This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft File: JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json) Hash identifier: i37SfcM6jdgsL6JOFGTevNYE2VPQaSTkQoqhXZTaHvw= Subject key identifier: 95:5D:93:5E:FC:6A:7F:71:28:44:53:D3:31:BA:C1:EE:A5:61:A2:ED Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2 Certificate serial: 019B326833B244256DCA44D43C3CF0C9A9B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft Manifest number: 0C7A Signing time: Thu 18 Dec 2025 17:00:48 +0000 Manifest this update: Thu 18 Dec 2025 17:00:48 +0000 Manifest next update: Fri 19 Dec 2025 17:00:48 +0000 Files and hashes: 1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=) 2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: fd/GajGpVXPmxgNcTC8n9hy1hBoqNrAOVBfcuIZObNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:33:b2:44:25:6d:ca:44:d4:3c:3c:f0:c9:a9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2 Validity Not Before: Dec 18 17:00:48 2025 GMT Not After : Dec 19 17:00:48 2025 GMT Subject: CN=955d935efc6a7f71284453d331bac1eea561a2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:41:ea:75:b5:9e:47:10:49:0a:c8:16:67: ad:e2:48:6b:4d:36:d3:0c:26:f2:62:24:d6:30:c5: 27:66:3d:2b:64:2c:a4:74:47:a8:b2:5d:ad:81:27: 3d:03:d1:a3:7a:69:eb:cb:0b:82:ee:21:08:34:c2: df:45:df:fc:50:97:7b:c5:84:82:e6:26:71:a2:13: 56:7d:c1:95:9b:cc:36:33:cb:58:40:a8:ed:13:d1: 86:5e:ab:94:21:b4:72:34:e0:17:60:3f:36:18:4f: 5f:5e:5e:d2:b3:4e:93:65:73:ac:e6:cd:17:d4:70: fc:c3:ab:6d:ef:39:a0:65:6e:b9:cf:58:b8:33:e0: 32:96:52:48:b1:81:b9:42:f1:cb:96:5b:e3:78:d8: 00:0b:83:d5:f0:4f:05:03:1b:f5:44:80:5f:9f:25: 08:6c:ff:b3:39:1a:67:1e:c9:53:06:8d:8d:0e:e6: 20:a8:34:4c:8f:98:c0:46:6f:50:1f:ae:4e:8f:3a: 3c:29:e2:bd:d3:56:ac:8f:9a:ae:79:1c:81:2d:ac: c7:7d:a1:23:21:3a:a8:8e:88:61:7e:5b:13:bd:75: d7:d6:b6:38:cc:5d:32:be:52:a7:89:d3:15:be:fa: 3e:85:e2:50:58:f5:e5:76:13:c2:5d:e1:58:54:98: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5D:93:5E:FC:6A:7F:71:28:44:53:D3:31:BA:C1:EE:A5:61:A2:ED X509v3 Authority Key Identifier: keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:be:6d:ac:21:f9:8e:12:e1:1a:20:b3:d2:a3:9c:3b:25:7c: 18:24:13:f8:28:53:c5:0a:3f:45:b6:2a:f0:47:28:85:17:bf: 3a:da:f2:36:6a:0c:ac:69:09:a8:dd:25:bb:ed:11:1f:ca:6a: 8d:e9:72:20:9c:48:76:4a:40:ea:18:42:ca:cd:35:a2:4e:96: 56:59:ae:19:40:d8:65:cb:4c:77:a9:f0:54:60:67:6a:fc:c1: 53:32:88:9c:35:dc:95:f3:d6:c1:13:40:99:b2:58:4c:fa:c0: 41:34:40:40:81:31:46:9e:42:16:9f:ab:fa:40:4a:41:17:11: 21:e7:60:e5:9d:c0:23:c3:10:60:66:fe:b8:21:97:8a:9f:11: fa:3e:b1:35:6f:f8:00:2d:98:c6:b8:d0:37:62:61:c3:6e:97: 41:bb:64:7d:e1:7f:5d:85:14:f0:89:dd:5f:17:f6:f5:20:6b: 8c:32:ea:c7:01:6d:db:84:3b:8d:a3:d6:16:d2:4d:a6:06:18: b7:19:e1:5a:a0:ea:ec:85:c8:92:53:72:60:94:e4:38:49:9d: 6b:e8:6c:7d:44:07:ca:62:be:05:5b:f6:d5:03:82:b1:0d:e0: ad:b1:54:d1:68:81:c2:1f:a8:f8:b4:68:89:51:61:aa:5d:19: da:1f:ba:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaDOyRCVtykTUPDzwyam2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjU0NzIwODIwNmFkNTQ0NzRjNjlmY2NiZWRjMjRhYTU2 YTYyYzIwHhcNMjUxMjE4MTcwMDQ4WhcNMjUxMjE5MTcwMDQ4WjAzMTEwLwYDVQQD Eyg5NTVkOTM1ZWZjNmE3ZjcxMjg0NDUzZDMzMWJhYzFlZWE1NjFhMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VpB6nW1nkcQSQrIFmet4khrTTbT DCbyYiTWMMUnZj0rZCykdEeosl2tgSc9A9GjemnrywuC7iEINMLfRd/8UJd7xYSC 5iZxohNWfcGVm8w2M8tYQKjtE9GGXquUIbRyNOAXYD82GE9fXl7Ss06TZXOs5s0X 1HD8w6tt7zmgZW65z1i4M+AyllJIsYG5QvHLllvjeNgAC4PV8E8FAxv1RIBfnyUI bP+zORpnHslTBo2NDuYgqDRMj5jARm9QH65Ojzo8KeK901asj5queRyBLazHfaEj ITqojohhflsTvXXX1rY4zF0yvlKnidMVvvo+heJQWPXldhPCXeFYVJgSxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVdk178an9xKERT0zG6we6lYaLtMB8GA1UdIwQY MBaAFCZlRyCCBq1UR0xp/MvtwkqlamLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTIt ODIyZDE1OWE5N2FmLzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTItODIyZDE1OWE5N2Fm LzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK75trCH5 jhLhGiCz0qOcOyV8GCQT+ChTxQo/RbYq8EcohRe/OtryNmoMrGkJqN0lu+0RH8pq jelyIJxIdkpA6hhCys01ok6WVlmuGUDYZctMd6nwVGBnavzBUzKInDXclfPWwRNA mbJYTPrAQTRAQIExRp5CFp+r+kBKQRcRIedg5Z3AI8MQYGb+uCGXip8R+j6xNW/4 AC2YxrjQN2Jhw26XQbtkfeF/XYUU8IndXxf29SBrjDLqxwFt24Q7jaPWFtJNpgYY txnhWqDq7IXIklNyYJTkOEmda+hsfUQHymK+BVv21QOCsQ3grbFU0WiBwh+o+LRo iVFhql0Z2h+6vA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:46:00 2025 by rpki-client