This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json) Hash identifier: qHmxlMtMv7zE+LrJBFCk+xIwfjaglQRPX6lg1qSEqUM= Subject key identifier: BD:0F:16:89:79:12:77:0B:1D:CD:58:49:73:84:F3:CF:5E:37:0D:C0 Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B3AFD86AAD4AF94C6197E08E931E8E238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 09:00:52 +0000 Manifest this update: Sat 20 Dec 2025 09:00:52 +0000 Manifest next update: Sun 21 Dec 2025 09:00:52 +0000 Files and hashes: 1: 3rqvk9Ly9Ero57NmYxKaPl0vDoA.roa (hash: M8FySyxOTMDlpGnQamTf4gMdwU/cr4xnBa652N0ZBzE=) 2: 5jqEFe0JTAATamiojNWUeDIShXo.roa (hash: AtMeDfc1SVlh3370ApzMA53K6lkC9wmbLdKrheqVybg=) 3: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (hash: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=) 4: gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa (hash: 51uE4SN0evdj/LX3c8iK4ExCQ5J9huvoiaIN23Ew9+Y=) 5: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: Ybj3UG8Cnz+062u3+DBXQizN63vKRGg6mUUBSOT9tdU=) 6: pjHhxvfzqbl1t_jh_zgtAOtXGCI.roa (hash: J2AB7iNkE74xp/danYqI2bqPyjgASaXExqMW9bFv38g=) 7: xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa (hash: 0Rp0DNxPTLSllsBa+ggz8MQkfDKWpPp0o5l05ctu118=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:86:aa:d4:af:94:c6:19:7e:08:e9:31:e8:e2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Dec 20 09:00:52 2025 GMT Not After : Dec 21 09:00:52 2025 GMT Subject: CN=bd0f16897912770b1dcd58497384f3cf5e370dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:56:44:0a:7c:58:d3:a4:6c:0a:1b:e5:71: 32:8d:fa:f0:13:3a:ea:1c:cb:5a:51:b8:16:5b:37: 6d:09:43:ec:9e:fb:41:c2:73:4c:03:d7:7d:d0:b4: 86:61:01:dd:80:93:d9:f3:d9:65:8a:b5:bc:94:7a: 78:66:98:ca:c9:03:05:34:b5:a4:4b:e1:b5:6d:02: c9:10:61:fa:37:90:38:22:12:ac:8e:a3:39:af:0f: f2:14:b5:26:00:39:34:19:a3:18:35:be:1b:7e:38: 63:c0:9c:0f:3a:d7:59:91:f6:01:b8:1b:a0:b6:a7: 59:b7:c9:98:f3:41:24:5e:23:48:5f:5c:e4:8c:7a: df:eb:87:5a:1a:0c:7f:a8:01:f0:9a:7a:a4:01:a1: 26:cd:ed:25:d9:b5:80:3c:98:81:9e:ac:cf:fa:76: 11:1a:0c:9f:cb:53:e9:1e:07:5e:00:8f:1e:0a:e6: 9e:65:8b:cc:79:59:c4:42:e7:60:2a:b1:72:35:f6: b8:98:78:ac:e2:9a:c4:b5:cd:f6:9e:c4:9f:69:e6: 52:d9:71:02:8a:5f:17:a4:31:82:1f:1b:27:4e:76: f5:18:de:dc:df:14:9e:a6:0a:cb:8c:4e:a7:e9:f6: 9e:6f:a0:24:a6:b0:fb:77:ed:90:cc:18:90:0b:b5: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0F:16:89:79:12:77:0B:1D:CD:58:49:73:84:F3:CF:5E:37:0D:C0 X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d5:36:c8:63:74:ec:61:12:c3:12:b0:0f:42:4d:b0:5d:a8: 5c:74:5b:d8:7d:3d:cb:3d:6f:d6:fe:1d:d8:c4:b6:92:8a:f1: 47:22:ca:67:e2:37:9d:36:59:73:ec:fb:fc:c7:1b:24:0f:17: 6f:48:08:d6:65:99:9e:64:36:f6:51:4d:96:9b:dd:67:69:db: 6d:ac:df:13:f1:a7:5d:5a:92:7a:f2:2d:4a:f9:b2:03:57:02: 35:ec:ee:75:70:3a:11:ca:00:10:34:05:7e:d3:2c:11:5f:5f: 81:4e:fe:c3:e4:41:c5:a6:45:e5:34:e5:22:22:2d:2e:db:48: 9a:e5:12:c4:79:74:8d:ee:3d:b3:83:64:23:88:22:1f:d4:f0: 97:a3:83:45:44:df:6c:9b:6f:54:54:eb:d3:f0:b2:67:19:11: 65:1d:4a:9e:07:e0:d3:10:46:67:2e:90:eb:59:49:be:19:f8: 0d:44:e4:8d:06:bc:e1:6e:1b:cb:d5:89:e7:9b:be:af:66:32: 6e:ad:ec:3e:9a:65:38:d3:f6:48:59:d0:32:8d:73:dc:e4:bd: 29:b8:3c:bf:74:59:eb:4b:d2:a2:64:36:e0:22:92:1b:5c:95: 76:f5:ae:3c:51:23:ae:6c:51:0c:e4:92:d5:46:ac:4c:11:f1: 60:2a:f4:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/Yaq1K+Uxhl+COkx6OI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjUxMjIwMDkwMDUyWhcNMjUxMjIxMDkwMDUyWjAzMTEwLwYDVQQD EyhiZDBmMTY4OTc5MTI3NzBiMWRjZDU4NDk3Mzg0ZjNjZjVlMzcwZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtypWRAp8WNOkbAob5XEyjfrwEzrq HMtaUbgWWzdtCUPsnvtBwnNMA9d90LSGYQHdgJPZ89llirW8lHp4ZpjKyQMFNLWk S+G1bQLJEGH6N5A4IhKsjqM5rw/yFLUmADk0GaMYNb4bfjhjwJwPOtdZkfYBuBug tqdZt8mY80EkXiNIX1zkjHrf64daGgx/qAHwmnqkAaEmze0l2bWAPJiBnqzP+nYR Ggyfy1PpHgdeAI8eCuaeZYvMeVnEQudgKrFyNfa4mHis4prEtc32nsSfaeZS2XEC il8XpDGCHxsnTnb1GN7c3xSepgrLjE6n6faeb6AkprD7d+2QzBiQC7WeswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0PFol5EncLHc1YSXOE889eNw3AMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNU2yGN0 7GESwxKwD0JNsF2oXHRb2H09yz1v1v4d2MS2korxRyLKZ+I3nTZZc+z7/McbJA8X b0gI1mWZnmQ29lFNlpvdZ2nbbazfE/GnXVqSevItSvmyA1cCNezudXA6EcoAEDQF ftMsEV9fgU7+w+RBxaZF5TTlIiItLttImuUSxHl0je49s4NkI4giH9Twl6ODRUTf bJtvVFTr0/CyZxkRZR1Kngfg0xBGZy6Q61lJvhn4DUTkjQa84W4by9WJ55u+r2Yy bq3sPpplONP2SFnQMo1z3OS9Kbg8v3RZ60vSomQ24CKSG1yVdvWuPFEjrmxRDOSS 1UasTBHxYCr0NA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:17:35 2025 by rpki-client