This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft File: j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json) Hash identifier: u7/q/VY2k8JIWHTY0aisJ6CWb+j6NFAi68GVeefYZko= Subject key identifier: 16:9C:95:43:FC:A7:9A:01:D5:65:65:4B:A3:DE:C9:A8:BC:4C:53:A4 Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15 Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215 Certificate serial: 019B650D6EE136F02A46FD03ECFA6B3A37D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft Manifest number: 06E7 Signing time: Sun 28 Dec 2025 13:02:17 +0000 Manifest this update: Sun 28 Dec 2025 13:02:17 +0000 Manifest next update: Mon 29 Dec 2025 13:02:17 +0000 Files and hashes: 1: 13OA8Kowa9u-F_7ZWwXTDMJLU0A.roa (hash: TLY9MKIWsbVqHZrgOnopJQQ8yZUjxig3a2ZRbtkH/Xw=) 2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: +0X9z6r5FCZNP54cRIeMEq0ZZwZ5TfKpzrTAK4irC9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:6e:e1:36:f0:2a:46:fd:03:ec:fa:6b:3a:37:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215 Validity Not Before: Dec 28 13:02:17 2025 GMT Not After : Dec 29 13:02:17 2025 GMT Subject: CN=169c9543fca79a01d565654ba3dec9a8bc4c53a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:96:4e:63:67:0e:2a:11:98:f1:45:ab:db: 0c:18:7e:92:59:b6:aa:e7:1c:01:19:1d:1d:93:06: 25:73:ad:5c:07:34:8e:c4:3a:ec:1f:47:e5:1a:61: 15:09:7f:f8:c3:4e:06:f8:54:e9:93:88:a9:fc:f0: 68:48:6e:11:af:6c:59:4d:ff:ce:ec:3c:00:31:f8: 00:ba:14:1b:93:a7:39:db:95:f5:79:ac:ea:92:60: 67:90:18:09:94:c9:1f:c4:75:5a:e9:af:92:98:e9: c1:2a:89:c3:92:13:04:cc:fa:4d:e2:7d:d4:3d:e4: f4:2c:56:d3:a0:c5:5f:94:ac:10:63:7c:56:74:fd: 08:d3:f4:20:e7:25:c8:d6:9b:78:af:d4:e0:19:bb: e9:43:fc:13:a1:eb:25:71:81:fc:24:2f:9d:4a:bc: 71:39:21:df:58:b1:42:bf:87:1c:28:68:ae:3e:a4: 2d:1e:99:de:14:7a:92:d5:95:0b:97:c4:cd:4a:a1: 9f:3b:3e:1a:44:e2:d5:2e:19:2b:c2:dd:7f:e0:3d: f6:9f:c5:73:9c:95:f9:12:f1:a3:96:70:c1:fd:26: 70:56:ca:b3:f5:7a:b4:dd:4a:29:05:1d:71:fe:f4: 2f:48:74:71:f1:c0:57:b5:23:ab:02:9b:3a:a9:83: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:95:43:FC:A7:9A:01:D5:65:65:4B:A3:DE:C9:A8:BC:4C:53:A4 X509v3 Authority Key Identifier: keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1e:59:19:38:39:91:90:50:62:2c:69:29:01:d3:a3:42:a5: 23:16:bc:9a:c1:26:c2:6c:ef:2c:51:d3:60:4f:87:68:90:c8: 1f:63:75:77:21:0f:a3:3e:52:53:4c:14:4d:30:c3:63:35:0e: 5c:52:be:b7:b7:58:41:a8:49:b5:9e:8f:55:ea:28:45:ed:d9: 98:af:34:af:31:c0:94:bb:e4:6c:a3:02:7a:db:95:f8:fd:b5: 5f:b1:27:d9:92:92:f0:de:5c:21:19:9d:6e:79:7c:03:91:5b: 25:d8:6a:f3:25:44:42:80:18:36:08:b6:38:55:b2:95:be:92: b4:a0:18:fa:1e:5e:2b:4b:a7:07:49:12:b3:9e:54:3f:37:f6: a2:b3:d4:41:3f:3a:14:2c:2b:15:7b:12:d9:16:62:07:6b:fb: d6:4a:74:b8:8e:bf:24:83:3c:0d:de:1e:2f:54:54:3a:0c:0f: 8e:90:4e:ac:b5:d1:ea:b0:08:e3:4f:ac:d1:a6:2e:39:4c:1d: a2:9d:4b:23:ce:ae:62:a5:39:26:d1:b5:d0:1d:22:76:23:bf: 6e:4c:13:33:bc:b6:75:a4:7e:29:b6:75:fb:a9:92:ef:25:60: 38:5a:e1:a5:8c:1a:8a:9a:c6:b9:d9:16:02:88:3a:9c:ed:95: dc:d2:54:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDW7hNvAqRv0D7PprOjfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZGY4N2NhNTMwNjU3OTg0NDc2NDUyNTVmODI5YjUzYmMx ZGEyMTUwHhcNMjUxMjI4MTMwMjE3WhcNMjUxMjI5MTMwMjE3WjAzMTEwLwYDVQQD EygxNjljOTU0M2ZjYTc5YTAxZDU2NTY1NGJhM2RlYzlhOGJjNGM1M2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOWWTmNnDioRmPFFq9sMGH6SWbaq 5xwBGR0dkwYlc61cBzSOxDrsH0flGmEVCX/4w04G+FTpk4ip/PBoSG4Rr2xZTf/O 7DwAMfgAuhQbk6c525X1eazqkmBnkBgJlMkfxHVa6a+SmOnBKonDkhMEzPpN4n3U PeT0LFbToMVflKwQY3xWdP0I0/Qg5yXI1pt4r9TgGbvpQ/wToeslcYH8JC+dSrxx OSHfWLFCv4ccKGiuPqQtHpneFHqS1ZULl8TNSqGfOz4aROLVLhkrwt1/4D32n8Vz nJX5EvGjlnDB/SZwVsqz9Xq03UopBR1x/vQvSHRx8cBXtSOrAps6qYMwZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaclUP8p5oB1WVlS6Peyai8TFOkMB8GA1UdIwQY MBaAFI/fh8pTBleYRHZFJV+Cm1O8HaIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajktSHlsTUdWNWhFZGtVbFg0S2JVN3dkb2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MzQ4OTAtOGI0OC00OWFlLWIwNDIt OTk5Y2NlNGQ0YWQyLzEvajktSHlsTUdWNWhFZGtVbFg0S2JVN3dkb2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82MzQ4OTAtOGI0OC00OWFlLWIwNDItOTk5Y2NlNGQ0YWQy LzEvajktSHlsTUdWNWhFZGtVbFg0S2JVN3dkb2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALx5ZGTg5 kZBQYixpKQHTo0KlIxa8msEmwmzvLFHTYE+HaJDIH2N1dyEPoz5SU0wUTTDDYzUO XFK+t7dYQahJtZ6PVeooRe3ZmK80rzHAlLvkbKMCetuV+P21X7En2ZKS8N5cIRmd bnl8A5FbJdhq8yVEQoAYNgi2OFWylb6StKAY+h5eK0unB0kSs55UPzf2orPUQT86 FCwrFXsS2RZiB2v71kp0uI6/JIM8Dd4eL1RUOgwPjpBOrLXR6rAI40+s0aYuOUwd op1LI86uYqU5JtG10B0idiO/bkwTM7y2daR+KbZ1+6mS7yVgOFrhpYwaiprGudkW Aog6nO2V3NJUkw== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:57 2025 by rpki-client