This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft File: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json) Hash identifier: DKIsvluFrGy5juBIoINypg1mFf4SSi+v5mFE1bA66mI= Subject key identifier: BF:03:85:44:37:D5:9F:A4:55:C4:03:20:E8:DA:A0:ED:BC:05:EC:E2 Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F Certificate issuer: /CN=27032f79023052100c4393c9e690f97d7896926f Certificate serial: 019AF50B56ABBF9D7FF2E5BAFC68CEF0E313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft Manifest number: 175A Signing time: Sat 06 Dec 2025 19:02:32 +0000 Manifest this update: Sat 06 Dec 2025 19:02:32 +0000 Manifest next update: Sun 07 Dec 2025 19:02:32 +0000 Files and hashes: 1: 0CjJkWjNBNTUeoDrNQPuYSnwMLQ.roa (hash: rMAMLQ6zW01Wu80wVa2CdSK+UNAIR1vD+Et52F6+MjE=) 2: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: unH7Kc8D6GnU7qZXC950JHVs85klqBqyzOL1X7nVAGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:56:ab:bf:9d:7f:f2:e5:ba:fc:68:ce:f0:e3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27032f79023052100c4393c9e690f97d7896926f Validity Not Before: Dec 6 19:02:32 2025 GMT Not After : Dec 7 19:02:32 2025 GMT Subject: CN=bf03854437d59fa455c40320e8daa0edbc05ece2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:e9:48:60:c4:86:de:1e:ec:cc:af:c3:1b: a7:dd:80:16:90:c5:e6:75:39:a1:5c:42:8e:e0:6a: 5f:5d:53:6b:77:77:2e:47:7c:0c:7b:54:30:1b:d8: 7e:62:45:05:c4:7b:0a:75:39:29:3d:ca:79:0f:97: a2:76:63:34:ff:b4:d5:04:05:aa:62:cf:b4:55:55: f3:31:c1:83:4e:bc:06:69:68:06:99:d2:31:1e:21: 93:0b:fc:77:07:84:85:38:a3:e5:a9:4b:0f:41:1d: 4d:b7:5e:e9:2a:87:25:31:9e:ae:ce:1d:3a:4b:48: 94:1f:c7:b1:f3:90:95:55:78:5e:ac:f6:bb:7c:5f: 5a:69:71:be:69:91:9e:ee:1c:d2:2d:2b:0c:77:e0: 8f:d0:35:87:66:20:8d:2d:18:4b:ec:d2:dd:de:93: a0:9e:41:9a:69:13:15:5a:c5:70:fd:8a:04:d0:b2: b9:4f:b1:fd:d2:fa:81:1d:34:78:91:1a:6d:e6:2c: 0b:01:78:10:38:e9:d9:3b:06:85:6c:3c:ef:b1:2a: f2:63:fc:ac:e1:07:3f:eb:fa:30:1c:dd:e7:15:18: f0:1c:74:5c:60:85:c5:95:8f:71:c5:3b:8e:04:75: fa:39:f6:ee:37:45:4c:6f:30:d8:48:61:a1:13:45: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:03:85:44:37:D5:9F:A4:55:C4:03:20:E8:DA:A0:ED:BC:05:EC:E2 X509v3 Authority Key Identifier: keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3a:ad:7b:ad:2e:2f:2a:a5:32:5c:f9:bd:a0:86:51:eb:bd: 1d:4a:21:b6:bf:ca:8f:61:78:0f:b7:94:86:1c:8a:21:dd:db: 0d:96:ba:1a:e6:e7:30:e0:06:b1:fd:94:be:96:6e:89:47:62: 96:29:b2:19:81:cf:6f:2a:65:d4:74:36:16:70:c0:c5:27:78: 83:f0:c1:dd:28:de:03:87:8b:18:c1:84:49:8b:a6:1a:14:9a: 94:a4:d5:ba:e9:29:07:d9:5f:b5:98:4b:60:31:18:f7:ba:16: 88:91:38:e9:32:32:9f:d8:59:d3:6e:1f:b6:5b:8d:a6:f2:06: be:82:ff:52:b5:6e:00:cf:ac:d0:dd:b4:43:a6:69:a9:0c:f2: 27:fa:d9:c2:62:25:2e:3a:66:8f:c8:e5:56:a1:f6:8e:56:9f: 20:fd:fc:3b:a0:59:fa:d3:a5:4c:ff:5c:92:c1:c3:55:2c:88: 9c:31:e2:77:c2:d7:17:00:1c:e9:93:dc:cf:c8:80:8f:84:d3: 5c:1a:28:2e:74:2e:84:84:c1:e5:b7:fc:a0:c7:d9:00:11:ea: 70:ee:be:4d:03:0f:81:03:c4:8f:ac:5f:80:fc:3c:6c:1f:d0: 90:58:4b:ab:a4:4f:9b:59:d6:a5:83:1e:ba:c6:a1:7a:4a:06: cd:e6:a0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C1arv51/8uW6/GjO8OMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDMyZjc5MDIzMDUyMTAwYzQzOTNjOWU2OTBmOTdkNzg5 NjkyNmYwHhcNMjUxMjA2MTkwMjMyWhcNMjUxMjA3MTkwMjMyWjAzMTEwLwYDVQQD EyhiZjAzODU0NDM3ZDU5ZmE0NTVjNDAzMjBlOGRhYTBlZGJjMDVlY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw97pSGDEht4e7Myvwxun3YAWkMXm dTmhXEKO4GpfXVNrd3cuR3wMe1QwG9h+YkUFxHsKdTkpPcp5D5eidmM0/7TVBAWq Ys+0VVXzMcGDTrwGaWgGmdIxHiGTC/x3B4SFOKPlqUsPQR1Nt17pKoclMZ6uzh06 S0iUH8ex85CVVXherPa7fF9aaXG+aZGe7hzSLSsMd+CP0DWHZiCNLRhL7NLd3pOg nkGaaRMVWsVw/YoE0LK5T7H90vqBHTR4kRpt5iwLAXgQOOnZOwaFbDzvsSryY/ys 4Qc/6/owHN3nFRjwHHRcYIXFlY9xxTuOBHX6OfbuN0VMbzDYSGGhE0Xu4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8DhUQ31Z+kVcQDIOjaoO28BeziMB8GA1UdIwQY MBaAFCcDL3kCMFIQDEOTyeaQ+X14lpJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNGZmNTItNjRiYS00MjBiLWJmZjQt ZjA3ZGQyNjA2MjY3LzEvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mNGZmNTItNjRiYS00MjBiLWJmZjQtZjA3ZGQyNjA2MjY3 LzEvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzqte60u LyqlMlz5vaCGUeu9HUohtr/Kj2F4D7eUhhyKId3bDZa6GubnMOAGsf2UvpZuiUdi limyGYHPbypl1HQ2FnDAxSd4g/DB3SjeA4eLGMGESYumGhSalKTVuukpB9lftZhL YDEY97oWiJE46TIyn9hZ024ftluNpvIGvoL/UrVuAM+s0N20Q6ZpqQzyJ/rZwmIl Ljpmj8jlVqH2jlafIP38O6BZ+tOlTP9cksHDVSyInDHid8LXFwAc6ZPcz8iAj4TT XBooLnQuhITB5bf8oMfZABHqcO6+TQMPgQPEj6xfgPw8bB/QkFhLq6RPm1nWpYMe usahekoGzeag4w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:11 2025 by rpki-client