This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft File: JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json) Hash identifier: eiXc6cfh9DnU66Zze3dzG/0Kg4p2Amob+2hlqiP5w2w= Subject key identifier: 56:26:AB:16:50:07:E5:34:28:01:DB:B1:B2:09:CA:F1:61:15:CF:86 Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2 Certificate serial: 019AF49BAF356DF81F7946B3A3CC04AEAB60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft Manifest number: 0C5A Signing time: Sat 06 Dec 2025 17:00:34 +0000 Manifest this update: Sat 06 Dec 2025 17:00:34 +0000 Manifest next update: Sun 07 Dec 2025 17:00:34 +0000 Files and hashes: 1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=) 2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: YCEQVbEHqphBgsGtoTOwIHEcfsGfIhmA5PVrifkIvwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:af:35:6d:f8:1f:79:46:b3:a3:cc:04:ae:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2 Validity Not Before: Dec 6 17:00:34 2025 GMT Not After : Dec 7 17:00:34 2025 GMT Subject: CN=5626ab165007e5342801dbb1b209caf16115cf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:ff:06:69:ce:25:68:29:90:13:38:4f:f1: 20:44:d0:20:b2:e9:2f:82:24:06:82:f4:d2:b7:17: c1:66:86:71:7f:21:d4:01:9b:bb:57:27:f7:1b:cb: 36:99:67:e0:9a:41:90:a3:e7:d3:6a:ac:de:c8:53: e1:f5:f6:dd:ab:ff:48:4c:1e:99:cb:6b:85:f4:30: d3:e1:f1:47:ca:54:57:13:52:87:6a:c7:bd:7b:ce: d0:37:09:4e:ec:96:ae:70:d6:89:71:8b:f6:5f:a4: 37:f9:a8:9f:d5:6a:1b:cc:8e:02:50:7a:5d:ae:52: 8a:bc:69:cd:fe:ec:14:38:ea:10:29:ee:2d:ad:ad: 29:fc:ea:51:5a:ef:da:a6:a1:22:ea:a9:f6:a4:6d: 4c:4b:f5:0d:7a:21:34:1e:67:b5:67:ee:f9:76:40: 05:eb:3e:a1:f1:74:17:b5:c4:66:08:58:b7:13:c5: e5:08:66:4a:56:7e:66:80:ea:8e:0e:1f:0b:8e:1b: af:fe:64:e3:95:41:85:4b:5a:da:19:92:79:0f:45: 00:f9:3c:b0:c7:4b:a4:84:77:22:71:fd:5e:da:92: 09:a9:7b:e9:e3:9a:f5:0a:22:e0:6f:9d:b5:2b:d0: 5b:3a:a3:2c:1a:1c:54:ed:90:46:11:e0:af:25:c3: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:26:AB:16:50:07:E5:34:28:01:DB:B1:B2:09:CA:F1:61:15:CF:86 X509v3 Authority Key Identifier: keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:26:97:3f:56:f2:ea:05:19:2f:13:3d:3a:c0:fe:a3:8e:b6: a2:bf:33:76:4a:42:09:19:60:c7:ec:c3:df:bf:ff:1d:98:04: 83:9e:b1:12:8d:d8:95:13:83:f9:00:e1:2f:33:00:b3:b8:09: 75:31:c0:e0:da:22:2a:72:fa:de:99:71:be:0f:00:d8:67:b0: ad:57:0d:1b:0a:0b:ae:a6:93:b5:0e:c7:be:5c:ea:cd:90:28: d6:33:10:0d:3c:11:cc:9a:12:2a:a1:d2:91:0f:0a:80:ca:54: e4:0f:d6:c9:94:9f:6a:7b:63:fc:26:37:35:d8:12:f6:59:48: 4e:76:ce:0c:cb:e7:70:b1:58:d5:6c:ef:f5:6a:67:59:c6:9d: fc:ed:53:34:88:3e:c1:a0:00:26:37:e3:9c:b2:f5:58:66:76: dc:a1:33:6d:ab:87:c5:91:13:62:3f:05:9c:76:83:17:10:d9: 6b:52:27:ce:fd:08:cf:91:9a:93:d6:93:b1:d6:f7:d9:78:1f: c8:64:3e:e9:14:45:55:dc:ab:db:7a:d4:58:89:65:98:ad:df: 34:15:e8:b9:84:2f:92:09:da:bd:c4:14:17:9f:a9:f4:32:9d: 16:57:f9:0a:37:76:8d:85:f5:dc:14:a2:c8:51:e8:49:b0:e0: 0c:d2:40:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m681bfgfeUazo8wErqtgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjU0NzIwODIwNmFkNTQ0NzRjNjlmY2NiZWRjMjRhYTU2 YTYyYzIwHhcNMjUxMjA2MTcwMDM0WhcNMjUxMjA3MTcwMDM0WjAzMTEwLwYDVQQD Eyg1NjI2YWIxNjUwMDdlNTM0MjgwMWRiYjFiMjA5Y2FmMTYxMTVjZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN7/BmnOJWgpkBM4T/EgRNAgsukv giQGgvTStxfBZoZxfyHUAZu7Vyf3G8s2mWfgmkGQo+fTaqzeyFPh9fbdq/9ITB6Z y2uF9DDT4fFHylRXE1KHase9e87QNwlO7JaucNaJcYv2X6Q3+aif1WobzI4CUHpd rlKKvGnN/uwUOOoQKe4tra0p/OpRWu/apqEi6qn2pG1MS/UNeiE0Hme1Z+75dkAF 6z6h8XQXtcRmCFi3E8XlCGZKVn5mgOqODh8Ljhuv/mTjlUGFS1raGZJ5D0UA+Tyw x0ukhHcicf1e2pIJqXvp45r1CiLgb521K9BbOqMsGhxU7ZBGEeCvJcOTTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYmqxZQB+U0KAHbsbIJyvFhFc+GMB8GA1UdIwQY MBaAFCZlRyCCBq1UR0xp/MvtwkqlamLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTIt ODIyZDE1OWE5N2FmLzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTItODIyZDE1OWE5N2Fm LzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSaXP1by 6gUZLxM9OsD+o462or8zdkpCCRlgx+zD37//HZgEg56xEo3YlROD+QDhLzMAs7gJ dTHA4NoiKnL63plxvg8A2GewrVcNGwoLrqaTtQ7HvlzqzZAo1jMQDTwRzJoSKqHS kQ8KgMpU5A/WyZSfantj/CY3NdgS9llITnbODMvncLFY1Wzv9WpnWcad/O1TNIg+ waAAJjfjnLL1WGZ23KEzbauHxZETYj8FnHaDFxDZa1Inzv0Iz5Gak9aTsdb32Xgf yGQ+6RRFVdyr23rUWIllmK3fNBXouYQvkgnavcQUF5+p9DKdFlf5Cjd2jYX13BSi yFHoSbDgDNJAQw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:23 2025 by rpki-client