This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json) Hash identifier: dJ3hwEsI43cIBttsNFfE13famz26NvIqOIpRjYCSRtc= Subject key identifier: 0D:0E:0F:E4:DD:FF:1A:9A:1C:6A:49:73:AD:3F:4D:CE:05:75:19:5F Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Certificate serial: 019B2DB0A19A5ED6F1DCE09EC9EAAEAC9164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft Manifest number: 1784 Signing time: Wed 17 Dec 2025 19:01:48 +0000 Manifest this update: Wed 17 Dec 2025 19:01:48 +0000 Manifest next update: Thu 18 Dec 2025 19:01:48 +0000 Files and hashes: 1: E9oFZpR0WuPEurk0UT599s3KKDk.roa (hash: Q0OtGh8qvr0qOtsRaXw0h+Pv9ovyY05P3QKCE0xqR6U=) 2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: EZbpmckl+39hDywTr9msDsSsgMweYGkj5IFhfV2hpZA=) 3: rhwM13yb7i-t6Ly0MQtbcj3bZd8.roa (hash: rGHoCJ+25kyVkfObLSePRMqiDDa8j9R9c6PT4fGFhmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:a1:9a:5e:d6:f1:dc:e0:9e:c9:ea:ae:ac:91:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Validity Not Before: Dec 17 19:01:48 2025 GMT Not After : Dec 18 19:01:48 2025 GMT Subject: CN=0d0e0fe4ddff1a9a1c6a4973ad3f4dce0575195f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:b0:d9:cb:70:8c:21:52:a7:3b:51:d8:29: 26:27:64:04:a6:d9:d9:06:b0:e9:be:52:f2:a1:8d: 6d:90:0f:8b:3c:f2:22:37:8e:c2:aa:7d:3b:5e:9e: 82:33:8c:3c:44:e1:4e:0b:b2:0c:ef:47:4b:b8:db: 56:7c:d3:b4:25:12:48:7b:df:0a:b9:c2:50:5a:95: 24:0c:15:65:28:db:4e:ed:c3:7b:a7:c7:26:70:35: bf:b0:8b:ff:45:21:d3:f3:5d:6b:19:f3:76:78:5b: ab:4d:7f:04:53:e5:43:fe:a3:3b:a6:c4:03:82:42: 20:35:08:26:33:11:6d:d8:de:cb:06:a7:41:6c:ea: 29:3e:2b:d7:21:f5:c1:10:f2:26:8f:18:c0:ab:6f: f2:a9:04:af:63:4f:98:29:44:af:c3:ce:cb:ad:39: 62:a8:db:7b:80:bc:fc:fa:8d:8c:fe:2b:ea:b6:e2: a5:37:d1:49:e2:c5:70:da:bf:96:0b:01:7f:fa:6d: f4:31:62:b6:fa:c9:9b:89:2c:03:52:99:4f:a3:24: e5:f7:40:93:03:07:d2:ad:3a:7f:4a:a6:6d:30:57: 39:90:51:aa:72:77:61:de:55:b1:56:49:0c:e3:f7: c6:76:53:f2:35:2f:10:3d:88:ff:f0:06:f6:9b:c4: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0E:0F:E4:DD:FF:1A:9A:1C:6A:49:73:AD:3F:4D:CE:05:75:19:5F X509v3 Authority Key Identifier: keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:74:17:73:b5:1f:d6:61:43:74:84:d2:85:3a:b9:11:20:c6: 44:0a:2f:6e:fe:85:3e:fd:ef:6f:4e:6a:5f:08:71:38:66:08: f4:4a:e8:5b:f1:a5:d4:cb:7a:77:c7:4f:4a:0b:66:d7:60:e0: 34:81:fe:3f:62:7b:13:54:12:9d:c5:65:a3:cc:72:ec:78:58: 01:9b:41:02:9e:d0:3c:98:1d:e8:f0:0c:a9:f4:12:92:3c:0d: c2:21:c3:a8:e2:60:4a:5d:2a:ea:07:ef:dd:ff:0c:4d:e9:78: 0c:ce:27:9c:b7:25:15:7e:57:7e:41:89:37:17:d4:0f:61:2d: 9b:d1:c4:88:51:0f:a8:73:77:66:c4:66:dd:87:0b:3f:c3:10: cb:1b:ee:0d:32:ba:07:77:81:0a:bf:ec:eb:c1:73:69:af:9d: 0e:2c:f9:37:30:70:48:5e:7f:49:a1:75:ef:9d:27:ad:a3:72: 09:34:43:8c:16:7c:ce:94:ec:20:ac:93:b7:e4:4d:42:ff:1b: 75:d8:2a:0d:00:7b:59:4e:7d:eb:41:7d:88:6b:a7:eb:0a:27: 84:01:1d:38:e3:01:3b:31:99:0c:48:40:d4:92:79:f2:7c:37: ed:bc:bc:5e:59:2d:56:30:d9:ed:4e:6d:ab:59:d5:26:28:bf: 1c:ab:42:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsKGaXtbx3OCeyequrJFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy YzU4ODcwHhcNMjUxMjE3MTkwMTQ4WhcNMjUxMjE4MTkwMTQ4WjAzMTEwLwYDVQQD EygwZDBlMGZlNGRkZmYxYTlhMWM2YTQ5NzNhZDNmNGRjZTA1NzUxOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sWw2ctwjCFSpztR2CkmJ2QEptnZ BrDpvlLyoY1tkA+LPPIiN47Cqn07Xp6CM4w8ROFOC7IM70dLuNtWfNO0JRJIe98K ucJQWpUkDBVlKNtO7cN7p8cmcDW/sIv/RSHT811rGfN2eFurTX8EU+VD/qM7psQD gkIgNQgmMxFt2N7LBqdBbOopPivXIfXBEPImjxjAq2/yqQSvY0+YKUSvw87LrTli qNt7gLz8+o2M/ivqtuKlN9FJ4sVw2r+WCwF/+m30MWK2+smbiSwDUplPoyTl90CT AwfSrTp/SqZtMFc5kFGqcndh3lWxVkkM4/fGdlPyNS8QPYj/8Ab2m8T2yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0OD+Td/xqaHGpJc60/Tc4FdRlfMB8GA1UdIwQY MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt YjViOGQwMjQ0OGI4LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4 LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3QXc7Uf 1mFDdITShTq5ESDGRAovbv6FPv3vb05qXwhxOGYI9EroW/Gl1Mt6d8dPSgtm12Dg NIH+P2J7E1QSncVlo8xy7HhYAZtBAp7QPJgd6PAMqfQSkjwNwiHDqOJgSl0q6gfv 3f8MTel4DM4nnLclFX5XfkGJNxfUD2Etm9HEiFEPqHN3ZsRm3YcLP8MQyxvuDTK6 B3eBCr/s68Fzaa+dDiz5NzBwSF5/SaF1750nraNyCTRDjBZ8zpTsIKyTt+RNQv8b ddgqDQB7WU5960F9iGun6wonhAEdOOMBOzGZDEhA1JJ58nw37by8XlktVjDZ7U5t q1nVJii/HKtCNw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:23:42 2025 by rpki-client