This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json) Hash identifier: aIzXV8Xfi5U72X4xITg3mzl9feRrdNqdZeMBNXFSA1E= Subject key identifier: 48:E4:BD:E9:FA:26:55:5B:83:58:71:7F:CC:67:6C:D2:3A:FD:CC:54 Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5 Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5 Certificate serial: 019AF31B542E026637CAA98430C2EED11C27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:00:45 +0000 Manifest this update: Sat 06 Dec 2025 10:00:45 +0000 Manifest next update: Sun 07 Dec 2025 10:00:45 +0000 Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=) 2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=) 3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: OrsGY7/cJvlUB1pgqvXPeB/+xkK9G7rhdZ/tkzMUqCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:54:2e:02:66:37:ca:a9:84:30:c2:ee:d1:1c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5 Validity Not Before: Dec 6 10:00:45 2025 GMT Not After : Dec 7 10:00:45 2025 GMT Subject: CN=48e4bde9fa26555b8358717fcc676cd23afdcc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:4c:40:da:04:84:01:df:9b:de:66:64:24: dc:e7:84:88:02:3e:a2:1c:cc:80:be:7c:d9:0c:49: bc:97:1f:ac:55:8d:30:18:c5:e0:f5:ef:59:2e:63: 1a:4b:c6:93:fd:40:55:2f:5e:10:c1:b6:8a:cb:a3: 96:ed:80:b9:6c:77:45:28:d4:52:84:9f:cf:ff:d2: e7:ac:00:cf:41:e5:46:df:d9:5c:e2:10:9a:89:74: 1a:39:0d:f1:ca:a8:13:2b:30:dd:90:fa:40:22:9c: 55:14:14:3d:59:67:02:9a:e5:1d:e4:28:1c:ac:d2: 6c:c8:40:71:15:de:6c:9d:a1:7a:a7:51:02:dc:d2: 7f:99:fb:19:85:a2:67:e5:4a:1f:52:f2:d6:64:c3: 33:b1:27:47:78:0d:26:6a:9e:de:5e:38:af:6c:3d: d8:df:bf:2a:90:5a:bf:d2:b4:db:47:c7:da:76:a1: 35:47:e9:28:50:c7:83:e3:01:d6:3e:a9:fd:ad:bf: 1a:e1:1e:6b:b6:b7:13:29:a3:37:08:8e:6e:99:e3: 35:6f:e2:ed:f1:74:b6:7f:c2:27:1a:aa:9c:ad:23: be:f1:c8:3a:ce:df:ce:9f:7e:81:64:a5:57:4f:80: 18:c5:6a:87:08:39:20:a8:fb:6b:87:18:4e:d8:8d: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E4:BD:E9:FA:26:55:5B:83:58:71:7F:CC:67:6C:D2:3A:FD:CC:54 X509v3 Authority Key Identifier: keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:83:5d:e9:61:da:cb:ad:d8:26:60:18:fc:43:86:04:66:dc: 21:4a:05:16:99:00:3c:1f:a8:16:49:33:a1:3a:70:ac:9a:ad: 7f:86:62:f2:e5:78:93:af:06:8b:8e:29:b2:13:fe:47:6e:41: 77:ab:30:b0:78:14:3d:fd:ee:ab:ce:bf:2e:c1:3f:a2:33:c5: f9:c2:61:4d:79:23:95:d2:79:ac:74:01:43:8a:0c:40:42:82: 89:65:e2:ac:62:22:c1:54:cd:1e:ed:57:91:51:2b:6c:1d:c1: a6:1f:da:65:d4:4b:52:66:11:89:22:d4:78:ba:e3:f9:71:40: 5f:62:e1:0c:08:cf:26:37:bb:9b:ad:7a:99:cd:2d:05:9a:e8: 24:4f:84:96:3a:61:e2:a4:64:b8:00:e3:b6:88:77:a3:89:7a: 3a:41:0a:c8:6f:64:1c:08:03:01:cb:d7:5f:71:ac:51:eb:c2: d8:02:3f:cc:b1:3b:b0:4c:81:d7:2a:8f:b0:e6:36:3b:5c:66: 40:c6:89:c0:3c:6e:f3:6f:15:79:4e:31:be:8a:b1:db:d1:5a: 4f:a6:f4:bf:91:6a:7c:a5:91:5d:41:c6:46:68:21:ef:15:47: 4a:86:5f:b9:65:bf:8b:a1:8f:7b:07:fd:36:16:5f:1b:50:2a: 48:bf:b8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1QuAmY3yqmEMMLu0RwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOGY3ZWI0ZDI1NDhmOWNjYmYzY2IzOGU3MDJhMTkwYzEx NzQyZjUwHhcNMjUxMjA2MTAwMDQ1WhcNMjUxMjA3MTAwMDQ1WjAzMTEwLwYDVQQD Eyg0OGU0YmRlOWZhMjY1NTViODM1ODcxN2ZjYzY3NmNkMjNhZmRjYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgdMQNoEhAHfm95mZCTc54SIAj6i HMyAvnzZDEm8lx+sVY0wGMXg9e9ZLmMaS8aT/UBVL14QwbaKy6OW7YC5bHdFKNRS hJ/P/9LnrADPQeVG39lc4hCaiXQaOQ3xyqgTKzDdkPpAIpxVFBQ9WWcCmuUd5Cgc rNJsyEBxFd5snaF6p1EC3NJ/mfsZhaJn5UofUvLWZMMzsSdHeA0map7eXjivbD3Y 378qkFq/0rTbR8fadqE1R+koUMeD4wHWPqn9rb8a4R5rtrcTKaM3CI5umeM1b+Lt 8XS2f8InGqqcrSO+8cg6zt/On36BZKVXT4AYxWqHCDkgqPtrhxhO2I3YvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjkven6JlVbg1hxf8xnbNI6/cxUMB8GA1UdIwQY MBaAFI2PfrTSVI+cy/PLOOcCoZDBF0L1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYt YWZkMjcyZGQwZmI1LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYtYWZkMjcyZGQwZmI1 LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYNd6WHa y63YJmAY/EOGBGbcIUoFFpkAPB+oFkkzoTpwrJqtf4Zi8uV4k68Gi44pshP+R25B d6swsHgUPf3uq86/LsE/ojPF+cJhTXkjldJ5rHQBQ4oMQEKCiWXirGIiwVTNHu1X kVErbB3Bph/aZdRLUmYRiSLUeLrj+XFAX2LhDAjPJje7m616mc0tBZroJE+Eljph 4qRkuADjtoh3o4l6OkEKyG9kHAgDAcvXX3GsUevC2AI/zLE7sEyB1yqPsOY2O1xm QMaJwDxu828VeU4xvoqx29FaT6b0v5FqfKWRXUHGRmgh7xVHSoZfuWW/i6GPewf9 NhZfG1AqSL+4nw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:59 2025 by rpki-client