This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json) Hash identifier: 0mz3qbGi6uGdKbAdaZTjpK1A//8gTe0BXVDNvDqX6/0= Subject key identifier: 8D:87:F0:1A:28:1F:19:0D:A7:9A:08:D7:6D:A3:16:68:DF:F0:47:58 Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019B53AC479135CC84B87D76961A71015D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 04:02:37 +0000 Manifest this update: Thu 25 Dec 2025 04:02:37 +0000 Manifest next update: Fri 26 Dec 2025 04:02:37 +0000 Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=) 2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=) 3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: gfEPzKhGjBZA6lUbt69eN6+IG85FNvN2WhLKlxjI8x8=) 4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:47:91:35:cc:84:b8:7d:76:96:1a:71:01:5d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Dec 25 04:02:37 2025 GMT Not After : Dec 26 04:02:37 2025 GMT Subject: CN=8d87f01a281f190da79a08d76da31668dff04758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:9e:cc:20:0d:57:c5:b6:64:66:be:c9:74: 25:e6:fc:62:73:4d:f1:f7:52:f0:02:0d:2c:5b:75: 33:ce:0f:40:8c:01:89:db:f3:8d:1a:01:9e:49:88: f2:d7:06:28:63:9d:7b:82:44:8a:af:8f:c5:8e:b3: 10:5b:d1:65:a1:7e:c3:65:ae:8f:c4:43:f8:eb:6e: c4:da:41:b8:be:a1:57:71:52:32:2e:bc:12:e4:6f: d4:d5:69:26:91:9c:47:b9:ed:41:26:3b:33:4d:1d: 40:92:24:e9:8b:64:00:35:9a:ad:04:39:14:ac:ba: a5:45:af:4b:16:9c:e3:28:29:6c:fc:18:e0:1e:26: f9:6e:e8:63:c4:28:2b:c8:a7:7e:8e:e7:54:9a:76: 84:d7:3e:09:04:b3:16:df:00:68:be:1d:db:03:fa: 2b:bd:c5:d9:64:35:2b:07:a7:09:b7:df:2a:ac:c9: eb:82:e5:ea:e9:2e:25:3d:d8:10:23:b0:f3:42:5c: 2c:05:54:b7:4f:4a:68:1c:6e:b5:cc:39:57:bc:2e: 14:da:8a:5f:33:e4:52:3d:a4:7d:42:56:da:70:72: 2b:af:68:14:6b:49:ff:f0:d5:1a:2a:53:b2:50:e6: 84:c8:a7:da:85:32:01:f7:7c:7d:8e:b4:5b:15:7f: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:87:F0:1A:28:1F:19:0D:A7:9A:08:D7:6D:A3:16:68:DF:F0:47:58 X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:25:46:18:8e:fd:6c:f6:6b:b9:bc:28:03:34:45:40:4b:44: 14:cc:5d:ad:92:88:1f:b6:fb:82:69:2b:f8:8e:c0:6e:b6:de: 21:d0:43:77:d7:d1:42:9c:23:b9:56:8d:a1:59:4f:8b:45:97: 2e:b2:a6:f5:2e:04:3a:ee:3e:7a:60:fa:f7:8d:b0:1d:45:19: 49:8c:9b:e5:d3:eb:b1:13:b5:bd:bb:6e:e5:a0:e1:57:b8:e2: d1:ea:d2:ba:74:76:27:00:33:44:38:96:f7:97:b3:b7:99:80: 3f:db:a2:15:f5:17:ad:67:59:9c:de:cf:02:e8:6c:c6:75:6e: d1:44:47:4e:30:4f:f3:ee:93:1e:fc:d6:a1:0a:96:67:b5:9d: c0:13:71:d3:72:3b:d0:dd:f4:a6:4f:99:59:75:0a:76:7b:bb: 99:cc:a5:09:ca:1e:fc:a6:50:49:87:a6:e5:4b:ce:50:2f:15: 70:6c:32:65:15:8d:c3:18:3a:39:d2:57:d4:a1:0e:af:27:6b: f5:67:ab:70:d8:6b:02:a6:5b:5c:4a:a5:1b:1e:81:92:84:80: 45:24:81:2d:bb:06:47:e9:69:5e:ab:f0:e3:35:1c:2f:5b:46: 9d:44:88:9d:64:a2:7c:8c:ff:6e:87:61:b0:5a:09:d8:c7:9c: f0:d3:4a:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrEeRNcyEuH12lhpxAV0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjUxMjI1MDQwMjM3WhcNMjUxMjI2MDQwMjM3WjAzMTEwLwYDVQQD Eyg4ZDg3ZjAxYTI4MWYxOTBkYTc5YTA4ZDc2ZGEzMTY2OGRmZjA0NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOmezCANV8W2ZGa+yXQl5vxic03x 91LwAg0sW3Uzzg9AjAGJ2/ONGgGeSYjy1wYoY517gkSKr4/FjrMQW9FloX7DZa6P xEP4627E2kG4vqFXcVIyLrwS5G/U1WkmkZxHue1BJjszTR1AkiTpi2QANZqtBDkU rLqlRa9LFpzjKCls/BjgHib5buhjxCgryKd+judUmnaE1z4JBLMW3wBovh3bA/or vcXZZDUrB6cJt98qrMnrguXq6S4lPdgQI7DzQlwsBVS3T0poHG61zDlXvC4U2opf M+RSPaR9QlbacHIrr2gUa0n/8NUaKlOyUOaEyKfahTIB93x9jrRbFX9PNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2H8BooHxkNp5oI122jFmjf8EdYMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCVGGI79 bPZrubwoAzRFQEtEFMxdrZKIH7b7gmkr+I7AbrbeIdBDd9fRQpwjuVaNoVlPi0WX LrKm9S4EOu4+emD6942wHUUZSYyb5dPrsRO1vbtu5aDhV7ji0erSunR2JwAzRDiW 95ezt5mAP9uiFfUXrWdZnN7PAuhsxnVu0URHTjBP8+6THvzWoQqWZ7WdwBNx03I7 0N30pk+ZWXUKdnu7mcylCcoe/KZQSYem5UvOUC8VcGwyZRWNwxg6OdJX1KEOrydr 9WercNhrAqZbXEqlGx6BkoSARSSBLbsGR+lpXqvw4zUcL1tGnUSInWSifIz/bodh sFoJ2Mec8NNK4A== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:21 2025 by rpki-client