This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json) Hash identifier: 85sxIkDEdoynIBmQlsLeXHcMugXDcLXGbu2VNXwdIpg= Subject key identifier: 02:77:04:3A:DF:87:F4:AF:DE:4C:0D:E8:66:D7:E9:5F:41:D7:6B:31 Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df Certificate serial: 019AF50A0744680F180156AB0AB9510DA3D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft Manifest number: 149D Signing time: Sat 06 Dec 2025 19:01:06 +0000 Manifest this update: Sat 06 Dec 2025 19:01:06 +0000 Manifest next update: Sun 07 Dec 2025 19:01:06 +0000 Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: V5WODzKKkbhlCBJ/YUVsrxcHMhGhTjdPHandPMhPaUo=) 2: YiL-LgYwYTCjIbiHkUVBG7tfFRY.roa (hash: SRcC32x7R1pMAtrHALKFJDhDvfNieE3sp+OsJIw5r3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:07:44:68:0f:18:01:56:ab:0a:b9:51:0d:a3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df Validity Not Before: Dec 6 19:01:06 2025 GMT Not After : Dec 7 19:01:06 2025 GMT Subject: CN=0277043adf87f4afde4c0de866d7e95f41d76b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:be:78:80:35:52:c3:02:41:f0:ef:b6:51: 81:cb:24:4e:ea:7f:e5:fb:4a:63:f1:7a:55:60:62: cc:e8:85:b8:d9:d4:1b:a4:83:e6:5b:43:5a:98:34: a1:d7:eb:3f:f9:3e:3f:97:13:9d:ba:39:e4:9e:9f: 34:ae:c3:03:f8:b8:6f:2a:7c:13:34:2e:9b:23:c5: 43:17:db:13:00:63:3e:b8:93:0e:0f:0e:62:40:13: a3:1c:c7:f1:01:d4:5a:c2:6d:7e:b9:d9:40:2b:53: af:20:6a:40:bb:54:22:e4:05:7e:95:b0:88:1f:86: 7a:da:64:c9:40:0b:3b:c5:84:e4:24:51:5c:72:81: 13:df:d0:84:51:15:3b:0b:c0:19:f8:6c:e7:39:b1: 3b:b9:29:47:1d:a7:3a:3d:16:5c:34:67:3f:e7:17: 74:23:db:8d:2f:54:01:ac:9f:29:b0:77:b3:5e:78: 7c:90:10:23:33:88:3d:ab:e0:9d:04:30:16:2a:7a: a0:e2:0f:16:a3:47:02:db:50:a9:98:63:49:63:90: 58:22:b2:49:46:ac:ec:92:5b:48:d2:ca:31:97:f6: 89:92:a4:77:5b:8a:51:f0:06:89:c6:21:6b:46:6d: bd:b1:05:7f:aa:25:00:52:f2:14:8a:9b:62:07:10: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:77:04:3A:DF:87:F4:AF:DE:4C:0D:E8:66:D7:E9:5F:41:D7:6B:31 X509v3 Authority Key Identifier: keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1f:a3:56:65:41:fe:d4:47:94:df:b6:f8:4d:0f:e4:2f:12: c5:d6:5d:75:40:54:9f:4f:fd:11:ac:39:05:d7:a3:58:f2:f4: d6:07:97:f4:84:17:54:ae:77:70:7b:f4:c1:8c:cc:e2:90:ce: c7:c8:cd:42:ec:02:b2:6d:d0:b6:6b:f9:e5:0f:4e:23:d3:5d: 26:ef:5d:1f:c9:b2:12:bd:d1:9c:62:11:10:dc:1e:c1:ce:de: 7d:43:62:71:91:b5:a9:28:e6:23:0a:59:41:a1:e3:dc:82:de: a7:ea:9c:96:b6:3c:19:5a:18:4c:f9:10:6f:93:3e:00:99:10: ff:37:6a:c4:13:92:fd:0d:69:2a:b9:f2:6f:a4:28:ed:3f:92: 8c:55:38:b1:b2:83:0f:d6:53:87:44:58:49:d9:3d:e9:11:e3: 68:46:3a:d9:38:32:c9:2b:1a:24:4d:b7:9c:51:17:c0:00:40: 70:f4:1f:ed:c5:7b:f7:1b:e9:5c:28:03:86:58:7f:1a:e6:fc: ab:b2:1b:4b:91:04:c0:23:ad:44:34:b7:cd:56:32:d2:b1:b8: e5:0a:d7:ad:b1:d2:2b:97:92:63:eb:c9:c5:fd:34:b3:01:30: 0f:aa:4c:03:f1:92:39:0a:b1:a7:15:d5:c7:5f:81:44:b5:b4: c4:90:53:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgdEaA8YAVarCrlRDaPSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4 NDkyZGYwHhcNMjUxMjA2MTkwMTA2WhcNMjUxMjA3MTkwMTA2WjAzMTEwLwYDVQQD EygwMjc3MDQzYWRmODdmNGFmZGU0YzBkZTg2NmQ3ZTk1ZjQxZDc2YjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsga+eIA1UsMCQfDvtlGByyRO6n/l +0pj8XpVYGLM6IW42dQbpIPmW0NamDSh1+s/+T4/lxOdujnknp80rsMD+LhvKnwT NC6bI8VDF9sTAGM+uJMODw5iQBOjHMfxAdRawm1+udlAK1OvIGpAu1Qi5AV+lbCI H4Z62mTJQAs7xYTkJFFccoET39CEURU7C8AZ+GznObE7uSlHHac6PRZcNGc/5xd0 I9uNL1QBrJ8psHezXnh8kBAjM4g9q+CdBDAWKnqg4g8Wo0cC21CpmGNJY5BYIrJJ RqzskltI0soxl/aJkqR3W4pR8AaJxiFrRm29sQV/qiUAUvIUiptiBxC26wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ3BDrfh/Sv3kwN6GbX6V9B12sxMB8GA1UdIwQY MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt YTI5ZWIxMzllNzlkLzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAtYTI5ZWIxMzllNzlk LzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR+jVmVB /tRHlN+2+E0P5C8SxdZddUBUn0/9Eaw5BdejWPL01geX9IQXVK53cHv0wYzM4pDO x8jNQuwCsm3Qtmv55Q9OI9NdJu9dH8myEr3RnGIRENwewc7efUNicZG1qSjmIwpZ QaHj3ILep+qclrY8GVoYTPkQb5M+AJkQ/zdqxBOS/Q1pKrnyb6Qo7T+SjFU4sbKD D9ZTh0RYSdk96RHjaEY62TgyySsaJE23nFEXwABAcPQf7cV79xvpXCgDhlh/Gub8 q7IbS5EEwCOtRDS3zVYy0rG45QrXrbHSK5eSY+vJxf00swEwD6pMA/GSOQqxpxXV x1+BRLW0xJBTkw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:14:17 2025 by rpki-client