This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft File: j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json) Hash identifier: JaLMdhQOaF6Gc8pEutEqLdx2vTxxDLuolQF0ci8fKYw= Subject key identifier: AA:61:B7:39:01:49:23:6D:FC:AD:B2:C5:59:70:27:B3:B8:E4:75:95 Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070 Certificate serial: 019AF3C03B8BA73BAF30B3C20C4CABCBEB71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft Manifest number: 16EA Signing time: Sat 06 Dec 2025 13:00:52 +0000 Manifest this update: Sat 06 Dec 2025 13:00:52 +0000 Manifest next update: Sun 07 Dec 2025 13:00:52 +0000 Files and hashes: 1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=) 2: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (hash: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=) 3: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: AiYpZj3p/xxaxv+6xAe7UlQuZAIypL0tCJL/pCJoSzA=) 4: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=) 5: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:3b:8b:a7:3b:af:30:b3:c2:0c:4c:ab:cb:eb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070 Validity Not Before: Dec 6 13:00:52 2025 GMT Not After : Dec 7 13:00:52 2025 GMT Subject: CN=aa61b7390149236dfcadb2c5597027b3b8e47595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ef:67:19:41:c2:6e:70:bc:60:ad:d6:89:16: f6:8c:ca:c4:da:34:f5:03:3b:b5:0e:d6:4a:af:dc: 28:a6:a9:d1:4a:f6:a5:a6:4f:f8:18:97:5e:fe:a8: 60:91:27:eb:22:93:4e:b7:4e:95:01:ee:27:b5:bb: 89:01:0d:d2:b4:49:c6:12:fc:0f:08:40:1c:65:3d: 44:f2:3c:92:bb:7c:bf:3c:ec:85:6c:e7:9a:2d:0c: 5e:6d:06:85:f4:cb:f0:ca:0e:d9:01:e3:13:21:2f: 93:63:76:07:b8:c8:53:e7:f6:75:bd:3b:f3:ae:af: bc:1b:6f:5b:7e:b2:70:c4:57:64:ce:25:4d:ef:32: ff:e4:8b:7c:12:6a:49:03:bc:fd:be:ef:6c:a8:6e: 54:95:43:95:9d:07:16:59:20:1f:38:fa:82:33:b3: 4e:d6:1f:d2:16:34:d6:9c:a2:a1:d1:07:b2:c0:eb: d8:ad:36:34:5e:54:34:83:5b:67:53:f6:6f:22:2d: 1d:47:56:df:e6:70:52:24:1a:7d:c0:9c:1b:ff:e2: be:40:e8:3f:01:16:66:87:c4:c2:83:5f:6e:d7:82: f5:19:18:e5:9b:5c:f1:35:f9:3d:1e:31:d8:f9:dd: 88:27:75:09:5e:6b:72:df:cd:31:79:e6:a3:18:a3: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:B7:39:01:49:23:6D:FC:AD:B2:C5:59:70:27:B3:B8:E4:75:95 X509v3 Authority Key Identifier: keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:55:82:bd:b1:89:c6:86:d8:0a:d2:61:da:4e:a2:36:ba:c6: d4:f2:22:13:cd:1d:99:5b:ec:a5:43:7f:60:b7:a8:f7:6b:20: 4c:7b:03:62:4a:b3:35:17:1c:5e:2b:60:aa:83:0e:cd:f0:24: 63:1c:4b:5d:3d:c8:1d:13:b7:6f:05:1d:51:31:93:bc:d8:05: fb:83:ec:ec:2d:1d:f0:02:b8:aa:d7:77:44:40:7c:3b:66:67: 81:70:69:89:fd:be:8f:79:ea:ad:30:b0:04:69:2b:eb:ed:dd: 65:8b:e9:84:59:50:ef:24:03:4b:43:cc:46:1f:99:8e:03:ee: 91:83:03:0c:25:4c:6c:3d:c6:31:a3:46:d1:4e:af:ae:bb:29: 8f:97:b7:16:3d:af:61:e9:fd:9c:44:8b:ed:1f:57:cc:d0:0b: 42:ac:45:d5:eb:54:48:5f:12:db:cb:c4:75:de:d6:5b:30:64: cc:9a:7b:4d:c4:49:2e:5d:e5:92:78:28:93:f2:e8:a2:00:9a: f0:c4:33:8a:7c:90:39:e4:a1:66:cd:e6:fc:6c:22:a1:9a:b1: 34:8b:34:1b:df:fb:f6:33:f6:90:25:42:39:05:9a:ab:76:7e: 09:c5:fa:e0:67:16:8d:85:f7:4c:23:3e:ee:ef:04:83:b4:cd: 40:c3:87:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDuLpzuvMLPCDEyry+txMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4 MmEwNzAwHhcNMjUxMjA2MTMwMDUyWhcNMjUxMjA3MTMwMDUyWjAzMTEwLwYDVQQD EyhhYTYxYjczOTAxNDkyMzZkZmNhZGIyYzU1OTcwMjdiM2I4ZTQ3NTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+9nGUHCbnC8YK3WiRb2jMrE2jT1 Azu1DtZKr9wopqnRSvalpk/4GJde/qhgkSfrIpNOt06VAe4ntbuJAQ3StEnGEvwP CEAcZT1E8jySu3y/POyFbOeaLQxebQaF9Mvwyg7ZAeMTIS+TY3YHuMhT5/Z1vTvz rq+8G29bfrJwxFdkziVN7zL/5It8EmpJA7z9vu9sqG5UlUOVnQcWWSAfOPqCM7NO 1h/SFjTWnKKh0QeywOvYrTY0XlQ0g1tnU/ZvIi0dR1bf5nBSJBp9wJwb/+K+QOg/ ARZmh8TCg19u14L1GRjlm1zxNfk9HjHY+d2IJ3UJXmty380xeeajGKNW1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKphtzkBSSNt/K2yxVlwJ7O45HWVMB8GA1UdIwQY MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt ZDlhNTM5YjhiN2FkLzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFWCvbGJ xobYCtJh2k6iNrrG1PIiE80dmVvspUN/YLeo92sgTHsDYkqzNRccXitgqoMOzfAk YxxLXT3IHRO3bwUdUTGTvNgF+4Ps7C0d8AK4qtd3REB8O2ZngXBpif2+j3nqrTCw BGkr6+3dZYvphFlQ7yQDS0PMRh+ZjgPukYMDDCVMbD3GMaNG0U6vrrspj5e3Fj2v Yen9nESL7R9XzNALQqxF1etUSF8S28vEdd7WWzBkzJp7TcRJLl3lkngok/LoogCa 8MQzinyQOeShZs3m/GwioZqxNIs0G9/79jP2kCVCOQWaq3Z+CcX64GcWjYX3TCM+ 7u8Eg7TNQMOHXA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:07:15 2025 by rpki-client