This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json) Hash identifier: KCU5GxU6MlpLv3WpC2dLTPwaXT1r4UMma5mrQqK8/Yc= Subject key identifier: 38:EC:C5:C4:09:E4:EC:0A:C3:4F:69:4E:79:69:7E:17:EC:DB:82:DA Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B21E2A7D8603EA0A1228B68A57936A592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft Manifest number: 1788 Signing time: Mon 15 Dec 2025 12:01:00 +0000 Manifest this update: Mon 15 Dec 2025 12:01:00 +0000 Manifest next update: Tue 16 Dec 2025 12:01:00 +0000 Files and hashes: 1: 3rqvk9Ly9Ero57NmYxKaPl0vDoA.roa (hash: M8FySyxOTMDlpGnQamTf4gMdwU/cr4xnBa652N0ZBzE=) 2: 5jqEFe0JTAATamiojNWUeDIShXo.roa (hash: AtMeDfc1SVlh3370ApzMA53K6lkC9wmbLdKrheqVybg=) 3: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (hash: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=) 4: gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa (hash: 51uE4SN0evdj/LX3c8iK4ExCQ5J9huvoiaIN23Ew9+Y=) 5: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: D0l//QZo+7j0PCxhvHxijEMcVHuKxHP+fgkeIyTwQwg=) 6: pjHhxvfzqbl1t_jh_zgtAOtXGCI.roa (hash: J2AB7iNkE74xp/danYqI2bqPyjgASaXExqMW9bFv38g=) 7: xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa (hash: 0Rp0DNxPTLSllsBa+ggz8MQkfDKWpPp0o5l05ctu118=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:a7:d8:60:3e:a0:a1:22:8b:68:a5:79:36:a5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Dec 15 12:01:00 2025 GMT Not After : Dec 16 12:01:00 2025 GMT Subject: CN=38ecc5c409e4ec0ac34f694e79697e17ecdb82da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:f9:5f:5a:88:41:c2:00:e6:ea:1e:13:a9: 20:a1:9f:a7:73:0f:f7:a3:16:8a:bd:fa:5f:2a:e6: f1:33:e6:03:d2:6f:c0:74:e6:77:8a:84:0d:c7:17: ac:17:d2:dd:53:6d:56:bc:c9:d1:ef:1a:cf:ed:d5: 0b:7e:86:0b:3a:72:4f:15:13:b3:98:8b:1d:88:22: 3f:75:0c:d8:04:90:a1:89:dc:44:e1:bf:1e:87:fb: 7a:8e:c6:78:52:5f:b1:05:35:73:74:9e:65:61:e5: c9:b3:9e:1b:13:e9:c6:bf:1f:4e:eb:27:9d:88:30: 1c:fd:d1:2e:6e:04:e3:c9:bc:d1:d7:39:b7:df:51: 76:82:8b:7f:99:34:61:de:aa:3e:be:45:f4:2e:7e: e4:5a:d8:a5:c2:87:b8:13:79:6b:da:68:72:24:8c: b6:c5:4a:b9:76:ec:af:83:a8:ce:16:b0:1b:13:b0: f3:04:66:a8:03:b8:ef:04:22:2e:50:cf:51:2b:6d: 22:46:aa:f6:b9:c3:33:2f:c7:50:a1:34:65:9d:d1: d5:cd:8c:8c:31:64:3b:06:02:a4:e8:d6:45:e0:d0: af:00:8c:c1:7a:28:87:74:f7:ff:2c:3a:ec:33:20: bd:02:7e:60:a4:b6:c9:f0:74:b4:07:68:25:c4:fd: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EC:C5:C4:09:E4:EC:0A:C3:4F:69:4E:79:69:7E:17:EC:DB:82:DA X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b1:26:df:c4:6b:a2:0d:49:c0:4e:43:70:14:46:cc:84:eb: dc:48:67:1d:72:be:43:e6:b5:de:c7:2d:55:ed:42:be:a1:fd: 39:22:fa:5d:28:1d:11:5e:e9:51:5a:10:dd:35:c3:fc:b4:f5: 44:1b:8c:c7:0f:2b:f0:f6:61:a2:1e:0d:24:02:fd:e9:9e:91: c8:4d:03:75:db:71:0e:e4:52:b5:d9:f6:73:74:e2:22:16:e0: 06:9a:d3:2a:40:d1:37:6c:69:b3:d3:e5:cf:4a:97:6f:30:51: 29:2e:b8:bd:49:67:24:38:6a:7a:70:0e:46:88:75:2e:ea:d7: 18:21:37:4d:48:34:2a:41:9c:f6:e8:1a:c7:bc:07:d6:67:61: a8:93:ea:1a:f8:38:72:92:d4:ea:10:93:7d:37:10:f9:28:02: d4:11:98:4e:ae:f8:b5:7b:8a:ed:c7:c1:f6:a5:42:5f:f2:c3: 00:a8:e9:4d:cd:7c:25:68:7a:68:5b:68:46:3e:56:60:c5:1f: 2e:c0:66:b2:cb:05:0a:19:3c:ef:41:d9:fe:e6:bc:c4:06:3c: b3:b5:93:38:82:d8:f2:ea:4e:7c:5c:83:b2:cb:dd:a5:4c:6d: 97:01:da:33:ef:7f:d8:ef:2b:e8:1f:27:9a:f1:73:1e:6b:da: d6:f9:ed:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4qfYYD6goSKLaKV5NqWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjUxMjE1MTIwMTAwWhcNMjUxMjE2MTIwMTAwWjAzMTEwLwYDVQQD EygzOGVjYzVjNDA5ZTRlYzBhYzM0ZjY5NGU3OTY5N2UxN2VjZGI4MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpn5X1qIQcIA5uoeE6kgoZ+ncw/3 oxaKvfpfKubxM+YD0m/AdOZ3ioQNxxesF9LdU21WvMnR7xrP7dULfoYLOnJPFROz mIsdiCI/dQzYBJChidxE4b8eh/t6jsZ4Ul+xBTVzdJ5lYeXJs54bE+nGvx9O6yed iDAc/dEubgTjybzR1zm331F2got/mTRh3qo+vkX0Ln7kWtilwoe4E3lr2mhyJIy2 xUq5duyvg6jOFrAbE7DzBGaoA7jvBCIuUM9RK20iRqr2ucMzL8dQoTRlndHVzYyM MWQ7BgKk6NZF4NCvAIzBeiiHdPf/LDrsMyC9An5gpLbJ8HS0B2glxP3wRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjsxcQJ5OwKw09pTnlpfhfs24LaMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLEm38Rr og1JwE5DcBRGzITr3EhnHXK+Q+a13sctVe1CvqH9OSL6XSgdEV7pUVoQ3TXD/LT1 RBuMxw8r8PZhoh4NJAL96Z6RyE0DddtxDuRStdn2c3TiIhbgBprTKkDRN2xps9Pl z0qXbzBRKS64vUlnJDhqenAORoh1LurXGCE3TUg0KkGc9ugax7wH1mdhqJPqGvg4 cpLU6hCTfTcQ+SgC1BGYTq74tXuK7cfB9qVCX/LDAKjpTc18JWh6aFtoRj5WYMUf LsBmsssFChk870HZ/ua8xAY8s7WTOILY8upOfFyDssvdpUxtlwHaM+9/2O8r6B8n mvFzHmva1vntzg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:18:33 2025 by rpki-client