This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft File: jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json) Hash identifier: bCnE5Pg99FuiRT2C5O9TuTyO2PfAN6GkgSbyK3j21lo= Subject key identifier: 0E:FE:BB:5E:08:27:0D:FA:60:9D:65:11:F1:D4:25:F7:71:47:75:D0 Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77 Certificate issuer: /CN=8d58406ad38b155c198e385a9c2f621bce21f877 Certificate serial: 019B341F6F4085F753467C3C9B764BFB9D54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft Manifest number: 0648 Signing time: Fri 19 Dec 2025 01:00:33 +0000 Manifest this update: Fri 19 Dec 2025 01:00:33 +0000 Manifest next update: Sat 20 Dec 2025 01:00:33 +0000 Files and hashes: 1: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: 1j9bccVc9aEL58lmcpFgo+h1jKLpvyXlUl0CnmLpE0Q=) 2: wSg_Q3AVzxpUBttCXjIJak9PtWQ.roa (hash: 7ZIqq7EQX4+wc9KQfXKXDhB7f6xm/17Vj5EeRzzdxZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:6f:40:85:f7:53:46:7c:3c:9b:76:4b:fb:9d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877 Validity Not Before: Dec 19 01:00:33 2025 GMT Not After : Dec 20 01:00:33 2025 GMT Subject: CN=0efebb5e08270dfa609d6511f1d425f7714775d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:b4:4d:4a:5d:21:28:0c:85:4d:46:a3:db: 28:4d:65:ce:58:aa:fc:6b:77:fb:c8:67:28:13:13: 00:4b:aa:9a:b5:1c:5b:33:a2:36:5a:68:00:03:55: e5:88:0e:9b:f0:be:78:7c:a7:fb:1b:11:57:c1:27: 0b:1b:4b:db:2b:84:30:bc:2b:34:bc:85:09:8a:fe: 97:0b:ec:33:9b:a1:96:bc:d6:68:6d:b9:bd:0c:13: 73:72:68:12:bf:f1:2f:41:00:44:91:68:04:12:a1: fc:42:b0:34:b9:87:36:ec:c5:76:d5:32:56:38:86: 07:f2:0e:8f:3b:06:40:76:05:d4:33:3d:78:ef:38: 99:bf:00:c7:41:4a:68:dc:83:83:b0:fe:86:8b:cd: 2a:58:1e:ce:3c:33:a9:04:51:9f:e1:e0:0a:d3:2b: f4:94:1f:87:1c:ff:16:50:83:00:48:fc:71:e6:6c: c1:a2:3e:99:d4:7b:0e:be:02:bf:9b:66:e5:2e:1b: 9d:45:a3:17:a7:d1:a1:86:48:5d:46:34:0a:b9:c0: b2:8d:3b:8a:c5:51:72:7e:99:6d:29:f6:1c:b1:58: 0b:ac:55:30:34:d1:3e:c4:3d:7e:f8:e8:c1:2a:b8: 51:58:8a:10:06:1a:ee:74:82:e2:c3:10:63:0b:5e: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FE:BB:5E:08:27:0D:FA:60:9D:65:11:F1:D4:25:F7:71:47:75:D0 X509v3 Authority Key Identifier: keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c7:1e:ae:2e:34:d7:35:09:95:03:bc:f5:a9:fa:9d:d1:fd: 2f:2d:53:64:45:7f:33:3b:24:a8:ac:97:0d:bf:e6:9d:87:fc: bc:da:ff:d7:8f:81:8d:69:a0:46:81:04:b6:b3:98:6b:b4:44: 3d:e9:a3:17:44:61:b5:08:41:fa:c6:63:bc:d9:4d:85:98:a3: f5:1b:bb:8b:28:3d:66:dd:f4:40:5d:61:d7:0d:cf:d1:87:22: e5:2b:53:db:3d:b3:34:82:46:e1:4d:32:e0:bc:e5:ec:67:c1: 4d:7b:63:42:60:5c:51:a9:80:63:a6:a9:ba:b0:92:62:a4:08: 17:bf:c1:1b:7c:89:57:85:7d:74:e9:78:e4:d9:a0:d2:e0:e3: 55:87:ac:eb:78:8f:53:f5:e6:7b:a7:29:51:ce:05:d5:9a:c4: b8:0a:c4:94:01:ca:3a:46:78:6a:7c:17:6d:6e:b1:32:d5:4d: d1:01:12:10:38:57:77:44:c5:38:b5:8d:58:6e:c6:a5:90:19: 92:71:7e:1f:a9:11:7e:5d:9e:bb:49:75:c2:90:cc:d2:e7:b4: ec:fd:aa:0b:df:5e:cd:5a:48:5d:eb:08:21:2a:9f:5d:df:88: 03:90:e3:c0:8f:68:eb:4b:50:41:72:ef:fd:a9:f3:c3:f1:9c: f1:8b:4d:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H29AhfdTRnw8m3ZL+51UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTg0MDZhZDM4YjE1NWMxOThlMzg1YTljMmY2MjFiY2Uy MWY4NzcwHhcNMjUxMjE5MDEwMDMzWhcNMjUxMjIwMDEwMDMzWjAzMTEwLwYDVQQD EygwZWZlYmI1ZTA4MjcwZGZhNjA5ZDY1MTFmMWQ0MjVmNzcxNDc3NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5e0TUpdISgMhU1Go9soTWXOWKr8 a3f7yGcoExMAS6qatRxbM6I2WmgAA1XliA6b8L54fKf7GxFXwScLG0vbK4QwvCs0 vIUJiv6XC+wzm6GWvNZobbm9DBNzcmgSv/EvQQBEkWgEEqH8QrA0uYc27MV21TJW OIYH8g6POwZAdgXUMz147ziZvwDHQUpo3IODsP6Gi80qWB7OPDOpBFGf4eAK0yv0 lB+HHP8WUIMASPxx5mzBoj6Z1HsOvgK/m2blLhudRaMXp9GhhkhdRjQKucCyjTuK xVFyfpltKfYcsVgLrFUwNNE+xD1++OjBKrhRWIoQBhrudILiwxBjC16ctQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7+u14IJw36YJ1lEfHUJfdxR3XQMB8GA1UdIwQY MBaAFI1YQGrTixVcGY44WpwvYhvOIfh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZoQWF0T0xGVndaampoYW5DOWlHODRoLUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmE1MWMtMTc3MC00ZGZhLTgzNjct MjhmNjhhNGExNDNiLzEvalZoQWF0T0xGVndaampoYW5DOWlHODRoLUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmE1MWMtMTc3MC00ZGZhLTgzNjctMjhmNjhhNGExNDNi LzEvalZoQWF0T0xGVndaampoYW5DOWlHODRoLUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMceri40 1zUJlQO89an6ndH9Ly1TZEV/MzskqKyXDb/mnYf8vNr/14+BjWmgRoEEtrOYa7RE PemjF0RhtQhB+sZjvNlNhZij9Ru7iyg9Zt30QF1h1w3P0Yci5StT2z2zNIJG4U0y 4Lzl7GfBTXtjQmBcUamAY6apurCSYqQIF7/BG3yJV4V9dOl45Nmg0uDjVYes63iP U/Xme6cpUc4F1ZrEuArElAHKOkZ4anwXbW6xMtVN0QESEDhXd0TFOLWNWG7GpZAZ knF+H6kRfl2eu0l1wpDM0ue07P2qC99ezVpIXesIISqfXd+IA5DjwI9o60tQQXLv /anzw/Gc8YtNVA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:22:20 2025 by rpki-client