This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json) Hash identifier: hJ0Qhmtud+WP1q175uPnSIJqYpVhPU5RxtGskq4taFE= Subject key identifier: 4B:7A:5E:D8:A9:36:B5:61:2A:96:9E:3D:0E:D3:F1:CE:55:49:C3:7E Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Certificate serial: 019AF19B9AA822DB1570394ABA90871E14B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft Manifest number: 0DB5 Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: 1/JhDzVwxzAXGfnCRiH5FTy87zKESHpU0iA3bhCd9NU=) 2: THD6dCAcQylh5j9TRPuNEYk_EF0.roa (hash: RLY2fSTdx8vREbBUWYofmuTLlTO7pJB3RnHvsPQUpgw=) 3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=) 4: zi7h7UJYxNeBfgAfyuuPI1OuoNk.roa (hash: FGz1x4BgJx0vMr4BEPiY/HKABSWRvFlGzY+wA/fT1Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9a:a8:22:db:15:70:39:4a:ba:90:87:1e:14:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=4b7a5ed8a936b5612a969e3d0ed3f1ce5549c37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:da:4f:be:5f:99:f4:7e:41:94:f9:ed:18:40: 11:f9:e2:e0:c1:9c:88:e0:48:5f:b4:1f:ca:be:b0: 4d:f8:10:78:cd:16:29:86:5a:e4:af:2a:bd:3c:af: 25:48:07:1e:6e:87:1c:26:ca:4b:fb:09:d7:95:9d: 05:0b:67:c6:43:57:35:5c:88:ca:3c:58:d3:c8:fa: 31:71:6e:2f:04:45:1f:19:66:a1:8a:e2:46:d3:4f: 9d:af:0f:9d:09:51:c7:4f:0e:32:88:3d:66:dd:10: b1:f2:01:2a:0e:72:5c:f8:89:4b:bf:bc:56:a2:2f: 55:4c:16:4c:f1:ce:74:4e:ab:57:ab:af:d9:e4:79: 3a:49:99:5a:14:de:a6:a0:32:fa:b2:ce:a9:99:ec: ab:41:bf:78:3f:d8:11:6b:92:ee:c3:87:a9:12:6a: 79:3c:d8:7d:c7:fe:27:75:4d:cb:01:cc:05:29:99: d8:95:29:58:45:3f:93:f7:c4:fa:08:10:54:5e:1d: 5e:20:05:6b:89:50:e6:37:ca:57:43:64:ba:eb:83: 72:69:0f:8e:d4:62:d5:6b:4a:f4:a2:29:0e:99:92: c8:06:c8:79:cf:67:d2:d7:2f:0b:c6:99:2c:ef:1a: 35:2a:9e:51:be:1e:d5:f7:df:69:e8:61:9d:bd:8d: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7A:5E:D8:A9:36:B5:61:2A:96:9E:3D:0E:D3:F1:CE:55:49:C3:7E X509v3 Authority Key Identifier: keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d4:06:d4:c8:cf:28:b1:de:0d:d2:6b:82:62:c9:31:e3:72: 3c:79:f5:a1:d2:cc:18:bd:b4:a3:dd:e4:f7:c9:d7:50:0a:02: a0:91:06:5e:0f:01:5b:33:c5:c9:bc:30:67:ff:81:e4:33:9a: 42:44:5e:03:15:e5:45:6e:32:b4:94:ea:3a:81:17:ea:b5:42: 2c:79:ce:55:ef:63:59:7d:15:ab:db:32:ac:fe:29:8e:24:23: 04:47:c2:0e:a7:26:b8:67:75:11:1e:97:14:b4:e2:8b:0e:0a: e9:81:a6:55:20:74:39:f8:83:b1:c5:c1:85:d8:17:3b:ae:47: 08:ad:49:7f:e9:98:c0:57:97:3a:b5:11:85:95:e2:6b:cd:a4: 62:e9:1b:e9:e4:21:f1:5a:0a:b1:09:04:fa:4e:ef:e1:fc:cc: 85:91:ab:d9:92:b7:d0:77:68:df:3c:73:bc:b3:be:a7:fb:2f: 9f:a4:2e:0a:94:c2:e7:24:b5:34:90:cf:66:ea:0f:f4:5e:28: b0:62:f1:20:02:41:f3:b1:19:ac:a8:da:47:10:30:00:ce:0c: 3b:a0:7e:de:f5:94:5b:69:08:fe:90:e1:02:3c:85:8d:7b:a8: c2:2e:b0:31:0d:92:7b:11:45:24:cb:10:46:7d:cc:08:e4:37: bb:e4:5f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5qoItsVcDlKupCHHhSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0 YTZjMzAwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD Eyg0YjdhNWVkOGE5MzZiNTYxMmE5NjllM2QwZWQzZjFjZTU1NDljMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tpPvl+Z9H5BlPntGEAR+eLgwZyI 4EhftB/KvrBN+BB4zRYphlrkryq9PK8lSAceboccJspL+wnXlZ0FC2fGQ1c1XIjK PFjTyPoxcW4vBEUfGWahiuJG00+drw+dCVHHTw4yiD1m3RCx8gEqDnJc+IlLv7xW oi9VTBZM8c50TqtXq6/Z5Hk6SZlaFN6moDL6ss6pmeyrQb94P9gRa5Luw4epEmp5 PNh9x/4ndU3LAcwFKZnYlSlYRT+T98T6CBBUXh1eIAVriVDmN8pXQ2S664NyaQ+O 1GLVa0r0oikOmZLIBsh5z2fS1y8Lxpks7xo1Kp5Rvh7V999p6GGdvY3xlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt6XtipNrVhKpaePQ7T8c5VScN+MB8GA1UdIwQY MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt NTcxN2I0NTQ0MjM3LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3 LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9QG1MjP KLHeDdJrgmLJMeNyPHn1odLMGL20o93k98nXUAoCoJEGXg8BWzPFybwwZ/+B5DOa QkReAxXlRW4ytJTqOoEX6rVCLHnOVe9jWX0Vq9syrP4pjiQjBEfCDqcmuGd1ER6X FLTiiw4K6YGmVSB0OfiDscXBhdgXO65HCK1Jf+mYwFeXOrURhZXia82kYukb6eQh 8VoKsQkE+k7v4fzMhZGr2ZK30Hdo3zxzvLO+p/svn6QuCpTC5yS1NJDPZuoP9F4o sGLxIAJB87EZrKjaRxAwAM4MO6B+3vWUW2kI/pDhAjyFjXuowi6wMQ2SexFFJMsQ Rn3MCOQ3u+RfLg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:23 2025 by rpki-client