This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json) Hash identifier: SY+CEgEhTzq09nOplOlzKlp9kg8lhe24KXohM3ARuUg= Subject key identifier: 0C:DB:81:CB:12:3E:79:F4:62:DF:24:D1:7C:BE:78:E6:B5:58:32:0B Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11 Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611 Certificate serial: 019AF088B23878D4B92179BAB4F928EC3E57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 22:01:21 +0000 Manifest this update: Fri 05 Dec 2025 22:01:21 +0000 Manifest next update: Sat 06 Dec 2025 22:01:21 +0000 Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: 1BUggNhIY0NNZqksaWTua89HJy+G31s1FSgfNQEJkCg=) 2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b2:38:78:d4:b9:21:79:ba:b4:f9:28:ec:3e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256be176b313e1a8a050f670af576771b655d611 Validity Not Before: Dec 5 22:01:21 2025 GMT Not After : Dec 6 22:01:21 2025 GMT Subject: CN=0cdb81cb123e79f462df24d17cbe78e6b558320b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:c2:c8:b5:a2:15:96:79:b9:61:a8:c2:ce: e9:1e:84:93:37:86:cc:66:c2:ff:f7:8c:b6:21:03: f5:d7:45:c8:ae:d6:92:d5:15:14:e1:7f:ff:13:df: a5:80:f0:df:f8:a3:21:ad:8b:5c:43:7d:44:45:db: 39:8a:8d:d9:c8:76:6c:25:e2:ee:64:c4:72:51:87: 34:c4:6d:59:3d:95:b1:e3:59:b5:06:32:bd:a5:a7: 0d:b6:21:cc:4d:2b:2a:2d:76:f8:71:64:f8:8f:41: db:b0:f1:aa:c6:f9:f8:50:ce:e7:f4:44:c3:f4:9c: b9:f3:19:55:8a:f1:ef:10:e8:1c:c8:f4:dd:38:31: 8b:bd:16:24:e2:24:3b:ad:8a:22:2d:0c:82:42:90: 38:54:5e:e0:02:63:f5:b0:d3:40:b4:10:95:79:7f: 63:30:30:4c:9b:ea:0e:2e:60:bf:dc:1d:63:44:fb: cc:f1:4d:09:d3:1c:4e:e4:8b:de:53:e3:00:5d:27: ee:e8:19:41:57:e9:a5:d9:de:da:e0:9d:8c:74:a4: ca:21:53:90:15:74:21:e0:ad:bb:3b:39:03:e4:e5: 76:e0:5b:75:07:d2:34:70:05:bc:f6:17:67:0f:87: 0a:d2:5f:52:33:57:20:8a:6a:51:27:12:c9:fa:07: 1d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DB:81:CB:12:3E:79:F4:62:DF:24:D1:7C:BE:78:E6:B5:58:32:0B X509v3 Authority Key Identifier: keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:38:f1:3d:ff:09:62:38:db:75:cd:80:15:74:4d:44:78:35: 3f:80:0f:6c:42:2d:eb:35:af:24:1d:4b:53:dd:60:bd:72:11: 32:2a:7e:e4:07:dd:4b:c4:99:59:f2:d2:92:3d:85:98:1d:fb: e9:c4:6e:0d:6f:64:c1:36:c4:9d:ef:e8:a1:60:6a:30:6e:a5: 85:a8:29:a6:eb:a8:86:37:42:37:db:07:1f:81:17:f1:71:e6: 6a:6f:7b:54:02:b5:a6:55:b1:f6:7c:85:d9:af:48:55:38:ae: a5:02:c8:20:5d:a0:9b:a1:84:93:8c:58:d1:ac:73:e1:6c:bb: 81:fd:e9:0d:20:77:4f:3c:0a:b3:d5:9d:5e:dc:92:cc:e9:7c: 31:2e:20:46:de:dc:7e:90:d3:5a:25:34:33:1c:40:9f:0b:a3: 25:d3:c9:88:4e:a9:64:aa:9b:74:ef:b3:a3:df:e6:90:c1:48: 65:9e:7c:9d:e4:5f:73:af:4b:cd:da:5f:9a:42:fb:48:62:d8: dd:fe:51:32:25:8f:8f:a6:2a:2f:a7:5f:8b:10:10:ad:1b:61: 1c:57:17:e8:92:8d:77:7c:12:88:1c:6f:ba:d0:f9:f8:7d:16: 3f:4f:39:24:46:87:a5:49:69:be:eb:16:c5:6c:f8:89:80:f7: 91:37:a1:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLI4eNS5IXm6tPko7D5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NmJlMTc2YjMxM2UxYThhMDUwZjY3MGFmNTc2NzcxYjY1 NWQ2MTEwHhcNMjUxMjA1MjIwMTIxWhcNMjUxMjA2MjIwMTIxWjAzMTEwLwYDVQQD EygwY2RiODFjYjEyM2U3OWY0NjJkZjI0ZDE3Y2JlNzhlNmI1NTgzMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYXCyLWiFZZ5uWGows7pHoSTN4bM ZsL/94y2IQP110XIrtaS1RUU4X//E9+lgPDf+KMhrYtcQ31ERds5io3ZyHZsJeLu ZMRyUYc0xG1ZPZWx41m1BjK9pacNtiHMTSsqLXb4cWT4j0HbsPGqxvn4UM7n9ETD 9Jy58xlVivHvEOgcyPTdODGLvRYk4iQ7rYoiLQyCQpA4VF7gAmP1sNNAtBCVeX9j MDBMm+oOLmC/3B1jRPvM8U0J0xxO5IveU+MAXSfu6BlBV+ml2d7a4J2MdKTKIVOQ FXQh4K27OzkD5OV24Ft1B9I0cAW89hdnD4cK0l9SM1cgimpRJxLJ+gcdMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzbgcsSPnn0Yt8k0Xy+eOa1WDILMB8GA1UdIwQY MBaAFCVr4XazE+GooFD2cK9XZ3G2VdYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMt ZTBiYWM0MTYxOTUzLzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMtZTBiYWM0MTYxOTUz LzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTjxPf8J Yjjbdc2AFXRNRHg1P4APbEIt6zWvJB1LU91gvXIRMip+5AfdS8SZWfLSkj2FmB37 6cRuDW9kwTbEne/ooWBqMG6lhagppuuohjdCN9sHH4EX8XHmam97VAK1plWx9nyF 2a9IVTiupQLIIF2gm6GEk4xY0axz4Wy7gf3pDSB3TzwKs9WdXtySzOl8MS4gRt7c fpDTWiU0MxxAnwujJdPJiE6pZKqbdO+zo9/mkMFIZZ58neRfc69LzdpfmkL7SGLY 3f5RMiWPj6YqL6dfixAQrRthHFcX6JKNd3wSiBxvutD5+H0WP085JEaHpUlpvusW xWz4iYD3kTeh6A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:38 2025 by rpki-client