This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: ym/FrrZ1ibzKCYFYGEE3kQgZ/Rt5vBMRBHXNoFUiXUg= Subject key identifier: 36:CF:A0:AB:E2:DC:7F:DB:78:AB:AE:8D:1D:51:40:EB:D5:D3:3C:4E Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019B3D90D9A9F84E11F7116C9A258776C587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 045E Signing time: Sat 20 Dec 2025 21:01:01 +0000 Manifest this update: Sat 20 Dec 2025 21:01:01 +0000 Manifest next update: Sun 21 Dec 2025 21:01:01 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: PGp+lTFfwN4ZM7JFvdz5NpIu6Jixy2aBpEw+UPczqzc=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d9:a9:f8:4e:11:f7:11:6c:9a:25:87:76:c5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Dec 20 21:01:01 2025 GMT Not After : Dec 21 21:01:01 2025 GMT Subject: CN=36cfa0abe2dc7fdb78abae8d1d5140ebd5d33c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:a3:87:f9:bf:49:d3:a9:39:14:e9:bd:30: d6:82:6a:bc:0e:2c:e9:fb:28:1c:24:73:ce:ea:19: 42:e9:f2:c4:1c:2e:f8:dd:c5:21:83:24:b4:09:15: 31:f9:3d:67:d6:7a:bd:ea:c6:73:b8:04:42:ed:03: 3d:31:95:4b:11:8f:a6:90:6d:49:12:25:03:95:d1: 0d:be:3b:0c:81:6f:b7:a9:2f:44:65:fa:f9:38:36: ef:87:b7:4f:9a:f8:22:9c:80:56:9d:5f:7e:4a:ad: 89:e0:a2:fc:4b:a3:d0:7a:27:64:1e:12:e1:8d:34: 05:35:7c:8d:88:32:3e:9b:7a:a8:33:f2:b4:b6:ab: b9:37:14:7c:f3:b3:a6:3f:0c:f5:e7:a3:cb:71:10: 45:78:64:a4:36:9e:0d:21:93:0e:ea:50:fb:08:95: aa:ff:ba:ab:27:e2:46:eb:b5:94:0b:14:9f:79:aa: 44:1e:46:9c:20:ce:8e:e8:58:e0:d5:72:8a:99:ac: fa:54:c4:59:06:15:bc:ad:19:6d:a8:1f:a3:28:ca: c6:17:5f:70:ff:32:af:1f:8a:0a:2f:8a:53:e2:70: c2:43:76:38:cc:46:f9:8c:54:ad:76:a9:a3:8d:40: 57:b9:2f:fc:c8:40:d7:59:f3:33:3f:37:d0:1d:a2: 81:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CF:A0:AB:E2:DC:7F:DB:78:AB:AE:8D:1D:51:40:EB:D5:D3:3C:4E X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:19:32:6c:33:cb:0f:c9:93:6f:f3:04:74:e5:c5:95:3a:2a: 98:75:8c:7e:54:80:cb:09:76:13:c7:a1:0a:bf:66:cc:b7:2b: f0:33:d9:25:0c:33:4b:61:83:47:bc:3a:ee:f7:5c:e8:ff:d8: 07:a6:84:a6:11:e5:c6:7e:14:cb:6f:d9:63:a7:33:2e:9c:b8: a0:6e:5a:6d:67:ec:31:f5:e0:d5:4e:e7:94:83:49:90:19:f2: 43:99:29:fb:82:c8:09:cb:b0:ca:b1:4b:4a:de:db:45:fe:8e: e0:a6:5a:c9:61:04:ac:76:72:76:43:65:df:eb:00:83:30:30: 57:f1:52:ea:41:80:65:8c:48:27:86:70:f7:d6:a6:37:c7:fc: ad:38:be:73:06:3a:92:ba:0c:cc:bc:3f:a9:21:b9:23:ac:3e: 97:5c:be:72:3f:2c:37:f7:9e:de:06:ed:e1:12:26:13:44:a7: 83:16:84:5f:f5:f9:e1:50:aa:e6:ab:7b:10:2f:1b:14:2b:11: e9:ac:b4:fa:26:59:5f:41:97:22:4b:f3:ab:3d:20:d2:b5:1e: 1a:fb:1d:8e:a4:d6:68:8f:55:0d:7b:dd:16:e7:b3:a8:45:a7: 54:b2:79:28:77:d7:f6:f9:75:36:88:f4:77:1a:8d:9c:ea:c5: eb:52:66:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNmp+E4R9xFsmiWHdsWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUxMjIwMjEwMTAxWhcNMjUxMjIxMjEwMTAxWjAzMTEwLwYDVQQD EygzNmNmYTBhYmUyZGM3ZmRiNzhhYmFlOGQxZDUxNDBlYmQ1ZDMzYzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwmjh/m/SdOpORTpvTDWgmq8Dizp +ygcJHPO6hlC6fLEHC743cUhgyS0CRUx+T1n1nq96sZzuARC7QM9MZVLEY+mkG1J EiUDldENvjsMgW+3qS9EZfr5ODbvh7dPmvginIBWnV9+Sq2J4KL8S6PQeidkHhLh jTQFNXyNiDI+m3qoM/K0tqu5NxR887OmPwz156PLcRBFeGSkNp4NIZMO6lD7CJWq /7qrJ+JG67WUCxSfeapEHkacIM6O6Fjg1XKKmaz6VMRZBhW8rRltqB+jKMrGF19w /zKvH4oKL4pT4nDCQ3Y4zEb5jFStdqmjjUBXuS/8yEDXWfMzPzfQHaKBXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbPoKvi3H/beKuujR1RQOvV0zxOMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhkybDPL D8mTb/MEdOXFlToqmHWMflSAywl2E8ehCr9mzLcr8DPZJQwzS2GDR7w67vdc6P/Y B6aEphHlxn4Uy2/ZY6czLpy4oG5abWfsMfXg1U7nlINJkBnyQ5kp+4LICcuwyrFL St7bRf6O4KZayWEErHZydkNl3+sAgzAwV/FS6kGAZYxIJ4Zw99amN8f8rTi+cwY6 kroMzLw/qSG5I6w+l1y+cj8sN/ee3gbt4RImE0SngxaEX/X54VCq5qt7EC8bFCsR 6ay0+iZZX0GXIkvzqz0g0rUeGvsdjqTWaI9VDXvdFuezqEWnVLJ5KHfX9vl1Noj0 dxqNnOrF61JmIg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:14:36 2025 by rpki-client