObaBgq/fE5DR4YYQkVv8qCm3RvbNChSs7ezh2qV0n+3 fL25HINWMsnQkRQtKFETsy1LfeedD9acTjg/og3MVE2BkiQ9X0tL3mF2vpcmxNw1 UIxhmVkwlm7qOg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:22:47 2025 by rpki-client