This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json) Hash identifier: pmo2+AL+oyGXDo/M9QBhtVkA7zjGNmxwpgLs9ubaeWQ= Subject key identifier: AA:60:00:FB:49:73:A2:E3:07:E3:5F:2C:4D:74:30:FD:2E:15:88:1F Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019AF1D1E25037640CCE8F1CF71C641215E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: 3rqvk9Ly9Ero57NmYxKaPl0vDoA.roa (hash: M8FySyxOTMDlpGnQamTf4gMdwU/cr4xnBa652N0ZBzE=) 2: 5jqEFe0JTAATamiojNWUeDIShXo.roa (hash: AtMeDfc1SVlh3370ApzMA53K6lkC9wmbLdKrheqVybg=) 3: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (hash: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=) 4: b5s6CPLFznLsovYoy29wVzi-3Ok.roa (hash: gTEcnWNc7gGNNW8CTA/atNwTpPOjqZ/Ir9LwK3/7Z6U=) 5: gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa (hash: 51uE4SN0evdj/LX3c8iK4ExCQ5J9huvoiaIN23Ew9+Y=) 6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: PvgAhYnw9EIdeBPndltgg9UhzxPYSclG1cc5G304wh8=) 7: xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa (hash: 0Rp0DNxPTLSllsBa+ggz8MQkfDKWpPp0o5l05ctu118=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e2:50:37:64:0c:ce:8f:1c:f7:1c:64:12:15:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=aa6000fb4973a2e307e35f2c4d7430fd2e15881f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:d6:a1:45:d2:cb:fd:e7:80:89:d0:37:b1: f1:b7:78:af:0f:29:37:d8:f0:91:70:cc:57:8b:8b: c7:88:f1:51:7c:ab:e7:9e:42:4c:87:2b:98:1e:82: 43:69:3f:2a:2c:35:ed:5b:f5:a1:62:25:42:fd:9a: dc:70:8a:b5:fb:b5:7b:9a:7b:93:ff:a5:df:ea:fb: 85:68:af:8d:0c:96:53:2e:34:4f:97:bc:28:ee:0f: 82:0f:49:9e:cb:a0:c5:fd:9e:78:28:94:f0:8a:9e: 87:8a:15:66:30:e3:98:d8:f2:59:71:66:f0:75:6e: d8:3c:c2:79:ab:b6:cc:ca:70:c9:a2:ba:3c:b2:b4: 93:08:c1:89:7e:c8:8f:65:61:6d:ca:86:f2:06:c2: c3:fd:5a:09:99:63:dc:a9:bc:75:11:89:03:db:d0: 4b:bc:03:35:e6:f2:1b:19:88:fd:03:9e:3b:9a:f9: 75:d7:60:72:c0:e6:ad:d7:72:29:41:cf:db:8f:f5: 72:96:19:da:02:67:8a:cb:3a:6d:7a:6d:d1:87:ce: ad:8f:fb:ec:d2:bd:c1:bf:b4:d9:e8:36:06:a2:cc: 53:78:33:7d:45:cf:17:76:db:ce:28:75:f6:cf:e4: df:9e:ed:43:3e:05:f7:c8:2f:6e:8c:f0:e8:1e:a0: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:60:00:FB:49:73:A2:E3:07:E3:5F:2C:4D:74:30:FD:2E:15:88:1F X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8b:b3:d1:a3:bd:c5:7e:65:a5:d2:5d:11:9c:82:00:d3:c6: f1:b3:0e:da:42:41:d3:97:d7:0d:4f:50:e7:99:41:5e:d3:2d: 87:67:9d:83:aa:53:da:21:a6:34:e6:45:a4:9a:68:9a:75:c1: 3d:78:83:f5:bf:03:39:63:9e:ee:fa:b3:16:38:7b:a5:b1:dd: 76:e2:5b:33:1d:11:21:1e:3b:a4:d2:9f:86:ac:36:2c:ea:0e: 81:82:d5:1e:bc:bb:fe:0c:26:a9:90:ea:c4:cf:24:77:52:77: 70:8f:b1:fc:dd:3f:6d:c0:ac:76:3b:f2:f1:f0:9b:7c:ad:a0: 2e:ef:fa:49:f9:9d:76:7b:02:93:b5:ff:21:08:46:f2:9f:c0: a0:b9:cc:01:ca:2d:2c:aa:e0:1f:9c:68:f2:98:a0:d4:40:5a: 9f:5e:1d:e6:d6:71:7b:6d:b0:d8:44:36:39:72:11:f8:a8:37: 90:f5:27:a9:e8:17:f3:63:8a:78:5e:97:ce:34:da:47:a8:45: 70:9d:a5:cb:3b:72:0d:8b:b2:4c:79:ff:4c:b7:ac:78:c5:3e: 12:64:cb:91:49:2e:90:bb:8f:85:47:8f:e2:df:fe:15:5d:78: d6:a3:6a:92:b6:49:7b:b8:13:ff:60:c3:29:ac:74:e6:48:f6: 16:9c:f3:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eJQN2QMzo8c9xxkEhXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EyhhYTYwMDBmYjQ5NzNhMmUzMDdlMzVmMmM0ZDc0MzBmZDJlMTU4ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDWoUXSy/3ngInQN7Hxt3ivDyk3 2PCRcMxXi4vHiPFRfKvnnkJMhyuYHoJDaT8qLDXtW/WhYiVC/ZrccIq1+7V7mnuT /6Xf6vuFaK+NDJZTLjRPl7wo7g+CD0mey6DF/Z54KJTwip6HihVmMOOY2PJZcWbw dW7YPMJ5q7bMynDJoro8srSTCMGJfsiPZWFtyobyBsLD/VoJmWPcqbx1EYkD29BL vAM15vIbGYj9A547mvl112BywOat13IpQc/bj/VylhnaAmeKyzptem3Rh86tj/vs 0r3Bv7TZ6DYGosxTeDN9Rc8XdtvOKHX2z+Tfnu1DPgX3yC9ujPDoHqDd0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpgAPtJc6LjB+NfLE10MP0uFYgfMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcouz0aO9 xX5lpdJdEZyCANPG8bMO2kJB05fXDU9Q55lBXtMth2edg6pT2iGmNOZFpJpomnXB PXiD9b8DOWOe7vqzFjh7pbHdduJbMx0RIR47pNKfhqw2LOoOgYLVHry7/gwmqZDq xM8kd1J3cI+x/N0/bcCsdjvy8fCbfK2gLu/6SfmddnsCk7X/IQhG8p/AoLnMAcot LKrgH5xo8pig1EBan14d5tZxe22w2EQ2OXIR+Kg3kPUnqegX82OKeF6XzjTaR6hF cJ2lyztyDYuyTHn/TLeseMU+EmTLkUkukLuPhUeP4t/+FV141qNqkrZJe7gT/2DD Kax05kj2FpzzrA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:40 2025 by rpki-client