This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json) Hash identifier: bgM8PJ//XrtJMvtxhzyjWIerOSHx5VJ/x2AG/Nvz3gA= Subject key identifier: 11:F6:E5:FA:ED:B9:CE:E2:80:FC:CB:EA:C8:24:FC:09:10:02:60:1D Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89 Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889 Certificate serial: 019B318CF9E6145FA8EC0FC47A3A1BA395A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft Manifest number: 114D Signing time: Thu 18 Dec 2025 13:01:21 +0000 Manifest this update: Thu 18 Dec 2025 13:01:21 +0000 Manifest next update: Fri 19 Dec 2025 13:01:21 +0000 Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: L18KwBgKl0f2aFcGyBVTEhQcyMsdak84b2nt6qYunh8=) 2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:f9:e6:14:5f:a8:ec:0f:c4:7a:3a:1b:a3:95:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889 Validity Not Before: Dec 18 13:01:21 2025 GMT Not After : Dec 19 13:01:21 2025 GMT Subject: CN=11f6e5faedb9cee280fccbeac824fc091002601d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:41:e5:f3:f4:bd:5d:81:ed:8c:03:9d:cd: 15:fb:e6:25:5d:ac:b9:d9:d2:3e:30:af:1a:87:4a: c6:f5:0e:dd:9c:27:ee:0b:fa:23:5d:2a:69:9f:20: 8b:43:c1:8f:7c:41:66:d3:8a:f6:22:bd:d4:8e:31: 7c:0c:45:53:db:8e:85:d6:d1:3c:28:c7:76:1c:93: 20:3f:f6:82:b2:d9:ba:86:11:31:5f:fc:cb:39:c9: 8c:b4:2c:68:04:e0:a7:a3:f5:f0:c4:70:bf:9c:ee: 74:ed:94:41:af:02:07:18:2a:c2:c6:b3:da:6f:1f: fb:21:de:84:05:94:93:ef:fe:65:3e:d7:8d:66:c3: e6:57:6f:79:21:21:ba:90:58:e3:13:5d:b0:e7:e4: d6:26:73:58:27:09:11:a3:26:f0:fb:03:ca:95:08: c6:00:df:bc:c3:42:8f:5e:26:9f:65:fa:7e:e7:b4: c0:ee:d6:c3:7f:ee:7f:45:42:e8:dd:dd:5f:40:68: a5:80:92:85:c1:22:67:73:28:58:de:96:75:35:64: 7b:87:63:a3:d4:56:08:21:ce:62:8d:15:4f:1c:2d: 6c:64:49:30:11:4f:90:b0:71:56:56:e9:d2:93:5a: 74:32:5f:59:43:80:8e:d6:d5:4e:23:5e:60:49:22: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F6:E5:FA:ED:B9:CE:E2:80:FC:CB:EA:C8:24:FC:09:10:02:60:1D X509v3 Authority Key Identifier: keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cf:c1:95:2b:3e:15:2a:c7:ed:3f:ff:57:26:06:10:ce:1b: cd:47:b2:aa:44:4b:60:50:8d:84:5a:83:3a:ff:ed:17:39:22: fa:b2:78:e5:86:dd:3c:a7:19:86:f1:ef:86:87:6a:80:ff:4a: 78:a4:9f:a1:e5:c1:61:88:60:15:ed:1e:7f:29:0c:2c:8a:29: 91:a9:0f:7d:dc:ff:39:72:d9:fd:92:97:e0:61:23:26:e8:66: ea:3d:76:4f:65:43:2c:cd:ef:1d:32:25:33:80:4f:e0:28:1a: c1:ce:a6:9d:ba:84:e8:70:ef:11:cd:5b:b3:97:19:6d:8f:83: 4b:b4:ff:eb:89:83:2b:42:a4:08:9f:03:38:98:2f:5a:53:81: 3a:c4:37:27:da:e0:b8:ea:ec:88:34:d4:05:79:6c:79:bc:59: c5:4a:f0:e1:4e:68:55:16:2f:17:17:e9:12:98:81:c6:aa:d0: 9f:fa:65:2b:32:8b:67:bc:67:b1:7c:82:06:a0:08:74:94:67: 0c:0b:a3:b3:70:06:20:57:84:dd:d5:f8:66:dc:1f:e0:31:dc: a5:34:3b:72:bb:e3:50:2d:d2:5b:85:a2:82:ec:f4:59:8a:11: b1:76:4c:3a:c7:5e:19:41:b1:5a:4e:4b:b2:1d:b2:c1:b5:62: f5:7e:44:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjPnmFF+o7A/Eejobo5WjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZDk4YzA1NzBhZmU5ZjFhYWViZDBkOWVhMmZjMjhjMWRm ZDk4ODkwHhcNMjUxMjE4MTMwMTIxWhcNMjUxMjE5MTMwMTIxWjAzMTEwLwYDVQQD EygxMWY2ZTVmYWVkYjljZWUyODBmY2NiZWFjODI0ZmMwOTEwMDI2MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45VB5fP0vV2B7YwDnc0V++YlXay5 2dI+MK8ah0rG9Q7dnCfuC/ojXSppnyCLQ8GPfEFm04r2Ir3UjjF8DEVT246F1tE8 KMd2HJMgP/aCstm6hhExX/zLOcmMtCxoBOCno/XwxHC/nO507ZRBrwIHGCrCxrPa bx/7Id6EBZST7/5lPteNZsPmV295ISG6kFjjE12w5+TWJnNYJwkRoybw+wPKlQjG AN+8w0KPXiafZfp+57TA7tbDf+5/RULo3d1fQGilgJKFwSJncyhY3pZ1NWR7h2Oj 1FYIIc5ijRVPHC1sZEkwEU+QsHFWVunSk1p0Ml9ZQ4CO1tVOI15gSSIdVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH25frtuc7igPzL6sgk/AkQAmAdMB8GA1UdIwQY MBaAFI7ZjAVwr+nxquvQ2eovwowd/ZiJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMt NDBmOGE4Y2QxYmRkLzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMtNDBmOGE4Y2QxYmRk LzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHc/BlSs+ FSrH7T//VyYGEM4bzUeyqkRLYFCNhFqDOv/tFzki+rJ45YbdPKcZhvHvhodqgP9K eKSfoeXBYYhgFe0efykMLIopkakPfdz/OXLZ/ZKX4GEjJuhm6j12T2VDLM3vHTIl M4BP4Cgawc6mnbqE6HDvEc1bs5cZbY+DS7T/64mDK0KkCJ8DOJgvWlOBOsQ3J9rg uOrsiDTUBXlsebxZxUrw4U5oVRYvFxfpEpiBxqrQn/plKzKLZ7xnsXyCBqAIdJRn DAujs3AGIFeE3dX4Ztwf4DHcpTQ7crvjUC3SW4Wiguz0WYoRsXZMOsdeGUGxWk5L sh2ywbVi9X5E4Q== -----END CERTIFICATE-----Generated at Thu Dec 18 21:53:20 2025 by rpki-client