This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json) Hash identifier: JwMGlg1UvB5rXtEik3V1C5IzCFfDgrvirJD1RmylCbY= Subject key identifier: 98:93:91:2F:45:D4:94:AC:71:F0:71:C7:B5:94:42:43:B3:B2:F5:B6 Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd Certificate serial: 019B578879E4645E5D08F7C7D5BFC9CF39D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 22:02:00 +0000 Manifest this update: Thu 25 Dec 2025 22:02:00 +0000 Manifest next update: Fri 26 Dec 2025 22:02:00 +0000 Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: ydF+f6LKDX/Tvj+rhN2yrzDeYUm8YGfAX/z1Q/3c3tw=) 2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:79:e4:64:5e:5d:08:f7:c7:d5:bf:c9:cf:39:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd Validity Not Before: Dec 25 22:02:00 2025 GMT Not After : Dec 26 22:02:00 2025 GMT Subject: CN=9893912f45d494ac71f071c7b5944243b3b2f5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:2f:46:d8:08:f1:92:b6:ac:02:77:82:fb: 7e:81:37:6d:3a:87:6a:c7:57:8d:3a:44:c7:e7:03: 5b:3d:13:20:44:f9:0f:1f:c4:87:b4:4f:8a:3d:e9: 54:4e:87:77:11:92:7a:ce:d0:ec:a0:f2:a8:c3:84: 9e:d0:87:86:86:38:ef:40:7b:92:1e:95:ad:f7:8b: f8:68:29:a5:a5:47:94:c4:da:f7:84:c4:ff:7f:d2: b6:4b:f4:61:86:d4:ce:c3:02:a1:9f:cd:9b:93:4e: 01:e9:a3:e8:34:3b:74:f7:39:0f:7a:59:ca:99:27: ec:0c:0a:27:5e:d2:40:17:a0:0c:f7:2b:97:8a:d3: 15:18:7d:aa:3c:d9:a9:00:bb:ba:b0:bc:13:c4:6b: b2:a8:cd:ef:9d:69:5c:52:78:91:7e:79:8c:e3:aa: af:25:cd:69:78:a3:e5:55:94:ef:7b:7b:9c:32:67: f1:6e:2b:84:22:c3:47:67:ae:26:d5:60:39:00:96: 87:5e:a3:47:6c:f4:dc:99:67:b3:89:58:54:61:e0: 0e:4b:01:22:c0:ca:bf:51:b8:77:72:5d:e4:b0:ec: df:c4:79:70:33:59:e0:27:78:df:e7:fd:4c:d1:ac: d1:de:e0:94:64:95:b0:db:9c:2c:53:d0:15:e7:57: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:93:91:2F:45:D4:94:AC:71:F0:71:C7:B5:94:42:43:B3:B2:F5:B6 X509v3 Authority Key Identifier: keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1a:ac:22:d7:eb:c4:e0:21:e6:77:21:2e:51:3c:c5:35:ba: 7a:11:a9:7f:78:1e:c1:06:aa:02:d6:c2:50:4f:d3:67:4a:ae: d8:32:ea:54:d0:32:96:1e:95:be:1a:79:bd:77:4b:36:d5:94: 3f:4d:c8:bd:69:98:bd:69:f4:19:f8:03:78:a0:96:57:07:96: 03:8a:52:86:8f:15:27:9d:a2:11:fc:b6:75:e1:08:bc:e1:15: bd:58:8b:7e:4b:14:92:dc:74:ef:40:3a:4b:a8:5c:5d:20:82: cf:8c:70:f7:de:ab:fd:06:b5:83:77:0e:a0:3d:dc:e7:c3:c4: b5:0c:11:91:f4:fb:55:69:ad:4a:89:5d:70:05:79:8c:80:bf: 93:a1:e4:03:6f:e0:94:5b:c0:57:9d:f5:4e:0c:21:31:72:b6: f9:41:7e:38:f4:c1:40:8b:f1:f2:6d:dc:c0:0d:fb:e2:e5:db: ff:70:11:1e:2b:98:5f:60:b2:fe:5c:8d:40:14:92:20:84:55: 79:f8:8a:5c:2a:ca:3a:de:bc:29:30:52:2e:9e:0a:97:8c:f0: e8:eb:6b:b0:ed:5c:c3:14:da:75:18:a5:f0:e7:b0:d1:3f:2d: 9b:63:b9:90:57:bf:0d:b2:74:05:e7:47:24:03:07:6f:f3:7f: ec:5e:81:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiHnkZF5dCPfH1b/JzznYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDM4ZmI0ZDNiOWEyYzdjOGZmZjU5NzcxOGM5MDViOWUy Zjg0Y2QwHhcNMjUxMjI1MjIwMjAwWhcNMjUxMjI2MjIwMjAwWjAzMTEwLwYDVQQD Eyg5ODkzOTEyZjQ1ZDQ5NGFjNzFmMDcxYzdiNTk0NDI0M2IzYjJmNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wMvRtgI8ZK2rAJ3gvt+gTdtOodq x1eNOkTH5wNbPRMgRPkPH8SHtE+KPelUTod3EZJ6ztDsoPKow4Se0IeGhjjvQHuS HpWt94v4aCmlpUeUxNr3hMT/f9K2S/RhhtTOwwKhn82bk04B6aPoNDt09zkPelnK mSfsDAonXtJAF6AM9yuXitMVGH2qPNmpALu6sLwTxGuyqM3vnWlcUniRfnmM46qv Jc1peKPlVZTve3ucMmfxbiuEIsNHZ64m1WA5AJaHXqNHbPTcmWeziVhUYeAOSwEi wMq/Ubh3cl3ksOzfxHlwM1ngJ3jf5/1M0azR3uCUZJWw25wsU9AV51dMRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiTkS9F1JSscfBxx7WUQkOzsvW2MB8GA1UdIwQY MBaAFI/Tj7TTuaLHyP/1l3GMkFueL4TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2Qt NmE3ZmE4MjI5NmM5LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2QtNmE3ZmE4MjI5NmM5 LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBqsItfr xOAh5nchLlE8xTW6ehGpf3gewQaqAtbCUE/TZ0qu2DLqVNAylh6Vvhp5vXdLNtWU P03IvWmYvWn0GfgDeKCWVweWA4pSho8VJ52iEfy2deEIvOEVvViLfksUktx070A6 S6hcXSCCz4xw996r/Qa1g3cOoD3c58PEtQwRkfT7VWmtSoldcAV5jIC/k6HkA2/g lFvAV531TgwhMXK2+UF+OPTBQIvx8m3cwA374uXb/3ARHiuYX2Cy/lyNQBSSIIRV efiKXCrKOt68KTBSLp4Kl4zw6OtrsO1cwxTadRil8Oew0T8tm2O5kFe/DbJ0BedH JAMHb/N/7F6BfQ== -----END CERTIFICATE-----Generated at Thu Dec 25 23:04:11 2025 by rpki-client