This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft File: JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json) Hash identifier: qdo5tU8wwiAnbyWGODUFNvuJDV50jmj4tiqSY/rhld8= Subject key identifier: 1B:88:E9:AB:09:76:D4:6E:22:83:AB:61:65:29:B8:85:2C:41:94:1E Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a Certificate serial: 019B3EDA8CE088C3F05773582F55AC304D5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 03:01:08 +0000 Manifest this update: Sun 21 Dec 2025 03:01:08 +0000 Manifest next update: Mon 22 Dec 2025 03:01:08 +0000 Files and hashes: 1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=) 2: DZyhv4UYtYvTfPYlPoAjBnE9aVw.roa (hash: jy6kbh6prGxhGFzaKnByCAPnjYIf8B6UCrmQZYycLPg=) 3: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=) 4: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=) 5: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: wkqfTbsX8viaaWx2Lq+SueodCeiRT36vr0H27igePag=) 6: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=) 7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:8c:e0:88:c3:f0:57:73:58:2f:55:ac:30:4d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a89539520004270d34253bdc16d87784156e1a Validity Not Before: Dec 21 03:01:08 2025 GMT Not After : Dec 22 03:01:08 2025 GMT Subject: CN=1b88e9ab0976d46e2283ab616529b8852c41941e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:4d:0a:ad:69:b9:bc:69:51:7d:6e:54:51: 8b:26:53:77:f0:9f:eb:4a:45:99:36:7c:3c:a8:a6: 16:89:90:88:ba:0c:27:f8:b1:b6:a8:30:ce:23:e3: 6a:72:47:c1:ac:48:7e:2c:bd:8b:c5:14:61:0f:43: 91:d2:c0:1a:3d:04:47:38:a5:32:f4:ed:f4:84:c9: bd:46:48:cb:36:51:27:5e:01:db:9e:8e:e1:77:4e: 37:ab:a7:d0:d3:57:83:c6:a4:2f:3e:7f:e8:0f:5d: 7b:18:7e:91:76:46:a8:fd:d1:b2:5a:b0:58:1e:08: c3:81:19:93:54:f6:38:38:50:1a:4a:6e:2d:63:20: bc:b4:12:0f:65:f2:98:21:e1:2f:6a:27:4d:e1:e0: 4a:f3:fb:33:a8:27:67:d7:3f:68:7d:3d:00:e8:ef: 23:44:89:f1:04:e6:dc:07:ae:32:03:93:b6:12:31: 6c:e8:73:b5:99:8c:f7:d4:79:ee:77:8b:49:ba:48: ac:f2:e6:64:62:b2:d1:80:67:fc:a9:0d:e6:69:16: ed:26:d4:cf:bf:24:24:c0:b9:f5:2b:87:f2:cf:a3: 76:48:f0:de:00:cd:90:eb:81:f0:6f:ec:c2:9a:58: ef:f2:b3:2e:50:17:5c:95:b8:8c:ed:52:22:a4:e3: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:88:E9:AB:09:76:D4:6E:22:83:AB:61:65:29:B8:85:2C:41:94:1E X509v3 Authority Key Identifier: keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5e:cd:e9:3e:b2:1b:df:44:ae:b4:e9:8c:2b:a5:f5:49:7e: 9c:90:0f:35:0a:a3:57:50:db:36:9c:5a:8b:7b:e0:e8:e0:8d: b8:10:e6:9a:93:a4:ea:2b:75:48:b0:c3:7c:00:7f:e9:67:53: b8:31:9e:b2:df:e1:85:94:6a:df:34:23:e0:bf:e7:7d:04:69: 2f:f0:fe:1b:1b:ec:f1:d2:a3:77:d3:96:92:74:ab:38:a7:86: 28:f7:a7:bf:e4:4f:73:72:8d:f5:0b:e9:b4:2a:0c:3e:25:ba: ef:8f:c3:ae:47:03:63:0a:89:9b:bd:6d:c9:18:86:6f:85:29: c7:28:40:25:8d:2a:7f:aa:3e:d4:c8:83:e6:a8:ea:2b:34:6f: 62:00:35:35:3f:77:34:2b:e0:37:3c:ee:b6:1c:b6:61:c7:ba: 83:08:e4:e8:b9:d0:47:66:39:f7:46:16:36:93:df:0d:47:eb: 9e:8e:f0:14:ad:61:5c:9b:4b:1c:99:91:1f:3b:ce:28:67:11: f4:b8:4e:e8:4d:71:1b:2b:ad:0f:93:05:2c:63:b0:e1:84:49: 17:d4:3d:ec:ee:47:0a:dd:21:8b:e3:9d:aa:f8:b7:7c:46:34: 0f:c3:a5:f3:3e:3f:0c:8c:22:85:43:d7:f3:07:f9:81:55:35: 08:2f:54:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2ozgiMPwV3NYL1WsME1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg5NTM5NTIwMDA0MjcwZDM0MjUzYmRjMTZkODc3ODQx NTZlMWEwHhcNMjUxMjIxMDMwMTA4WhcNMjUxMjIyMDMwMTA4WjAzMTEwLwYDVQQD EygxYjg4ZTlhYjA5NzZkNDZlMjI4M2FiNjE2NTI5Yjg4NTJjNDE5NDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqBNCq1pubxpUX1uVFGLJlN38J/r SkWZNnw8qKYWiZCIugwn+LG2qDDOI+NqckfBrEh+LL2LxRRhD0OR0sAaPQRHOKUy 9O30hMm9RkjLNlEnXgHbno7hd043q6fQ01eDxqQvPn/oD117GH6Rdkao/dGyWrBY HgjDgRmTVPY4OFAaSm4tYyC8tBIPZfKYIeEvaidN4eBK8/szqCdn1z9ofT0A6O8j RInxBObcB64yA5O2EjFs6HO1mYz31Hnud4tJukis8uZkYrLRgGf8qQ3maRbtJtTP vyQkwLn1K4fyz6N2SPDeAM2Q64Hwb+zCmljv8rMuUBdclbiM7VIipOOjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuI6asJdtRuIoOrYWUpuIUsQZQeMB8GA1UdIwQY MBaAFCWolTlSAAQnDTQlO9wW2HeEFW4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgt ZDAwNTI2YjkxNjA1LzEvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgtZDAwNTI2YjkxNjA1 LzEvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl7N6T6y G99ErrTpjCul9Ul+nJAPNQqjV1DbNpxai3vg6OCNuBDmmpOk6it1SLDDfAB/6WdT uDGest/hhZRq3zQj4L/nfQRpL/D+Gxvs8dKjd9OWknSrOKeGKPenv+RPc3KN9Qvp tCoMPiW674/DrkcDYwqJm71tyRiGb4UpxyhAJY0qf6o+1MiD5qjqKzRvYgA1NT93 NCvgNzzuthy2Yce6gwjk6LnQR2Y590YWNpPfDUfrno7wFK1hXJtLHJmRHzvOKGcR 9LhO6E1xGyutD5MFLGOw4YRJF9Q97O5HCt0hi+Odqvi3fEY0D8Ol8z4/DIwihUPX 8wf5gVU1CC9UDA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:51:11 2025 by rpki-client