This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: oClZHMGel4qyC0EjgyNUOOwJbvtjC+k67u4qc8/QL7A= Subject key identifier: 23:9B:24:04:0E:5D:97:68:49:67:F8:FF:09:A5:AE:5C:59:57:18:4B Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019AF2ADA0BEA7D3564D4EE1729B79FED01B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 14AE Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=) 2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=) 3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: lMz8Upf6k/tkbopm8kcZpL+C7FnTWeA2ntQjKZPhl0U=) 4: Lf6vcZM6E_1tP6o7doX949DnBIU.roa (hash: vbI3En+9WdVKNiswwjg34zuVUz/MYD/WjfUCcdABxHk=) 5: PP1_JMN7o3eQJTAVw4rJH9gu14o.roa (hash: G1K8GTtfUKhA972s1dfffX97stR9/k7Xacyj/AIs1tw=) 6: Sj-_RnC34ecuvBpc0rCzlEDa7pg.roa (hash: phaHK5TmaT8HFSOfZpT3D2+yYeLJ3Irl7+kbC/pKRPc=) 7: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=) 8: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=) 9: enhLIeFFNjBBa_s5O_0YkpdyYhw.roa (hash: QCVHyVf9CKwmcfPHoXbT0EWpP5O5Sd2HzcxdrqVaxxg=) 10: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=) 11: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=) 12: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a0:be:a7:d3:56:4d:4e:e1:72:9b:79:fe:d0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=239b24040e5d97684967f8ff09a5ae5c5957184b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:b2:d5:7e:65:9e:60:2d:0b:79:a3:20:7a: 58:92:66:41:d9:5f:be:e6:28:26:71:a6:5d:e5:4f: 34:9d:2d:21:b7:23:71:65:09:07:6f:72:a9:fe:29: 73:5d:b3:4b:b5:de:46:93:e7:15:6d:bb:45:48:b1: da:ee:85:81:9b:49:c3:7f:6a:07:cc:0d:d5:54:25: 75:fa:b4:94:55:30:c9:4e:c5:f5:86:ec:05:30:81: e6:4c:aa:2f:f1:a7:26:6b:f3:66:5f:5a:1c:2d:12: 65:f6:5b:ee:f7:ae:db:3f:1e:69:ab:af:fe:7b:01: 5b:5c:df:f2:be:b2:1c:46:3e:02:c1:73:4f:93:a1: 61:b1:20:dc:19:be:0b:68:ea:64:01:8c:a6:86:22: ad:ca:80:3f:a9:27:86:8d:31:89:f8:64:55:0e:43: ef:93:4c:da:29:83:c5:5e:a1:e7:b9:a0:17:5c:db: af:9a:8a:19:db:0e:fc:bf:3e:08:d9:9d:85:a4:d9: e1:04:9a:3e:a5:53:0f:b1:fb:cb:0d:db:eb:32:37: b0:c1:65:d9:ef:19:a2:53:06:16:73:6e:54:df:cd: 5c:b2:94:0c:ef:55:9f:b4:1e:4d:65:33:e3:4a:30: 07:46:64:46:e6:38:ca:d4:36:6f:68:42:e5:3e:f2: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9B:24:04:0E:5D:97:68:49:67:F8:FF:09:A5:AE:5C:59:57:18:4B X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c1:19:be:e9:2e:a8:fc:24:66:48:8b:97:9d:7e:4f:29:22: ea:4b:57:be:aa:26:c5:a3:59:e9:4a:c9:f1:ab:71:9c:59:41: a6:a1:32:a4:69:f4:4c:a1:f1:a7:94:e7:cc:f1:34:a6:3b:d1: 5a:30:6b:5a:ef:d8:c1:76:b9:4d:71:38:92:f6:5d:9b:17:ec: 95:c6:72:f2:38:a2:75:77:a2:50:ad:2c:4e:26:4a:b8:ec:12: 15:aa:e3:33:9f:70:c6:de:ba:5f:24:b5:95:34:79:b7:57:ef: c5:f9:dd:fb:87:11:cd:6f:cf:6c:10:6d:89:e6:35:6d:01:1d: de:ba:36:dd:46:d9:f5:78:bc:7b:83:ff:ff:c7:55:02:41:44: 09:2d:e8:fe:45:e6:74:01:8e:6b:63:8b:eb:60:54:32:eb:17: 53:a1:ed:d6:e6:fc:db:9c:ce:1d:f3:a5:45:2e:dc:c5:5f:ac: aa:64:a3:8c:94:e1:ce:01:64:d3:42:b9:51:6a:31:51:d7:4e: 7b:54:2e:1c:ff:57:0c:98:6f:68:d1:ad:14:a1:17:e4:3f:39: 1a:3d:2f:12:1b:0f:01:a6:c8:9c:c3:24:d4:d8:e3:bf:a1:57: b7:b3:46:02:71:23:10:a6:a6:66:68:de:29:62:63:53:b9:44: f0:18:76:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraC+p9NWTU7hcpt5/tAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD EygyMzliMjQwNDBlNWQ5NzY4NDk2N2Y4ZmYwOWE1YWU1YzU5NTcxODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMmy1X5lnmAtC3mjIHpYkmZB2V++ 5igmcaZd5U80nS0htyNxZQkHb3Kp/ilzXbNLtd5Gk+cVbbtFSLHa7oWBm0nDf2oH zA3VVCV1+rSUVTDJTsX1huwFMIHmTKov8acma/NmX1ocLRJl9lvu967bPx5pq6/+ ewFbXN/yvrIcRj4CwXNPk6FhsSDcGb4LaOpkAYymhiKtyoA/qSeGjTGJ+GRVDkPv k0zaKYPFXqHnuaAXXNuvmooZ2w78vz4I2Z2FpNnhBJo+pVMPsfvLDdvrMjewwWXZ 7xmiUwYWc25U381cspQM71WftB5NZTPjSjAHRmRG5jjK1DZvaELlPvL0qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCObJAQOXZdoSWf4/wmlrlxZVxhLMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcEZvuku qPwkZkiLl51+Tyki6ktXvqomxaNZ6UrJ8atxnFlBpqEypGn0TKHxp5TnzPE0pjvR WjBrWu/YwXa5TXE4kvZdmxfslcZy8jiidXeiUK0sTiZKuOwSFarjM59wxt66XyS1 lTR5t1fvxfnd+4cRzW/PbBBtieY1bQEd3ro23UbZ9Xi8e4P//8dVAkFECS3o/kXm dAGOa2OL62BUMusXU6Ht1ub825zOHfOlRS7cxV+sqmSjjJThzgFk00K5UWoxUddO e1QuHP9XDJhvaNGtFKEX5D85Gj0vEhsPAabInMMk1Njjv6FXt7NGAnEjEKamZmje KWJjU7lE8Bh2mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:38 2025 by rpki-client