This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft File: jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json) Hash identifier: lm6aq9lqMiKxZ3NQh7SVf8Re8BZCDKtCDXqyQl1f3AI= Subject key identifier: 2A:7E:F6:AA:A0:9C:BB:B6:17:69:AF:EE:75:05:B0:EE:3C:47:E5:B6 Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a Certificate serial: 019B307988987C7F40CD491A2C0BA754AAB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft Manifest number: 085D Signing time: Thu 18 Dec 2025 08:00:29 +0000 Manifest this update: Thu 18 Dec 2025 08:00:29 +0000 Manifest next update: Fri 19 Dec 2025 08:00:29 +0000 Files and hashes: 1: 8cHr2mkJzn1QpKoQW6YmFw7DlzE.roa (hash: t5szeV65SN4GVGDNCF4ePCjQmk1+gvyVxgvAgyz5YRg=) 2: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=) 3: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: bYCYpEmQVEY21Hv0kCP472BC/h9PbzqC0uxPrqY0cuE=) 4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:88:98:7c:7f:40:cd:49:1a:2c:0b:a7:54:aa:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a Validity Not Before: Dec 18 08:00:29 2025 GMT Not After : Dec 19 08:00:29 2025 GMT Subject: CN=2a7ef6aaa09cbbb61769afee7505b0ee3c47e5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:0f:85:63:3b:b2:8a:0c:1c:a0:ae:f2:bb: c3:97:52:55:d1:2e:b6:e7:7b:d8:b5:b7:e3:99:23: bc:46:88:94:70:06:9b:51:92:67:f0:24:a5:e8:82: c3:fd:aa:4a:95:47:d5:74:4a:f8:0e:48:83:a3:be: 7b:1c:10:1c:17:66:1b:14:08:0d:f6:d6:d7:83:7d: 11:5d:71:10:eb:57:8b:7b:ea:1f:5a:df:da:cf:29: 15:29:dd:3c:a2:2c:1a:6e:aa:11:0d:79:e0:67:a1: 8b:c2:13:00:1f:28:c7:48:30:b0:bb:3d:2a:ef:0c: 46:a2:b0:53:b2:52:cb:a3:cd:c5:a3:5b:68:bc:76: 7e:bf:f1:9b:50:55:80:13:63:df:f5:1b:d0:2f:00: 8d:6b:5e:57:37:12:7b:a3:a0:96:ac:78:ce:79:d4: dd:35:f5:5a:d2:13:31:cf:0c:9f:18:9b:7e:42:b9: 83:cd:00:d3:2f:78:80:39:5b:e1:23:7a:6d:01:72: aa:64:a5:ca:f2:2d:dc:01:5e:d7:22:23:dc:0d:e4: 1a:a2:63:29:06:bf:9b:63:ee:6a:71:6f:1a:8c:00: fe:7c:f6:7d:37:bb:b3:74:ea:79:50:83:32:88:a1: a7:b3:0b:d4:48:ef:aa:7d:3d:1b:4c:10:94:1e:15: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7E:F6:AA:A0:9C:BB:B6:17:69:AF:EE:75:05:B0:EE:3C:47:E5:B6 X509v3 Authority Key Identifier: keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:1d:63:ed:bc:f0:92:17:6b:91:f2:b5:7a:55:b9:19:22:b7: 36:0c:8b:2d:02:a3:ff:6f:04:23:a9:ad:b4:62:72:2e:7a:23: 93:48:16:6b:af:a2:cc:5b:4d:8d:5f:85:5c:a5:38:c5:87:53: 44:c5:f9:da:1e:43:83:cd:58:71:74:d1:ea:28:20:48:30:c4: e9:0e:08:df:15:9a:f4:5d:6e:5f:ab:bc:a2:e3:63:9c:ce:dc: ea:68:ba:98:3d:b1:c7:91:a1:85:c5:da:e5:8f:6d:d0:d5:c3: 2a:b6:5c:45:b7:d5:f2:93:6b:2d:2d:a1:4d:7e:48:25:bf:ec: 82:4b:ed:8b:47:c6:ac:c3:ad:1a:b0:e9:e6:9c:91:d3:e0:4a: fc:4e:61:92:55:2f:45:d7:9f:a9:e4:c1:ea:f9:00:f5:eb:cd: b5:e3:2c:d3:ed:fe:79:73:94:52:f3:40:4d:26:b6:a5:17:ba: f9:cf:d8:d4:6f:9b:94:0d:eb:e0:f5:ed:a6:ca:48:9a:0d:e1: 28:8c:46:df:e6:d3:65:29:ef:e1:e9:8b:da:0f:fe:ef:24:5d: 8b:cf:5c:cc:92:50:ef:78:e7:d7:3c:d1:29:5d:69:28:f1:ff: 8e:04:65:4a:93:83:ca:85:1c:ac:8b:cd:db:b4:3f:99:6d:89: 40:f9:74:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweYiYfH9AzUkaLAunVKqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZmZmMjE1MzhlMjI1NjE4MzE0NjE1ZTRmMGQwNjg4Yjdi MGRkNWEwHhcNMjUxMjE4MDgwMDI5WhcNMjUxMjE5MDgwMDI5WjAzMTEwLwYDVQQD EygyYTdlZjZhYWEwOWNiYmI2MTc2OWFmZWU3NTA1YjBlZTNjNDdlNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2psPhWM7sooMHKCu8rvDl1JV0S62 53vYtbfjmSO8RoiUcAabUZJn8CSl6ILD/apKlUfVdEr4DkiDo757HBAcF2YbFAgN 9tbXg30RXXEQ61eLe+ofWt/azykVKd08oiwabqoRDXngZ6GLwhMAHyjHSDCwuz0q 7wxGorBTslLLo83Fo1tovHZ+v/GbUFWAE2Pf9RvQLwCNa15XNxJ7o6CWrHjOedTd NfVa0hMxzwyfGJt+QrmDzQDTL3iAOVvhI3ptAXKqZKXK8i3cAV7XIiPcDeQaomMp Br+bY+5qcW8ajAD+fPZ9N7uzdOp5UIMyiKGnswvUSO+qfT0bTBCUHhUuiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCp+9qqgnLu2F2mv7nUFsO48R+W2MB8GA1UdIwQY MBaAFIz/8hU44iVhgxRhXk8NBoi3sN1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt MjYxNjY2YzNhNTg5LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5 LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwx1j7bzw khdrkfK1elW5GSK3NgyLLQKj/28EI6mttGJyLnojk0gWa6+izFtNjV+FXKU4xYdT RMX52h5Dg81YcXTR6iggSDDE6Q4I3xWa9F1uX6u8ouNjnM7c6mi6mD2xx5GhhcXa 5Y9t0NXDKrZcRbfV8pNrLS2hTX5IJb/sgkvti0fGrMOtGrDp5pyR0+BK/E5hklUv RdefqeTB6vkA9evNteMs0+3+eXOUUvNATSa2pRe6+c/Y1G+blA3r4PXtpspImg3h KIxG3+bTZSnv4emL2g/+7yRdi89czJJQ73jn1zzRKV1pKPH/jgRlSpODyoUcrIvN 27Q/mW2JQPl07A== -----END CERTIFICATE-----Generated at Thu Dec 18 09:55:09 2025 by rpki-client