This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json) Hash identifier: YzHySwPF815WAmw3AvnRW9WvJiaDFcvLWUR0J2mQZ3s= Subject key identifier: 90:7E:1D:E9:98:12:44:54:16:B4:7A:02:8A:0F:C8:E3:D5:12:38:46 Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Certificate serial: 019AF3526BC63F89B8DBBCB1538C681EBBE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft Manifest number: 0840 Signing time: Sat 06 Dec 2025 11:00:56 +0000 Manifest this update: Sat 06 Dec 2025 11:00:56 +0000 Manifest next update: Sun 07 Dec 2025 11:00:56 +0000 Files and hashes: 1: A5sQkS7uV34eVKej6AR1hhoB46M.roa (hash: eFJSmWV9FN9AUQVrtCj0Gi9K4HAn4sO16nvoF3Du328=) 2: Aq-TvzjFztbKAkWflBycG6JnnmI.roa (hash: vNeC+WdDRSicqm3sNUPFizoozGyatbmAcuwj3IYL5Nw=) 3: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: fgi0S24zVNRW71wctcRa+nPYQrEX/I5apBUA5/+tW8U=) 4: Z038aIKVZFkliOLrONmNXUN2Hdg.roa (hash: s807DAxekCk/MvXWajffM24Fq3Cec41ZsJWJ0yNVDbs=) 5: upHXyI-l9dhGBIOdLwpSxCKYoNQ.roa (hash: 0iE6n2FbevPnKKt2MD0taksU6A7tOdh1fagPKo1OnLw=) 6: xv9B7fjfa2G32O9EZ2NMxp1nDsM.roa (hash: J6qlmSvg5k/OtuuDCnUuzmwEI/vDAGKuXR0HbLyDHls=) 7: ydvCtvONpdehWvZyLz4a_kzVi0E.roa (hash: V+d/f8/0Wlo4AiaUZ92fGFDRKXdfWft1w4yI/WlCqx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:6b:c6:3f:89:b8:db:bc:b1:53:8c:68:1e:bb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Validity Not Before: Dec 6 11:00:56 2025 GMT Not After : Dec 7 11:00:56 2025 GMT Subject: CN=907e1de99812445416b47a028a0fc8e3d5123846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:bd:51:24:0a:17:bb:87:02:69:70:63:43: 8a:1f:95:82:0a:60:3b:25:06:fe:41:5d:5c:10:77: 89:58:22:d5:7c:74:3f:7d:6d:9e:57:23:dd:26:bc: e0:01:74:1d:d0:b9:44:55:dd:d4:84:df:32:9a:14: e9:49:d2:9b:98:5e:0e:ef:e8:75:0a:2e:69:c5:92: c1:18:4f:49:13:51:59:fc:9e:1e:61:a8:68:8d:1e: 2d:c0:1c:ed:7d:2e:b9:68:a3:44:67:33:9f:64:9d: 66:0c:b0:f4:d0:7b:31:cf:6c:39:b8:59:ea:8c:6a: cc:e2:b7:38:cb:1b:f4:b5:1d:e2:9e:86:0b:80:57: e5:31:e7:ef:49:d5:df:f3:d3:e0:9d:bd:c2:79:25: f1:83:2c:06:cf:ec:0a:8a:29:05:47:06:e4:f5:af: d5:fd:2e:6a:af:cc:2c:c7:8e:65:d3:1b:26:1c:1c: 75:31:48:8b:fa:1e:12:bf:1d:12:62:24:e0:97:81: db:1f:da:df:d4:b1:7a:e8:3d:89:59:d5:f2:01:82: 01:35:93:c5:a4:1d:c4:3f:2e:fe:db:c4:b5:0f:af: a3:8a:81:f8:b6:c4:f5:7a:a4:63:a4:59:23:78:fc: 71:69:9d:7c:ae:c3:d0:60:7c:f0:b4:5b:7e:1b:44: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7E:1D:E9:98:12:44:54:16:B4:7A:02:8A:0F:C8:E3:D5:12:38:46 X509v3 Authority Key Identifier: keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:5a:50:63:c0:4e:8f:b7:2e:f4:fb:ad:93:da:c7:f5:18: 20:41:53:3a:5f:10:6c:80:89:ba:c9:0c:e0:e2:6c:b1:49:8f: a4:12:6c:36:90:32:56:61:ac:da:a9:71:f1:e1:b1:c9:04:f6: 5a:d2:b6:e7:98:71:30:4b:5f:da:ca:65:c6:fc:bb:9b:38:13: bb:d6:bd:de:2b:bb:a8:10:51:91:1c:1c:a4:4d:7a:fe:e5:99: 49:f3:17:aa:5d:5f:73:ec:b5:8e:6f:4b:96:9b:3c:5c:1d:90: 94:4b:e7:9f:b1:61:4b:26:af:0c:80:3f:7e:c7:85:9a:3a:85: 13:a2:fc:a9:92:6d:30:44:39:5f:61:f5:4e:89:d5:11:f0:4f: 7e:f5:18:4a:9a:ee:09:d3:05:e4:89:92:3a:e4:d3:77:23:a1: 9d:1f:77:13:d2:d6:54:78:4d:7d:79:3c:c1:7f:ec:31:0f:8d: f0:34:d0:de:23:18:aa:07:65:9c:08:7f:2a:98:8d:e4:7d:19: 30:a8:b2:36:a6:9f:5b:24:c9:9e:a3:30:f5:86:41:43:74:96: 0e:ba:7b:f1:ad:92:69:06:97:83:a5:a0:96:d8:2a:74:77:df: 91:f2:05:f8:09:86:06:b2:94:9c:52:55:a8:69:e1:05:aa:9f: 8f:fd:53:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmvGP4m427yxU4xoHrvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm MDIxOTYwHhcNMjUxMjA2MTEwMDU2WhcNMjUxMjA3MTEwMDU2WjAzMTEwLwYDVQQD Eyg5MDdlMWRlOTk4MTI0NDU0MTZiNDdhMDI4YTBmYzhlM2Q1MTIzODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiC9USQKF7uHAmlwY0OKH5WCCmA7 JQb+QV1cEHeJWCLVfHQ/fW2eVyPdJrzgAXQd0LlEVd3UhN8ymhTpSdKbmF4O7+h1 Ci5pxZLBGE9JE1FZ/J4eYahojR4twBztfS65aKNEZzOfZJ1mDLD00Hsxz2w5uFnq jGrM4rc4yxv0tR3inoYLgFflMefvSdXf89Pgnb3CeSXxgywGz+wKiikFRwbk9a/V /S5qr8wsx45l0xsmHBx1MUiL+h4Svx0SYiTgl4HbH9rf1LF66D2JWdXyAYIBNZPF pB3EPy7+28S1D6+jioH4tsT1eqRjpFkjePxxaZ18rsPQYHzwtFt+G0TtgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJB+HemYEkRUFrR6AooPyOPVEjhGMB8GA1UdIwQY MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt NTIwMWEyM2Q3YTQ5LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5 LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXZaUGPA To+3LvT7rZPax/UYIEFTOl8QbICJuskM4OJssUmPpBJsNpAyVmGs2qlx8eGxyQT2 WtK255hxMEtf2splxvy7mzgTu9a93iu7qBBRkRwcpE16/uWZSfMXql1fc+y1jm9L lps8XB2QlEvnn7FhSyavDIA/fseFmjqFE6L8qZJtMEQ5X2H1TonVEfBPfvUYSpru CdMF5ImSOuTTdyOhnR93E9LWVHhNfXk8wX/sMQ+N8DTQ3iMYqgdlnAh/KpiN5H0Z MKiyNqafWyTJnqMw9YZBQ3SWDrp78a2SaQaXg6WgltgqdHffkfIF+AmGBrKUnFJV qGnhBaqfj/1TAA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:43:08 2025 by rpki-client