This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json) Hash identifier: L5x+CbGBBI5TPNzhFIZu/B7vSxKpVYcouNd2IyF/o18= Subject key identifier: 23:1E:B0:4F:F2:D1:1D:DD:7A:13:DD:04:B3:B6:71:4B:C6:59:D0:60 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B3A58985EF72EAC858893A1799074D819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft Manifest number: 18A4 Signing time: Sat 20 Dec 2025 06:00:43 +0000 Manifest this update: Sat 20 Dec 2025 06:00:43 +0000 Manifest next update: Sun 21 Dec 2025 06:00:43 +0000 Files and hashes: 1: 1eUzZitDZ013U4KoMXhLsZt-Ouw.roa (hash: onauJHUcj3/Gk42IQtCwNxPA1GwGcTPdZF4tzNU5Cic=) 2: 3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa (hash: akr8fvq3b1MRJAZxmdxssOux5X/sXZanMRkztgAfzHg=) 3: 6kvBNM7QxzqNFUQY6UJAUSlEXG0.roa (hash: VzytZI3MZIGD76NTvtSVMrgwhYYU4KZfB6J50PMrkLQ=) 4: 7vYSmlk2u5zvZg_3ArmbDEY_sNU.roa (hash: Jq4Qzcnido1Bc85YICom1I+PBuMze7LAU9Wcp1OqdNY=) 5: 9CecUJWAhyUbD-JEeW3t7Q_bT3I.roa (hash: Ql1G0HHXMA7dM1rPg1JGzT0qhMxhyvoFIN+xbPIAbQE=) 6: 9TOpmOFT85FoIQt7VW00tnNSDyc.roa (hash: SCLGJPJrvLPHM3t4jGt50TpAdXlieT/PBKVM3GuTOz8=) 7: D9kReuUfnqK0y7nk-I74tRESYYU.roa (hash: onEFa0+ErZ1aSjQk8E05b4+s3hg4ZO35purvDEgyF2w=) 8: F4LyibxUyKDWiTWokbR8Nu9dwFg.roa (hash: ls3OOX8CUo2Fe8GCCqRqasL5CwSJNwzKwm1rIE9s2yA=) 9: GAOT9zYxLw8oZDIwUIGywpBcjB4.roa (hash: hUanzkdOKXITITs1YgDbKjXXABKxTMzchE87QAQ0bYE=) 10: GS2XVRqZpeDdiCx3T0QMEG4okfQ.roa (hash: c+r+fHHe/APmANIkQRbs62jauEl4PzEDrWx2I+B9cis=) 11: GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa (hash: VeVaUKTcdEDW2fRzvPABtIyMQZZZ9rNn6xJNVY7+2r0=) 12: GvXRVawHzzCi7pgsF39SYGKOL1c.roa (hash: IOKiIV1qdEfGlMmS/WoO8wBdPAZPaBqF8Ff8rokjp5c=) 13: Izq6UW8aiBdLHfPlUH5V5DG8V8o.roa (hash: TLUWXWRi4AZLzT5qqRNMDM7ckp1Ovx1osuct9u8/ySA=) 14: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: X4fcknhlWirZOeqIDfs4mXfJzrlo7S+eXYdutsm3pVk=) 15: KKuykAsgSlfU2_ah3gPApjpa_bY.roa (hash: lDZxYhBz6e/2Gw3mx1uSU5ra67aA2s9x9ASpcPzvb6k=) 16: Md7YZ-d1Y1XheM9ry7B9sgz4YA4.roa (hash: Ih78eioWDLIJh2FdRhV0xY7L6/wFxYgEtTJFDLMZDFU=) 17: NHulc4Xr5UTDZcaKywtBQBKjze4.roa (hash: XJgO5TSUWtITNdkmTiFR6yAsuz/yfG1PVcms5HB/rmg=) 18: SI6JcMkAdXeahj7NGt32DCzk_N4.roa (hash: XmnPzPSkO2n35usGEIRF1Qz4ke4WyZ//abuJ7KDgxxQ=) 19: SbU6Wu3VYL_xJUdthJTMBSanghY.roa (hash: 0SfBRTqaFb3y7K9XYOO4Yq/M+ASPHTLlHQOS0a7mCG8=) 20: TthjPRR5wXxsEh-6VCqYJXzgbKE.roa (hash: qNNifR39ahZ3yfEWA6+o5w3ku4jFU0k6pJdFlQXCAdc=) 21: Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa (hash: 4m7gesb3gkf55hVL1cOVKzNKguAUApHfmA6sJrKWwxA=) 22: W7QzaER1vR-s3Pj4KyrMCvE0NVo.roa (hash: ZgPuCeX9vl95FC5nGpWcD3MQhmHO62QrHuHCGcZ3dQ0=) 23: WRheQN0amA9-_VCQME57u4bK-ks.roa (hash: blzydWxPl2ahI62ziLjMaHt088mTMKIJq9ZUkNAzqD0=) 24: YZm_xLtmsH08Bas2THq1RxLz81g.roa (hash: qHMBbTPBGSfjxU8aJsAB/XiYXwHHASUN+b5Hn+g/xts=) 25: _mea20OFuYFsi2iTbTW6kjzayQ8.roa (hash: 15vxvAMXVj8o1NZa+nAjbC1U25nrqGTHLYeckcnvDkE=) 26: bjGyoAnqbJlTY8yxoW8Vw9QTKXY.roa (hash: KkR9uPlQKsAZ2pDuHous5MwgFIvneEVZmAg7v37TsdA=) 27: ghdkEXOYieGGhOcxGRo9LY6w5LY.roa (hash: 4cdu+XE7YUzkOZIE2VvcRY1Ie1MDvn7w+dAFcHrze/w=) 28: oGAN-qdYZCv1jnbn30aPOHF3XnY.roa (hash: AwnPvaCiq2S1Iw7Y9tew2bDgRzQqA5x8pF/iVdnfXyw=) 29: p45g5foq91zKggpm9xOru9V5Ta8.roa (hash: aescxVeG95+vLWeERAq4yBUOFPEiqWqdLL4rR3/2YL0=) 30: rGkstG6DmG4B7cdYh3EO2voHOpA.roa (hash: SmsIhLLPmjYgcUx7ha4qQmd2o5KZk8x1FvvtQ8LvAQs=) 31: sPN4MQOyS-s_riyCy93fzpeT-34.roa (hash: yENIXfYPwcHSIXCDZ9TP6nlOKTHnb7yHcks9QDKcNxs=) 32: sbm57hbO9DMhZVoyKG3SdA-duFk.roa (hash: 6anRwGUA22JIE2yI5cX9sKlVcBQWgTcUOS+5xTEbTcw=) 33: uFxKkTJ2FS-YadWkkiFDxhg46zw.roa (hash: CKurhe6gxcartqAcpNhLJ0w752vEmApcJaVpSiuG5Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:98:5e:f7:2e:ac:85:88:93:a1:79:90:74:d8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Dec 20 06:00:43 2025 GMT Not After : Dec 21 06:00:43 2025 GMT Subject: CN=231eb04ff2d11ddd7a13dd04b3b6714bc659d060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:b9:17:6f:41:19:01:06:33:f7:7c:88:16: 8b:22:52:5a:a2:5d:b0:25:8c:ab:23:f1:12:74:3a: 8d:d3:1f:04:de:8f:ca:ef:23:b7:7a:25:7b:02:49: 5b:2c:42:fe:37:07:b2:88:01:ef:a9:ca:ab:d6:b8: 1b:0a:09:4a:40:06:2f:69:f3:14:1a:7a:79:f8:e7: 4e:59:98:fd:da:e2:ef:6a:59:be:c6:22:64:cc:3e: 9b:30:a9:eb:d0:93:05:d4:e9:32:71:8f:cd:1f:15: 9f:43:98:70:a7:37:f9:51:b3:e8:2a:77:0d:0b:8d: 89:c2:da:28:c9:20:5d:a1:7b:79:91:57:e3:59:d3: 88:a2:e5:70:23:58:a9:ea:e4:55:b8:98:43:e8:f9: 45:64:54:d2:92:75:d4:c9:24:a0:39:77:3e:23:66: 59:93:96:0c:b2:59:32:51:90:5c:b3:4e:07:d2:97: 9a:7c:d0:3e:df:53:3e:66:c0:36:10:3a:01:8c:1d: 25:87:a3:bb:1e:ea:f3:9c:55:88:fe:f1:50:d6:6b: 58:d9:ec:05:67:56:a5:57:dc:b6:90:d9:dc:0a:d2: 10:d5:e1:79:a0:15:35:f5:22:25:31:dc:6f:1a:ec: 1a:78:3f:72:99:db:0f:e2:bf:ee:8f:93:c1:f3:67: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1E:B0:4F:F2:D1:1D:DD:7A:13:DD:04:B3:B6:71:4B:C6:59:D0:60 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:16:b3:7e:ee:27:71:fa:3b:bd:40:3f:9b:9f:62:ef:48:b0: 27:6f:2d:68:00:13:c2:73:88:07:f3:1e:27:98:81:6a:e5:a2: 9b:94:8d:c9:40:dc:83:6f:14:42:37:a5:3f:65:dd:33:1b:5e: 67:e2:f7:f9:2a:9f:73:eb:43:69:9f:cc:bf:51:07:f5:9b:5c: b1:a5:a7:1a:50:b3:dd:5f:54:ae:48:6a:7f:37:15:a5:04:93: a6:ee:53:68:e5:d7:2f:6e:ac:0f:99:68:5f:0d:72:3b:05:92: 34:2d:45:bc:ad:fc:4a:99:e1:92:7e:ea:56:0a:2e:94:42:86: 71:6b:2b:f0:4b:47:b4:68:67:d7:9e:ff:03:f2:dd:21:64:dc: 52:72:6f:f0:f2:6a:e4:42:1c:24:f8:fa:c1:5e:3f:db:28:4e: 64:60:68:f8:14:a7:68:5a:69:2d:ba:50:e3:5d:4f:89:d7:24: 86:05:99:37:6f:94:cc:6f:02:7b:8c:12:0d:23:b5:49:ab:a3: dc:2b:32:24:8b:1a:3b:88:69:ff:77:76:55:92:8d:76:4d:9f: 54:06:34:02:9a:6e:70:c5:5e:a7:51:ef:b6:ba:c2:64:18:8e: cb:24:77:9c:ef:70:ce:43:cf:50:ad:ed:64:fa:be:7e:77:40: 05:e7:d2:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJhe9y6shYiToXmQdNgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjUxMjIwMDYwMDQzWhcNMjUxMjIxMDYwMDQzWjAzMTEwLwYDVQQD EygyMzFlYjA0ZmYyZDExZGRkN2ExM2RkMDRiM2I2NzE0YmM2NTlkMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqea5F29BGQEGM/d8iBaLIlJaol2w JYyrI/ESdDqN0x8E3o/K7yO3eiV7AklbLEL+NweyiAHvqcqr1rgbCglKQAYvafMU Gnp5+OdOWZj92uLvalm+xiJkzD6bMKnr0JMF1OkycY/NHxWfQ5hwpzf5UbPoKncN C42JwtooySBdoXt5kVfjWdOIouVwI1ip6uRVuJhD6PlFZFTSknXUySSgOXc+I2ZZ k5YMslkyUZBcs04H0peafNA+31M+ZsA2EDoBjB0lh6O7HurznFWI/vFQ1mtY2ewF Z1alV9y2kNncCtIQ1eF5oBU19SIlMdxvGuwaeD9ymdsP4r/uj5PB82eWbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMesE/y0R3dehPdBLO2cUvGWdBgMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBazfu4n cfo7vUA/m59i70iwJ28taAATwnOIB/MeJ5iBauWim5SNyUDcg28UQjelP2XdMxte Z+L3+Sqfc+tDaZ/Mv1EH9ZtcsaWnGlCz3V9UrkhqfzcVpQSTpu5TaOXXL26sD5lo Xw1yOwWSNC1FvK38Spnhkn7qVgoulEKGcWsr8EtHtGhn157/A/LdIWTcUnJv8PJq 5EIcJPj6wV4/2yhOZGBo+BSnaFppLbpQ411PidckhgWZN2+UzG8Ce4wSDSO1Sauj 3CsyJIsaO4hp/3d2VZKNdk2fVAY0AppucMVep1HvtrrCZBiOyyR3nO9wzkPPUK3t ZPq+fndABefSXw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:11:27 2025 by rpki-client