This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json) Hash identifier: Ejx4QLlyqARD6ixEA/3R3oZSVEtI3gKiFJYH2Z8eTVM= Subject key identifier: D5:6E:46:E5:E8:C9:31:33:82:52:1E:22:75:F1:50:F4:19:F7:EB:E0 Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b Certificate serial: 019B34C5C04BBBCCEE0CB1A51F58292644C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft Manifest number: 0B70 Signing time: Fri 19 Dec 2025 04:02:13 +0000 Manifest this update: Fri 19 Dec 2025 04:02:13 +0000 Manifest next update: Sat 20 Dec 2025 04:02:13 +0000 Files and hashes: 1: I6XJQzPuO4BQutj9l3SUjZVMBQs.roa (hash: SpNx9acwJnfAUoxlUrPZol91rF8aW3VEekG+fCM8uiI=) 2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: jaPRY2HAIt7wxz/QZZ+XrIvlnLodTqz76fxP7cFAzOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:c0:4b:bb:cc:ee:0c:b1:a5:1f:58:29:26:44:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b Validity Not Before: Dec 19 04:02:13 2025 GMT Not After : Dec 20 04:02:13 2025 GMT Subject: CN=d56e46e5e8c9313382521e2275f150f419f7ebe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:33:06:db:04:a9:45:6f:c2:97:34:25:f4: 43:3d:98:96:d5:5f:f5:55:e7:8e:1c:09:d5:67:4e: 88:e6:3e:2a:ff:de:da:a0:43:12:d3:c9:71:57:09: b0:4e:0f:a4:50:04:01:53:2a:e8:e5:f3:0a:13:5a: 33:88:d6:85:57:3c:62:ff:2f:af:b7:44:f8:64:6c: 5e:3b:8a:bb:23:b4:e9:32:10:f1:1a:a7:52:a8:4b: 16:2c:55:88:33:d6:52:b9:8b:8d:1d:6f:d7:a5:39: bf:b3:3b:4a:70:a4:8a:54:22:7e:9f:c6:26:4e:8e: b5:cb:e4:fa:b3:1e:d2:c8:15:be:fb:d8:9c:07:07: 5c:d7:e9:2a:1d:e9:61:76:d9:58:59:51:83:31:b7: 5c:df:86:62:b6:d2:5e:99:d3:b9:8c:85:5d:5d:fb: 4b:51:cb:a5:ca:89:37:a8:a5:0a:79:5f:b1:93:cf: 9c:69:4e:04:fb:dd:c3:73:e0:6d:e0:2d:cf:2b:16: bc:85:67:d7:bd:65:85:02:d1:71:bc:1d:7e:61:61: 01:08:8c:2e:54:f2:c5:95:7b:fa:80:46:de:4c:ef: 28:a5:2f:6f:f1:e4:dd:b2:c9:b6:63:02:54:b9:91: df:10:fa:d4:7c:57:91:bb:f8:5e:76:88:60:02:43: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6E:46:E5:E8:C9:31:33:82:52:1E:22:75:F1:50:F4:19:F7:EB:E0 X509v3 Authority Key Identifier: keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:53:b2:cc:a0:10:49:c9:ab:d5:7f:38:7a:e9:42:77:42:c4: e2:7c:e6:e2:2d:ed:40:77:59:6f:2a:7d:e4:2c:39:4b:d8:be: 32:09:85:21:01:5f:06:3a:07:7f:88:53:79:a8:32:64:da:e2: 7d:f9:41:82:de:4c:7f:04:fe:c3:dc:e8:d9:23:68:2a:0a:1e: bd:ad:7b:98:92:a8:db:e6:ca:0e:47:a4:94:ef:0e:92:ad:e6: e6:52:b3:60:3f:c6:e3:ba:ca:51:26:90:3b:e1:04:55:de:5e: 10:c5:c7:bb:71:51:6e:ef:31:52:3e:54:aa:22:90:4b:39:0a: 40:8f:f8:ce:b0:b0:b8:9c:16:21:65:7e:95:24:9e:4d:06:ac: 50:d6:a8:b0:0f:bb:8e:06:b9:9e:58:a1:3b:3f:75:91:53:37: 40:8a:9d:d0:0a:5d:d0:dc:44:64:a3:c2:1e:e8:02:b4:3e:9e: 7b:ab:79:81:41:5c:76:4d:b5:97:cf:52:f5:97:ab:e3:50:c6: 4f:6b:4d:a1:f3:61:1c:80:58:79:ea:fe:c9:84:b6:cf:36:1f: 00:6f:2e:83:69:3c:2b:90:ce:cd:7b:88:e5:91:ef:b7:8e:6c: 46:4c:56:9c:2c:a5:ea:11:05:c0:42:74:d2:95:5a:5a:1f:a0: 66:52:6e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xcBLu8zuDLGlH1gpJkTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjY0NTc3MGQyOTE0NDAyZDZjOTViOGRhZjUxZjdmZmUx Mjc3MmIwHhcNMjUxMjE5MDQwMjEzWhcNMjUxMjIwMDQwMjEzWjAzMTEwLwYDVQQD EyhkNTZlNDZlNWU4YzkzMTMzODI1MjFlMjI3NWYxNTBmNDE5ZjdlYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm4zBtsEqUVvwpc0JfRDPZiW1V/1 VeeOHAnVZ06I5j4q/97aoEMS08lxVwmwTg+kUAQBUyro5fMKE1oziNaFVzxi/y+v t0T4ZGxeO4q7I7TpMhDxGqdSqEsWLFWIM9ZSuYuNHW/XpTm/sztKcKSKVCJ+n8Ym To61y+T6sx7SyBW++9icBwdc1+kqHelhdtlYWVGDMbdc34ZittJemdO5jIVdXftL Uculyok3qKUKeV+xk8+caU4E+93Dc+Bt4C3PKxa8hWfXvWWFAtFxvB1+YWEBCIwu VPLFlXv6gEbeTO8opS9v8eTdssm2YwJUuZHfEPrUfFeRu/hedohgAkNJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVuRuXoyTEzglIeInXxUPQZ9+vgMB8GA1UdIwQY MBaAFI72RXcNKRRALWyVuNr1H3/+EncrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDkt NjU2OTU3ZjM4NjdlLzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDktNjU2OTU3ZjM4Njdl LzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVOyzKAQ Scmr1X84eulCd0LE4nzm4i3tQHdZbyp95Cw5S9i+MgmFIQFfBjoHf4hTeagyZNri fflBgt5MfwT+w9zo2SNoKgoeva17mJKo2+bKDkeklO8Okq3m5lKzYD/G47rKUSaQ O+EEVd5eEMXHu3FRbu8xUj5UqiKQSzkKQI/4zrCwuJwWIWV+lSSeTQasUNaosA+7 jga5nlihOz91kVM3QIqd0Apd0NxEZKPCHugCtD6ee6t5gUFcdk21l89S9Zer41DG T2tNofNhHIBYeer+yYS2zzYfAG8ug2k8K5DOzXuI5ZHvt45sRkxWnCyl6hEFwEJ0 0pVaWh+gZlJu+A== -----END CERTIFICATE-----Generated at Fri Dec 19 07:46:30 2025 by rpki-client