This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft File: JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json) Hash identifier: Kmx8ew+6zRScBAloMiv4xqEU/C6hiOyQljJ8fQDLLGQ= Subject key identifier: BA:2C:06:25:CA:0E:2A:DE:6D:1A:2E:CF:D6:7E:36:27:FB:58:E7:01 Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29 Certificate issuer: /CN=26638c2cb7b860cd369679c4d05d50f705e04629 Certificate serial: 019AF5787D6A4C8C8E78E1DD6F24703DE4C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft Manifest number: 0FD2 Signing time: Sat 06 Dec 2025 21:01:45 +0000 Manifest this update: Sat 06 Dec 2025 21:01:45 +0000 Manifest next update: Sun 07 Dec 2025 21:01:45 +0000 Files and hashes: 1: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (hash: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=) 2: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: 86+eeg2rQ4E5tFe/E5n/SunZ47gzG7Hz+4dT0uDz1BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:7d:6a:4c:8c:8e:78:e1:dd:6f:24:70:3d:e4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629 Validity Not Before: Dec 6 21:01:45 2025 GMT Not After : Dec 7 21:01:45 2025 GMT Subject: CN=ba2c0625ca0e2ade6d1a2ecfd67e3627fb58e701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:79:b9:bd:d1:af:3c:9f:80:14:bf:db:84: d6:ce:25:5c:26:cf:25:1c:c9:d7:98:58:68:b6:01: fd:6f:3c:1b:47:b9:93:73:6f:cf:5d:04:0a:3b:cb: 51:a8:9f:44:12:31:c8:bb:2c:e9:13:f3:ef:24:c7: 1e:21:78:cb:fe:0f:2c:fc:01:2e:da:0c:4d:01:e4: a8:26:13:d3:2b:ec:22:ce:7d:f2:6e:f6:d6:58:37: 2d:3b:f3:3c:53:aa:b4:46:33:47:90:4d:d2:d3:9a: fa:f8:63:b7:36:39:7e:e5:fe:59:c1:ab:68:d0:fd: 8d:2b:19:54:ec:e8:de:9e:9a:c9:6d:c7:99:ad:5b: c9:0a:bc:6a:d5:3a:00:25:84:ca:fd:e1:1c:1b:7c: 23:27:e2:c9:4e:b6:3b:3f:55:fb:e8:e2:20:69:7f: b4:2f:9e:16:bf:52:f3:6e:48:70:86:5f:da:1e:8e: 31:da:07:ac:7c:49:15:48:23:aa:72:63:a4:66:bd: 55:a1:c6:c2:d4:03:34:b0:b4:26:a1:f5:48:48:7b: e3:27:b3:f3:eb:77:28:2b:20:9b:0a:14:26:68:6e: 00:f0:11:06:59:96:64:27:66:30:78:be:82:c4:1d: 65:a1:f9:8d:e1:e8:0a:ab:7d:f6:da:3f:c8:60:a3: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2C:06:25:CA:0E:2A:DE:6D:1A:2E:CF:D6:7E:36:27:FB:58:E7:01 X509v3 Authority Key Identifier: keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:33:61:4a:ce:7c:9f:21:ec:5d:90:fc:a9:a8:8d:ca:91:4d: d6:c7:17:cc:28:ba:70:b1:11:6a:94:8e:fb:ef:6b:07:1a:af: 22:9e:ab:42:76:e3:e0:09:80:29:19:d7:95:59:27:77:f0:26: 0f:46:2d:5b:40:0c:cf:09:34:43:ca:ee:89:5a:23:55:aa:8b: 15:ff:cf:4f:73:6e:f9:23:6f:36:39:83:36:2a:72:8f:76:ee: 2e:16:82:fb:d5:97:b9:c3:dd:dc:fa:ed:aa:1d:25:34:2a:16: d1:d9:c5:7b:e4:c4:89:22:52:08:0e:94:15:c2:5b:15:23:ae: 77:cc:1e:26:81:8d:7b:39:a4:92:40:27:48:b6:34:d2:18:43: 1d:fb:76:58:e4:98:d9:ea:34:bb:2e:a5:98:95:f4:a8:dc:76: 19:68:bc:dc:9a:8c:1f:41:f5:48:66:83:59:f4:74:3d:d4:61: 11:ff:fd:e0:50:a5:70:ba:f7:be:c8:b2:72:ab:8d:aa:7d:7c: 5e:b2:73:fb:fe:c4:b4:e4:92:9d:bb:4b:eb:6b:b3:ae:7f:0b: 52:2e:1d:66:95:3f:86:00:ba:b4:81:ae:48:b5:4d:db:54:86: fb:ad:fd:52:8e:2e:44:5e:58:4b:26:75:de:c7:1d:26:54:25: 74:56:ef:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eH1qTIyOeOHdbyRwPeTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjM4YzJjYjdiODYwY2QzNjk2NzljNGQwNWQ1MGY3MDVl MDQ2MjkwHhcNMjUxMjA2MjEwMTQ1WhcNMjUxMjA3MjEwMTQ1WjAzMTEwLwYDVQQD EyhiYTJjMDYyNWNhMGUyYWRlNmQxYTJlY2ZkNjdlMzYyN2ZiNThlNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV55ub3RrzyfgBS/24TWziVcJs8l HMnXmFhotgH9bzwbR7mTc2/PXQQKO8tRqJ9EEjHIuyzpE/PvJMceIXjL/g8s/AEu 2gxNAeSoJhPTK+wizn3ybvbWWDctO/M8U6q0RjNHkE3S05r6+GO3Njl+5f5Zwato 0P2NKxlU7OjenprJbceZrVvJCrxq1ToAJYTK/eEcG3wjJ+LJTrY7P1X76OIgaX+0 L54Wv1Lzbkhwhl/aHo4x2gesfEkVSCOqcmOkZr1VocbC1AM0sLQmofVISHvjJ7Pz 63coKyCbChQmaG4A8BEGWZZkJ2YweL6CxB1lofmN4egKq3322j/IYKNyRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLosBiXKDirebRouz9Z+Nif7WOcBMB8GA1UdIwQY MBaAFCZjjCy3uGDNNpZ5xNBdUPcF4EYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTZmNjktZWYxNC00MjI3LTg4OTgt M2U1N2NjNTJjODRlLzEvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kOTZmNjktZWYxNC00MjI3LTg4OTgtM2U1N2NjNTJjODRl LzEvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxzNhSs58 nyHsXZD8qaiNypFN1scXzCi6cLERapSO++9rBxqvIp6rQnbj4AmAKRnXlVknd/Am D0YtW0AMzwk0Q8ruiVojVaqLFf/PT3Nu+SNvNjmDNipyj3buLhaC+9WXucPd3Prt qh0lNCoW0dnFe+TEiSJSCA6UFcJbFSOud8weJoGNezmkkkAnSLY00hhDHft2WOSY 2eo0uy6lmJX0qNx2GWi83JqMH0H1SGaDWfR0PdRhEf/94FClcLr3vsiycquNqn18 XrJz+/7EtOSSnbtL62uzrn8LUi4dZpU/hgC6tIGuSLVN21SG+639Uo4uRF5YSyZ1 3scdJlQldFbvYQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:58 2025 by rpki-client