This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json) Hash identifier: omp/o4Oz4A6Arb+pA9zRwSJmzLd4s7PjZhIcve1JYFQ= Subject key identifier: 8D:F9:68:8F:DC:E6:43:6C:8B:00:BF:30:E9:71:18:F9:5F:F9:3A:41 Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019B3E6D41B5DBA812565ED018D0F50F81B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 01:01:46 +0000 Manifest this update: Sun 21 Dec 2025 01:01:46 +0000 Manifest next update: Mon 22 Dec 2025 01:01:46 +0000 Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=) 2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=) 3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: N3YLJMsz5TAKfyXWVV/TCQXCD/Goxa/shIFddGQH8JQ=) 4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:41:b5:db:a8:12:56:5e:d0:18:d0:f5:0f:81:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Dec 21 01:01:46 2025 GMT Not After : Dec 22 01:01:46 2025 GMT Subject: CN=8df9688fdce6436c8b00bf30e97118f95ff93a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:f9:d1:56:ba:57:59:84:c0:ce:f3:a1:4a: 5a:42:cd:b3:fd:d0:d6:b0:d0:e6:c1:a0:92:1a:bc: d6:4c:5e:53:e5:17:42:17:0f:34:39:55:6c:ff:24: 4a:5d:57:a6:fc:ee:8b:bc:68:70:1c:76:84:96:4f: 8f:c0:d5:28:a3:bf:f4:35:b4:23:bc:cf:b7:32:34: cf:92:eb:70:31:1a:cc:91:c6:56:59:42:bf:db:88: 89:36:0b:28:f1:5a:65:39:a1:fe:0e:27:61:11:89: 7b:a7:cc:08:cf:76:71:ed:d8:56:20:b6:d2:c4:73: 05:da:75:58:5c:90:20:35:a8:bd:62:13:2a:84:8b: 56:b6:54:b5:44:9d:6b:7e:81:31:2e:a1:f8:19:f9: e2:f9:3f:34:f0:a9:0b:e3:b4:9f:f7:20:34:f4:99: 66:c6:93:dd:d6:c9:b2:83:18:74:9c:1f:49:0c:26: 82:17:d7:13:6f:01:36:35:2b:a0:c7:4e:c7:84:0f: f9:0b:56:62:81:c1:54:cb:2e:7e:74:15:17:2f:e0: d6:81:66:88:50:91:2d:34:1b:37:e7:ed:eb:99:2c: 28:28:cf:3c:77:98:18:67:1e:98:e4:03:54:78:5c: 29:ed:85:3e:c3:8f:dc:ba:f1:6d:9e:3a:d3:da:7d: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F9:68:8F:DC:E6:43:6C:8B:00:BF:30:E9:71:18:F9:5F:F9:3A:41 X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:45:a6:a1:64:9d:a4:a7:8b:87:08:42:a5:a3:9b:53:26:5e: 43:d7:9f:58:a2:1f:6f:57:b8:09:40:c0:35:65:9f:a2:38:1a: 6d:e5:92:15:89:7a:2a:bc:73:e8:12:21:20:5b:3e:6d:bc:43: b6:20:a9:18:59:cc:af:99:93:12:42:e0:c1:0a:aa:aa:8d:e3: b6:a9:28:98:bd:c3:70:e9:b5:0a:c2:ad:cb:d0:44:60:7f:d6: 33:35:e1:15:2b:7e:93:29:dd:7b:74:bd:85:f9:66:6a:8a:f8: 1f:0d:db:2c:9d:b3:e3:df:50:b0:35:c0:41:96:e6:3b:19:b8: 88:52:49:34:3a:bd:e4:18:cc:0f:34:a4:78:77:f1:33:45:98: 34:7e:21:2f:52:a6:77:a6:70:5f:cd:a6:fb:66:15:4f:ea:15: e6:72:a3:d1:85:b7:e2:06:e3:59:b6:cd:cf:8c:c2:4f:30:4f: 67:44:90:79:2f:6d:a0:25:77:77:45:b5:b5:94:de:8e:9d:c2: 9f:c2:74:dd:fd:e1:42:17:1a:35:ee:d4:13:4a:bd:4c:af:7a: 03:ce:2d:04:10:d8:e3:a6:c1:f9:91:e7:62:17:04:ea:12:cf: 4f:de:f9:e7:2c:44:58:17:84:79:41:17:03:51:c2:35:c1:9d: 28:67:06:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bUG126gSVl7QGND1D4GzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjUxMjIxMDEwMTQ2WhcNMjUxMjIyMDEwMTQ2WjAzMTEwLwYDVQQD Eyg4ZGY5Njg4ZmRjZTY0MzZjOGIwMGJmMzBlOTcxMThmOTVmZjkzYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtar50Va6V1mEwM7zoUpaQs2z/dDW sNDmwaCSGrzWTF5T5RdCFw80OVVs/yRKXVem/O6LvGhwHHaElk+PwNUoo7/0NbQj vM+3MjTPkutwMRrMkcZWWUK/24iJNgso8VplOaH+DidhEYl7p8wIz3Zx7dhWILbS xHMF2nVYXJAgNai9YhMqhItWtlS1RJ1rfoExLqH4Gfni+T808KkL47Sf9yA09Jlm xpPd1smygxh0nB9JDCaCF9cTbwE2NSugx07HhA/5C1ZigcFUyy5+dBUXL+DWgWaI UJEtNBs35+3rmSwoKM88d5gYZx6Y5ANUeFwp7YU+w4/cuvFtnjrT2n2lzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI35aI/c5kNsiwC/MOlxGPlf+TpBMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUWmoWSd pKeLhwhCpaObUyZeQ9efWKIfb1e4CUDANWWfojgabeWSFYl6Krxz6BIhIFs+bbxD tiCpGFnMr5mTEkLgwQqqqo3jtqkomL3DcOm1CsKty9BEYH/WMzXhFSt+kynde3S9 hflmaor4Hw3bLJ2z499QsDXAQZbmOxm4iFJJNDq95BjMDzSkeHfxM0WYNH4hL1Km d6ZwX82m+2YVT+oV5nKj0YW34gbjWbbNz4zCTzBPZ0SQeS9toCV3d0W1tZTejp3C n8J03f3hQhcaNe7UE0q9TK96A84tBBDY46bB+ZHnYhcE6hLPT9755yxEWBeEeUEX A1HCNcGdKGcGgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:01:12 2025 by rpki-client