This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json) Hash identifier: 9RcfcxKKWT7LAZ1NE0zZ/fg2fn5/FPKBNIv8asdrp98= Subject key identifier: 90:5F:42:66:F8:24:96:0D:F5:66:E1:EA:CF:27:79:04:DB:03:7D:2E Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019B34C51BA7C42B2810BD49F262E039EDFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:01:31 +0000 Manifest this update: Fri 19 Dec 2025 04:01:31 +0000 Manifest next update: Sat 20 Dec 2025 04:01:31 +0000 Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=) 2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=) 3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: SEeG/FA5JhMVRYCoOMBfaJzupZxTvsrxeKXDq610/T4=) 4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:1b:a7:c4:2b:28:10:bd:49:f2:62:e0:39:ed:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Dec 19 04:01:31 2025 GMT Not After : Dec 20 04:01:31 2025 GMT Subject: CN=905f4266f824960df566e1eacf277904db037d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:37:78:7e:6f:28:60:46:48:c5:c4:35:a8: 86:bf:cb:8d:0c:5e:13:46:d5:49:f0:59:e5:91:7e: d9:2d:58:74:13:a7:be:56:1b:10:87:60:c2:02:a1: 9d:48:09:8e:5c:7a:a1:11:5a:ca:34:ce:9e:8a:c1: 4a:1c:b6:dd:d7:37:52:2b:bc:22:73:fe:78:67:b2: e4:8c:e4:b3:bf:1a:77:fd:7d:fe:3f:9c:a3:e3:cb: f7:78:d8:51:22:62:bc:55:9b:3d:68:0b:30:2f:6c: 67:12:d0:68:1f:8e:5b:58:d8:8f:4a:d9:69:26:47: a7:03:c9:7d:61:03:af:bd:1e:11:04:b9:fe:40:ba: bb:57:34:5b:f7:d3:2c:2a:33:d2:32:63:9e:04:0d: e4:c9:a4:66:35:5e:9e:40:bb:82:dd:b8:69:7c:dd: 2f:dc:61:4c:5a:fd:18:61:f9:88:e3:4b:b1:f5:04: 07:7c:de:8e:d0:fa:b2:d6:40:0c:73:89:8c:a1:06: 4e:ed:73:76:a1:46:64:54:61:9a:ec:bc:b4:46:26: 99:79:3d:9a:2b:f3:a5:d6:38:b6:26:1e:a9:b6:78: 75:d4:24:a7:87:f9:21:d1:10:ef:6f:9e:d6:70:11: 91:fd:fd:ed:04:3c:7c:fc:76:48:a4:71:cd:af:58: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5F:42:66:F8:24:96:0D:F5:66:E1:EA:CF:27:79:04:DB:03:7D:2E X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:99:1b:0b:0e:71:52:78:5e:be:2b:7d:c2:f5:30:1f:56:20: 0c:41:34:b6:61:d2:fd:92:b0:82:5c:09:3c:cd:ec:a2:23:3c: b0:dc:30:16:cc:78:df:e2:29:4a:3b:00:b3:73:56:cb:6a:09: b7:34:a1:dc:88:62:94:bc:41:c4:c1:e9:4f:d8:d0:a5:16:07: 7a:a2:b5:33:13:ef:77:0a:63:36:22:f1:e8:6f:e6:33:5d:4d: 87:fe:38:aa:ae:f8:20:df:f9:80:6e:ba:5f:48:56:79:2e:86: db:42:96:28:43:a2:4e:c2:b8:20:6d:07:df:dd:77:97:c8:46: c0:88:62:40:9f:2e:84:13:de:fa:ed:ba:ed:7b:91:bc:a0:3b: b4:80:69:72:17:f7:8d:69:0d:b4:62:e1:8c:a3:8a:b2:05:71: 2d:72:d3:5c:17:b4:86:85:2e:9e:1c:b3:ca:14:e4:8d:78:81: 11:f9:b1:5e:d4:9a:eb:99:6d:47:48:98:6e:11:9d:a9:cf:ad: f4:29:d8:01:e9:6b:22:72:84:e9:10:ce:24:71:e3:43:01:a7: 37:6f:eb:0d:b4:be:44:c6:d3:79:41:2e:a1:31:85:b2:b0:2b: 64:86:64:66:7b:cd:dd:0f:f4:72:dc:85:38:67:3a:30:57:ce: 76:56:fc:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xRunxCsoEL1J8mLgOe37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjUxMjE5MDQwMTMxWhcNMjUxMjIwMDQwMTMxWjAzMTEwLwYDVQQD Eyg5MDVmNDI2NmY4MjQ5NjBkZjU2NmUxZWFjZjI3NzkwNGRiMDM3ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3k3eH5vKGBGSMXENaiGv8uNDF4T RtVJ8FnlkX7ZLVh0E6e+VhsQh2DCAqGdSAmOXHqhEVrKNM6eisFKHLbd1zdSK7wi c/54Z7LkjOSzvxp3/X3+P5yj48v3eNhRImK8VZs9aAswL2xnEtBoH45bWNiPStlp JkenA8l9YQOvvR4RBLn+QLq7VzRb99MsKjPSMmOeBA3kyaRmNV6eQLuC3bhpfN0v 3GFMWv0YYfmI40ux9QQHfN6O0Pqy1kAMc4mMoQZO7XN2oUZkVGGa7Ly0RiaZeT2a K/Ol1ji2Jh6ptnh11CSnh/kh0RDvb57WcBGR/f3tBDx8/HZIpHHNr1ihQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBfQmb4JJYN9Wbh6s8neQTbA30uMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZkbCw5x Unhevit9wvUwH1YgDEE0tmHS/ZKwglwJPM3soiM8sNwwFsx43+IpSjsAs3NWy2oJ tzSh3IhilLxBxMHpT9jQpRYHeqK1MxPvdwpjNiLx6G/mM11Nh/44qq74IN/5gG66 X0hWeS6G20KWKEOiTsK4IG0H3913l8hGwIhiQJ8uhBPe+u267XuRvKA7tIBpchf3 jWkNtGLhjKOKsgVxLXLTXBe0hoUunhyzyhTkjXiBEfmxXtSa65ltR0iYbhGdqc+t 9CnYAelrInKE6RDOJHHjQwGnN2/rDbS+RMbTeUEuoTGFsrArZIZkZnvN3Q/0ctyF OGc6MFfOdlb8lA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:39 2025 by rpki-client