This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft File: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json) Hash identifier: 9gIAJ6oWxZK2RM5lGiJ4rJAVe5wZvkcTU8H9RmqwL8A= Subject key identifier: 0D:C6:41:DC:C9:00:8A:35:A9:E5:E6:42:B4:89:F5:5E:0A:58:F7:E5 Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Certificate serial: 019B3CB519F0970AA0B0DA0662458D0C66B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 17:01:00 +0000 Manifest this update: Sat 20 Dec 2025 17:01:00 +0000 Manifest next update: Sun 21 Dec 2025 17:01:00 +0000 Files and hashes: 1: XKepb_otZzL7k3ZMkl3G2IMgCSU.roa (hash: W9mkN91xRU3+fkW8j4EQwJJwcHraAc/r3I+DAJzdLtk=) 2: djrv_KaGCDUK_H0rgzzTkvu3xjk.roa (hash: Q78jKZVQp91Q5Wd8YBTF+3592+S1nmxVdme1CKTgnIM=) 3: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (hash: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=) 4: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (hash: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=) 5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: kjhQmhLb4klI7cMItfGQOOaB3mhvO+SpUSjqnK+TMUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:19:f0:97:0a:a0:b0:da:06:62:45:8d:0c:66:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Validity Not Before: Dec 20 17:01:00 2025 GMT Not After : Dec 21 17:01:00 2025 GMT Subject: CN=0dc641dcc9008a35a9e5e642b489f55e0a58f7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:f8:ce:fc:74:4e:03:5d:6c:6c:b3:d1:2b: c1:f6:fb:c9:ed:5d:e8:ab:26:cd:ad:a6:1b:44:12: e8:3a:a9:ba:72:96:d6:75:10:15:9f:6c:f2:fa:fb: d6:49:07:af:30:62:60:7a:e3:91:68:48:9f:47:0e: 3a:7a:b4:cc:e3:59:39:7c:82:cc:ec:5c:9d:1b:ea: 11:00:5a:cd:67:29:90:5a:28:50:3e:d3:bd:bf:e8: 5a:7b:42:96:ad:4a:72:73:2c:46:60:9d:e6:0a:f3: 13:59:c2:d8:c9:99:15:45:08:3a:c0:c3:4d:77:75: 9f:cd:96:49:f7:78:27:f4:ae:f7:1c:56:bf:66:c1: 97:74:5e:db:f5:24:5c:8b:31:a6:da:b8:89:69:bc: 35:2b:c7:69:a6:70:2a:76:79:e9:d4:17:2d:ef:33: 13:1f:a2:2b:ac:9f:dc:94:d2:e8:af:96:9e:82:c5: b7:c7:bf:21:df:fe:be:64:fc:27:8f:81:77:a1:ce: b9:15:90:79:cf:87:ad:cb:18:14:72:ab:fc:12:6e: 8a:a2:78:fc:7a:74:10:9e:ac:69:3b:d7:4e:3a:9c: 0c:cd:8b:8c:2a:89:f0:8c:60:85:60:6d:1f:05:bf: 6e:d7:94:ec:c4:ab:24:26:1b:d3:76:1e:8b:df:eb: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:41:DC:C9:00:8A:35:A9:E5:E6:42:B4:89:F5:5E:0A:58:F7:E5 X509v3 Authority Key Identifier: keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5e:dd:60:46:6a:f5:70:35:29:8d:e0:a7:f7:e1:f3:d8:f4: 3e:d1:84:a9:61:e4:1d:2c:f8:31:85:9d:4c:64:d5:25:97:58: 87:3b:77:97:20:6a:ff:ed:6d:cf:ef:49:1a:af:34:59:b1:92: 5c:58:be:3b:02:82:f7:40:87:42:a8:d9:9a:f7:d3:4d:8e:19: e6:17:17:e8:0d:21:5b:af:c8:d6:46:a2:5a:30:03:63:72:c9: 1e:26:ea:6b:2e:78:da:56:d4:ae:59:65:8e:44:17:17:85:28: cf:47:75:9d:1f:8b:af:06:18:56:8d:a3:06:f3:47:26:fd:a7: 3d:21:86:b6:e8:75:fb:b2:01:8a:ef:eb:ab:00:0b:fb:79:f8: d3:f2:0c:84:ce:5d:63:13:ec:a1:57:46:fb:9f:c1:b4:cf:4f: 7a:7c:bb:d4:59:e9:e3:6c:ed:1d:b9:9b:0d:d3:77:6e:72:c1: 70:15:f8:3d:ed:1e:6c:34:be:70:c4:cd:1c:d8:d2:1d:4c:ec: ff:90:20:24:d3:ae:b9:f6:7a:40:00:69:15:1c:5f:d6:f5:d2: 03:e5:dd:09:1b:c4:16:b6:3a:ae:c1:f5:b3:8b:e0:ab:c9:52: f0:b6:60:71:ee:33:10:e6:14:b0:be:58:6b:bc:25:04:b8:3f: 46:af:ca:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRnwlwqgsNoGYkWNDGa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWIyM2UyYzVkOWYyYzczNDQ4ODkwNDUwNTgzNWVmMjgw OWZiM2IwHhcNMjUxMjIwMTcwMTAwWhcNMjUxMjIxMTcwMTAwWjAzMTEwLwYDVQQD EygwZGM2NDFkY2M5MDA4YTM1YTllNWU2NDJiNDg5ZjU1ZTBhNThmN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttP4zvx0TgNdbGyz0SvB9vvJ7V3o qybNraYbRBLoOqm6cpbWdRAVn2zy+vvWSQevMGJgeuORaEifRw46erTM41k5fILM 7FydG+oRAFrNZymQWihQPtO9v+hae0KWrUpycyxGYJ3mCvMTWcLYyZkVRQg6wMNN d3WfzZZJ93gn9K73HFa/ZsGXdF7b9SRcizGm2riJabw1K8dppnAqdnnp1Bct7zMT H6IrrJ/clNLor5aegsW3x78h3/6+ZPwnj4F3oc65FZB5z4etyxgUcqv8Em6Konj8 enQQnqxpO9dOOpwMzYuMKonwjGCFYG0fBb9u15TsxKskJhvTdh6L3+ucowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3GQdzJAIo1qeXmQrSJ9V4KWPflMB8GA1UdIwQY MBaAFIzrI+LF2fLHNEiJBFBYNe8oCfs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODIt ODMzNGUzNjIyMzZkLzEvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODItODMzNGUzNjIyMzZk LzEvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVl7dYEZq 9XA1KY3gp/fh89j0PtGEqWHkHSz4MYWdTGTVJZdYhzt3lyBq/+1tz+9JGq80WbGS XFi+OwKC90CHQqjZmvfTTY4Z5hcX6A0hW6/I1kaiWjADY3LJHibqay542lbUrlll jkQXF4Uoz0d1nR+LrwYYVo2jBvNHJv2nPSGGtuh1+7IBiu/rqwAL+3n40/IMhM5d YxPsoVdG+5/BtM9Peny71Fnp42ztHbmbDdN3bnLBcBX4Pe0ebDS+cMTNHNjSHUzs /5AgJNOuufZ6QABpFRxf1vXSA+XdCRvEFrY6rsH1s4vgq8lS8LZgce4zEOYUsL5Y a7wlBLg/Rq/KeQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:09 2025 by rpki-client