This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json) Hash identifier: mJHsDBBkcY501ZVkPNUx1/3bNHm9pXK5LYe/6sxh9Uc= Subject key identifier: AB:8E:C4:CD:88:64:7E:1C:47:8E:58:E9:7B:7E:3C:B1:19:F2:51:40 Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b Certificate serial: 019B2D0CA1F5EF12F5AFC0784ADDCC349B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft Manifest number: 0B8E Signing time: Wed 17 Dec 2025 16:02:41 +0000 Manifest this update: Wed 17 Dec 2025 16:02:41 +0000 Manifest next update: Thu 18 Dec 2025 16:02:41 +0000 Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=) 2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: wDtQzmfL9qZMaeiqi6ZAK2oQKt5Zb+/QOVmK9s14D68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:a1:f5:ef:12:f5:af:c0:78:4a:dd:cc:34:9b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b Validity Not Before: Dec 17 16:02:41 2025 GMT Not After : Dec 18 16:02:41 2025 GMT Subject: CN=ab8ec4cd88647e1c478e58e97b7e3cb119f25140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:96:e7:6e:cf:4e:49:5c:da:4a:dc:0b:25: 8c:da:96:9d:ae:45:8a:81:84:14:c8:02:3d:ce:b9: 93:26:41:93:95:4f:a2:77:53:cb:dd:df:73:5c:e2: 6e:21:70:4d:41:9f:9f:3c:50:dc:47:d0:3b:78:69: a7:4a:4c:65:5f:90:04:d2:b8:81:c0:cf:5c:5b:98: 6a:77:f9:06:9b:cd:a1:d8:7f:e7:4c:7b:d8:22:4d: b8:fc:04:f0:32:71:bd:b0:f5:c8:9e:77:c2:d5:53: ab:50:63:1f:c3:c9:2b:e8:9e:e9:02:52:a1:89:75: 80:94:7b:83:d8:69:40:ce:fa:23:fc:25:62:9f:c4: 05:03:a9:70:85:ab:8a:e7:ed:fd:09:5b:a4:6a:8c: 8e:91:c6:a5:72:96:63:3a:9c:20:d7:df:46:fe:f5: f3:6e:c4:68:ee:e3:32:4e:c4:cd:5f:ae:ce:2e:20: 27:cf:f1:de:d1:f6:2c:1e:a8:b2:e3:f7:b1:4f:dc: 1f:fe:7c:e4:c2:4e:65:12:46:3d:f5:4e:b7:a6:1f: c6:07:88:a4:7c:0c:e7:85:2b:0e:42:87:26:25:96: 63:12:da:1e:96:0e:1c:33:38:30:32:cc:45:ed:86: c3:b9:ea:f9:33:0b:aa:f8:a8:3f:05:db:46:81:f1: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8E:C4:CD:88:64:7E:1C:47:8E:58:E9:7B:7E:3C:B1:19:F2:51:40 X509v3 Authority Key Identifier: keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9e:9a:5b:ce:20:11:56:cf:ca:98:82:46:40:3b:b7:2e:45: e4:60:ac:6d:44:08:2a:a3:6c:bd:44:d5:8d:61:17:78:3a:ec: 0b:50:1b:7c:71:22:57:fc:e7:6b:c7:a0:2d:a3:a6:40:2f:44: 6d:6f:4f:e6:0c:da:9b:f1:e1:93:33:40:7c:66:a8:5b:14:5d: 58:50:e7:24:dc:e4:1a:b2:27:d5:5a:61:95:00:7e:9c:1b:d4: 5c:40:6d:aa:f0:93:f8:f9:4e:12:d4:e3:81:3a:71:10:20:55: e5:aa:95:aa:3d:c3:7d:53:36:20:a7:45:70:48:b4:c6:43:4b: 1e:c5:a9:4c:06:43:23:69:78:3b:f9:45:98:cf:7d:6a:df:d5: 45:d2:dc:fe:97:79:87:cc:4f:4f:1e:4e:cf:84:e5:46:66:6a: 48:52:6f:d1:8e:a0:d7:33:a0:27:e4:9a:0d:ba:5b:f7:5f:4d: 31:06:b0:7d:3a:f0:d8:9b:6a:59:54:a5:e7:59:73:38:37:b0: fb:e1:81:7f:db:3a:81:8b:03:bf:60:c7:9d:7a:3c:8b:3b:83: e6:18:65:7e:ca:5d:1c:3c:0e:c7:01:b9:c1:e9:f9:ea:ef:f0: 04:98:34:0d:0a:f9:9d:44:9f:2c:78:df:3c:2f:1e:97:4a:b0: 0f:76:0a:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDKH17xL1r8B4St3MNJswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZjAwN2U0ZmJkNWE2MjJhYTg1M2M0MjVhMDEwZWU3ODlm NzExNWIwHhcNMjUxMjE3MTYwMjQxWhcNMjUxMjE4MTYwMjQxWjAzMTEwLwYDVQQD EyhhYjhlYzRjZDg4NjQ3ZTFjNDc4ZTU4ZTk3YjdlM2NiMTE5ZjI1MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1qW527PTklc2krcCyWM2padrkWK gYQUyAI9zrmTJkGTlU+id1PL3d9zXOJuIXBNQZ+fPFDcR9A7eGmnSkxlX5AE0riB wM9cW5hqd/kGm82h2H/nTHvYIk24/ATwMnG9sPXInnfC1VOrUGMfw8kr6J7pAlKh iXWAlHuD2GlAzvoj/CVin8QFA6lwhauK5+39CVukaoyOkcalcpZjOpwg199G/vXz bsRo7uMyTsTNX67OLiAnz/He0fYsHqiy4/exT9wf/nzkwk5lEkY99U63ph/GB4ik fAznhSsOQocmJZZjEtoelg4cMzgwMsxF7YbDuer5Mwuq+Kg/BdtGgfEf6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuOxM2IZH4cR45Y6Xt+PLEZ8lFAMB8GA1UdIwQY MBaAFCXwB+T71aYiqoU8QloBDueJ9xFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEt ZWM2OGUzNWE3MWVmLzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEtZWM2OGUzNWE3MWVm LzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp6aW84g EVbPypiCRkA7ty5F5GCsbUQIKqNsvUTVjWEXeDrsC1AbfHEiV/zna8egLaOmQC9E bW9P5gzam/HhkzNAfGaoWxRdWFDnJNzkGrIn1VphlQB+nBvUXEBtqvCT+PlOEtTj gTpxECBV5aqVqj3DfVM2IKdFcEi0xkNLHsWpTAZDI2l4O/lFmM99at/VRdLc/pd5 h8xPTx5Oz4TlRmZqSFJv0Y6g1zOgJ+SaDbpb919NMQawfTrw2JtqWVSl51lzODew ++GBf9s6gYsDv2DHnXo8izuD5hhlfspdHDwOxwG5wen56u/wBJg0DQr5nUSfLHjf PC8el0qwD3YKqw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:54:41 2025 by rpki-client