This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft File: J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json) Hash identifier: lTScTmZSwS+Yaz9hRgnJqYU4fojo2URx/k7eVzOFmNQ= Subject key identifier: 9C:18:91:BF:EA:A8:A8:DE:CE:90:1D:AF:83:A3:F9:30:BA:64:CE:C5 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019AF6C0EEF68330ABDF9A204FB273EA1FDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft Manifest number: 121B Signing time: Sun 07 Dec 2025 03:00:30 +0000 Manifest this update: Sun 07 Dec 2025 03:00:30 +0000 Manifest next update: Mon 08 Dec 2025 03:00:30 +0000 Files and hashes: 1: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=) 2: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: Ox9deOUe2ij3go1zbpW306WcTy3QVWZfrDNQS3hbNO0=) 3: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=) 4: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=) 5: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=) 6: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=) 7: gwWPOsWAzisobb1-Q2EhnTtJaJo.roa (hash: rPvxxj91M6LJ4Ua0hV1vECQuuEY2DKFSbkNP4mgGfiU=) 8: l1aBuRnedhAskEGRcshIEjo2E3g.roa (hash: YYm2/E6T+tTNIGVCNIyraxC923h/UBWvD/1U8+i9zGU=) 9: w0IPFUb0ERimH_LzhNAnc80J85M.roa (hash: ac/yT3OsCdAyULf+PshdLJxqWHTzbLiDOdLZMA7tA2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c0:ee:f6:83:30:ab:df:9a:20:4f:b2:73:ea:1f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Dec 7 03:00:30 2025 GMT Not After : Dec 8 03:00:30 2025 GMT Subject: CN=9c1891bfeaa8a8dece901daf83a3f930ba64cec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:52:7e:8d:a5:46:12:ad:b0:ae:59:ad:fe:26: b3:77:2f:20:90:7f:2b:d5:2a:34:37:fc:1a:b8:e8: 0c:c8:70:db:9c:e2:e7:4c:01:87:66:6b:bb:38:18: 65:98:38:2e:59:a1:28:a4:b6:79:b6:dd:eb:dc:05: 62:17:c2:24:65:91:d0:cb:64:d2:10:73:a6:a3:57: a9:6c:7a:f7:e4:8b:96:8b:1b:39:18:10:9d:da:33: ba:bc:a2:6d:e7:2f:0e:ee:09:13:b5:28:31:10:43: 03:07:e5:5a:09:4d:b1:06:5a:51:49:d6:fc:a6:4a: 40:90:f8:ae:dd:4a:01:3d:43:c1:2a:78:2e:a9:90: fd:14:15:81:39:40:2c:93:2f:36:72:b5:18:67:4f: 0d:04:d2:fd:47:ae:13:a5:de:de:18:f5:22:1a:ee: 42:e2:36:28:4b:6b:49:89:a2:b0:6c:31:a8:f5:e0: 53:45:f8:e4:bd:58:a4:10:c5:c3:85:8a:c4:2b:e1: 54:e4:39:34:88:63:56:cb:f7:b7:51:d1:bc:39:b9: 93:25:68:41:71:59:60:a3:d4:2d:b9:5b:80:a3:fe: 2e:65:d2:4b:87:8e:10:fc:6a:2c:c4:6e:ac:f1:d6: ef:ce:9b:7c:61:25:34:35:07:c9:5f:c7:d3:46:08: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:91:BF:EA:A8:A8:DE:CE:90:1D:AF:83:A3:F9:30:BA:64:CE:C5 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:15:d1:39:a5:63:d0:63:9a:9d:26:71:07:cb:14:84:d4:ec: 9e:7e:6c:cd:e5:d7:3b:30:27:c0:29:1d:29:e1:0a:3b:d5:53: 5d:16:6a:29:bd:d0:91:86:71:6a:4b:b6:20:80:aa:ee:2a:11: c0:14:2c:e9:bd:c9:03:6b:b9:21:62:40:73:07:93:28:eb:c8: f5:fc:bf:7d:e1:a4:c4:af:9f:f4:fc:64:07:55:2f:7d:90:cd: 37:18:0d:9e:7f:80:37:dc:dc:6a:bb:12:58:6b:40:5b:41:1a: 2f:96:25:59:c2:07:0e:d8:a4:e8:ef:06:33:24:dd:8e:45:09: 59:67:ce:fe:e1:e1:d1:a2:3b:ea:3b:a1:04:57:c1:7c:a5:ed: 08:d4:3f:84:1d:5d:87:c2:a8:a8:98:3d:06:9c:8f:9c:40:fe: 3b:90:98:08:04:7b:97:af:d7:d9:d5:c7:60:87:01:84:4a:d9: 31:16:a4:de:9f:ec:b9:a2:68:e1:81:c2:89:d3:c6:6e:ae:81: 39:c2:33:43:c5:30:07:55:54:8f:96:fd:e5:f8:4a:78:ea:ca: 16:34:ad:99:90:c4:c4:00:f7:8f:47:09:fc:ed:42:bd:30:ca: e8:74:b7:8c:cd:d9:bc:6b:68:9a:88:40:ef:e9:c0:42:fa:a5: 85:95:7d:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wO72gzCr35ogT7Jz6h/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjUxMjA3MDMwMDMwWhcNMjUxMjA4MDMwMDMwWjAzMTEwLwYDVQQD Eyg5YzE4OTFiZmVhYThhOGRlY2U5MDFkYWY4M2EzZjkzMGJhNjRjZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FJ+jaVGEq2wrlmt/iazdy8gkH8r 1So0N/wauOgMyHDbnOLnTAGHZmu7OBhlmDguWaEopLZ5tt3r3AViF8IkZZHQy2TS EHOmo1epbHr35IuWixs5GBCd2jO6vKJt5y8O7gkTtSgxEEMDB+VaCU2xBlpRSdb8 pkpAkPiu3UoBPUPBKnguqZD9FBWBOUAsky82crUYZ08NBNL9R64Tpd7eGPUiGu5C 4jYoS2tJiaKwbDGo9eBTRfjkvVikEMXDhYrEK+FU5Dk0iGNWy/e3UdG8ObmTJWhB cVlgo9QtuVuAo/4uZdJLh44Q/GosxG6s8dbvzpt8YSU0NQfJX8fTRgjA6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwYkb/qqKjezpAdr4Oj+TC6ZM7FMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhXROaVj 0GOanSZxB8sUhNTsnn5szeXXOzAnwCkdKeEKO9VTXRZqKb3QkYZxaku2IICq7ioR wBQs6b3JA2u5IWJAcweTKOvI9fy/feGkxK+f9PxkB1UvfZDNNxgNnn+AN9zcarsS WGtAW0EaL5YlWcIHDtik6O8GMyTdjkUJWWfO/uHh0aI76juhBFfBfKXtCNQ/hB1d h8KoqJg9BpyPnED+O5CYCAR7l6/X2dXHYIcBhErZMRak3p/suaJo4YHCidPGbq6B OcIzQ8UwB1VUj5b95fhKeOrKFjStmZDExAD3j0cJ/O1CvTDK6HS3jM3ZvGtomohA 7+nAQvqlhZV9tw== -----END CERTIFICATE-----Generated at Sun Dec 7 10:46:20 2025 by rpki-client