This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json) Hash identifier: 9GQGmRvo0nF7enoUP1L/9kWssi/dQByyGPV0NwOoVcs= Subject key identifier: 9B:4D:A2:CF:AA:02:DB:95:72:A9:2F:05:BF:94:94:D4:6C:DF:D5:D5 Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37 Certificate serial: 019B2C2F0433DAD9E9813A5EC6C3313F3DE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft Manifest number: 0468 Signing time: Wed 17 Dec 2025 12:00:37 +0000 Manifest this update: Wed 17 Dec 2025 12:00:37 +0000 Manifest next update: Thu 18 Dec 2025 12:00:37 +0000 Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: qZzwTmHlbe6nsQ+yYfVkq2GBqOHFNm7PaIA6q4aqEOE=) 2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:04:33:da:d9:e9:81:3a:5e:c6:c3:31:3f:3d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37 Validity Not Before: Dec 17 12:00:37 2025 GMT Not After : Dec 18 12:00:37 2025 GMT Subject: CN=9b4da2cfaa02db9572a92f05bf9494d46cdfd5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:69:73:b0:ec:1e:de:3a:24:ec:d0:cb:9e: 18:87:bd:43:77:dc:27:bf:52:5b:ec:2d:9d:22:8f: 19:1c:49:7a:7b:7a:ae:cf:06:e2:57:4a:6d:4c:74: 65:ff:fb:5d:96:de:78:1f:31:6e:6f:7a:6b:b0:09: dc:ac:cf:ad:dc:be:17:8d:e9:57:44:b6:97:42:06: dd:6e:17:ec:c9:36:69:a2:94:1c:95:18:c8:19:bc: d4:3e:6c:99:fc:ad:1c:33:a6:bf:be:a9:25:ef:9c: 58:1e:e4:0f:7e:ef:a1:1c:b5:13:97:9c:68:d4:36: d1:15:6c:17:3d:3b:11:b8:4f:e6:c6:5f:c2:d1:ff: 9f:19:95:2b:54:2c:42:14:e7:5f:94:1e:b0:4e:76: 94:62:52:e1:d2:53:cc:e9:12:5b:7c:81:0b:fc:5b: 52:ec:8d:8a:f0:ac:35:09:6f:5f:58:ac:99:0f:c4: d3:e3:02:1a:5e:71:27:4c:7f:90:68:31:56:92:a6: f9:7b:32:bb:98:bf:1d:da:df:7c:c3:f2:e6:26:be: 38:ac:6c:6e:83:68:3c:71:34:ed:9a:4a:0d:78:26: de:52:15:38:95:94:6c:f9:57:33:65:44:11:a1:93: c6:5a:c9:d1:55:21:ac:7e:f1:bc:72:ef:73:4e:cb: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4D:A2:CF:AA:02:DB:95:72:A9:2F:05:BF:94:94:D4:6C:DF:D5:D5 X509v3 Authority Key Identifier: keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:47:33:2a:cc:73:4f:97:ea:10:0f:53:11:33:ed:64:38:65: 1f:25:dd:24:25:4a:ac:ec:ed:28:f7:af:21:53:c3:44:be:09: 7c:7b:f1:22:a1:27:1c:b9:6a:cb:a9:7f:ea:5b:26:dc:3a:23: 9d:21:38:95:d5:29:09:bf:13:66:8e:4f:8a:25:bc:2a:9d:36: ec:47:18:c7:44:d5:5d:51:7c:0c:7a:9c:bb:87:f4:12:f1:9d: f3:c2:ae:41:05:b3:41:52:2b:0b:c5:0f:63:07:0b:8b:46:e8: d8:ec:f7:fd:94:83:d8:e8:0c:e1:29:b3:b9:cb:59:cd:f8:12: c1:c1:e9:0c:76:04:49:d6:6b:f2:2d:37:e7:36:de:b3:d3:e3: ef:6a:25:4d:47:d9:9c:d8:9e:55:c6:ac:ed:a3:17:54:64:65: fa:f2:92:15:43:78:82:4e:ab:da:da:c1:64:ed:b5:e5:f6:cd: e5:b1:94:b4:ff:4c:2f:8d:aa:c3:79:19:f8:8e:7c:79:f5:fd: 79:1e:7d:55:ee:e6:3d:c3:ee:de:65:c3:c5:5f:fd:a0:25:0d: 6a:cc:2f:f9:f1:33:56:70:a0:ed:03:e4:94:14:6c:ab:0b:01: 13:31:b2:d7:54:68:fe:8e:4a:4d:7f:f7:f3:43:00:1d:9e:27: 1b:07:9e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLwQz2tnpgTpexsMxPz3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTY5MjY1OGFlZjA5M2Q5ZTM2MDMxMzJiOTY1YmYxYmUw NzVkMzcwHhcNMjUxMjE3MTIwMDM3WhcNMjUxMjE4MTIwMDM3WjAzMTEwLwYDVQQD Eyg5YjRkYTJjZmFhMDJkYjk1NzJhOTJmMDViZjk0OTRkNDZjZGZkNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5dpc7DsHt46JOzQy54Yh71Dd9wn v1Jb7C2dIo8ZHEl6e3quzwbiV0ptTHRl//tdlt54HzFub3prsAncrM+t3L4XjelX RLaXQgbdbhfsyTZpopQclRjIGbzUPmyZ/K0cM6a/vqkl75xYHuQPfu+hHLUTl5xo 1DbRFWwXPTsRuE/mxl/C0f+fGZUrVCxCFOdflB6wTnaUYlLh0lPM6RJbfIEL/FtS 7I2K8Kw1CW9fWKyZD8TT4wIaXnEnTH+QaDFWkqb5ezK7mL8d2t98w/LmJr44rGxu g2g8cTTtmkoNeCbeUhU4lZRs+VczZUQRoZPGWsnRVSGsfvG8cu9zTsveLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtNos+qAtuVcqkvBb+UlNRs39XVMB8GA1UdIwQY MBaAFI/mkmWK7wk9njYDEyuWW/G+B103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQt YWVlNTY3MTczNjE1LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQtYWVlNTY3MTczNjE1 LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakczKsxz T5fqEA9TETPtZDhlHyXdJCVKrOztKPevIVPDRL4JfHvxIqEnHLlqy6l/6lsm3Doj nSE4ldUpCb8TZo5PiiW8Kp027EcYx0TVXVF8DHqcu4f0EvGd88KuQQWzQVIrC8UP YwcLi0bo2Oz3/ZSD2OgM4SmzuctZzfgSwcHpDHYESdZr8i035zbes9Pj72olTUfZ nNieVcas7aMXVGRl+vKSFUN4gk6r2trBZO215fbN5bGUtP9ML42qw3kZ+I58efX9 eR59Ve7mPcPu3mXDxV/9oCUNaswv+fEzVnCg7QPklBRsqwsBEzGy11Ro/o5KTX/3 80MAHZ4nGweerg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:27:05 2025 by rpki-client