This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft File: j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json) Hash identifier: jyqMCaPzq8Gt4aPhBLCA8lkDQpr4g7jm/szhwMTkaTo= Subject key identifier: 70:CD:2E:23:9A:BE:7E:09:F2:5D:AF:7B:C1:03:EF:E5:68:76:E2:F0 Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070 Certificate serial: 019B4E84F15BAAAE7541CE0E90005C855351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft Manifest number: 1719 Signing time: Wed 24 Dec 2025 04:01:33 +0000 Manifest this update: Wed 24 Dec 2025 04:01:33 +0000 Manifest next update: Thu 25 Dec 2025 04:01:33 +0000 Files and hashes: 1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=) 2: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (hash: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=) 3: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: kQOTwlvIJWQ4ahwRo3cK5oyCIfiGeoOvOZIb2qIlXuU=) 4: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=) 5: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:f1:5b:aa:ae:75:41:ce:0e:90:00:5c:85:53:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070 Validity Not Before: Dec 24 04:01:33 2025 GMT Not After : Dec 25 04:01:33 2025 GMT Subject: CN=70cd2e239abe7e09f25daf7bc103efe56876e2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:06:d8:d3:83:c3:b5:64:f9:c4:c9:29:ae: f1:c9:fd:dd:7e:29:6e:f4:db:c8:6f:e4:09:f9:8e: 13:9c:aa:38:83:ce:f9:5c:6e:f5:f1:28:d5:fd:44: ec:b4:e3:fe:30:f7:62:6f:b8:a1:7a:f9:7d:03:a2: 8a:43:fa:9e:22:64:d4:53:fc:04:69:e2:6c:65:f9: d4:24:58:48:7c:2b:26:aa:7a:82:8e:35:ab:af:bb: ce:2c:4a:0b:c1:3b:55:a4:f0:f9:62:d3:42:9d:8b: be:cb:79:3e:28:88:fb:c4:07:fb:cd:a6:2a:35:d2: 8e:33:ba:a7:b5:fd:df:69:fe:e4:3e:bc:d2:8d:8d: 66:87:db:02:9f:1e:7e:c6:04:dd:33:a8:78:4c:e8: a0:f4:1f:f9:15:a7:4c:b1:95:96:1d:7b:97:1d:a1: 9a:c7:ae:51:7c:79:8b:3e:97:85:27:60:27:59:89: e3:0a:2c:82:d9:4d:ea:00:84:13:45:42:a2:53:14: d3:7c:df:bc:f2:a8:83:e9:d4:a0:a3:8e:38:d6:06: 0d:f1:bd:87:18:cb:66:db:fa:15:81:83:e9:dd:e9: f1:a4:f7:dc:50:cd:00:5e:5f:c9:08:7c:8d:d0:06: 1d:b7:be:5b:e6:10:71:09:62:00:3d:0e:62:ec:4c: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CD:2E:23:9A:BE:7E:09:F2:5D:AF:7B:C1:03:EF:E5:68:76:E2:F0 X509v3 Authority Key Identifier: keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:72:0b:41:91:28:64:dc:98:71:04:53:79:ed:c6:c7:a3:c3: 3e:02:89:b5:68:2b:09:27:89:f8:ba:14:c6:a0:d3:42:c8:6d: 0f:3a:5e:ec:af:58:90:ae:ee:79:9c:55:1b:22:64:5d:95:72: 48:75:dd:3f:42:44:be:c2:dd:ae:ed:d5:96:4a:75:32:24:42: 39:05:a8:91:12:a5:a9:b2:f5:01:2e:dd:c6:56:14:dc:ef:6c: 9c:87:db:6d:91:50:e0:3d:29:9c:4f:3a:08:4b:ac:6c:b6:1b: c5:38:3a:4b:2f:53:01:f9:74:cd:87:0f:70:51:4e:17:3d:8a: f4:51:72:85:05:45:aa:60:fb:ba:b1:8a:15:18:f0:5a:43:ba: de:5e:70:fd:0a:1c:7d:81:bc:56:a4:52:80:45:be:1f:cd:cb: 85:e3:5f:cf:d9:1b:1c:f4:76:a0:1c:9e:2d:b9:01:e7:a1:e7: e5:ee:d1:37:77:81:7f:74:e4:63:23:6c:cd:3f:1e:c4:27:e7: 80:41:5e:0f:12:8f:f8:79:ba:c6:16:6d:39:fb:44:80:64:e1: 74:f5:f5:ec:fc:f0:3f:1b:62:51:cc:3d:34:7f:bd:ce:c8:2e: 1e:76:31:db:34:7c:23:b9:a2:a6:b3:0c:08:50:08:60:4a:16: d4:44:64:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhPFbqq51Qc4OkABchVNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4 MmEwNzAwHhcNMjUxMjI0MDQwMTMzWhcNMjUxMjI1MDQwMTMzWjAzMTEwLwYDVQQD Eyg3MGNkMmUyMzlhYmU3ZTA5ZjI1ZGFmN2JjMTAzZWZlNTY4NzZlMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2gG2NODw7Vk+cTJKa7xyf3dfilu 9NvIb+QJ+Y4TnKo4g875XG718SjV/UTstOP+MPdib7ihevl9A6KKQ/qeImTUU/wE aeJsZfnUJFhIfCsmqnqCjjWrr7vOLEoLwTtVpPD5YtNCnYu+y3k+KIj7xAf7zaYq NdKOM7qntf3faf7kPrzSjY1mh9sCnx5+xgTdM6h4TOig9B/5FadMsZWWHXuXHaGa x65RfHmLPpeFJ2AnWYnjCiyC2U3qAIQTRUKiUxTTfN+88qiD6dSgo4441gYN8b2H GMtm2/oVgYPp3enxpPfcUM0AXl/JCHyN0AYdt75b5hBxCWIAPQ5i7ExoBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDNLiOavn4J8l2ve8ED7+VoduLwMB8GA1UdIwQY MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt ZDlhNTM5YjhiN2FkLzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3ILQZEo ZNyYcQRTee3Gx6PDPgKJtWgrCSeJ+LoUxqDTQshtDzpe7K9YkK7ueZxVGyJkXZVy SHXdP0JEvsLdru3Vlkp1MiRCOQWokRKlqbL1AS7dxlYU3O9snIfbbZFQ4D0pnE86 CEusbLYbxTg6Sy9TAfl0zYcPcFFOFz2K9FFyhQVFqmD7urGKFRjwWkO63l5w/Qoc fYG8VqRSgEW+H83LheNfz9kbHPR2oByeLbkB56Hn5e7RN3eBf3TkYyNszT8exCfn gEFeDxKP+Hm6xhZtOftEgGThdPX17PzwPxtiUcw9NH+9zsguHnYx2zR8I7miprMM CFAIYEoW1ERkPg== -----END CERTIFICATE-----Generated at Wed Dec 24 13:09:43 2025 by rpki-client