This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json) Hash identifier: 5h1XfqshnoAxzbH3DRmcvW0T5Qi1DRdgE1h++Hp9moE= Subject key identifier: 8D:31:DD:00:93:5A:BA:E3:71:68:24:D6:59:B6:BC:A7:27:3A:84:D5 Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da Certificate serial: 019AF208C5E53223BF91CC0DDDEB8DA057BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft Manifest number: 0885 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=) 2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: 7bN4gTsyj0kET50PkHIgkBy6ZNmMNaULjf4GlEmFK6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c5:e5:32:23:bf:91:cc:0d:dd:eb:8d:a0:57:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=8d31dd00935abae3716824d659b6bca7273a84d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:69:0a:98:0f:2a:db:a0:59:62:1e:8b:3f:82: 7d:66:2f:07:2a:df:9e:54:31:1c:5e:5e:b1:2b:5b: bf:f5:12:de:f5:6a:74:76:1a:49:5d:4c:c7:5a:ec: 85:2d:2c:c8:ae:6f:92:e1:68:c6:8d:13:57:31:a4: de:2d:c0:f0:67:a3:ca:6e:79:65:bf:6b:52:4b:78: ba:83:3c:56:95:aa:0e:ea:da:24:5f:0c:08:c3:35: 6f:5b:aa:63:5d:13:37:ca:68:8e:5b:2d:06:03:3d: 7e:50:95:1f:5e:1a:5c:1c:03:b7:f2:00:dc:4d:14: b9:64:a1:f1:ef:23:44:4f:76:10:ed:78:ff:ce:8d: d9:bd:a3:78:4d:c9:4c:d4:9e:6f:03:e9:11:27:05: d4:a6:40:4a:c8:5b:da:fd:82:89:27:b7:2a:2d:22: 3c:a8:25:16:ee:1f:eb:c7:cb:a7:13:76:95:d8:dc: 0d:6b:60:b4:04:a3:b7:48:13:99:95:7d:ae:88:5b: 1e:8f:37:e8:1a:05:a4:ef:06:54:63:6e:7c:0f:70: e2:43:1a:8f:20:20:79:33:5d:2f:dd:a8:c0:9a:9e: 53:0d:06:50:e4:4c:f3:ae:80:f1:32:ee:21:0c:aa: bc:95:45:e4:84:53:34:4c:2a:bf:f0:dc:3a:c4:d6: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:DD:00:93:5A:BA:E3:71:68:24:D6:59:B6:BC:A7:27:3A:84:D5 X509v3 Authority Key Identifier: keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ca:68:f6:65:8e:72:f1:63:41:68:51:56:0d:64:5a:ca:8f: 8b:fc:cb:42:23:1e:0b:a9:23:19:09:b6:a4:fa:54:28:96:83: 62:df:30:7b:26:fc:09:bf:f3:e5:39:ce:d8:96:f7:d0:22:ff: c7:13:f3:50:d3:77:6d:da:80:b2:99:3d:d3:a0:64:4e:ea:ff: c6:8e:5b:f2:30:4b:c1:4d:47:dd:80:ac:f1:fb:5e:e8:d2:48: 25:2f:42:95:9a:f3:8d:27:26:41:d5:e6:3d:8d:6f:9c:91:b9: 01:a3:70:79:fa:26:31:cc:f0:c5:67:59:bd:d1:71:cf:da:f0: fb:cc:5a:0f:f0:1f:2b:4d:f8:19:e3:5c:5c:6d:7d:ca:4b:54: 18:5c:24:cf:f3:5f:18:8c:8c:d3:57:4e:2e:37:97:69:c3:11: 81:f4:54:06:2b:4f:aa:35:44:cd:1e:cf:6c:80:de:5a:a6:31: e4:a1:19:c7:3d:12:97:e5:50:8e:c3:71:c8:f1:ee:36:f0:69: 32:ad:e2:fa:5e:71:72:28:4c:b9:23:e7:28:0c:77:90:9b:91: 23:d1:fe:a7:cd:07:7d:18:c7:bc:ae:54:96:d8:2a:ed:0c:91: 59:e2:66:f5:5a:bc:08:21:ee:89:35:f8:98:c2:01:2a:03:c2: 14:76:1e:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMXlMiO/kcwN3euNoFe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQzYjU3ZDBhZmNjMTEyZmUzODk2NjhiZjY3NWQ4MGQ4 MjIzZGEwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD Eyg4ZDMxZGQwMDkzNWFiYWUzNzE2ODI0ZDY1OWI2YmNhNzI3M2E4NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WkKmA8q26BZYh6LP4J9Zi8HKt+e VDEcXl6xK1u/9RLe9Wp0dhpJXUzHWuyFLSzIrm+S4WjGjRNXMaTeLcDwZ6PKbnll v2tSS3i6gzxWlaoO6tokXwwIwzVvW6pjXRM3ymiOWy0GAz1+UJUfXhpcHAO38gDc TRS5ZKHx7yNET3YQ7Xj/zo3ZvaN4TclM1J5vA+kRJwXUpkBKyFva/YKJJ7cqLSI8 qCUW7h/rx8unE3aV2NwNa2C0BKO3SBOZlX2uiFsejzfoGgWk7wZUY258D3DiQxqP ICB5M10v3ajAmp5TDQZQ5EzzroDxMu4hDKq8lUXkhFM0TCq/8Nw6xNahkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0x3QCTWrrjcWgk1lm2vKcnOoTVMB8GA1UdIwQY MBaAFI2EO1fQr8wRL+OJZov2ddgNgiPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYWMyNzEtNmJlOS00YTE0LTg2MTYt NDY1YTMzM2FiNDQ0LzEvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xYWMyNzEtNmJlOS00YTE0LTg2MTYtNDY1YTMzM2FiNDQ0 LzEvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMpo9mWO cvFjQWhRVg1kWsqPi/zLQiMeC6kjGQm2pPpUKJaDYt8weyb8Cb/z5TnO2Jb30CL/ xxPzUNN3bdqAspk906BkTur/xo5b8jBLwU1H3YCs8fte6NJIJS9ClZrzjScmQdXm PY1vnJG5AaNwefomMczwxWdZvdFxz9rw+8xaD/AfK034GeNcXG19yktUGFwkz/Nf GIyM01dOLjeXacMRgfRUBitPqjVEzR7PbIDeWqYx5KEZxz0Sl+VQjsNxyPHuNvBp Mq3i+l5xcihMuSPnKAx3kJuRI9H+p80HfRjHvK5Ultgq7QyRWeJm9Vq8CCHuiTX4 mMIBKgPCFHYezA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:12 2025 by rpki-client