This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft File: j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json) Hash identifier: HJrks+1lP1U1kjTbhzJuW6lfz8GFs6BreYx0wZK5Iec= Subject key identifier: 23:B9:9D:EF:4A:F8:FD:6A:B0:A8:A3:E9:24:41:27:A0:FE:8A:F5:E4 Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070 Certificate serial: 019B3758435868ABD2421E61891D553914EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft Manifest number: 170D Signing time: Fri 19 Dec 2025 16:01:29 +0000 Manifest this update: Fri 19 Dec 2025 16:01:29 +0000 Manifest next update: Sat 20 Dec 2025 16:01:29 +0000 Files and hashes: 1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=) 2: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (hash: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=) 3: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: AaFHRUfQpJcimT8jTuFwsouRayQQx9mcvYsICR4W6wc=) 4: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=) 5: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:43:58:68:ab:d2:42:1e:61:89:1d:55:39:14:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070 Validity Not Before: Dec 19 16:01:29 2025 GMT Not After : Dec 20 16:01:29 2025 GMT Subject: CN=23b99def4af8fd6ab0a8a3e9244127a0fe8af5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:fc:26:1d:52:57:17:67:d5:83:42:ad:34: 6f:49:02:0b:e9:87:b4:41:e5:70:82:67:ce:3c:19: a6:93:a1:50:81:6e:cf:53:3d:fc:8b:7d:ef:6a:30: 72:41:15:8c:ce:14:18:98:e1:fd:8f:97:2f:25:10: 55:ab:40:ee:87:87:7a:4b:df:8a:e5:84:53:5c:cc: db:aa:24:05:2f:0b:cd:57:a5:03:0a:2f:df:8e:7f: 1b:87:95:5a:f1:ae:3d:cd:3d:90:0d:2d:8c:a3:7b: f5:d0:94:a9:6d:26:f8:8f:14:87:54:8d:7c:27:74: 26:0c:d8:11:cc:f5:9a:80:78:9f:64:18:5f:c5:19: d7:65:86:04:8a:1c:d4:7d:18:02:d9:e9:e0:c2:4b: 03:88:eb:03:65:62:4b:fe:2a:1c:8f:c7:d9:09:ac: 73:51:13:ca:4a:ab:01:aa:81:31:c9:d1:74:39:0d: c0:3f:2a:7d:fd:7f:3e:4b:01:c5:87:34:29:87:b9: 0f:2e:93:2c:03:3c:9f:5b:cc:36:cf:61:a1:cd:1f: 85:ce:59:e3:9d:3d:f7:5d:79:b1:58:36:95:af:be: c6:90:a3:c8:d6:67:59:ad:85:c9:4f:bb:81:3b:4b: 25:04:92:cb:f4:79:6a:f4:7a:b7:b3:49:12:d0:23: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B9:9D:EF:4A:F8:FD:6A:B0:A8:A3:E9:24:41:27:A0:FE:8A:F5:E4 X509v3 Authority Key Identifier: keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fb:63:2b:10:aa:28:23:ad:04:a8:2b:84:99:53:83:bd:e5: 31:4b:a6:78:d2:6e:67:fc:07:d3:bd:34:36:06:1c:e2:bb:de: 9d:51:86:3b:0f:ac:77:50:89:bb:20:6b:63:5b:71:03:9b:a0: 3a:b9:ca:c0:7c:15:7e:36:7d:6d:5f:a5:ec:8d:78:df:5f:f6: b2:7e:87:8a:22:9c:da:9e:14:a6:ce:20:79:86:3f:da:05:2c: 1f:2c:1e:28:51:6b:a3:c6:dc:0f:db:da:eb:1c:62:64:5d:21: dd:53:46:a3:7d:7d:3f:64:c4:32:9e:08:63:13:56:6b:50:4c: 7c:7d:9b:3f:51:6f:68:fe:0d:22:ce:01:dc:4d:f0:9a:fc:30: 38:10:90:e4:77:72:7e:36:4b:40:f2:09:0e:e6:fc:5a:27:2a: a6:f3:33:f9:53:0e:6f:5e:d3:3d:73:c3:b9:70:3b:64:e7:4c: f3:58:8d:10:97:20:33:a6:16:9f:e1:22:fa:03:de:71:93:1f: e8:9d:6d:93:d4:92:7e:73:6f:4c:8b:81:00:03:ae:a7:26:0e: 0c:d9:56:d7:8f:b3:26:d7:cd:5f:34:83:db:d9:38:f3:00:50: a8:e9:59:42:8f:fc:4b:7a:b2:c1:1e:f7:0f:b4:28:b1:5c:c6: 1c:60:0d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WENYaKvSQh5hiR1VORTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4 MmEwNzAwHhcNMjUxMjE5MTYwMTI5WhcNMjUxMjIwMTYwMTI5WjAzMTEwLwYDVQQD EygyM2I5OWRlZjRhZjhmZDZhYjBhOGEzZTkyNDQxMjdhMGZlOGFmNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoub8Jh1SVxdn1YNCrTRvSQIL6Ye0 QeVwgmfOPBmmk6FQgW7PUz38i33vajByQRWMzhQYmOH9j5cvJRBVq0Duh4d6S9+K 5YRTXMzbqiQFLwvNV6UDCi/fjn8bh5Va8a49zT2QDS2Mo3v10JSpbSb4jxSHVI18 J3QmDNgRzPWagHifZBhfxRnXZYYEihzUfRgC2engwksDiOsDZWJL/iocj8fZCaxz URPKSqsBqoExydF0OQ3APyp9/X8+SwHFhzQph7kPLpMsAzyfW8w2z2GhzR+Fzlnj nT33XXmxWDaVr77GkKPI1mdZrYXJT7uBO0slBJLL9Hlq9Hq3s0kS0CM3zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO5ne9K+P1qsKij6SRBJ6D+ivXkMB8GA1UdIwQY MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt ZDlhNTM5YjhiN2FkLzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPtjKxCq KCOtBKgrhJlTg73lMUumeNJuZ/wH0700NgYc4rvenVGGOw+sd1CJuyBrY1txA5ug OrnKwHwVfjZ9bV+l7I1431/2sn6HiiKc2p4Ups4geYY/2gUsHyweKFFro8bcD9va 6xxiZF0h3VNGo319P2TEMp4IYxNWa1BMfH2bP1FvaP4NIs4B3E3wmvwwOBCQ5Hdy fjZLQPIJDub8WicqpvMz+VMOb17TPXPDuXA7ZOdM81iNEJcgM6YWn+Ei+gPecZMf 6J1tk9SSfnNvTIuBAAOupyYODNlW14+zJtfNXzSD29k48wBQqOlZQo/8S3qywR73 D7QosVzGHGAN6w== -----END CERTIFICATE-----Generated at Sat Dec 20 00:46:01 2025 by rpki-client