This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json) Hash identifier: bBDC3rwQ68Ar6F4M4u5BvjIKzuRns0yg34V5F+UdBYw= Subject key identifier: 1D:35:50:00:06:DC:EA:BB:16:5A:6D:85:06:0D:EA:78:71:C5:9B:54 Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6 Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6 Certificate serial: 019B12A676F44F772B0D64265E48AA8D8708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft Manifest number: 177D Signing time: Fri 12 Dec 2025 13:00:57 +0000 Manifest this update: Fri 12 Dec 2025 13:00:57 +0000 Manifest next update: Sat 13 Dec 2025 13:00:57 +0000 Files and hashes: 1: KZIUSongntyb8cmh04ohuVf-RH4.roa (hash: EqZXG+hM0Nf7quHml742UmbfXBrPEdr6jmp61c5zxV4=) 2: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=) 3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: AryA4iVIf/8cbDGsXa6WSJoJCrIr0Tup33/tedmuWzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:76:f4:4f:77:2b:0d:64:26:5e:48:aa:8d:87:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6 Validity Not Before: Dec 12 13:00:57 2025 GMT Not After : Dec 13 13:00:57 2025 GMT Subject: CN=1d35500006dceabb165a6d85060dea7871c59b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:eb:f3:fd:17:66:6a:42:03:19:d4:d7:4b: 9a:46:8e:ff:05:8a:c3:22:a0:29:87:32:c9:ac:74: 3f:6d:f1:1f:ea:2c:a8:f4:b5:f2:06:fb:88:bb:73: 8d:d8:b6:a6:c9:18:a8:e3:86:9f:b7:83:d0:39:a4: 1a:fe:01:65:f5:4d:ac:db:36:61:4d:6d:47:2e:09: 51:4f:a4:21:a1:22:c9:c9:ea:c9:61:5a:37:82:90: 37:66:cf:a9:64:c1:e1:41:2f:68:08:91:66:aa:c0: 7a:8f:11:35:33:23:ee:a0:ac:82:bc:42:6f:45:41: 52:70:97:c7:e3:a0:8c:fd:65:7f:28:d6:5a:5b:ec: dd:dc:57:fc:d2:90:09:c5:d7:7a:e5:9b:68:20:cd: 27:26:30:e5:85:2f:67:80:f7:14:c1:03:87:bf:df: d6:54:f1:8e:e6:7e:56:c5:a9:09:4b:ba:33:64:59: 5e:a6:25:2e:ae:14:ad:fa:eb:d2:81:cf:9f:5e:70: a3:21:8d:c5:96:8a:3a:c2:9e:55:2b:d0:ba:31:cd: a0:4d:92:80:8b:d2:c5:05:de:67:ab:72:bb:3d:53: b0:6d:04:e0:b1:e5:db:6e:f9:b2:37:8a:8f:79:ce: c7:3f:d8:d8:a1:60:e6:d8:74:da:1b:67:ae:d3:24: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:35:50:00:06:DC:EA:BB:16:5A:6D:85:06:0D:EA:78:71:C5:9B:54 X509v3 Authority Key Identifier: keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2a:ec:df:79:c2:db:45:61:3d:25:ad:e5:a9:ac:96:5c:38: 94:8e:17:b9:c1:8f:e4:1c:2a:1f:5c:40:df:58:f3:e6:b6:05: 3a:09:54:a3:01:61:4f:af:59:87:3e:d5:70:a7:18:db:00:36: 38:81:db:c0:0d:1d:32:a3:b9:6f:8c:4e:37:3d:37:8d:8e:8d: a8:64:1f:ee:a4:44:57:e3:31:74:70:24:4e:4c:12:d1:15:ba: 1e:9d:07:ea:15:00:9f:e3:ad:8d:b1:cd:d1:e7:a3:64:8a:6b: 94:5a:ff:50:ba:04:7a:e6:c7:a9:c9:7c:e3:27:62:a7:8f:d4: b2:09:e6:0c:0c:80:44:ca:fc:d8:fc:da:9c:46:08:93:9a:58: aa:c7:60:e5:31:5f:ab:97:37:f5:d2:7e:fa:cf:df:69:d7:68: b3:a5:46:bc:e8:c2:b9:e3:3c:1c:29:cc:66:a4:55:14:8e:09: 4f:39:ef:34:23:42:d2:e5:d8:69:a6:69:1f:d8:36:ec:88:7e: 6d:e7:ac:a1:05:c1:e2:d6:9c:d7:d2:72:32:87:eb:21:fd:10: 0f:51:d8:f8:fb:03:2a:e1:6e:d8:e3:4e:3a:b8:2b:bc:cb:fb: 2e:43:66:f1:8e:e5:b4:db:8b:e3:1d:b0:98:5e:92:56:b2:93: e0:49:ca:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpnb0T3crDWQmXkiqjYcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky ODFlZjYwHhcNMjUxMjEyMTMwMDU3WhcNMjUxMjEzMTMwMDU3WjAzMTEwLwYDVQQD EygxZDM1NTAwMDA2ZGNlYWJiMTY1YTZkODUwNjBkZWE3ODcxYzU5YjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq/r8/0XZmpCAxnU10uaRo7/BYrD IqAphzLJrHQ/bfEf6iyo9LXyBvuIu3ON2LamyRio44aft4PQOaQa/gFl9U2s2zZh TW1HLglRT6QhoSLJyerJYVo3gpA3Zs+pZMHhQS9oCJFmqsB6jxE1MyPuoKyCvEJv RUFScJfH46CM/WV/KNZaW+zd3Ff80pAJxdd65ZtoIM0nJjDlhS9ngPcUwQOHv9/W VPGO5n5WxakJS7ozZFlepiUurhSt+uvSgc+fXnCjIY3Floo6wp5VK9C6Mc2gTZKA i9LFBd5nq3K7PVOwbQTgseXbbvmyN4qPec7HP9jYoWDm2HTaG2eu0ySSDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB01UAAG3Oq7FlpthQYN6nhxxZtUMB8GA1UdIwQY MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt ZTVhNzdmN2E3YWEyLzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCrs33nC 20VhPSWt5amsllw4lI4XucGP5BwqH1xA31jz5rYFOglUowFhT69Zhz7VcKcY2wA2 OIHbwA0dMqO5b4xONz03jY6NqGQf7qREV+MxdHAkTkwS0RW6Hp0H6hUAn+OtjbHN 0eejZIprlFr/ULoEeubHqcl84ydip4/UsgnmDAyARMr82PzanEYIk5pYqsdg5TFf q5c39dJ++s/faddos6VGvOjCueM8HCnMZqRVFI4JTznvNCNC0uXYaaZpH9g27Ih+ beesoQXB4tac19JyMofrIf0QD1HY+PsDKuFu2ONOOrgrvMv7LkNm8Y7ltNuL4x2w mF6SVrKT4EnKQA== -----END CERTIFICATE-----Generated at Fri Dec 12 17:10:12 2025 by rpki-client