This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json) Hash identifier: 4Wm03a/reavRRoCIQivY151pZqMJM9CtlVEqyfeQ/cE= Subject key identifier: F1:01:16:0F:47:82:73:61:DA:91:ED:29:43:44:4F:45:DF:A3:FA:36 Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41 Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341 Certificate serial: 019B2C66630E1117AA93E2A9F4B068CB313D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 13:01:06 +0000 Manifest this update: Wed 17 Dec 2025 13:01:06 +0000 Manifest next update: Thu 18 Dec 2025 13:01:06 +0000 Files and hashes: 1: Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa (hash: O9/4o6Al8uD1wslgbyQKwgMo1+JOp/WhUeraCAmbd1Q=) 2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: Pk4UBXQOyhUx/pkojeLptncYBhaORUAP6yIs1dg+GdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:63:0e:11:17:aa:93:e2:a9:f4:b0:68:cb:31:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341 Validity Not Before: Dec 17 13:01:06 2025 GMT Not After : Dec 18 13:01:06 2025 GMT Subject: CN=f101160f47827361da91ed2943444f45dfa3fa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:83:20:b4:90:33:d1:3f:2a:4e:59:94:16: a7:77:24:fa:a1:37:7f:cc:46:7b:3c:2a:12:96:76: bc:31:86:f6:91:30:c9:d7:f3:f4:f5:fa:db:b7:5a: cf:51:65:6d:ff:34:d0:ae:49:81:8e:b1:66:c4:56: 99:1b:46:ba:88:94:e6:c1:f8:ee:77:73:2e:36:17: e6:46:67:9b:5e:ea:a7:ab:70:70:03:f3:43:54:6c: 1f:13:d5:20:51:d6:96:b8:f2:56:19:27:3e:82:b4: ab:53:a0:4d:a9:62:68:9e:65:17:86:45:1d:6e:05: df:aa:d4:e3:1b:d1:d8:a2:9e:1b:80:a8:52:56:a0: 76:9b:1d:dd:d0:78:2c:dc:81:7c:c4:1e:3a:04:0b: 88:f8:38:86:b4:f0:c6:0d:b8:2c:de:c1:cd:cc:42: c0:fb:6d:fe:ec:46:9a:17:26:70:6f:12:a1:13:3d: 12:9c:60:30:4b:42:05:ea:00:dc:30:aa:31:90:20: da:20:d5:07:10:41:dc:0c:11:8f:ac:a2:92:5d:25: 84:fb:d4:a2:99:3b:1b:97:bb:56:b2:43:e0:c2:71: 23:00:41:4e:2e:e4:ec:8f:8d:ef:c8:7e:4e:9b:d0: e2:b2:14:d5:13:1f:b3:29:00:a7:4f:aa:ca:ad:a0: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:01:16:0F:47:82:73:61:DA:91:ED:29:43:44:4F:45:DF:A3:FA:36 X509v3 Authority Key Identifier: keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:1b:b2:84:4f:e0:05:02:59:f3:45:5f:87:42:9e:a2:48:53: f8:8f:4a:b4:ae:04:e5:ac:f1:65:99:af:0e:07:8b:ee:88:e2: 12:bc:6f:d1:0e:58:18:a1:00:0e:00:5a:c5:57:29:f1:3e:8e: 11:3d:2e:55:8f:fa:0b:a0:d5:8f:4b:e9:ab:79:84:ae:f9:86: 0d:5c:56:c2:06:67:24:cf:7c:21:ec:44:d8:6d:ac:62:6b:40: 3c:8f:cf:71:b9:fd:ea:f7:74:34:22:32:19:8b:92:5d:d0:ff: e9:db:34:cd:c8:15:17:f1:8b:f8:5d:8a:fd:43:c8:99:f1:17: 4f:b0:87:6c:15:78:4f:75:8c:4d:ea:5c:2a:ba:4f:c2:7e:b8: a3:96:12:1a:10:d5:06:81:22:a9:d3:78:d8:8c:a0:e4:84:1a: e4:c8:b9:8d:cb:90:1c:37:92:31:e7:02:b1:08:a2:f3:dc:08: da:ef:7b:2b:d8:48:ff:9d:34:9c:33:2d:0a:51:be:3e:7a:4f: b1:af:47:ed:fd:0a:8c:6d:ae:0a:09:4a:7c:e4:1d:90:55:e4: cb:0e:92:e9:a0:45:52:3b:a4:e3:be:4e:5a:f8:ab:a5:cb:a4: 11:66:28:34:29:00:30:ef:96:33:56:49:ad:b1:00:42:3d:2c: 8d:cb:1c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZmMOEReqk+Kp9LBoyzE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDI2YWQ2ZjkxYmE0NDcyODE0YmFlNDg0YThkZjFmNjM0 YzMzNDEwHhcNMjUxMjE3MTMwMTA2WhcNMjUxMjE4MTMwMTA2WjAzMTEwLwYDVQQD EyhmMTAxMTYwZjQ3ODI3MzYxZGE5MWVkMjk0MzQ0NGY0NWRmYTNmYTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeuDILSQM9E/Kk5ZlBandyT6oTd/ zEZ7PCoSlna8MYb2kTDJ1/P09frbt1rPUWVt/zTQrkmBjrFmxFaZG0a6iJTmwfju d3MuNhfmRmebXuqnq3BwA/NDVGwfE9UgUdaWuPJWGSc+grSrU6BNqWJonmUXhkUd bgXfqtTjG9HYop4bgKhSVqB2mx3d0Hgs3IF8xB46BAuI+DiGtPDGDbgs3sHNzELA +23+7EaaFyZwbxKhEz0SnGAwS0IF6gDcMKoxkCDaINUHEEHcDBGPrKKSXSWE+9Si mTsbl7tWskPgwnEjAEFOLuTsj43vyH5Om9DishTVEx+zKQCnT6rKraAvAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEBFg9HgnNh2pHtKUNET0Xfo/o2MB8GA1UdIwQY MBaAFI/Satb5G6RHKBS65ISo3x9jTDNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZGFkOGYtYjkxOS00NWQxLWFmMTgt NjM3NDJkMTlhMDEyLzEvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZGFkOGYtYjkxOS00NWQxLWFmMTgtNjM3NDJkMTlhMDEy LzEvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhuyhE/g BQJZ80Vfh0KeokhT+I9KtK4E5azxZZmvDgeL7ojiErxv0Q5YGKEADgBaxVcp8T6O ET0uVY/6C6DVj0vpq3mErvmGDVxWwgZnJM98IexE2G2sYmtAPI/Pcbn96vd0NCIy GYuSXdD/6ds0zcgVF/GL+F2K/UPImfEXT7CHbBV4T3WMTepcKrpPwn64o5YSGhDV BoEiqdN42Iyg5IQa5Mi5jcuQHDeSMecCsQii89wI2u97K9hI/500nDMtClG+PnpP sa9H7f0KjG2uCglKfOQdkFXkyw6S6aBFUjuk475OWvirpcukEWYoNCkAMO+WM1ZJ rbEAQj0sjcscWw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:47 2025 by rpki-client