This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json) Hash identifier: rQB8W903zurCEAHj6usZCs7LEu+qJ4Nh+OK2b4M8m6E= Subject key identifier: 1C:91:F4:F2:28:88:83:C8:5D:61:C3:42:D9:A1:09:C6:8E:18:8E:05 Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76 Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076 Certificate serial: 019AF208AB620B8AA19B18771DF6D16FB347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: FGH5MAwo2-kG0-fJhqBT4gIeWJM.roa (hash: 1FaU+6R3v9t9VIFKSp/Yr2MFIF4LwvmQGlBqd0+XyY8=) 2: ZFf_iyyeKGXumKzgD892SHp3lEI.roa (hash: GucWl/4PHqS5zSBhBIbP/NiRS0uj5cEUju99hKwsqPk=) 3: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: m1qevBuTGw+AcrX93Xqf0N6NBwb7bzfjWZamJBifhcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ab:62:0b:8a:a1:9b:18:77:1d:f6:d1:6f:b3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=1c91f4f2288883c85d61c342d9a109c68e188e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:0e:e6:50:9e:84:37:d7:ac:87:5b:ae:0d: d1:43:e4:4f:5d:0c:ca:4b:a2:b6:51:e6:26:28:3a: 36:b9:d2:58:ef:ef:07:2a:ae:e1:35:d6:6f:40:1f: dd:4f:41:cd:b6:02:e9:92:e1:23:ea:29:40:e6:d9: 1c:1d:e4:a8:24:81:d5:92:fd:8a:22:9d:9e:70:7f: af:8c:97:d5:83:2b:4d:17:01:1a:63:a5:e3:9d:4a: 42:50:d9:df:52:14:7c:20:28:d9:44:05:98:05:de: 65:26:76:8e:b4:a8:c4:35:e1:18:61:ac:25:51:bd: a1:a7:60:89:18:98:38:12:b9:62:03:c5:7b:c7:df: ec:d8:58:3a:d3:c4:a0:b1:09:bf:ca:fa:72:3f:b4: 6a:5d:28:68:78:4e:28:a3:7f:a0:2c:39:4c:9b:bd: 0e:af:6a:28:bf:a6:3b:52:f3:d1:5f:33:37:75:04: b3:fb:e1:bb:06:05:b8:86:02:95:b1:0f:48:ca:08: c9:a0:89:55:a0:88:8a:17:f9:bd:f4:48:71:98:6e: df:31:b9:3e:4f:73:9d:eb:e1:aa:79:75:46:1c:58: 6c:b6:82:e4:b5:e3:55:85:98:2d:24:71:fc:f3:c4: 6a:55:16:4c:f7:78:6a:2b:84:f8:df:ff:29:16:b0: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:91:F4:F2:28:88:83:C8:5D:61:C3:42:D9:A1:09:C6:8E:18:8E:05 X509v3 Authority Key Identifier: keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fe:43:b8:6b:f7:04:b5:80:33:10:25:c7:3b:6a:1d:d7:e0: 1f:71:40:f3:1c:0d:51:95:ce:cb:ac:88:ef:b1:b9:23:a9:24: 0b:48:54:45:63:fd:d8:60:8f:f2:c5:f1:4d:44:4d:28:d2:26: d4:b9:37:88:72:33:8e:d9:6b:94:59:9d:16:43:09:d2:14:26: 16:c8:b9:05:cb:a9:f0:3a:5b:95:8c:3f:6e:ac:d2:d2:62:9d: e8:f7:eb:3f:5d:79:aa:ad:16:df:f7:9b:db:42:39:7b:87:33: 28:57:49:5d:fa:1b:c6:d5:58:a1:30:f5:bd:49:49:4b:c2:7f: a0:07:bb:42:09:55:73:5c:49:9b:ce:81:84:05:d5:08:8a:74: 5f:3e:9a:73:1d:9b:8e:a3:85:e4:e4:e1:51:f9:41:37:d5:a7: 61:f2:bc:ab:67:c9:69:ba:8a:03:2c:bc:7d:77:f1:d0:f3:c5: e0:b8:6c:41:c7:0d:81:b6:c9:21:a1:18:49:75:de:7e:b6:c3: 2a:35:c5:b2:5f:7d:13:1b:0b:c9:67:f6:13:01:37:ff:5a:15: f7:e3:bb:01:7c:e4:70:4b:16:6c:6e:0a:2b:36:f5:fb:29:a8: c3:b4:17:bc:8c:77:ef:29:6f:7f:8c:13:e4:4b:09:cc:93:ec: 70:24:54:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKtiC4qhmxh3HfbRb7NHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTAzZTBkMDIwZWZjOTQ0YzFlZWJkYWVlNTQyN2QzNjVi NzAwNzYwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD EygxYzkxZjRmMjI4ODg4M2M4NWQ2MWMzNDJkOWExMDljNjhlMTg4ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpUO5lCehDfXrIdbrg3RQ+RPXQzK S6K2UeYmKDo2udJY7+8HKq7hNdZvQB/dT0HNtgLpkuEj6ilA5tkcHeSoJIHVkv2K Ip2ecH+vjJfVgytNFwEaY6XjnUpCUNnfUhR8ICjZRAWYBd5lJnaOtKjENeEYYawl Ub2hp2CJGJg4ErliA8V7x9/s2Fg608SgsQm/yvpyP7RqXShoeE4oo3+gLDlMm70O r2oov6Y7UvPRXzM3dQSz++G7BgW4hgKVsQ9IygjJoIlVoIiKF/m99EhxmG7fMbk+ T3Od6+GqeXVGHFhstoLkteNVhZgtJHH888RqVRZM93hqK4T43/8pFrBPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByR9PIoiIPIXWHDQtmhCcaOGI4FMB8GA1UdIwQY MBaAFI2gPg0CDvyUTB7r2u5UJ9NltwB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjkt ZmI3ZDdkY2EzNGE3LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjktZmI3ZDdkY2EzNGE3 LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv5DuGv3 BLWAMxAlxztqHdfgH3FA8xwNUZXOy6yI77G5I6kkC0hURWP92GCP8sXxTURNKNIm 1Lk3iHIzjtlrlFmdFkMJ0hQmFsi5Bcup8DpblYw/bqzS0mKd6PfrP115qq0W3/eb 20I5e4czKFdJXfobxtVYoTD1vUlJS8J/oAe7QglVc1xJm86BhAXVCIp0Xz6acx2b jqOF5OThUflBN9WnYfK8q2fJabqKAyy8fXfx0PPF4LhsQccNgbbJIaEYSXXefrbD KjXFsl99ExsLyWf2EwE3/1oV9+O7AXzkcEsWbG4KKzb1+ymow7QXvIx37ylvf4wT 5EsJzJPscCRUgg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:52 2025 by rpki-client