This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft File: j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json) Hash identifier: iUcAJk4iFMEFD8IgsVpMCVQpDquZ5/wXm+5DV2YWNb8= Subject key identifier: A6:F0:89:7D:77:3B:25:A0:BA:20:C1:97:C7:D8:0C:12:11:A7:FA:37 Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08 Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08 Certificate serial: 019B59ACAE648066EAD7DD09BB8AACDD102F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft Manifest number: 1226 Signing time: Fri 26 Dec 2025 08:00:47 +0000 Manifest this update: Fri 26 Dec 2025 08:00:47 +0000 Manifest next update: Sat 27 Dec 2025 08:00:47 +0000 Files and hashes: 1: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: aIw+EjqeLesZEBtERBk/DISeqdJRrVHgkmYwR3ntiGo=) 2: pqaKQ_TLLBYikhcnNcdXTfV_Qqg.roa (hash: hN1kuDdul6eCFSiEm2Z9+yxnk4jIcJ1yoCv4DPl4iuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:ae:64:80:66:ea:d7:dd:09:bb:8a:ac:dd:10:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08 Validity Not Before: Dec 26 08:00:47 2025 GMT Not After : Dec 27 08:00:47 2025 GMT Subject: CN=a6f0897d773b25a0ba20c197c7d80c1211a7fa37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:56:20:b8:c5:63:a1:b0:60:a3:0d:7b:48:35: 0e:e1:db:ba:7d:0e:c2:2c:c5:11:ff:e6:4b:ae:0c: 64:ec:7e:3f:85:c4:1b:96:9d:1c:e3:3a:5a:df:a6: a7:d2:7e:5b:2a:c6:8d:19:aa:9a:0a:a3:bf:b9:96: 37:5e:61:6d:22:9b:16:08:fb:38:9d:f2:67:7b:2f: c7:cf:1d:eb:f4:42:4f:ce:8a:26:05:ce:83:3d:6e: 66:e8:cb:08:19:56:c9:18:ca:42:d1:23:18:1d:22: 41:1d:32:6d:45:e7:ed:26:3d:1e:52:93:e0:62:fd: 92:1f:47:0d:0a:01:9c:01:e1:d1:23:75:03:a9:e8: 7b:89:89:0d:7b:0b:6c:a0:cf:90:f8:b5:a2:7b:96: c3:fc:2e:e0:d6:18:0f:9f:94:f8:45:f2:b6:ce:d0: 15:d4:81:c9:38:dd:a1:9f:ce:6b:b0:c0:5e:4c:1b: c1:25:53:ca:dc:35:b7:b7:0b:87:45:4c:e9:20:a0: e7:92:7c:2b:b1:37:b2:0f:6f:96:f4:7a:f0:8e:5f: bb:25:a7:34:e7:48:f4:63:a2:38:7a:d0:48:2e:ff: 04:d5:41:c8:91:79:d2:95:a0:b4:91:14:93:98:f1: f7:68:7e:39:79:b0:80:c2:5a:38:d8:4a:77:a7:cc: c1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F0:89:7D:77:3B:25:A0:BA:20:C1:97:C7:D8:0C:12:11:A7:FA:37 X509v3 Authority Key Identifier: keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:89:e4:39:78:6d:a2:c4:6f:db:75:ed:59:a2:6a:60:5b:93: c8:fa:46:0a:5e:07:cd:85:34:67:08:18:cb:70:e5:3a:27:5d: 85:0a:b1:eb:f8:5b:b5:34:8f:b7:6f:ba:7f:1f:a6:90:d0:b9: 8e:df:40:30:0f:b2:41:cc:7a:9f:ec:cb:8b:5a:db:bc:20:24: 99:0b:c9:e1:80:c9:f8:41:6d:68:9a:a0:52:bd:04:53:51:0a: 26:cf:ab:fb:ee:25:59:fb:9d:87:27:85:1c:96:d4:63:53:87: ad:b0:14:f4:ee:db:c6:cf:53:36:2b:7a:42:8b:e2:08:5d:61: 5d:9d:56:50:3b:17:f4:97:9c:ea:9b:8e:55:ca:12:73:88:34: 17:c7:af:e8:b4:54:94:62:2a:40:fe:8c:31:56:cf:ce:80:56: a3:dd:91:a6:6e:72:dc:3e:4c:d3:8e:77:61:7e:c1:1f:85:85: 42:71:3e:a7:e8:fa:ac:2b:12:c7:aa:ad:9a:e8:32:9b:29:29: 93:40:75:02:80:b6:fe:ce:a5:1b:ad:a0:42:93:6d:b1:d1:19: c9:57:5c:ee:23:b7:c1:e1:84:cd:2c:5a:61:27:25:ae:4b:61: a6:fe:81:3f:66:01:e0:b1:28:3b:4e:78:16:85:1a:ac:4d:1e: 33:8a:69:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrK5kgGbq190Ju4qs3RAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTlhZWI0MjZjMjhhMzQ4MDg3NzZmOTU2ODkzNWQzYjll YzllMDgwHhcNMjUxMjI2MDgwMDQ3WhcNMjUxMjI3MDgwMDQ3WjAzMTEwLwYDVQQD EyhhNmYwODk3ZDc3M2IyNWEwYmEyMGMxOTdjN2Q4MGMxMjExYTdmYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lYguMVjobBgow17SDUO4du6fQ7C LMUR/+ZLrgxk7H4/hcQblp0c4zpa36an0n5bKsaNGaqaCqO/uZY3XmFtIpsWCPs4 nfJney/Hzx3r9EJPzoomBc6DPW5m6MsIGVbJGMpC0SMYHSJBHTJtReftJj0eUpPg Yv2SH0cNCgGcAeHRI3UDqeh7iYkNewtsoM+Q+LWie5bD/C7g1hgPn5T4RfK2ztAV 1IHJON2hn85rsMBeTBvBJVPK3DW3twuHRUzpIKDnknwrsTeyD2+W9Hrwjl+7Jac0 50j0Y6I4etBILv8E1UHIkXnSlaC0kRSTmPH3aH45ebCAwlo42Ep3p8zBhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbwiX13OyWguiDBl8fYDBIRp/o3MB8GA1UdIwQY MBaAFI+prrQmwoo0gId2+VaJNdO57J4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYt MzU5Zjc5MzYxZTk5LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYtMzU5Zjc5MzYxZTk5 LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANonkOXht osRv23XtWaJqYFuTyPpGCl4HzYU0ZwgYy3DlOiddhQqx6/hbtTSPt2+6fx+mkNC5 jt9AMA+yQcx6n+zLi1rbvCAkmQvJ4YDJ+EFtaJqgUr0EU1EKJs+r++4lWfudhyeF HJbUY1OHrbAU9O7bxs9TNit6QoviCF1hXZ1WUDsX9Jec6puOVcoSc4g0F8ev6LRU lGIqQP6MMVbPzoBWo92Rpm5y3D5M0453YX7BH4WFQnE+p+j6rCsSx6qtmugymykp k0B1AoC2/s6lG62gQpNtsdEZyVdc7iO3weGEzSxaYSclrkthpv6BP2YB4LEoO054 FoUarE0eM4pp5Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:05 2025 by rpki-client