This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft File: j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json) Hash identifier: PL9RzH+PSHXCJULfQk/bOGndrBqhRFW2N4JCS8K8L5A= Subject key identifier: 5C:21:35:06:12:16:DC:4B:EB:C0:6D:72:09:32:90:CC:3D:1E:B2:A5 Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070 Certificate serial: 019B35696EC3F4536D0BD15213094C6A1923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft Manifest number: 170C Signing time: Fri 19 Dec 2025 07:01:00 +0000 Manifest this update: Fri 19 Dec 2025 07:01:00 +0000 Manifest next update: Sat 20 Dec 2025 07:01:00 +0000 Files and hashes: 1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=) 2: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (hash: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=) 3: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: okuztVDeTS5nKN7hVlhJ+EcJdHG5fdmeF2O/dY7rtdo=) 4: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=) 5: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:6e:c3:f4:53:6d:0b:d1:52:13:09:4c:6a:19:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070 Validity Not Before: Dec 19 07:01:00 2025 GMT Not After : Dec 20 07:01:00 2025 GMT Subject: CN=5c2135061216dc4bebc06d72093290cc3d1eb2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:47:ca:7d:fc:54:20:97:9a:5d:84:8b:09: 23:88:1a:a3:54:3e:70:84:3d:0f:95:45:c9:65:cb: ed:bc:36:cb:30:b8:ad:b7:be:c8:1c:38:c1:2e:86: 76:1c:77:fe:67:1c:bf:2a:11:17:ea:0b:e6:ce:0b: 73:5a:15:8b:8d:44:cf:96:ab:6b:9b:f5:a5:3f:70: 7b:46:e2:a2:89:91:40:ac:4a:d0:da:3a:29:01:5d: bc:1f:fd:65:58:fa:ba:e3:ba:8e:7f:a9:c5:a0:dc: d2:4a:7d:00:02:66:19:93:7f:f0:7d:65:46:c1:49: a5:32:65:5f:7e:c6:90:3e:40:72:1c:e0:78:a2:d3: b6:56:bb:76:95:c8:ec:c6:5e:1c:37:3f:08:01:b1: c7:ca:7a:e2:e0:28:b5:a7:d1:a8:bd:71:66:77:63: ca:aa:01:ef:66:5c:f8:89:4f:90:d0:31:f9:bb:16: 4f:13:45:96:0e:d5:c6:ed:7b:e2:06:5d:2e:71:43: 62:0e:18:f9:84:42:09:ec:55:15:21:84:9b:10:9f: e6:eb:ac:fb:93:1d:09:2b:d8:f9:b0:f7:ef:38:e3: 70:4c:a6:dd:a9:92:e0:d0:33:08:7f:cb:de:71:98: 44:fb:68:8a:a0:ad:1f:83:7f:19:9f:ef:3c:f5:3d: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:21:35:06:12:16:DC:4B:EB:C0:6D:72:09:32:90:CC:3D:1E:B2:A5 X509v3 Authority Key Identifier: keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:26:ab:e1:0f:63:58:40:c2:d0:67:f6:87:0c:80:88:6d:08: 3d:6e:79:aa:d1:68:0f:9a:2d:26:78:59:5c:c6:b9:de:20:4f: 42:6b:ba:25:ed:e9:99:05:3c:a3:86:1c:90:c3:f4:2c:23:d3: 48:c2:1f:86:eb:cd:3f:ae:97:e4:fd:f7:02:cb:b8:97:8a:1d: 7b:83:e7:b4:37:1f:16:66:88:ba:08:20:78:ae:e0:0b:8e:5c: 84:ad:04:f2:02:f3:af:ac:8b:5e:c2:98:f8:6e:92:3c:ec:20: 64:ab:2f:a9:a3:cc:3e:07:d1:3a:bb:4d:15:0d:07:bb:b6:6a: 87:7b:58:ed:48:a7:20:95:fe:f1:82:50:f8:19:96:80:d0:30: 57:4a:60:61:1b:12:7f:2b:4a:96:01:6b:86:49:40:a6:15:bc: df:72:db:92:2f:69:43:b3:52:ab:04:af:a6:0a:7b:fc:71:45: 52:8a:b5:26:16:30:17:fe:e8:4e:3f:b2:cf:d3:36:ee:b0:1f: 53:7f:a1:a2:14:9a:f1:36:34:9e:42:8c:8f:ba:a9:b6:f3:61: dc:bd:50:0b:a2:9c:5c:66:ed:6f:8e:85:1b:08:02:6a:15:0b: 3d:d8:a0:47:66:98:ad:fd:62:9a:05:cc:54:dc:f3:fa:e4:6b: d4:06:e7:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aW7D9FNtC9FSEwlMahkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4 MmEwNzAwHhcNMjUxMjE5MDcwMTAwWhcNMjUxMjIwMDcwMTAwWjAzMTEwLwYDVQQD Eyg1YzIxMzUwNjEyMTZkYzRiZWJjMDZkNzIwOTMyOTBjYzNkMWViMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRRHyn38VCCXml2EiwkjiBqjVD5w hD0PlUXJZcvtvDbLMLitt77IHDjBLoZ2HHf+Zxy/KhEX6gvmzgtzWhWLjUTPlqtr m/WlP3B7RuKiiZFArErQ2jopAV28H/1lWPq647qOf6nFoNzSSn0AAmYZk3/wfWVG wUmlMmVffsaQPkByHOB4otO2Vrt2lcjsxl4cNz8IAbHHynri4Ci1p9GovXFmd2PK qgHvZlz4iU+Q0DH5uxZPE0WWDtXG7XviBl0ucUNiDhj5hEIJ7FUVIYSbEJ/m66z7 kx0JK9j5sPfvOONwTKbdqZLg0DMIf8vecZhE+2iKoK0fg38Zn+889T1tTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwhNQYSFtxL68BtcgkykMw9HrKlMB8GA1UdIwQY MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt ZDlhNTM5YjhiN2FkLzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiar4Q9j WEDC0Gf2hwyAiG0IPW55qtFoD5otJnhZXMa53iBPQmu6Je3pmQU8o4YckMP0LCPT SMIfhuvNP66X5P33Asu4l4ode4PntDcfFmaIugggeK7gC45chK0E8gLzr6yLXsKY +G6SPOwgZKsvqaPMPgfROrtNFQ0Hu7Zqh3tY7UinIJX+8YJQ+BmWgNAwV0pgYRsS fytKlgFrhklAphW833Lbki9pQ7NSqwSvpgp7/HFFUoq1JhYwF/7oTj+yz9M27rAf U3+hohSa8TY0nkKMj7qptvNh3L1QC6KcXGbtb46FGwgCahULPdigR2aYrf1imgXM VNzz+uRr1Abn2Q== -----END CERTIFICATE-----Generated at Fri Dec 19 09:26:30 2025 by rpki-client