This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json) Hash identifier: oKn204yhYCU+PNa+63Qebgab7lBz0+Byd0izXOwPQ0U= Subject key identifier: A0:9E:35:24:56:BD:93:69:06:87:B8:61:9E:51:1A:C2:97:E1:85:D6 Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6 Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6 Certificate serial: 019AF1D24A5094297F8B4C79A2041F5B4F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: KZIUSongntyb8cmh04ohuVf-RH4.roa (hash: EqZXG+hM0Nf7quHml742UmbfXBrPEdr6jmp61c5zxV4=) 2: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=) 3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: obOfaQ5/md4Ecmu354+SQShFW/T3R0N8rCgBMNsfZnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4a:50:94:29:7f:8b:4c:79:a2:04:1f:5b:4f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=a09e352456bd93690687b8619e511ac297e185d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:85:31:aa:6f:57:4e:a1:76:0c:3f:7e:fe: b9:0d:15:1f:f1:5f:e3:46:5c:5f:01:76:20:c4:d1: b9:d0:73:ea:72:80:77:6b:47:c7:0b:62:1b:79:d4: c3:5c:da:b8:e8:a7:da:ad:e0:49:d4:c9:06:83:60: 01:d4:d9:8b:20:dd:e4:85:41:76:3d:f4:a2:57:73: 10:49:f6:c1:28:45:49:cb:8f:84:6a:db:5f:e9:e8: a8:a3:07:d6:ab:95:e3:45:a0:78:09:94:d2:67:cc: a1:98:d9:53:48:b5:2a:ed:68:c7:9a:46:aa:a4:4d: 41:76:86:ca:97:80:59:33:96:22:94:6c:de:58:1b: a4:c6:82:4e:3d:39:1a:27:8a:f0:3a:f3:0e:ee:31: 0f:40:af:40:e2:ad:84:36:34:70:90:1a:80:9e:7f: 56:6e:86:07:8b:05:64:40:16:70:f0:e4:21:3f:db: 76:58:92:b2:8f:92:f0:97:4c:84:3d:99:39:84:00: 1f:4f:4a:e6:fd:f9:59:5f:76:59:2c:b7:ef:55:02: 1c:20:9e:62:e9:2b:7e:94:54:52:71:97:f4:95:66: bf:f6:87:ac:ef:36:dc:4e:8f:52:49:2a:18:fd:1e: fb:ae:e1:62:da:dd:5d:15:61:88:91:7a:5d:69:32: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9E:35:24:56:BD:93:69:06:87:B8:61:9E:51:1A:C2:97:E1:85:D6 X509v3 Authority Key Identifier: keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e5:78:bb:78:89:f7:4e:b6:c4:44:a8:5a:1c:e9:1c:bd:87: 64:f6:40:d2:ae:3b:c9:7c:79:1f:21:2a:6e:47:90:2a:7c:1a: 74:ad:bf:81:20:4b:fb:d0:0a:d0:40:a0:5c:69:69:dd:cd:81: c3:5d:3b:eb:38:9d:13:a3:08:db:be:f5:db:7c:f3:e8:34:52: ca:b5:5d:19:d2:23:eb:27:98:e0:55:36:05:56:ad:55:56:59: eb:a2:ff:38:24:ae:37:79:ab:0a:d8:7a:2e:9c:a0:1d:0f:57: b3:5c:58:0f:39:78:fc:af:ae:03:1b:d7:2d:55:66:c2:9c:9e: be:dd:fe:77:7a:b0:97:3a:97:eb:e0:6b:65:69:af:45:28:27: cd:fa:5f:02:44:5a:5a:42:39:45:1e:53:6d:ed:83:5c:70:99: 72:f0:dc:9e:3d:9f:c1:32:d3:41:24:7d:58:87:22:97:69:dd: 2c:46:6c:d0:41:3c:a5:39:29:c1:b7:b4:62:bb:44:d6:fc:08: 30:8f:87:ea:7b:3c:32:2d:93:62:98:03:fe:d7:77:fc:8c:2e: 05:83:b0:f1:68:45:59:cb:61:64:cb:ce:e8:96:3e:d7:08:22: cf:14:1c:66:6b:e0:b1:4c:c2:6f:6f:6f:6b:23:c9:81:e0:67: 3a:bf:63:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kpQlCl/i0x5ogQfW0+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky ODFlZjYwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD EyhhMDllMzUyNDU2YmQ5MzY5MDY4N2I4NjE5ZTUxMWFjMjk3ZTE4NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YmFMapvV06hdgw/fv65DRUf8V/j RlxfAXYgxNG50HPqcoB3a0fHC2IbedTDXNq46KfareBJ1MkGg2AB1NmLIN3khUF2 PfSiV3MQSfbBKEVJy4+Eattf6eioowfWq5XjRaB4CZTSZ8yhmNlTSLUq7WjHmkaq pE1BdobKl4BZM5YilGzeWBukxoJOPTkaJ4rwOvMO7jEPQK9A4q2ENjRwkBqAnn9W boYHiwVkQBZw8OQhP9t2WJKyj5Lwl0yEPZk5hAAfT0rm/flZX3ZZLLfvVQIcIJ5i 6St+lFRScZf0lWa/9oes7zbcTo9SSSoY/R77ruFi2t1dFWGIkXpdaTIMfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCeNSRWvZNpBoe4YZ5RGsKX4YXWMB8GA1UdIwQY MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt ZTVhNzdmN2E3YWEyLzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeV4u3iJ 9062xESoWhzpHL2HZPZA0q47yXx5HyEqbkeQKnwadK2/gSBL+9AK0ECgXGlp3c2B w1076zidE6MI277123zz6DRSyrVdGdIj6yeY4FU2BVatVVZZ66L/OCSuN3mrCth6 LpygHQ9Xs1xYDzl4/K+uAxvXLVVmwpyevt3+d3qwlzqX6+BrZWmvRSgnzfpfAkRa WkI5RR5Tbe2DXHCZcvDcnj2fwTLTQSR9WIcil2ndLEZs0EE8pTkpwbe0YrtE1vwI MI+H6ns8Mi2TYpgD/td3/IwuBYOw8WhFWcthZMvO6JY+1wgizxQcZmvgsUzCb29v ayPJgeBnOr9j4g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:18 2025 by rpki-client