This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft File: jaArHaSqceZbb7m-I6ayCMJcV9g.mft (raw, json) Hash identifier: 3FdmUe7l5lcEcJtDQjj2BLZWuX6ywymUsX5AdbIQLOE= Subject key identifier: 82:D1:7A:13:5D:50:64:FC:9F:FB:9E:46:FF:75:E8:DA:1F:09:2A:EB Authority key identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8 Certificate issuer: /CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8 Certificate serial: 019B59ACBB5EE9C55328C465B043D47BD792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft Manifest number: 0257 Signing time: Fri 26 Dec 2025 08:00:50 +0000 Manifest this update: Fri 26 Dec 2025 08:00:50 +0000 Manifest next update: Sat 27 Dec 2025 08:00:50 +0000 Files and hashes: 1: 1UIx6z7jU4irLxLbnLzZBvRy3G4.roa (hash: X1FeAQ5pR3l+YD3ZhmHac/oJWgd/xhCnXQiRD7DlUkU=) 2: jaArHaSqceZbb7m-I6ayCMJcV9g.crl (hash: TmORkf2JNXVZxmo+Oqs2hstg6+OXOt79BHcB0XfTG+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:bb:5e:e9:c5:53:28:c4:65:b0:43:d4:7b:d7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8 Validity Not Before: Dec 26 08:00:50 2025 GMT Not After : Dec 27 08:00:50 2025 GMT Subject: CN=82d17a135d5064fc9ffb9e46ff75e8da1f092aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:16:b5:4b:ae:a1:26:10:ab:7a:96:ba:cd: 9d:97:64:f4:02:8e:7a:7d:a1:5d:0c:d3:3f:32:fe: a1:6d:0d:a6:1f:7e:d2:30:4a:44:e9:f1:b8:3c:d7: 72:1a:e6:e3:67:91:28:76:da:31:57:e0:2f:43:b9: 54:b1:28:73:76:df:f7:4e:84:8d:c7:e3:f0:cb:1f: 64:f6:56:af:85:2e:35:e7:81:ee:6d:8e:1e:e6:be: b3:8c:87:cd:24:76:97:ff:c5:ba:d3:c4:1c:44:43: 8f:ae:bf:01:00:e5:f5:93:8a:08:f5:70:df:78:b4: a3:36:7f:91:5f:c5:fd:bc:ab:ca:90:92:a8:82:6f: 87:59:d0:40:51:15:22:5d:8c:c0:fb:b4:df:2d:63: e0:f8:98:05:bf:dc:2a:84:6a:c0:d3:64:fa:4f:52: ef:ac:34:ed:00:5b:3c:82:19:be:69:d1:24:1e:ae: 88:3a:35:c3:7c:1e:7e:d9:be:60:0c:d2:ad:8b:96: 44:91:61:c5:fe:8a:2f:02:af:1f:27:84:94:d4:d0: d8:a5:ee:ec:92:b1:c3:82:5a:b3:2d:8d:0a:1e:3c: 5b:d4:8c:6e:9e:f7:48:3a:ca:ee:e5:09:8a:54:a4: 6d:cf:e4:d4:cc:3e:bc:58:3c:3a:d2:fb:6e:71:22: 53:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D1:7A:13:5D:50:64:FC:9F:FB:9E:46:FF:75:E8:DA:1F:09:2A:EB X509v3 Authority Key Identifier: keyid:8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:f3:8b:54:44:5d:1c:3a:d3:f5:1e:40:e8:33:c4:7b:17:48: 5d:bd:82:03:cf:41:1e:43:c2:09:fd:4e:03:4c:f3:b2:07:29: 1a:0f:1e:50:eb:0f:7d:e0:f5:ef:0d:c8:29:10:98:6f:96:e4: f3:69:a1:83:38:8f:85:9c:24:1c:97:c0:d9:43:08:95:8c:21: 93:fb:22:79:5a:c9:ad:78:58:2c:24:2a:ba:78:6b:78:ea:25: 2b:9b:f2:08:6d:cd:0e:bf:fc:37:d9:1d:88:42:f2:94:c2:93: c6:7d:14:16:6f:75:7b:00:12:82:c8:d5:51:04:44:dc:43:26: ab:5e:f8:2d:7f:88:98:06:d8:48:28:c1:e1:05:29:75:1c:a3: 00:f5:68:89:e7:f0:ef:83:d7:00:0b:82:c2:af:d4:0b:c3:a8: 39:e1:02:58:f6:33:22:50:cf:2e:28:3c:82:cc:37:fa:0b:77: 42:ac:11:90:0a:cf:8e:3b:f2:21:37:43:66:34:21:bb:f4:d5: d4:37:29:d1:8b:1a:54:af:8c:8a:d1:d3:2b:9d:3b:09:a1:9b: 0d:18:ee:15:11:92:0e:13:c5:2f:8d:07:19:b7:b8:76:b1:83: 3f:88:61:2c:55:b3:e9:36:0e:d8:20:e1:1b:00:d1:99:f5:35: f9:47:d8:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrLte6cVTKMRlsEPUe9eSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTAyYjFkYTRhYTcxZTY1YjZmYjliZTIzYTZiMjA4YzI1 YzU3ZDgwHhcNMjUxMjI2MDgwMDUwWhcNMjUxMjI3MDgwMDUwWjAzMTEwLwYDVQQD Eyg4MmQxN2ExMzVkNTA2NGZjOWZmYjllNDZmZjc1ZThkYTFmMDkyYWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiUWtUuuoSYQq3qWus2dl2T0Ao56 faFdDNM/Mv6hbQ2mH37SMEpE6fG4PNdyGubjZ5EodtoxV+AvQ7lUsShzdt/3ToSN x+Pwyx9k9lavhS4154HubY4e5r6zjIfNJHaX/8W608QcREOPrr8BAOX1k4oI9XDf eLSjNn+RX8X9vKvKkJKogm+HWdBAURUiXYzA+7TfLWPg+JgFv9wqhGrA02T6T1Lv rDTtAFs8ghm+adEkHq6IOjXDfB5+2b5gDNKti5ZEkWHF/oovAq8fJ4SU1NDYpe7s krHDglqzLY0KHjxb1IxunvdIOsru5QmKVKRtz+TUzD68WDw60vtucSJTlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILRehNdUGT8n/ueRv916NofCSrrMB8GA1UdIwQY MBaAFI2gKx2kqnHmW2+5viOmsgjCXFfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFBckhhU3FjZVpiYjdtLUk2YXlDTUpjVjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kYmE2YzUtMjBlNS00MDczLTg1M2Et YzllMjlkZWJhMjQ0LzEvamFBckhhU3FjZVpiYjdtLUk2YXlDTUpjVjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kYmE2YzUtMjBlNS00MDczLTg1M2EtYzllMjlkZWJhMjQ0 LzEvamFBckhhU3FjZVpiYjdtLUk2YXlDTUpjVjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPOLVERd HDrT9R5A6DPEexdIXb2CA89BHkPCCf1OA0zzsgcpGg8eUOsPfeD17w3IKRCYb5bk 82mhgziPhZwkHJfA2UMIlYwhk/sieVrJrXhYLCQqunhreOolK5vyCG3NDr/8N9kd iELylMKTxn0UFm91ewASgsjVUQRE3EMmq174LX+ImAbYSCjB4QUpdRyjAPVoiefw 74PXAAuCwq/UC8OoOeECWPYzIlDPLig8gsw3+gt3QqwRkArPjjvyITdDZjQhu/TV 1Dcp0YsaVK+MitHTK507CaGbDRjuFRGSDhPFL40HGbe4drGDP4hhLFWz6TYO2CDh GwDRmfU1+UfYFQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:45 2025 by rpki-client