This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: tg9AXjfdgRjlrWknDrTHuGZ0ZCvnZS5QO+xFn9cHFEQ= Subject key identifier: D1:4C:12:F7:0D:51:D1:D9:1F:E6:03:2B:8C:F4:75:06:B3:F9:8D:2F Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019AF42E3EEDD6FCD07D4F41BBB8F741F1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 0438 Signing time: Sat 06 Dec 2025 15:01:02 +0000 Manifest this update: Sat 06 Dec 2025 15:01:02 +0000 Manifest next update: Sun 07 Dec 2025 15:01:02 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: roRHo9nkqmzRO9+KmPlB+ggGpi/1ZeXyEx6eP5wh3sk=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:3e:ed:d6:fc:d0:7d:4f:41:bb:b8:f7:41:f1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Dec 6 15:01:02 2025 GMT Not After : Dec 7 15:01:02 2025 GMT Subject: CN=d14c12f70d51d1d91fe6032b8cf47506b3f98d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:4d:b4:87:f7:99:e4:b4:8c:04:32:63:f5: dd:23:0a:82:1d:c6:dc:e7:18:7d:bd:7f:f2:6f:a4: 8a:d0:43:01:4b:36:b2:9b:f9:8e:a1:43:60:79:d1: 71:85:53:49:bd:c5:8e:74:9e:59:f9:4e:48:c7:08: a6:9d:1a:01:c2:40:86:5c:a5:f5:bf:b5:b7:44:b8: 48:bd:12:18:08:78:23:d0:53:5e:73:71:58:90:f9: 7c:cb:e3:71:90:18:f0:14:5f:b3:21:2d:b3:7e:15: b7:4d:eb:bd:a1:5d:7a:4f:88:c4:e5:57:26:1f:fb: db:ee:b3:08:84:f6:67:20:0c:0e:22:95:a1:dc:b6: 4c:71:e5:26:c5:00:a6:ae:56:4d:f8:36:93:e1:f1: e4:3d:82:3b:c1:cb:f2:57:23:8f:34:f5:ff:87:30: 14:b4:49:4f:8a:7b:e0:00:37:2b:5c:d0:bd:8d:0b: 94:f4:9e:ef:dc:56:fb:71:80:85:bf:42:bc:9e:c9: f2:79:12:d2:cc:31:21:27:9b:08:41:59:39:7a:20: c9:c0:6a:47:52:ed:7e:05:01:fa:17:c2:80:2d:50: d8:a8:f2:52:75:6f:50:a5:11:0c:dd:78:81:a6:51: b0:6b:72:b9:01:8c:81:df:68:8e:8d:35:4e:2e:6c: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4C:12:F7:0D:51:D1:D9:1F:E6:03:2B:8C:F4:75:06:B3:F9:8D:2F X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:2f:d4:6c:13:9c:ca:a9:1f:79:b0:92:20:b3:1e:e2:43:47: 47:b4:c0:5d:73:9e:d1:bd:09:65:1e:ee:da:d4:de:b8:f0:b3: c4:29:0b:d3:2d:7b:9f:2b:53:7a:ec:da:82:15:89:e0:8b:bf: 11:c2:11:24:be:c8:59:b2:69:38:5c:b0:1c:9c:e9:15:ed:a2: 38:bd:cd:35:64:71:b3:84:e8:c2:16:f2:b1:08:4f:61:0c:1e: 18:1c:17:d0:e7:28:42:ff:26:7a:af:f6:ee:dc:d5:cf:29:3e: aa:74:16:20:33:45:cd:49:5c:c0:08:ab:69:07:d7:d5:66:dd: 0d:2b:b0:ea:fc:61:e9:bc:28:1e:0a:f5:6f:a5:47:2d:25:96: 82:b5:ed:47:5b:e9:63:45:bc:7c:b8:95:68:6d:39:5f:76:57: fa:52:25:51:7e:7b:b5:3d:1a:10:28:a5:99:3c:a2:8b:65:e3: 0b:de:7a:75:ca:93:50:02:52:1e:c0:96:68:f3:15:24:17:06: 8f:70:a9:79:39:f1:8f:58:07:2a:92:b5:dd:b1:b8:dc:c5:84: d2:c5:5d:19:ce:50:c0:ec:19:6e:77:ba:0a:6d:1b:a4:2c:87: 4a:58:a9:57:25:c3:f3:a9:cc:7b:b2:77:cf:ba:01:dd:b2:c3: 6e:63:fc:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lj7t1vzQfU9Bu7j3QfHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUxMjA2MTUwMTAyWhcNMjUxMjA3MTUwMTAyWjAzMTEwLwYDVQQD EyhkMTRjMTJmNzBkNTFkMWQ5MWZlNjAzMmI4Y2Y0NzUwNmIzZjk4ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1BNtIf3meS0jAQyY/XdIwqCHcbc 5xh9vX/yb6SK0EMBSzaym/mOoUNgedFxhVNJvcWOdJ5Z+U5IxwimnRoBwkCGXKX1 v7W3RLhIvRIYCHgj0FNec3FYkPl8y+NxkBjwFF+zIS2zfhW3Teu9oV16T4jE5Vcm H/vb7rMIhPZnIAwOIpWh3LZMceUmxQCmrlZN+DaT4fHkPYI7wcvyVyOPNPX/hzAU tElPinvgADcrXNC9jQuU9J7v3Fb7cYCFv0K8nsnyeRLSzDEhJ5sIQVk5eiDJwGpH Uu1+BQH6F8KALVDYqPJSdW9QpREM3XiBplGwa3K5AYyB32iOjTVOLmw1JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFMEvcNUdHZH+YDK4z0dQaz+Y0vMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASC/UbBOc yqkfebCSILMe4kNHR7TAXXOe0b0JZR7u2tTeuPCzxCkL0y17nytTeuzaghWJ4Iu/ EcIRJL7IWbJpOFywHJzpFe2iOL3NNWRxs4TowhbysQhPYQweGBwX0OcoQv8meq/2 7tzVzyk+qnQWIDNFzUlcwAiraQfX1WbdDSuw6vxh6bwoHgr1b6VHLSWWgrXtR1vp Y0W8fLiVaG05X3ZX+lIlUX57tT0aECilmTyii2XjC956dcqTUAJSHsCWaPMVJBcG j3CpeTnxj1gHKpK13bG43MWE0sVdGc5QwOwZbne6Cm0bpCyHSlipVyXD86nMe7J3 z7oB3bLDbmP8iA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:28:07 2025 by rpki-client