This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json) Hash identifier: cbkVMtI+XS8ULB7i2CLUdW5yy73rnY8K+txhMSWV3JA= Subject key identifier: 3E:A7:21:5C:06:C5:98:C2:AB:08:79:C5:6B:DD:FF:05:A6:CD:77:36 Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41 Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341 Certificate serial: 019AF276F5993130BF4903E16B211B3E5037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa (hash: O9/4o6Al8uD1wslgbyQKwgMo1+JOp/WhUeraCAmbd1Q=) 2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: t3c0aiNCPeuN5BI2W6XwNtFKLVJzjhigG7DuYcSf664=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f5:99:31:30:bf:49:03:e1:6b:21:1b:3e:50:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=3ea7215c06c598c2ab0879c56bddff05a6cd7736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:3a:c7:cd:f4:20:0d:e9:fd:a0:6c:28:08: 82:ea:75:8f:e8:67:09:4e:a9:f5:0f:d0:f0:be:48: b7:cd:58:ec:d5:93:5a:1e:54:58:20:4a:98:de:b1: c9:aa:e1:b8:a1:2e:d8:f6:46:f6:80:37:2c:1f:f1: 7c:3e:9e:84:c7:97:26:ba:42:f5:f4:06:ac:95:5b: ce:bf:74:3e:53:6b:4b:07:72:0a:fe:a9:c2:fc:84: 2f:5f:26:d8:1a:5c:1e:d5:5a:0a:c3:a8:95:f4:7b: 7b:47:6b:d2:a1:43:4f:d4:3d:e4:18:69:e8:6a:d1: ba:29:2f:6c:35:97:e0:bb:91:f2:10:e8:82:82:7c: 02:7b:af:a1:f3:cb:5a:66:25:d0:38:c0:f5:d4:e0: 6f:63:d5:23:4c:86:a3:be:9b:c2:5c:3d:ea:6f:d1: 71:21:68:06:36:74:08:6e:7c:0e:0f:c7:e1:a9:4c: bb:1e:82:c8:70:49:63:e0:4c:a2:f0:40:a3:17:fb: 0c:23:c0:c6:15:69:91:0b:96:5f:9f:c9:f6:50:f6: 93:b0:12:36:bb:8f:ee:83:c3:13:7d:94:3b:c8:cb: 16:f7:5c:75:3e:58:19:57:bb:cf:76:78:28:7b:57: b7:b4:a9:31:21:4d:8d:50:e6:d9:62:f4:1a:63:e4: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A7:21:5C:06:C5:98:C2:AB:08:79:C5:6B:DD:FF:05:A6:CD:77:36 X509v3 Authority Key Identifier: keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9e:23:cb:bb:b5:8a:bd:9f:ff:8b:cc:ff:ae:f0:4b:00:7f: 42:1c:92:00:41:d1:6e:58:df:64:1a:60:ae:11:e5:95:9b:72: 0f:12:01:97:2a:ae:74:a5:29:1a:49:06:e5:a9:fd:d5:2b:f4: 16:aa:4e:36:e5:eb:d2:fc:44:18:6c:83:7e:b4:b8:96:c7:3a: 96:07:42:84:cc:a8:76:12:ca:42:3d:90:75:58:ac:92:bd:f6: 13:d2:d3:ec:3f:f5:cb:00:cf:33:c1:49:a0:67:7e:44:9a:02: 06:09:9b:06:4a:bc:0a:a2:b6:46:f2:ba:a4:19:f1:8c:a3:9e: 52:eb:61:96:1b:84:d3:d6:b2:67:e1:82:b9:73:a7:9e:33:b1: 40:33:ae:a6:d8:76:ba:a3:fa:e1:fd:55:b7:d2:be:c9:66:68: 7c:8a:74:0f:46:6f:ed:da:6a:1b:3a:1c:d1:a2:1e:c5:40:75: 6f:71:dd:7f:35:98:3c:3b:53:dc:a4:f8:7b:34:fa:b8:c6:a9: 38:00:49:25:f0:a4:76:de:3b:ce:71:35:f1:73:49:79:30:5d: 37:2d:91:20:14:cc:5f:43:fe:d1:fb:96:da:fd:70:be:20:59: ff:eb:24:c0:57:ae:6d:bb:c6:d8:f2:d9:eb:c5:3a:8e:ae:a5: 1c:7a:f9:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvWZMTC/SQPhayEbPlA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDI2YWQ2ZjkxYmE0NDcyODE0YmFlNDg0YThkZjFmNjM0 YzMzNDEwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EygzZWE3MjE1YzA2YzU5OGMyYWIwODc5YzU2YmRkZmYwNWE2Y2Q3NzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw686x830IA3p/aBsKAiC6nWP6GcJ Tqn1D9Dwvki3zVjs1ZNaHlRYIEqY3rHJquG4oS7Y9kb2gDcsH/F8Pp6Ex5cmukL1 9AaslVvOv3Q+U2tLB3IK/qnC/IQvXybYGlwe1VoKw6iV9Ht7R2vSoUNP1D3kGGno atG6KS9sNZfgu5HyEOiCgnwCe6+h88taZiXQOMD11OBvY9UjTIajvpvCXD3qb9Fx IWgGNnQIbnwOD8fhqUy7HoLIcElj4Eyi8ECjF/sMI8DGFWmRC5Zfn8n2UPaTsBI2 u4/ug8MTfZQ7yMsW91x1PlgZV7vPdngoe1e3tKkxIU2NUObZYvQaY+R+LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6nIVwGxZjCqwh5xWvd/wWmzXc2MB8GA1UdIwQY MBaAFI/Satb5G6RHKBS65ISo3x9jTDNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZGFkOGYtYjkxOS00NWQxLWFmMTgt NjM3NDJkMTlhMDEyLzEvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZGFkOGYtYjkxOS00NWQxLWFmMTgtNjM3NDJkMTlhMDEy LzEvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ4jy7u1 ir2f/4vM/67wSwB/QhySAEHRbljfZBpgrhHllZtyDxIBlyqudKUpGkkG5an91Sv0 FqpONuXr0vxEGGyDfrS4lsc6lgdChMyodhLKQj2QdViskr32E9LT7D/1ywDPM8FJ oGd+RJoCBgmbBkq8CqK2RvK6pBnxjKOeUuthlhuE09ayZ+GCuXOnnjOxQDOupth2 uqP64f1Vt9K+yWZofIp0D0Zv7dpqGzoc0aIexUB1b3HdfzWYPDtT3KT4ezT6uMap OABJJfCkdt47znE18XNJeTBdNy2RIBTMX0P+0fuW2v1wviBZ/+skwFeubbvG2PLZ 68U6jq6lHHr5+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:45 2025 by rpki-client