This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json) Hash identifier: 6hvPLV3PRSSLgZtV1JNUjd10EKDtIItUzMKqsjtgKHQ= Subject key identifier: 2E:63:D7:CB:A1:FA:48:10:90:06:23:94:F9:05:99:4B:EC:45:F2:62 Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b Certificate serial: 019AF31CB18F9186FB3C4E7B6003796B6EFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft Manifest number: 024D Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: 9DxqDh94NDiL1jXqI1Y6XJ13KVT2XsXSwiok8J1XA4E=) 2: KG8CBSi1ldaOc_7McAlQkyEmOQA.roa (hash: DpzAqMaMhdv82TzpA9vIGD7n6zlPP/KwSYGZ3tPypWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b1:8f:91:86:fb:3c:4e:7b:60:03:79:6b:6e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=2e63d7cba1fa481090062394f905994bec45f262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:39:1f:94:5f:43:86:c3:06:76:50:32:c7: 2c:52:1b:ea:7f:30:35:2c:a6:5b:7c:78:9f:d8:e4: 46:cc:3c:4d:cc:7e:29:e9:05:b3:55:fe:25:39:b6: 2c:49:4f:55:2b:8b:6c:c3:8d:67:d7:67:c5:5a:f5: 97:35:4b:03:80:53:44:0d:66:dd:8e:c8:98:e8:c2: f0:6e:0a:01:3e:2f:04:b3:ab:40:81:bb:0f:ac:20: 2d:08:63:13:45:e2:c4:34:9f:d0:9a:91:7e:ea:2b: 9b:0f:f5:0e:cb:0b:5e:8d:4c:68:2a:40:af:91:91: 74:45:4c:a2:7b:bb:3c:4b:49:29:b6:8a:c3:f4:91: 01:69:20:52:32:5a:10:84:22:e6:6c:90:a5:e9:de: bc:d0:0a:6c:08:2d:19:5f:a9:5c:34:48:f7:94:3d: 95:0a:81:05:37:2c:b0:de:ab:fd:f5:27:ad:21:51: c8:f1:6a:2e:df:20:74:8f:95:67:c6:18:30:15:50: 7d:69:f3:57:f2:2a:b7:be:95:28:18:09:6b:fc:79: 70:db:b4:b5:29:d9:53:eb:60:85:8d:5a:96:c6:19: d0:ef:f1:1a:b4:20:6f:0b:fc:e2:a7:f7:af:dd:44: 16:e1:1a:22:6a:ac:26:a3:0d:68:e9:1b:54:44:b8: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:63:D7:CB:A1:FA:48:10:90:06:23:94:F9:05:99:4B:EC:45:F2:62 X509v3 Authority Key Identifier: keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d8:08:6a:df:74:35:d1:84:f8:67:fb:20:12:15:2c:08:7a: 35:a9:da:67:9b:b3:7c:94:27:f2:56:a0:be:d2:be:64:5d:5b: b3:a6:b0:87:07:f4:eb:5a:25:aa:f2:d8:0a:1c:a1:ed:a2:e7: f2:22:5a:4b:2b:35:1d:4c:1c:81:bd:89:b7:b5:ec:c5:0e:29: d5:2a:02:af:78:e6:bf:05:f1:21:6b:69:04:7f:15:6e:c8:c6: c8:55:11:0b:a3:ac:1a:8e:ef:eb:94:2e:54:36:b4:11:66:70: cd:2b:9a:38:04:c4:01:78:f9:2e:3d:75:22:b7:a8:99:89:ce: 83:9b:a0:f2:81:cd:c4:dd:c6:37:6d:31:0f:d2:86:e7:9e:b1: 81:b4:27:16:54:4a:2f:29:ac:68:11:7b:ea:b7:d5:61:e6:64: 70:8c:94:10:ba:b1:05:c4:72:90:65:77:5a:5f:77:95:66:c2: a8:2f:c7:a8:ac:9f:3d:ef:68:fc:53:1d:50:c7:b4:a5:e8:f1: cb:ac:dc:92:c4:48:e0:d9:d1:d8:66:ca:0b:0b:79:94:2c:37: 8c:bc:8b:22:9d:bd:85:60:cb:06:04:cd:fd:99:3d:6d:87:e4: bd:04:01:df:13:bf:18:d8:bf:4b:8d:b8:bf:cf:cd:13:b2:56: f0:02:c7:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLGPkYb7PE57YAN5a278MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTlhZmZmN2U3ZmViMDZlMThkZTkyYzI3MzU2M2I5ODAz MzMxNmIwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD EygyZTYzZDdjYmExZmE0ODEwOTAwNjIzOTRmOTA1OTk0YmVjNDVmMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuw5H5RfQ4bDBnZQMscsUhvqfzA1 LKZbfHif2ORGzDxNzH4p6QWzVf4lObYsSU9VK4tsw41n12fFWvWXNUsDgFNEDWbd jsiY6MLwbgoBPi8Es6tAgbsPrCAtCGMTReLENJ/QmpF+6iubD/UOywtejUxoKkCv kZF0RUyie7s8S0kptorD9JEBaSBSMloQhCLmbJCl6d680ApsCC0ZX6lcNEj3lD2V CoEFNyyw3qv99SetIVHI8Wou3yB0j5VnxhgwFVB9afNX8iq3vpUoGAlr/Hlw27S1 KdlT62CFjVqWxhnQ7/EatCBvC/zip/ev3UQW4Roiaqwmow1o6RtURLiZvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5j18uh+kgQkAYjlPkFmUvsRfJiMB8GA1UdIwQY MBaAFCSpr/9+f+sG4Y3pLCc1Y7mAMzFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEt NzE2MTIwYWIyZGIyLzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEtNzE2MTIwYWIyZGIy LzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9gIat90 NdGE+Gf7IBIVLAh6NanaZ5uzfJQn8lagvtK+ZF1bs6awhwf061olqvLYChyh7aLn 8iJaSys1HUwcgb2Jt7XsxQ4p1SoCr3jmvwXxIWtpBH8VbsjGyFURC6OsGo7v65Qu VDa0EWZwzSuaOATEAXj5Lj11IreomYnOg5ug8oHNxN3GN20xD9KG556xgbQnFlRK LymsaBF76rfVYeZkcIyUELqxBcRykGV3Wl93lWbCqC/HqKyfPe9o/FMdUMe0pejx y6zcksRI4NnR2GbKCwt5lCw3jLyLIp29hWDLBgTN/Zk9bYfkvQQB3xO/GNi/S424 v8/NE7JW8ALHSg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:49 2025 by rpki-client