This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json) Hash identifier: gld49CwuITRB9wc2WXqFVtTeKOWF9y+gs7bvTD8vsBs= Subject key identifier: DA:A8:3E:E1:17:CE:9D:6F:CC:C5:63:76:3E:60:4B:93:5B:34:AE:09 Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B54188A26C048F24D8551E7329E703100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft Manifest number: 17A2 Signing time: Thu 25 Dec 2025 06:00:52 +0000 Manifest this update: Thu 25 Dec 2025 06:00:52 +0000 Manifest next update: Fri 26 Dec 2025 06:00:52 +0000 Files and hashes: 1: 3rqvk9Ly9Ero57NmYxKaPl0vDoA.roa (hash: M8FySyxOTMDlpGnQamTf4gMdwU/cr4xnBa652N0ZBzE=) 2: 5jqEFe0JTAATamiojNWUeDIShXo.roa (hash: AtMeDfc1SVlh3370ApzMA53K6lkC9wmbLdKrheqVybg=) 3: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (hash: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=) 4: gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa (hash: 51uE4SN0evdj/LX3c8iK4ExCQ5J9huvoiaIN23Ew9+Y=) 5: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: zJi0DWNEhTao2O3lLl5vLPxnGZI6PePIHcfETDwZ6Is=) 6: pjHhxvfzqbl1t_jh_zgtAOtXGCI.roa (hash: J2AB7iNkE74xp/danYqI2bqPyjgASaXExqMW9bFv38g=) 7: xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa (hash: 0Rp0DNxPTLSllsBa+ggz8MQkfDKWpPp0o5l05ctu118=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:8a:26:c0:48:f2:4d:85:51:e7:32:9e:70:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Dec 25 06:00:52 2025 GMT Not After : Dec 26 06:00:52 2025 GMT Subject: CN=daa83ee117ce9d6fccc563763e604b935b34ae09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:76:6a:09:50:50:59:a7:e8:09:de:ba:ba: d9:a4:36:a6:e0:ad:af:9f:dc:36:7b:c9:02:46:c5: 68:21:53:99:30:1d:1e:c4:ed:f9:e5:ff:10:7a:a4: 73:53:cc:40:2b:8d:12:e4:c1:65:21:42:ee:77:0e: 6f:94:11:4d:68:d7:3e:b9:a8:0c:7a:a0:28:80:ac: 80:41:1e:25:8d:24:cf:bc:28:ba:c9:e4:b2:30:c4: 0e:e3:d3:79:ee:1f:db:64:60:9e:c2:b2:7d:ba:95: 17:71:f7:8b:62:d0:03:24:84:83:8e:f5:69:8d:aa: ee:7c:e0:7b:eb:40:f1:36:e7:9e:3f:6c:b8:63:af: 3b:ac:41:b5:1e:ca:1e:88:f8:19:af:34:e5:00:dc: 30:56:8b:eb:88:71:03:f6:2a:85:5e:28:f9:02:c9: 29:23:6b:c8:23:12:8f:94:78:f8:30:90:75:27:c2: 24:05:b7:60:de:f5:b7:1f:4c:8d:9d:1c:0e:26:0d: 1b:67:26:7b:b1:58:02:d2:a3:db:c6:e2:a0:8e:25: e4:2b:a4:8f:bd:2a:4f:28:d7:1a:0a:b2:01:c4:36: 49:03:74:6b:38:c5:74:8d:2b:d6:db:44:d1:dd:07: bb:f3:d6:5e:c9:13:25:21:a8:86:90:37:e5:bd:35: cd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A8:3E:E1:17:CE:9D:6F:CC:C5:63:76:3E:60:4B:93:5B:34:AE:09 X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8f:08:d1:8e:b0:5d:87:ef:e3:1c:28:1b:0e:5d:7a:b8:0d: ea:6d:40:7a:9c:ff:63:a6:b2:39:6c:84:b0:a7:a3:7e:61:1c: cd:1f:8f:80:b1:c6:06:c7:4f:83:ec:19:79:de:36:d6:5a:a2: 58:fc:4b:7c:fc:be:fe:7b:47:fc:79:b9:69:3d:06:46:2e:87: 4e:ee:c2:e9:f6:e9:f9:e6:e0:e7:a8:33:d9:84:29:75:d9:db: be:04:5c:cb:fc:f3:00:7d:09:66:6d:8b:c5:d7:f1:ce:2d:a0: 0e:77:d6:5a:3f:06:b3:9c:b2:26:39:6c:b5:78:61:3d:f7:34: a8:df:fa:91:6b:96:d2:b0:96:69:2b:4a:f9:0d:82:ca:02:81: 1f:7d:b0:21:23:42:6a:f0:00:72:fa:65:77:ca:ec:a1:7a:34: 33:2d:97:af:02:74:0e:c8:4a:b5:73:6d:3b:fd:ef:8d:6b:75: f8:a4:f8:a6:2c:68:8e:da:c5:b2:7a:5c:31:53:67:73:3a:b4: 5d:e6:8b:fc:15:eb:db:3a:b4:16:cc:ca:b9:af:e4:8d:b6:cb: 95:41:d6:7a:eb:73:9b:f3:43:22:16:9d:a0:df:b0:0c:ce:bf: 62:eb:49:a0:28:42:35:ec:d3:e1:e9:10:c5:07:18:c1:54:20: e1:69:b3:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGIomwEjyTYVR5zKecDEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjUxMjI1MDYwMDUyWhcNMjUxMjI2MDYwMDUyWjAzMTEwLwYDVQQD EyhkYWE4M2VlMTE3Y2U5ZDZmY2NjNTYzNzYzZTYwNGI5MzViMzRhZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfl2aglQUFmn6AneurrZpDam4K2v n9w2e8kCRsVoIVOZMB0exO355f8QeqRzU8xAK40S5MFlIULudw5vlBFNaNc+uagM eqAogKyAQR4ljSTPvCi6yeSyMMQO49N57h/bZGCewrJ9upUXcfeLYtADJISDjvVp jarufOB760DxNueeP2y4Y687rEG1HsoeiPgZrzTlANwwVovriHED9iqFXij5Askp I2vIIxKPlHj4MJB1J8IkBbdg3vW3H0yNnRwOJg0bZyZ7sVgC0qPbxuKgjiXkK6SP vSpPKNcaCrIBxDZJA3RrOMV0jSvW20TR3Qe789ZeyRMlIaiGkDflvTXN4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqoPuEXzp1vzMVjdj5gS5NbNK4JMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ48I0Y6w XYfv4xwoGw5dergN6m1Aepz/Y6ayOWyEsKejfmEczR+PgLHGBsdPg+wZed421lqi WPxLfPy+/ntH/Hm5aT0GRi6HTu7C6fbp+ebg56gz2YQpddnbvgRcy/zzAH0JZm2L xdfxzi2gDnfWWj8Gs5yyJjlstXhhPfc0qN/6kWuW0rCWaStK+Q2CygKBH32wISNC avAAcvpld8rsoXo0My2XrwJ0DshKtXNtO/3vjWt1+KT4pixojtrFsnpcMVNnczq0 XeaL/BXr2zq0FszKua/kjbbLlUHWeutzm/NDIhadoN+wDM6/YutJoChCNezT4ekQ xQcYwVQg4Wmzyg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:21:13 2025 by rpki-client