This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft File: jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json) Hash identifier: Iu4ehwqdwgBbmyAYVPhTSTVcaNm2whI4LMlKT3qw3zA= Subject key identifier: 96:4F:78:F3:39:7F:CB:34:6F:55:11:CC:FB:0D:D2:D8:E1:B7:31:E8 Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E Certificate issuer: /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e Certificate serial: 019B40C8E5D51E6C093D1759DE76B9155A4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft Manifest number: 04E3 Signing time: Sun 21 Dec 2025 12:01:06 +0000 Manifest this update: Sun 21 Dec 2025 12:01:06 +0000 Manifest next update: Mon 22 Dec 2025 12:01:06 +0000 Files and hashes: 1: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: Qr0mkXuKJzb4GpV1rK56/WsZey7MU1UyiRmI6bXMtn0=) 2: x_n8t7M8D_Bv99KviCzCearCTfY.roa (hash: 6UUSvMuuFuiYjyRFMf2UhzrLvu7QDsz9ziOkSElPsPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:e5:d5:1e:6c:09:3d:17:59:de:76:b9:15:5a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e Validity Not Before: Dec 21 12:01:06 2025 GMT Not After : Dec 22 12:01:06 2025 GMT Subject: CN=964f78f3397fcb346f5511ccfb0dd2d8e1b731e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:32:eb:73:36:4f:dc:f6:f4:dd:e9:b9:95:82: 18:15:c5:48:e7:6e:3d:0e:41:d9:c9:12:4f:0b:08: 3d:0f:2e:95:9f:41:6e:84:3e:b1:cb:ac:7a:fd:1c: 75:f0:46:3a:90:2e:62:7d:6e:cf:42:34:8b:77:2b: 77:04:55:78:68:e4:27:b3:82:24:1f:58:70:42:04: 10:0b:fa:97:90:e7:8e:ad:55:34:21:db:db:dd:b1: e3:05:a3:b7:6e:98:64:6f:15:7c:df:ec:5e:fe:0b: 57:80:ba:f8:cb:16:2e:fe:71:af:80:ec:e3:3c:2b: ae:23:a1:5d:37:94:e9:a4:40:de:16:96:5f:22:9e: 90:d0:78:41:e3:c8:b5:94:5c:93:50:98:08:32:60: 04:bf:a8:00:de:2b:af:2f:2d:e6:e3:1a:a0:9f:3b: a3:f8:f3:bb:7f:82:15:e4:3f:1f:5c:3c:d7:80:22: f4:ca:45:3c:22:25:32:a4:09:f2:05:27:cd:7f:05: f9:fc:26:f6:e5:c2:ed:11:98:96:45:06:b5:c4:d5: 28:de:19:eb:e7:75:0c:93:6e:0f:75:bf:ff:cf:0f: 1b:e7:02:be:b9:f3:fa:e4:9d:08:a0:aa:03:f0:ab: 13:b3:09:1f:7d:60:a6:e7:a5:67:4c:fc:70:72:65: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4F:78:F3:39:7F:CB:34:6F:55:11:CC:FB:0D:D2:D8:E1:B7:31:E8 X509v3 Authority Key Identifier: keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:37:99:59:80:f6:84:cc:fe:b4:de:39:16:45:ec:82:95:25: ff:44:0f:40:f1:e9:da:fb:19:74:59:21:f2:21:10:8b:d1:00: 2d:0d:20:28:56:3c:b8:ba:67:f1:d7:95:16:39:61:50:72:0e: e3:7b:0f:d7:4e:23:6b:c8:50:36:db:8e:57:f1:d7:3a:4b:28: 99:4c:f3:c1:1a:ef:95:a6:5b:75:34:97:8e:17:87:8c:ff:cb: 90:08:9b:e6:0e:71:49:27:a1:26:04:02:27:a3:59:d7:d9:88: 0c:d8:bc:7f:4a:a4:67:85:75:ac:69:10:5e:52:ef:ff:fa:60: 8b:2f:f8:3a:ae:24:ae:98:47:89:c2:e2:66:6a:66:c0:ad:b2: 91:2d:f6:90:90:24:d7:a5:52:4c:e4:da:0b:f3:71:e9:b0:50: 55:f1:2d:73:c4:56:54:62:cd:27:e0:70:44:5c:c6:9e:d4:e8: 8c:70:d0:8b:ae:0f:fe:39:c1:a0:44:da:72:30:76:01:2a:cf: 05:92:46:89:1b:c1:6c:e1:20:bf:11:da:69:48:32:b7:c2:67: 68:a4:ac:68:8d:aa:6a:10:fd:04:1c:f1:b9:8a:89:68:69:ac: b6:88:fe:fc:64:86:3f:48:f2:bb:2d:8a:ca:7e:c4:5b:55:c0: bc:62:9c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyOXVHmwJPRdZ3na5FVpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOWY0ZTgyZGJhODAyMzk5OWVmYmRhZDM0YjI3MWExZjQ4 OTJlOWUwHhcNMjUxMjIxMTIwMTA2WhcNMjUxMjIyMTIwMTA2WjAzMTEwLwYDVQQD Eyg5NjRmNzhmMzM5N2ZjYjM0NmY1NTExY2NmYjBkZDJkOGUxYjczMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DLrczZP3Pb03em5lYIYFcVI5249 DkHZyRJPCwg9Dy6Vn0FuhD6xy6x6/Rx18EY6kC5ifW7PQjSLdyt3BFV4aOQns4Ik H1hwQgQQC/qXkOeOrVU0Idvb3bHjBaO3bphkbxV83+xe/gtXgLr4yxYu/nGvgOzj PCuuI6FdN5TppEDeFpZfIp6Q0HhB48i1lFyTUJgIMmAEv6gA3iuvLy3m4xqgnzuj +PO7f4IV5D8fXDzXgCL0ykU8IiUypAnyBSfNfwX5/Cb25cLtEZiWRQa1xNUo3hnr 53UMk24Pdb//zw8b5wK+ufP65J0IoKoD8KsTswkffWCm56VnTPxwcmWWYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZPePM5f8s0b1URzPsN0tjhtzHoMB8GA1UdIwQY MBaAFI2fToLbqAI5me+9rTSycaH0iS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMt ZmJkOWZlYjBmMTNjLzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMtZmJkOWZlYjBmMTNj LzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjeZWYD2 hMz+tN45FkXsgpUl/0QPQPHp2vsZdFkh8iEQi9EALQ0gKFY8uLpn8deVFjlhUHIO 43sP104ja8hQNtuOV/HXOksomUzzwRrvlaZbdTSXjheHjP/LkAib5g5xSSehJgQC J6NZ19mIDNi8f0qkZ4V1rGkQXlLv//pgiy/4Oq4krphHicLiZmpmwK2ykS32kJAk 16VSTOTaC/Nx6bBQVfEtc8RWVGLNJ+BwRFzGntTojHDQi64P/jnBoETacjB2ASrP BZJGiRvBbOEgvxHaaUgyt8JnaKSsaI2qahD9BBzxuYqJaGmstoj+/GSGP0jyuy2K yn7EW1XAvGKc6g== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:52 2025 by rpki-client