This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json) Hash identifier: K2s311fmRJ6GIp3dsPAYPfgtSNVi/D26CIrUbJXxN00= Subject key identifier: 2A:63:D3:B4:2F:65:C9:75:14:77:4B:A6:79:25:17:68:33:13:09:71 Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Certificate serial: 019AF0BEFB5960967054681BAF60F9E0BB51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft Manifest number: 07BE Signing time: Fri 05 Dec 2025 23:00:39 +0000 Manifest this update: Fri 05 Dec 2025 23:00:39 +0000 Manifest next update: Sat 06 Dec 2025 23:00:39 +0000 Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: tWtAE+UYwYoU0AqUn2h6RQt3pqUF8KqdkGGGC6jgSsk=) 2: pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa (hash: YNYcfocsMawW3njWrgaZfKy0b3fCRuRw7rODR3Kt6t8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:fb:59:60:96:70:54:68:1b:af:60:f9:e0:bb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Validity Not Before: Dec 5 23:00:39 2025 GMT Not After : Dec 6 23:00:39 2025 GMT Subject: CN=2a63d3b42f65c97514774ba67925176833130971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:8b:9f:a0:e5:48:25:69:b6:e6:5e:9c:14: 0e:4a:bd:58:02:24:60:34:01:64:6a:cc:2f:90:15: d1:02:51:50:49:7f:16:e9:e1:ea:39:03:79:d4:c0: 36:6c:fa:73:5b:56:1f:ba:7c:12:95:c3:4e:00:70: 38:37:10:76:a4:fc:00:fb:a9:da:cc:dd:b5:e8:e1: a4:0f:5f:b5:47:3c:bc:fc:88:74:0c:ec:17:8d:c7: 61:a6:d0:68:bc:b9:db:2d:93:af:22:10:df:3a:fe: a8:c1:77:c5:18:1f:92:5c:56:7d:0d:d8:e6:fb:ed: 00:aa:f3:f0:73:5d:ca:88:d1:52:13:08:b8:43:33: 40:19:85:2b:5a:ee:ed:45:ca:63:d7:75:de:94:85: 3b:41:9c:01:3e:3a:0e:cf:c0:9b:3a:fb:d7:54:32: d0:c0:4d:00:c5:73:21:5f:14:66:b0:93:31:d7:3b: d9:0b:a9:4f:32:fa:76:21:f4:ce:d0:20:ea:14:94: bb:8e:59:2e:9c:fa:82:88:1b:a4:51:e2:46:f6:33: f2:d7:7a:02:49:8a:7f:18:3a:77:8d:ab:46:5f:cd: 46:ab:9a:30:73:0c:75:4d:51:3e:9c:ea:91:ce:ae: 70:09:6c:21:ca:aa:20:48:bb:f0:bd:03:85:db:dc: 44:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:63:D3:B4:2F:65:C9:75:14:77:4B:A6:79:25:17:68:33:13:09:71 X509v3 Authority Key Identifier: keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d1:b7:b8:ef:e8:6d:c2:ee:82:95:07:92:32:c6:66:23:94: 1f:a7:d2:fa:33:08:d3:ee:fa:2c:cb:82:de:83:94:a9:00:c7: db:9b:60:65:10:5b:45:20:9b:4a:3a:ea:81:9f:42:6a:2f:8c: 64:d4:2a:90:f8:27:91:c6:72:b3:8c:4d:85:25:5e:85:e9:99: ef:80:c1:3f:87:29:06:c6:30:70:18:ed:59:cf:19:2e:ec:33: 38:39:ca:36:48:ea:e3:85:5e:46:b1:1d:44:fc:e9:de:a3:cd: 29:fb:fa:62:e5:71:8a:8b:2e:bf:6e:e9:d3:d5:fe:65:02:93: b3:13:ae:17:3e:b1:75:92:b7:31:ee:66:ce:43:bc:7d:9c:b5: 39:d2:82:9e:60:ca:2b:8e:7b:85:14:b4:f6:6a:f6:39:ec:ee: 69:d2:44:30:1f:1c:41:db:1d:4a:ce:c7:28:4f:c9:6d:54:df: ab:3a:34:1a:19:54:2e:3d:e4:ec:cb:29:44:0d:ec:53:f4:c9: 97:09:0d:54:a9:b3:4d:c9:17:19:a5:96:18:fe:ae:4f:c2:a8: 6b:8c:c5:f3:9d:54:65:1a:95:22:74:b1:fe:d1:a8:cc:5b:b3: 86:9f:57:19:23:88:97:13:f1:a8:b1:69:ec:ff:ca:55:c0:31: 34:80:c8:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvtZYJZwVGgbr2D54LtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl YjVhODQwHhcNMjUxMjA1MjMwMDM5WhcNMjUxMjA2MjMwMDM5WjAzMTEwLwYDVQQD EygyYTYzZDNiNDJmNjVjOTc1MTQ3NzRiYTY3OTI1MTc2ODMzMTMwOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIqLn6DlSCVptuZenBQOSr1YAiRg NAFkaswvkBXRAlFQSX8W6eHqOQN51MA2bPpzW1YfunwSlcNOAHA4NxB2pPwA+6na zN216OGkD1+1Rzy8/Ih0DOwXjcdhptBovLnbLZOvIhDfOv6owXfFGB+SXFZ9Ddjm ++0AqvPwc13KiNFSEwi4QzNAGYUrWu7tRcpj13XelIU7QZwBPjoOz8CbOvvXVDLQ wE0AxXMhXxRmsJMx1zvZC6lPMvp2IfTO0CDqFJS7jlkunPqCiBukUeJG9jPy13oC SYp/GDp3jatGX81Gq5owcwx1TVE+nOqRzq5wCWwhyqogSLvwvQOF29xE/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpj07QvZcl1FHdLpnklF2gzEwlxMB8GA1UdIwQY MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt MjEyNzJiODc3MjhiLzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNG3uO/o bcLugpUHkjLGZiOUH6fS+jMI0+76LMuC3oOUqQDH25tgZRBbRSCbSjrqgZ9Cai+M ZNQqkPgnkcZys4xNhSVehemZ74DBP4cpBsYwcBjtWc8ZLuwzODnKNkjq44VeRrEd RPzp3qPNKfv6YuVxiosuv27p09X+ZQKTsxOuFz6xdZK3Me5mzkO8fZy1OdKCnmDK K457hRS09mr2OezuadJEMB8cQdsdSs7HKE/JbVTfqzo0GhlULj3k7MspRA3sU/TJ lwkNVKmzTckXGaWWGP6uT8Koa4zF851UZRqVInSx/tGozFuzhp9XGSOIlxPxqLFp 7P/KVcAxNIDIfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:04 2025 by rpki-client