This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json) Hash identifier: El3U6FNp4cSN0EesPl7W9979DpWVHrXHuXvbUbgW35s= Subject key identifier: 90:AC:AB:A6:4D:9C:20:A0:4A:25:1F:90:4A:04:AD:FD:94:DE:11:7D Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd Certificate serial: 019B36B29EC17C9F682C82DF46AC11ADAF27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 13:00:34 +0000 Manifest this update: Fri 19 Dec 2025 13:00:34 +0000 Manifest next update: Sat 20 Dec 2025 13:00:34 +0000 Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: RjqnrSQjnCuLxn0r6Z/6HHcfNP1TaY2rXuBD/9Yrjxg=) 2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:9e:c1:7c:9f:68:2c:82:df:46:ac:11:ad:af:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd Validity Not Before: Dec 19 13:00:34 2025 GMT Not After : Dec 20 13:00:34 2025 GMT Subject: CN=90acaba64d9c20a04a251f904a04adfd94de117d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:dc:01:09:9e:ab:b8:fd:3d:5b:8a:f2:52: bb:98:93:5e:cf:df:3b:4a:6a:e5:06:7a:0f:af:66: 9b:cf:c2:b0:88:8b:2f:17:b5:97:3b:64:a4:91:a5: f5:43:18:c0:e8:b4:a4:f0:a4:c4:58:33:e7:6d:bd: 51:62:31:ee:97:ae:7d:36:98:16:84:7e:5a:d8:d7: 9a:41:21:4c:cd:26:37:4f:26:b6:c8:49:ab:05:45: ab:e4:7d:93:80:0e:5b:ca:f1:0c:7a:65:f7:d8:87: f2:9c:3c:c6:ec:2e:70:ae:87:3a:a5:6b:a6:f4:e8: f2:01:3b:e7:1e:d5:99:0b:a8:db:be:3b:89:59:db: b5:a5:37:73:4d:2c:8a:ae:d9:e5:8e:ea:22:62:f1: 5a:f5:ac:de:73:0e:b7:64:fb:39:0a:be:87:28:bd: f1:87:e9:17:d5:1c:b4:56:6f:21:3d:4c:b2:09:96: cc:c3:6a:ea:8f:d1:b8:5a:7b:cd:cd:7f:5d:2b:bd: dd:84:5d:f0:6d:97:fc:50:e1:94:71:5e:b8:82:b9: f1:9a:36:24:67:d6:b8:3a:0a:5d:a1:65:7c:8d:ca: fe:cf:d4:64:33:e2:f0:5d:3e:14:16:81:9d:1a:fd: 6e:e8:dc:03:6e:67:f3:b2:2e:e5:29:0b:b1:e7:7b: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:AB:A6:4D:9C:20:A0:4A:25:1F:90:4A:04:AD:FD:94:DE:11:7D X509v3 Authority Key Identifier: keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f0:a0:8e:c8:6f:09:b6:70:52:a7:a5:6d:aa:f2:36:82:bb: 01:63:08:81:b0:6e:d3:45:ee:f3:73:c5:1f:a9:f9:ac:1d:0b: 34:f4:67:0f:86:a5:fa:fa:8d:71:69:ee:10:bb:11:f7:2b:72: 38:9a:8e:f4:ef:74:a0:7f:24:bc:b5:c4:d9:da:fc:93:af:bd: b7:ae:4d:54:8b:f9:ce:fa:1b:34:58:8b:72:e7:68:83:e6:0b: 82:8b:dd:c3:27:c6:1f:a0:fc:d5:66:65:fe:fb:a6:e5:59:ec: c7:33:b1:81:61:0d:7b:32:8b:a5:2f:05:96:29:5b:b0:90:a1: 7a:aa:95:07:de:e2:95:c4:f8:7d:43:bb:80:31:86:1e:ff:30: 8c:7c:66:ad:be:19:88:a8:40:e6:ef:cf:a8:fe:a4:9d:9c:a5: 35:60:db:7f:a1:65:ec:f9:5f:72:b2:d5:e4:91:5f:3a:b2:e0: 7d:b5:39:49:16:49:a6:0f:51:03:7c:ef:55:7f:2b:e0:ad:82: ea:bf:9c:c6:96:ac:fd:de:76:a4:e1:36:47:86:2f:bd:78:8f: 88:5d:d5:5d:0a:a9:0d:98:10:3d:c2:74:62:57:57:39:91:a0: e5:a1:82:fe:2d:8d:19:d8:1a:6b:00:94:95:fa:fa:df:43:8f: e6:db:a5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sp7BfJ9oLILfRqwRra8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDM4ZmI0ZDNiOWEyYzdjOGZmZjU5NzcxOGM5MDViOWUy Zjg0Y2QwHhcNMjUxMjE5MTMwMDM0WhcNMjUxMjIwMTMwMDM0WjAzMTEwLwYDVQQD Eyg5MGFjYWJhNjRkOWMyMGEwNGEyNTFmOTA0YTA0YWRmZDk0ZGUxMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ovcAQmeq7j9PVuK8lK7mJNez987 SmrlBnoPr2abz8KwiIsvF7WXO2SkkaX1QxjA6LSk8KTEWDPnbb1RYjHul659NpgW hH5a2NeaQSFMzSY3Tya2yEmrBUWr5H2TgA5byvEMemX32IfynDzG7C5wroc6pWum 9OjyATvnHtWZC6jbvjuJWdu1pTdzTSyKrtnljuoiYvFa9azecw63ZPs5Cr6HKL3x h+kX1Ry0Vm8hPUyyCZbMw2rqj9G4WnvNzX9dK73dhF3wbZf8UOGUcV64grnxmjYk Z9a4OgpdoWV8jcr+z9RkM+LwXT4UFoGdGv1u6NwDbmfzsi7lKQux53u00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCsq6ZNnCCgSiUfkEoErf2U3hF9MB8GA1UdIwQY MBaAFI/Tj7TTuaLHyP/1l3GMkFueL4TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2Qt NmE3ZmE4MjI5NmM5LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2QtNmE3ZmE4MjI5NmM5 LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfCgjshv CbZwUqelbaryNoK7AWMIgbBu00Xu83PFH6n5rB0LNPRnD4al+vqNcWnuELsR9yty OJqO9O90oH8kvLXE2dr8k6+9t65NVIv5zvobNFiLcudog+YLgovdwyfGH6D81WZl /vum5VnsxzOxgWENezKLpS8FlilbsJCheqqVB97ilcT4fUO7gDGGHv8wjHxmrb4Z iKhA5u/PqP6knZylNWDbf6Fl7PlfcrLV5JFfOrLgfbU5SRZJpg9RA3zvVX8r4K2C 6r+cxpas/d52pOE2R4YvvXiPiF3VXQqpDZgQPcJ0YldXOZGg5aGC/i2NGdgaawCU lfr630OP5tulUA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:37 2025 by rpki-client