This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft File: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json) Hash identifier: UZbZOoRfuOafq/8BiFSQksQeTltXR7r5s41jNYbrkac= Subject key identifier: 0B:9C:69:E8:15:39:EC:44:4B:FD:E5:02:61:48:0A:53:6E:5B:58:AF Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Certificate serial: 019B65434CC4A7F085ECE853D4BFFCFB8EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft Manifest number: 17A4 Signing time: Sun 28 Dec 2025 14:01:07 +0000 Manifest this update: Sun 28 Dec 2025 14:01:07 +0000 Manifest next update: Mon 29 Dec 2025 14:01:07 +0000 Files and hashes: 1: XKepb_otZzL7k3ZMkl3G2IMgCSU.roa (hash: W9mkN91xRU3+fkW8j4EQwJJwcHraAc/r3I+DAJzdLtk=) 2: djrv_KaGCDUK_H0rgzzTkvu3xjk.roa (hash: Q78jKZVQp91Q5Wd8YBTF+3592+S1nmxVdme1CKTgnIM=) 3: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (hash: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=) 4: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (hash: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=) 5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: O0JVg41Xt1nUWUmaYrPK7mXLOT62j40M/1tKOXfrXcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:43:4c:c4:a7:f0:85:ec:e8:53:d4:bf:fc:fb:8e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Validity Not Before: Dec 28 14:01:07 2025 GMT Not After : Dec 29 14:01:07 2025 GMT Subject: CN=0b9c69e81539ec444bfde50261480a536e5b58af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:11:7f:a3:9f:ab:d2:8b:e8:aa:9f:d7:83: 9d:20:82:7f:14:0f:70:79:2c:bb:fc:85:4b:02:e4: ea:cf:5e:51:61:43:a6:8e:8f:9b:34:d1:dc:cd:9b: cd:70:0e:45:36:63:ab:72:91:9b:e9:b0:63:f4:2a: f8:40:8b:7a:c8:ff:0d:41:70:c9:99:67:98:af:47: 37:50:27:cb:1c:ce:80:f8:b1:87:35:62:b3:65:3b: 9d:83:87:60:7d:cf:68:06:e2:e7:d4:0a:9c:ee:ac: e8:d9:fd:05:aa:1f:4e:13:ea:99:dd:2a:16:8a:9c: 83:9a:1d:9e:4c:30:e5:4b:09:e3:b2:16:18:f8:01: 8c:39:15:1f:5a:a0:ed:70:3b:43:02:07:a9:a1:6b: 96:c3:b9:56:76:ae:a7:0d:41:82:0c:64:f6:27:f4: c1:47:bb:53:93:8e:aa:d3:f3:d2:bd:36:8b:04:cd: 96:3c:93:58:7e:a7:63:7d:89:3e:1d:e4:8e:2b:c8: db:4e:b9:b6:2b:37:17:8b:eb:55:59:9f:bd:de:69: ec:00:1e:20:f3:47:7e:da:28:1f:2b:5b:c0:01:17: a3:18:b1:ca:c6:29:65:ec:fa:7d:60:0f:63:0d:5b: ec:9e:f2:a1:c3:ec:e0:98:7c:b7:4a:34:33:87:be: dc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9C:69:E8:15:39:EC:44:4B:FD:E5:02:61:48:0A:53:6E:5B:58:AF X509v3 Authority Key Identifier: keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9a:34:7b:ef:51:35:a5:76:19:3f:f8:d3:be:3c:81:f1:27: f8:6d:1b:75:48:2f:ae:3b:f7:50:cf:4c:63:61:e7:a9:5d:6b: 41:41:6e:08:fd:40:71:47:4a:d5:f9:36:04:5f:6e:30:25:48: 4e:ac:4e:13:83:5d:13:9b:14:d9:9e:50:02:7d:29:ca:6a:27: 4f:5a:23:9a:ee:a2:d5:8a:fd:b1:d8:2a:1f:ab:c7:b2:96:4e: f7:aa:99:65:75:1e:82:f9:ec:09:b1:fd:80:36:c8:9b:b9:4b: 55:af:17:9f:04:4f:e1:64:04:c1:58:43:c4:79:58:9c:74:a2: 83:f2:2b:01:d9:ce:4e:1c:83:56:63:72:35:b0:aa:47:26:53: fa:8a:d0:fd:17:4b:0b:43:a6:d6:8c:5b:d2:89:85:19:4d:6c: 89:99:3e:48:3a:89:dc:31:c3:0d:4a:ee:c6:b7:88:f9:ed:e6: c5:9f:04:1b:3d:46:44:01:61:d6:dd:e8:0d:b3:d4:0a:58:0a: 10:dd:60:f0:76:58:a6:bc:d4:87:d7:8f:e6:2f:82:40:1d:60: ee:22:33:f1:c8:e9:15:95:24:5a:12:c1:c1:c2:d2:b0:30:8b: 04:07:12:4d:62:67:8a:81:a9:d5:63:9b:43:9a:ee:11:01:93: 01:9f:59:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQ0zEp/CF7OhT1L/8+47hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWIyM2UyYzVkOWYyYzczNDQ4ODkwNDUwNTgzNWVmMjgw OWZiM2IwHhcNMjUxMjI4MTQwMTA3WhcNMjUxMjI5MTQwMTA3WjAzMTEwLwYDVQQD EygwYjljNjllODE1MzllYzQ0NGJmZGU1MDI2MTQ4MGE1MzZlNWI1OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iURf6Ofq9KL6Kqf14OdIIJ/FA9w eSy7/IVLAuTqz15RYUOmjo+bNNHczZvNcA5FNmOrcpGb6bBj9Cr4QIt6yP8NQXDJ mWeYr0c3UCfLHM6A+LGHNWKzZTudg4dgfc9oBuLn1Aqc7qzo2f0Fqh9OE+qZ3SoW ipyDmh2eTDDlSwnjshYY+AGMORUfWqDtcDtDAgepoWuWw7lWdq6nDUGCDGT2J/TB R7tTk46q0/PSvTaLBM2WPJNYfqdjfYk+HeSOK8jbTrm2KzcXi+tVWZ+93mnsAB4g 80d+2igfK1vAARejGLHKxill7Pp9YA9jDVvsnvKhw+zgmHy3SjQzh77chQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAucaegVOexES/3lAmFIClNuW1ivMB8GA1UdIwQY MBaAFIzrI+LF2fLHNEiJBFBYNe8oCfs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODIt ODMzNGUzNjIyMzZkLzEvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODItODMzNGUzNjIyMzZk LzEvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepo0e+9R NaV2GT/40748gfEn+G0bdUgvrjv3UM9MY2HnqV1rQUFuCP1AcUdK1fk2BF9uMCVI TqxOE4NdE5sU2Z5QAn0pymonT1ojmu6i1Yr9sdgqH6vHspZO96qZZXUegvnsCbH9 gDbIm7lLVa8XnwRP4WQEwVhDxHlYnHSig/IrAdnOThyDVmNyNbCqRyZT+orQ/RdL C0Om1oxb0omFGU1siZk+SDqJ3DHDDUruxreI+e3mxZ8EGz1GRAFh1t3oDbPUClgK EN1g8HZYprzUh9eP5i+CQB1g7iIz8cjpFZUkWhLBwcLSsDCLBAcSTWJnioGp1WOb Q5ruEQGTAZ9ZOA== -----END CERTIFICATE-----Generated at Sun Dec 28 20:31:49 2025 by rpki-client