This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json) Hash identifier: L0o31fpXCa5sKrTd5G4bUd/k/9uMwTi7CnZHeRkBDyE= Subject key identifier: AB:12:DA:3F:A3:43:A0:55:1C:2C:2F:25:E4:14:81:24:5C:30:2F:05 Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c Certificate serial: 019B530638239CFF094832A37F87A94D95C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft Manifest number: 118D Signing time: Thu 25 Dec 2025 01:01:15 +0000 Manifest this update: Thu 25 Dec 2025 01:01:15 +0000 Manifest next update: Fri 26 Dec 2025 01:01:15 +0000 Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=) 2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: qn8/WSJHZooDIFO1nkOYPrmEmjk+mQe+8jrFy7bV8lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:38:23:9c:ff:09:48:32:a3:7f:87:a9:4d:95:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c Validity Not Before: Dec 25 01:01:15 2025 GMT Not After : Dec 26 01:01:15 2025 GMT Subject: CN=ab12da3fa343a0551c2c2f25e41481245c302f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:af:30:89:70:f7:d0:46:3c:ac:bf:28:e9: 77:23:2b:a6:c0:55:92:5d:c9:be:3c:fc:a6:bf:e9: 56:29:81:c0:7c:82:b2:ec:3a:c1:f7:3a:98:8a:74: ce:d3:52:d3:5c:f4:6d:85:3f:58:d8:e7:47:b6:5b: 39:ce:af:f9:34:de:86:f0:e4:9f:81:3a:02:a6:08: 47:8e:66:a1:2f:cf:73:f7:bc:a7:c3:28:70:3d:dc: 11:96:e9:57:a4:da:91:ee:e7:5a:8d:7e:dd:77:7d: f0:7e:8d:e4:c8:ca:0f:ac:8f:b2:3b:b7:c9:ab:4f: 4b:f4:3c:ef:f0:11:d9:b9:78:68:76:8b:bf:8a:59: 5a:c0:4a:1e:ae:a2:b6:a1:06:2b:17:6b:76:2c:7a: f9:8e:85:79:4f:c6:a0:4e:e5:2c:31:56:0b:1f:e6: 9f:c3:a1:76:00:31:68:b3:29:df:03:fe:75:b8:6d: ba:d6:5b:29:f1:a5:09:7f:c9:58:4e:bf:d2:bc:ac: 2a:d8:25:82:85:e8:5d:d2:e6:b9:b3:e9:6f:f9:78: 49:28:d3:26:c0:52:96:25:16:41:2b:1d:15:7d:30: ea:c5:e2:48:27:f6:21:33:81:b1:97:33:a8:2e:de: ff:f6:aa:b3:d6:89:34:52:d5:e2:66:e8:41:7c:f9: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:DA:3F:A3:43:A0:55:1C:2C:2F:25:E4:14:81:24:5C:30:2F:05 X509v3 Authority Key Identifier: keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d8:d7:64:75:2c:e7:24:85:c1:ee:fc:3d:08:52:bf:f7:1a: ea:9f:cb:74:a3:f9:43:2b:db:66:a8:eb:7a:7b:55:3c:3b:ad: 37:b5:90:16:2d:9f:6e:ad:5b:c9:aa:6a:a7:70:67:f3:80:48: 1c:27:44:a8:48:0a:60:35:2e:c9:81:d1:bb:10:44:e1:ce:89: 16:d7:bb:66:c9:ad:ff:f6:a1:3b:79:44:72:36:0b:9a:61:03: 52:a6:89:d4:96:5d:0a:84:e2:c2:82:c1:53:97:6b:da:b7:b5: be:f1:28:93:83:45:a8:18:76:54:7f:ea:ad:d8:25:d6:8d:b8: a6:d7:48:f6:d5:52:85:4c:d9:e2:e6:00:20:79:11:d6:f0:d5: 0a:2a:57:8c:fe:01:53:72:62:7e:26:78:a4:b9:84:f4:dd:29: 39:6c:61:6d:06:09:f9:ab:62:de:59:88:45:c5:e8:ca:ff:07: 56:06:9e:20:c5:9c:88:92:3a:99:73:7f:06:79:fb:9b:7a:e3: 07:c9:47:99:0e:e0:0c:fb:77:c9:0e:84:cb:e3:53:b9:0a:43: 04:f3:7f:5f:2d:01:9a:ec:4f:12:45:dd:1b:f3:73:45:9b:1d: 35:3f:e7:8e:34:11:da:f3:11:ab:0f:cb:cb:6f:84:f4:bd:5a: 69:ec:f4:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBjgjnP8JSDKjf4epTZXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNmQ3NWI0ZTQ5ODZmYWNjYjYxNGIzMzRlNDVkNWUwMzkz NTJhOWMwHhcNMjUxMjI1MDEwMTE1WhcNMjUxMjI2MDEwMTE1WjAzMTEwLwYDVQQD EyhhYjEyZGEzZmEzNDNhMDU1MWMyYzJmMjVlNDE0ODEyNDVjMzAyZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlyvMIlw99BGPKy/KOl3IyumwFWS Xcm+PPymv+lWKYHAfIKy7DrB9zqYinTO01LTXPRthT9Y2OdHtls5zq/5NN6G8OSf gToCpghHjmahL89z97ynwyhwPdwRlulXpNqR7udajX7dd33wfo3kyMoPrI+yO7fJ q09L9Dzv8BHZuXhodou/illawEoerqK2oQYrF2t2LHr5joV5T8agTuUsMVYLH+af w6F2ADFosynfA/51uG261lsp8aUJf8lYTr/SvKwq2CWChehd0ua5s+lv+XhJKNMm wFKWJRZBKx0VfTDqxeJIJ/YhM4GxlzOoLt7/9qqz1ok0UtXiZuhBfPnr4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsS2j+jQ6BVHCwvJeQUgSRcMC8FMB8GA1UdIwQY MBaAFI5tdbTkmG+sy2FLM05F1eA5NSqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9hY2E5OTQtZjNjMC00NWE0LWE2NDIt NmQ3NjAyZDI0YzgzLzEvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9hY2E5OTQtZjNjMC00NWE0LWE2NDItNmQ3NjAyZDI0Yzgz LzEvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtjXZHUs 5ySFwe78PQhSv/ca6p/LdKP5QyvbZqjrentVPDutN7WQFi2fbq1byapqp3Bn84BI HCdEqEgKYDUuyYHRuxBE4c6JFte7Zsmt//ahO3lEcjYLmmEDUqaJ1JZdCoTiwoLB U5dr2re1vvEok4NFqBh2VH/qrdgl1o24ptdI9tVShUzZ4uYAIHkR1vDVCipXjP4B U3JifiZ4pLmE9N0pOWxhbQYJ+ati3lmIRcXoyv8HVgaeIMWciJI6mXN/Bnn7m3rj B8lHmQ7gDPt3yQ6Ey+NTuQpDBPN/Xy0BmuxPEkXdG/NzRZsdNT/njjQR2vMRqw/L y2+E9L1aaez0RA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:17:52 2025 by rpki-client