This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json) Hash identifier: PnDP+JNhrlN2OXdiVkzk2DNdfO6OxAQKHjqKAPG4QoY= Subject key identifier: 86:12:1A:12:EA:BF:16:AE:D3:97:3A:9B:C9:64:21:B3:F5:0E:C8:E6 Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019AF12E4150561C94EF64A04E4673149C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=) 2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=) 3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: +Ikfbf5I/YJ9eET+LGL8EAVvI8Cf2S690CnZgGE27gI=) 4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:41:50:56:1c:94:ef:64:a0:4e:46:73:14:9c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=86121a12eabf16aed3973a9bc96421b3f50ec8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:f3:5d:64:32:04:9c:24:52:bc:5f:5e:5f: 63:3e:6d:63:74:41:c2:ff:ad:35:b4:67:d1:d9:60: c8:06:fb:ee:d5:e8:93:11:cf:2a:f8:b1:b0:d7:58: 63:a0:aa:be:4f:9e:3f:55:2d:50:c4:37:b5:67:7b: ff:19:7e:f5:10:ec:2d:1f:48:6f:68:b4:56:6e:56: 06:80:4c:41:71:75:ca:f4:d2:8d:07:02:4a:82:af: 63:3f:8b:ef:93:7c:0a:cb:cc:81:2d:3d:c7:70:8c: 1f:eb:e9:b2:02:a7:23:fe:4a:eb:42:40:4f:05:3a: 3e:9a:47:c9:f5:aa:cd:5f:ef:f1:0c:ca:ab:e6:9f: 24:73:da:7c:43:25:f7:50:ad:a9:43:67:39:a5:ad: c5:1d:4d:bf:44:70:cd:a9:9f:0c:92:63:5a:9d:75: 93:b8:21:6b:cc:e5:05:76:47:79:76:93:53:13:da: d5:c0:4a:6e:2b:76:d6:bf:15:66:04:1a:9e:7c:27: 68:62:7a:25:60:69:e7:f2:e7:81:d9:31:b5:a1:bf: c0:f5:fd:b5:3d:0d:3e:f4:27:a9:0b:63:91:b4:67: dc:c6:f7:ab:f0:33:bc:d7:d6:45:02:5b:63:56:41: a4:64:c8:f0:7e:e1:27:27:b8:6a:7d:bd:3c:f5:05: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:12:1A:12:EA:BF:16:AE:D3:97:3A:9B:C9:64:21:B3:F5:0E:C8:E6 X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7b:cc:1f:f3:bc:cf:1a:81:df:d9:21:8a:43:7b:1b:d9:9f: 8f:3f:68:86:f3:f8:ed:d7:68:39:51:91:38:8a:be:f7:a0:66: 0f:3f:ac:a0:63:c2:72:34:d6:7a:06:fe:29:0b:09:c8:82:1d: 7e:2b:5e:4a:77:85:ee:52:b4:10:3a:78:30:bc:47:61:ea:89: de:40:af:3d:be:e9:a8:be:0e:71:0a:c0:bd:07:cd:9e:a8:6a: 7f:1a:ca:8b:8e:5e:12:30:16:f5:a3:65:ba:48:7d:c5:ac:8e: 3b:e4:c4:d2:f9:3b:61:83:4f:9d:98:fc:d7:d8:dc:5c:ad:e2: a4:e7:c8:9f:85:16:37:02:44:04:3d:a7:d5:ea:ec:3c:13:d7: 58:7e:e9:18:e5:90:34:20:fd:62:b3:8b:d1:e5:6e:63:b4:94: 9a:93:5c:e6:a6:91:72:d6:da:88:f9:00:4b:5a:cd:64:c3:af: 4d:3e:bb:62:e5:01:05:65:97:e0:90:f6:4e:6e:11:17:cc:90: ba:65:8c:68:0b:bb:7c:5b:bf:1a:5b:63:17:60:b3:f4:31:c7: 9f:2c:cf:27:c3:16:31:61:83:6f:50:bd:e6:c4:b1:2a:6f:74: 90:fe:66:69:7b:34:f5:7d:b1:0c:a1:15:5c:b5:4e:3f:7e:58: 49:bb:0f:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkFQVhyU72SgTkZzFJxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD Eyg4NjEyMWExMmVhYmYxNmFlZDM5NzNhOWJjOTY0MjFiM2Y1MGVjOGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu7zXWQyBJwkUrxfXl9jPm1jdEHC /601tGfR2WDIBvvu1eiTEc8q+LGw11hjoKq+T54/VS1QxDe1Z3v/GX71EOwtH0hv aLRWblYGgExBcXXK9NKNBwJKgq9jP4vvk3wKy8yBLT3HcIwf6+myAqcj/krrQkBP BTo+mkfJ9arNX+/xDMqr5p8kc9p8QyX3UK2pQ2c5pa3FHU2/RHDNqZ8MkmNanXWT uCFrzOUFdkd5dpNTE9rVwEpuK3bWvxVmBBqefCdoYnolYGnn8ueB2TG1ob/A9f21 PQ0+9CepC2ORtGfcxver8DO819ZFAltjVkGkZMjwfuEnJ7hqfb089QWT3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYSGhLqvxau05c6m8lkIbP1DsjmMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnvMH/O8 zxqB39khikN7G9mfjz9ohvP47ddoOVGROIq+96BmDz+soGPCcjTWegb+KQsJyIId fiteSneF7lK0EDp4MLxHYeqJ3kCvPb7pqL4OcQrAvQfNnqhqfxrKi45eEjAW9aNl ukh9xayOO+TE0vk7YYNPnZj819jcXK3ipOfIn4UWNwJEBD2n1ersPBPXWH7pGOWQ NCD9YrOL0eVuY7SUmpNc5qaRctbaiPkAS1rNZMOvTT67YuUBBWWX4JD2Tm4RF8yQ umWMaAu7fFu/GltjF2Cz9DHHnyzPJ8MWMWGDb1C95sSxKm90kP5maXs09X2xDKEV XLVOP35YSbsPLw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:37 2025 by rpki-client