This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json) Hash identifier: CA25je+EeVDP5zBpiCz/Z6dHDV43QUI2XH3Yg4Gwd5A= Subject key identifier: 23:54:ED:F9:03:9A:8D:2F:7C:75:BB:3F:CE:04:4E:F4:D8:AB:90:56 Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Certificate serial: 019AF79D3BD0D7B4524D00BF64835B2D1364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft Manifest number: 1768 Signing time: Sun 07 Dec 2025 07:01:08 +0000 Manifest this update: Sun 07 Dec 2025 07:01:08 +0000 Manifest next update: Mon 08 Dec 2025 07:01:08 +0000 Files and hashes: 1: E9oFZpR0WuPEurk0UT599s3KKDk.roa (hash: Q0OtGh8qvr0qOtsRaXw0h+Pv9ovyY05P3QKCE0xqR6U=) 2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: Zcy0DvsZFH4SL3j61/5XxXY5N1bGs704/wnPCyHMNb4=) 3: rhwM13yb7i-t6Ly0MQtbcj3bZd8.roa (hash: rGHoCJ+25kyVkfObLSePRMqiDDa8j9R9c6PT4fGFhmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9d:3b:d0:d7:b4:52:4d:00:bf:64:83:5b:2d:13:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Validity Not Before: Dec 7 07:01:08 2025 GMT Not After : Dec 8 07:01:08 2025 GMT Subject: CN=2354edf9039a8d2f7c75bb3fce044ef4d8ab9056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:e1:79:81:99:c3:28:c4:b2:30:cf:00:c9: e5:15:93:01:57:8a:2f:38:60:8f:f9:4e:8d:91:cc: 6b:5b:6d:96:76:3f:a3:58:59:e5:22:09:e1:98:71: a7:38:5d:58:2a:83:d4:27:3b:02:53:1c:b9:0d:ba: 30:13:d4:8a:6a:d7:c1:b0:c0:13:72:7f:44:48:5c: ae:49:ef:03:14:1a:b4:c9:f3:05:cc:00:fc:a5:06: b5:07:92:be:e4:af:e4:4b:6c:9f:44:a8:0c:da:ca: 8c:ab:94:40:78:e0:67:63:56:a1:7b:9d:68:09:09: 84:82:6f:8e:c7:c0:8d:6c:4c:ce:1d:1a:af:21:e6: f8:80:8c:91:b4:36:43:a4:31:85:d5:5b:0d:c8:5e: 57:0c:f5:cb:97:27:7d:e0:af:4e:cd:93:0e:b0:73: cd:8d:de:29:fd:c1:c1:dd:00:2a:2f:b7:9c:7b:21: 89:9c:d1:7b:2d:b0:71:1a:49:75:16:7c:4e:ea:22: e9:8c:99:a7:12:3e:89:c9:4a:f2:96:8a:a7:4f:fa: 32:21:d2:6e:31:7f:54:f4:a4:52:52:76:f3:52:c8: 2a:61:54:49:b5:95:d1:b7:2c:18:49:14:6d:1a:be: e6:07:04:48:d2:b9:02:c8:7c:6e:03:b7:04:02:1b: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:54:ED:F9:03:9A:8D:2F:7C:75:BB:3F:CE:04:4E:F4:D8:AB:90:56 X509v3 Authority Key Identifier: keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e4:36:dd:36:32:65:9a:2f:82:99:a0:ce:cc:43:8b:48:c8: 02:a7:b9:2b:ed:7e:16:22:49:29:4e:51:05:fc:45:d0:1e:5a: 4b:ca:48:7f:5e:52:4c:74:2f:09:60:ba:a8:48:9a:48:de:d2: 6b:d0:35:31:7f:b8:64:68:6c:f3:5e:78:89:ba:18:c6:a0:36: b2:e1:67:e0:1d:b6:b5:eb:e7:11:57:aa:1c:3e:1e:33:b3:97: 69:e8:4c:8a:c1:9d:49:10:55:3e:cd:1e:b7:b1:2d:c1:b1:18: ed:f9:89:97:a5:a4:ad:3c:d1:df:fb:65:89:1d:3b:89:2b:22: 74:89:33:da:4f:6e:66:f4:66:df:c1:e8:94:82:48:16:3e:93: fc:e2:3b:d0:ec:c6:76:86:e9:3b:6f:2e:b7:8b:39:9a:8b:9f: 0e:b8:b6:55:a4:d2:54:31:1e:84:a4:46:22:db:10:f5:29:33: 0a:fd:e4:0b:a2:c7:1a:a0:1f:be:ea:66:78:26:8b:7e:3c:28: 93:53:5a:dd:d8:6a:37:fa:8e:29:d8:b0:d4:f3:65:22:6f:55: 5d:c5:7b:a8:31:3e:e3:a6:0e:97:59:b2:db:38:79:92:3f:25: 71:d6:2e:ab:1d:b5:3c:7d:6d:53:11:90:f8:22:8d:a0:0b:d9: 1d:1d:6b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nTvQ17RSTQC/ZINbLRNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy YzU4ODcwHhcNMjUxMjA3MDcwMTA4WhcNMjUxMjA4MDcwMTA4WjAzMTEwLwYDVQQD EygyMzU0ZWRmOTAzOWE4ZDJmN2M3NWJiM2ZjZTA0NGVmNGQ4YWI5MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkfheYGZwyjEsjDPAMnlFZMBV4ov OGCP+U6NkcxrW22Wdj+jWFnlIgnhmHGnOF1YKoPUJzsCUxy5DbowE9SKatfBsMAT cn9ESFyuSe8DFBq0yfMFzAD8pQa1B5K+5K/kS2yfRKgM2sqMq5RAeOBnY1ahe51o CQmEgm+Ox8CNbEzOHRqvIeb4gIyRtDZDpDGF1VsNyF5XDPXLlyd94K9OzZMOsHPN jd4p/cHB3QAqL7eceyGJnNF7LbBxGkl1FnxO6iLpjJmnEj6JyUryloqnT/oyIdJu MX9U9KRSUnbzUsgqYVRJtZXRtywYSRRtGr7mBwRI0rkCyHxuA7cEAhtF3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNU7fkDmo0vfHW7P84ETvTYq5BWMB8GA1UdIwQY MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt YjViOGQwMjQ0OGI4LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4 LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuQ23TYy ZZovgpmgzsxDi0jIAqe5K+1+FiJJKU5RBfxF0B5aS8pIf15STHQvCWC6qEiaSN7S a9A1MX+4ZGhs8154iboYxqA2suFn4B22tevnEVeqHD4eM7OXaehMisGdSRBVPs0e t7EtwbEY7fmJl6WkrTzR3/tliR07iSsidIkz2k9uZvRm38HolIJIFj6T/OI70OzG dobpO28ut4s5moufDri2VaTSVDEehKRGItsQ9SkzCv3kC6LHGqAfvupmeCaLfjwo k1Na3dhqN/qOKdiw1PNlIm9VXcV7qDE+46YOl1my2zh5kj8lcdYuqx21PH1tUxGQ +CKNoAvZHR1rlg== -----END CERTIFICATE-----Generated at Sun Dec 7 12:28:25 2025 by rpki-client