This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json) Hash identifier: ptwI4B088SLn6CnwY6RL1Y2LVf6PL0WpX+84OHIedSw= Subject key identifier: 2A:52:7D:34:B3:C1:97:D6:40:EC:2A:11:52:10:CC:53:39:82:FE:6A Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f Certificate serial: 019B3B34D727E8E9C9B376875A95658BF318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft Manifest number: 01BB Signing time: Sat 20 Dec 2025 10:01:17 +0000 Manifest this update: Sat 20 Dec 2025 10:01:17 +0000 Manifest next update: Sun 21 Dec 2025 10:01:17 +0000 Files and hashes: 1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=) 2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: myU81NP9uFsjRmj9O7OyjB9wAAN7mBuSeDgFAyV3mlQ=) 3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:d7:27:e8:e9:c9:b3:76:87:5a:95:65:8b:f3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f Validity Not Before: Dec 20 10:01:17 2025 GMT Not After : Dec 21 10:01:17 2025 GMT Subject: CN=2a527d34b3c197d640ec2a115210cc533982fe6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:69:29:38:8f:71:a9:e8:9c:aa:ba:1f:83: 02:92:3f:03:79:56:1a:5d:bf:d9:e3:12:68:8d:b1: 97:27:c8:4c:63:a5:96:41:b0:c5:13:67:c9:d6:66: 8c:cf:73:38:99:8c:f5:c4:9a:d8:92:2d:bc:d1:17: 8f:36:98:30:19:26:6d:54:78:0a:7b:3f:57:84:bf: 39:57:10:08:3f:97:ae:ff:72:30:41:15:16:99:0a: 7a:40:db:62:bd:58:29:09:e7:6e:95:73:6c:10:9d: 80:4c:dc:58:7d:30:04:fe:e1:a7:48:48:24:50:0d: d3:80:dc:57:67:53:45:69:17:f5:fa:de:9c:17:2a: 7f:ac:f2:24:bd:35:73:0d:16:50:63:1c:d8:af:21: c6:4e:3a:57:d7:3b:b4:d3:54:9e:d2:d0:58:d1:9f: 74:de:70:db:bd:bd:ad:07:42:f8:79:de:72:2a:9b: 8f:ea:aa:5e:8e:dc:2a:d0:62:df:1a:14:b5:bc:db: 88:f4:ca:33:1c:ac:b7:df:f6:f3:0c:8e:08:33:b3: 2f:63:a0:eb:9d:4f:a7:df:e3:31:51:bc:4a:ea:06: 9b:47:05:b8:39:93:29:56:5e:37:07:5c:d8:3f:df: 86:4a:44:87:93:06:72:23:e5:29:23:64:5c:77:a4: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:7D:34:B3:C1:97:D6:40:EC:2A:11:52:10:CC:53:39:82:FE:6A X509v3 Authority Key Identifier: keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:93:87:ac:d5:58:7d:a2:cc:ce:be:2f:6a:bc:c1:dd:e5:ac: c2:74:73:3b:75:e6:89:4c:43:60:87:30:f0:c6:f3:cd:9a:fa: 37:dc:6e:32:44:e8:83:86:a2:c9:ba:c0:d2:cc:9f:fd:da:71: d6:4b:e6:7c:df:96:bf:43:90:67:b7:7c:32:17:b2:7d:05:a3: 0a:4b:2e:ba:76:c8:31:e2:f4:22:88:8c:89:17:4b:fe:07:b0: d2:59:d8:29:85:10:ef:c3:f2:4e:90:49:e4:98:f3:a1:02:1e: 19:b9:2d:08:bb:fc:ec:1b:f6:64:7c:76:af:78:99:c7:f8:32: 29:05:d4:4b:5f:75:34:14:ec:42:e4:b3:dd:8a:64:ae:63:b8: 43:1e:ca:af:d8:14:7a:fa:1c:40:47:88:b2:7c:29:55:ba:67: f1:19:18:e6:99:bc:db:ab:a3:87:4d:47:f8:f6:e4:62:95:dd: a3:15:56:99:5f:98:a7:95:cb:95:3d:09:e0:3d:f1:30:f8:07: ee:6b:2c:d5:29:75:2a:60:2d:32:58:3d:35:e1:84:6f:1e:0b: aa:33:37:2b:11:cd:c3:e3:cc:82:33:6e:de:78:74:04:8a:f8: cf:33:c6:cc:2e:92:16:5b:40:26:e7:62:29:10:cf:e4:c1:73: 43:44:dc:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NNcn6OnJs3aHWpVli/MYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NWRlNjVmMzc1MTVkZjhjYzI0MmYzNmRiYmVmMzIwYzZk OTBiNGYwHhcNMjUxMjIwMTAwMTE3WhcNMjUxMjIxMTAwMTE3WjAzMTEwLwYDVQQD EygyYTUyN2QzNGIzYzE5N2Q2NDBlYzJhMTE1MjEwY2M1MzM5ODJmZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHZpKTiPcanonKq6H4MCkj8DeVYa Xb/Z4xJojbGXJ8hMY6WWQbDFE2fJ1maMz3M4mYz1xJrYki280RePNpgwGSZtVHgK ez9XhL85VxAIP5eu/3IwQRUWmQp6QNtivVgpCedulXNsEJ2ATNxYfTAE/uGnSEgk UA3TgNxXZ1NFaRf1+t6cFyp/rPIkvTVzDRZQYxzYryHGTjpX1zu001Se0tBY0Z90 3nDbvb2tB0L4ed5yKpuP6qpejtwq0GLfGhS1vNuI9MozHKy33/bzDI4IM7MvY6Dr nU+n3+MxUbxK6gabRwW4OZMpVl43B1zYP9+GSkSHkwZyI+UpI2Rcd6TW9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpSfTSzwZfWQOwqEVIQzFM5gv5qMB8GA1UdIwQY MBaAFCRd5l83UV34zCQvNtu+8yDG2QtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTkt MzE3Mjc5ODE4YWNjLzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTktMzE3Mjc5ODE4YWNj LzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpOHrNVY faLMzr4varzB3eWswnRzO3XmiUxDYIcw8MbzzZr6N9xuMkTog4aiybrA0syf/dpx 1kvmfN+Wv0OQZ7d8MheyfQWjCksuunbIMeL0IoiMiRdL/gew0lnYKYUQ78PyTpBJ 5JjzoQIeGbktCLv87Bv2ZHx2r3iZx/gyKQXUS191NBTsQuSz3YpkrmO4Qx7Kr9gU evocQEeIsnwpVbpn8RkY5pm826ujh01H+PbkYpXdoxVWmV+Yp5XLlT0J4D3xMPgH 7mss1Sl1KmAtMlg9NeGEbx4LqjM3KxHNw+PMgjNu3nh0BIr4zzPGzC6SFltAJudi KRDP5MFzQ0Tc2g== -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:32 2025 by rpki-client