This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json) Hash identifier: 7PEyPYn4cuvSqDZyKp7tbrXTUcjqlirDKcXSgzpo6K8= Subject key identifier: 3F:9D:DC:BB:7B:1F:EE:28:B2:8D:90:26:C5:F2:B6:B2:1E:FB:33:8F Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019B0E2672EA371EF978AB9BA18604ED865E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 16:02:39 +0000 Manifest this update: Thu 11 Dec 2025 16:02:39 +0000 Manifest next update: Fri 12 Dec 2025 16:02:39 +0000 Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=) 2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=) 3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: 96DU4UGSY3l8w1RYe8Y/mJw7QOgk265nC8/6uaf5uhw=) 4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:72:ea:37:1e:f9:78:ab:9b:a1:86:04:ed:86:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Dec 11 16:02:39 2025 GMT Not After : Dec 12 16:02:39 2025 GMT Subject: CN=3f9ddcbb7b1fee28b28d9026c5f2b6b21efb338f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:ab:90:cf:a0:61:37:88:a6:b8:fb:f0:0f: 53:18:0c:d6:ab:f8:d0:6f:d8:3d:f6:6d:3e:dc:6f: 1a:88:5a:e9:34:75:58:48:9b:77:aa:b0:76:79:13: 78:44:28:2b:ae:7c:e9:d1:be:46:09:99:98:02:ba: 71:e6:6a:9b:a9:a3:bd:f4:02:55:e8:29:ba:5b:d9: 21:94:a8:80:a0:44:23:3d:ff:12:6c:b3:fe:85:98: 55:b3:7c:46:8b:08:a4:9e:b0:ab:b2:60:2b:69:3b: 94:c3:6c:96:21:72:63:f3:d7:dc:bc:bc:53:b8:28: f4:fa:c2:80:c2:92:df:2a:82:32:0d:63:d3:92:0d: 29:63:90:1f:b9:6f:fe:98:6a:68:87:d9:08:c3:8e: d2:58:87:6f:0c:67:74:77:2d:42:a5:82:dd:12:ab: 61:50:ff:39:2f:4c:35:96:79:22:1f:95:b4:13:22: 48:0a:3f:d9:de:6b:5a:c2:71:6f:47:3b:b6:a1:07: 4d:3b:e2:1e:2b:b0:ad:d9:0a:60:76:14:71:45:87: 9f:eb:4f:73:87:b3:0d:93:bc:bf:e7:4c:3d:52:92: 16:b6:51:5e:10:5a:01:b7:4e:e6:a0:87:65:ad:d6: 17:a6:25:41:fb:9a:1f:1e:9f:6c:7e:b5:12:c0:77: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9D:DC:BB:7B:1F:EE:28:B2:8D:90:26:C5:F2:B6:B2:1E:FB:33:8F X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:cd:20:ed:91:d9:61:8b:d5:a1:a2:1e:6f:ee:12:12:53:c7: 63:72:b8:df:d8:fa:83:43:f3:62:3d:fe:86:76:02:5f:36:55: 50:f3:fe:4b:e1:d6:ce:e2:52:f3:c0:99:3e:cb:17:7a:71:3e: 2d:8d:1c:3b:c5:57:5e:1d:ee:db:bb:3e:19:4e:14:46:e4:74: f5:ac:46:e0:10:50:20:06:c8:a0:95:48:71:26:22:a4:b8:7f: 39:39:04:54:03:25:aa:15:90:ee:7c:08:39:ec:85:d8:72:92: cf:3e:5a:17:7b:2b:5c:1c:48:65:54:bb:5b:7d:b1:f6:48:69: 97:15:77:6f:e5:1c:8f:d6:15:0d:fe:14:ef:db:8c:51:fc:8f: b5:d3:00:a0:2e:a2:3d:8a:72:d4:a3:db:bd:0c:a0:3e:b0:bf: bf:ea:a6:c2:c9:92:56:f4:d7:2a:d4:7c:48:83:bc:f5:49:57: 15:d9:ce:c4:a8:f4:be:1d:f3:a1:fb:5e:e6:d1:6d:6c:ab:81: b1:e4:ad:66:6c:9a:81:63:5c:c7:37:9e:65:75:8b:5e:93:23: f1:97:33:11:e4:93:21:b4:47:7a:de:2d:7a:27:b7:93:b1:2d: 09:59:37:05:3a:04:e2:94:34:98:10:d4:83:d0:e3:d3:d9:1d: 51:eb:cd:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJnLqNx75eKuboYYE7YZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjUxMjExMTYwMjM5WhcNMjUxMjEyMTYwMjM5WjAzMTEwLwYDVQQD EygzZjlkZGNiYjdiMWZlZTI4YjI4ZDkwMjZjNWYyYjZiMjFlZmIzMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+6rkM+gYTeIprj78A9TGAzWq/jQ b9g99m0+3G8aiFrpNHVYSJt3qrB2eRN4RCgrrnzp0b5GCZmYArpx5mqbqaO99AJV 6Cm6W9khlKiAoEQjPf8SbLP+hZhVs3xGiwiknrCrsmAraTuUw2yWIXJj89fcvLxT uCj0+sKAwpLfKoIyDWPTkg0pY5AfuW/+mGpoh9kIw47SWIdvDGd0dy1CpYLdEqth UP85L0w1lnkiH5W0EyJICj/Z3mtawnFvRzu2oQdNO+IeK7Ct2QpgdhRxRYef609z h7MNk7y/50w9UpIWtlFeEFoBt07moIdlrdYXpiVB+5ofHp9sfrUSwHeoPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+d3Lt7H+4oso2QJsXytrIe+zOPMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoc0g7ZHZ YYvVoaIeb+4SElPHY3K439j6g0PzYj3+hnYCXzZVUPP+S+HWzuJS88CZPssXenE+ LY0cO8VXXh3u27s+GU4URuR09axG4BBQIAbIoJVIcSYipLh/OTkEVAMlqhWQ7nwI OeyF2HKSzz5aF3srXBxIZVS7W32x9khplxV3b+Ucj9YVDf4U79uMUfyPtdMAoC6i PYpy1KPbvQygPrC/v+qmwsmSVvTXKtR8SIO89UlXFdnOxKj0vh3zofte5tFtbKuB seStZmyagWNcxzeeZXWLXpMj8ZczEeSTIbRHet4teie3k7EtCVk3BToE4pQ0mBDU g9Dj09kdUevNUw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:58:36 2025 by rpki-client