This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json) Hash identifier: yXJSHItAUNRFR4SoslY4Ds23Ru/ZSvczhW6M3GHvORw= Subject key identifier: BE:12:0B:57:EF:FF:57:88:89:1C:7E:E0:BB:45:96:EB:CC:86:20:A6 Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B353254D582935E55BE53083B30CC95CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft Manifest number: 1792 Signing time: Fri 19 Dec 2025 06:00:49 +0000 Manifest this update: Fri 19 Dec 2025 06:00:49 +0000 Manifest next update: Sat 20 Dec 2025 06:00:49 +0000 Files and hashes: 1: 3rqvk9Ly9Ero57NmYxKaPl0vDoA.roa (hash: M8FySyxOTMDlpGnQamTf4gMdwU/cr4xnBa652N0ZBzE=) 2: 5jqEFe0JTAATamiojNWUeDIShXo.roa (hash: AtMeDfc1SVlh3370ApzMA53K6lkC9wmbLdKrheqVybg=) 3: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (hash: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=) 4: gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa (hash: 51uE4SN0evdj/LX3c8iK4ExCQ5J9huvoiaIN23Ew9+Y=) 5: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: 3FvXfMtKtN56uS6hBjhQAWRrfFXgXdSW5Xe+v+OEbGA=) 6: pjHhxvfzqbl1t_jh_zgtAOtXGCI.roa (hash: J2AB7iNkE74xp/danYqI2bqPyjgASaXExqMW9bFv38g=) 7: xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa (hash: 0Rp0DNxPTLSllsBa+ggz8MQkfDKWpPp0o5l05ctu118=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:54:d5:82:93:5e:55:be:53:08:3b:30:cc:95:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Dec 19 06:00:49 2025 GMT Not After : Dec 20 06:00:49 2025 GMT Subject: CN=be120b57efff5788891c7ee0bb4596ebcc8620a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:9e:74:78:b1:2f:39:34:b9:a7:a2:0e:ec: 4c:fc:92:27:fe:5b:9c:60:bc:6d:97:4e:5a:47:b8: 47:37:99:c0:d2:60:45:3b:26:21:b5:e2:a4:cc:2f: 22:b1:7a:ba:79:c8:30:08:24:14:ba:89:64:68:6e: f5:fb:e5:50:ba:46:ee:8c:d8:9a:f8:b3:8c:3d:c4: 77:1d:fe:1f:c9:27:0d:52:ee:8c:b7:bc:13:42:3f: f8:28:f4:91:2b:59:6f:79:36:6d:e7:90:ad:06:55: 87:2f:74:48:8a:c9:ff:3d:13:bd:96:35:5b:1a:ff: 41:ec:4d:b6:2d:29:9f:e8:a5:f6:7a:e1:e6:49:5b: 51:b9:e3:54:f9:11:31:47:d6:c1:43:5b:54:2b:2c: 6d:a7:60:b4:fc:58:9f:1b:f3:a6:4c:39:b3:43:6a: f3:2e:e3:7f:03:b2:f3:fa:19:75:fb:84:16:79:94: 3a:50:f5:ad:5f:0b:a6:0e:fc:c2:08:35:92:6f:02: db:3e:12:d5:dc:56:58:a7:ad:e7:0b:7f:8a:83:bb: 43:18:16:1a:8f:65:7d:7f:35:c9:b5:ba:e4:86:b1: 87:38:93:37:92:8f:52:46:94:9c:30:49:b4:92:df: e3:e5:cb:cf:65:8e:ef:51:84:98:4a:2f:4c:50:27: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:12:0B:57:EF:FF:57:88:89:1C:7E:E0:BB:45:96:EB:CC:86:20:A6 X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b8:5c:29:7a:ae:3c:a9:5f:de:58:0b:8b:7d:ed:54:c0:5a: c6:40:95:c2:6e:e2:2a:a7:9d:13:ec:f8:8a:25:2d:b8:70:1a: 03:6b:4e:e6:b0:54:96:55:0f:25:9d:97:19:01:0a:98:09:c8: d7:ed:1a:81:e3:f3:18:8c:4c:4a:12:ee:c4:d5:98:6a:6f:c7: c8:8a:01:cd:e0:42:c7:71:fa:ee:2b:dd:90:0a:f3:ac:e9:8e: 2c:33:ff:36:52:82:aa:fe:cd:a8:68:d7:cd:94:85:1f:34:7d: 66:cd:e1:30:7a:ec:6d:2c:4c:ca:c5:a4:84:8e:ef:48:d9:c9: 94:f3:90:12:9d:1a:b2:c2:bd:d0:6a:76:e0:6e:6c:e3:b2:87: 17:ef:50:e7:69:3d:fe:67:6e:4a:53:ca:e0:13:a4:28:1f:85: 52:91:7b:1c:06:90:96:dc:d3:c5:f9:05:47:cc:ba:45:d4:aa: ce:1e:56:b3:be:e1:e4:ea:8c:06:eb:92:27:d0:96:27:8c:0c: 9c:2b:54:18:45:71:bf:ee:ea:a4:73:a5:bf:4c:dc:39:0a:e3: 84:8d:de:93:77:9a:11:1d:ee:74:66:07:9c:d6:56:c1:df:dc: 38:f4:d3:1d:23:af:f1:45:e0:2c:12:b4:bf:53:5c:c5:f7:ea: 35:f6:ea:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MlTVgpNeVb5TCDswzJXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjUxMjE5MDYwMDQ5WhcNMjUxMjIwMDYwMDQ5WjAzMTEwLwYDVQQD EyhiZTEyMGI1N2VmZmY1Nzg4ODkxYzdlZTBiYjQ1OTZlYmNjODYyMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdyedHixLzk0uaeiDuxM/JIn/luc YLxtl05aR7hHN5nA0mBFOyYhteKkzC8isXq6ecgwCCQUuolkaG71++VQukbujNia +LOMPcR3Hf4fyScNUu6Mt7wTQj/4KPSRK1lveTZt55CtBlWHL3RIisn/PRO9ljVb Gv9B7E22LSmf6KX2euHmSVtRueNU+RExR9bBQ1tUKyxtp2C0/FifG/OmTDmzQ2rz LuN/A7Lz+hl1+4QWeZQ6UPWtXwumDvzCCDWSbwLbPhLV3FZYp63nC3+Kg7tDGBYa j2V9fzXJtbrkhrGHOJM3ko9SRpScMEm0kt/j5cvPZY7vUYSYSi9MUCfuqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4SC1fv/1eIiRx+4LtFluvMhiCmMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLhcKXqu PKlf3lgLi33tVMBaxkCVwm7iKqedE+z4iiUtuHAaA2tO5rBUllUPJZ2XGQEKmAnI 1+0agePzGIxMShLuxNWYam/HyIoBzeBCx3H67ivdkArzrOmOLDP/NlKCqv7NqGjX zZSFHzR9Zs3hMHrsbSxMysWkhI7vSNnJlPOQEp0assK90Gp24G5s47KHF+9Q52k9 /mduSlPK4BOkKB+FUpF7HAaQltzTxfkFR8y6RdSqzh5Ws77h5OqMBuuSJ9CWJ4wM nCtUGEVxv+7qpHOlv0zcOQrjhI3ek3eaER3udGYHnNZWwd/cOPTTHSOv8UXgLBK0 v1NcxffqNfbqmQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:35:08 2025 by rpki-client