This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json) Hash identifier: M6SdaZzGJcf/VpL7NVAHGNdobblF71OGbo/E4YrnIcI= Subject key identifier: 24:8C:8D:DB:E8:54:5F:6F:93:36:53:2E:B8:22:0B:12:C9:64:6F:56 Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Certificate serial: 019AF23FE8B30237B6C04397583614BA1C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft Manifest number: 112D Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=) 2: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: pLPl+O91/fZxU2+shikdudDRRFeYR7yYkQGYk/jdHwo=) 3: pdhN-MZpD_hNi80yknZO7jZPsqI.roa (hash: Vq61y4v3/rCjHkyR2L7fl+qX1NPi84b5r+WF68rRDB4=) 4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e8:b3:02:37:b6:c0:43:97:58:36:14:ba:1c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=248c8ddbe8545f6f9336532eb8220b12c9646f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:14:83:58:6c:3e:13:4a:5d:99:51:89:b8: 20:e8:d8:81:06:27:c6:d7:e9:a8:58:b8:e2:83:dd: 4d:0c:6d:34:1c:74:6b:84:46:38:77:e7:19:f9:6b: 0d:3c:9d:19:42:91:41:58:3b:40:b2:c4:90:53:73: 92:df:e7:47:d5:42:e6:20:80:62:24:a2:9a:a6:9b: 3e:1e:9f:8f:4a:27:8e:81:b1:86:e8:68:9a:99:74: 05:60:08:3b:57:6f:1e:d2:23:0f:e9:c7:bf:4f:99: 12:7d:5d:7e:dd:05:6b:61:a0:05:e9:5e:04:da:6a: 03:dc:fd:90:50:d7:93:4f:be:59:bf:5d:f8:c4:b9: cd:dc:0e:a5:41:d0:01:9e:de:64:e8:eb:ec:78:46: d9:e8:a7:2d:b2:1a:60:61:f6:5c:91:16:0f:7e:c3: 9f:49:cf:a7:de:3a:e7:78:1a:8a:99:f1:8f:62:4f: 12:15:01:2d:a1:b3:7c:db:b2:93:e7:9e:fc:d2:94: 41:0f:5a:d9:b8:29:4a:ed:5b:91:41:88:ad:88:6b: 27:b9:44:2d:f4:d5:67:11:e1:a8:dd:29:8e:76:dd: 54:80:bf:c3:44:86:4c:83:a1:8b:08:1d:c0:1b:ec: ee:01:d8:d6:6c:7a:28:0d:7e:1e:c7:94:c4:07:c2: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8C:8D:DB:E8:54:5F:6F:93:36:53:2E:B8:22:0B:12:C9:64:6F:56 X509v3 Authority Key Identifier: keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:84:55:50:e9:41:94:dd:18:81:90:c9:29:1b:c1:e4:e9:8c: 72:45:eb:30:01:8d:a1:15:8f:ac:16:e3:4a:4a:46:f7:df:28: 53:91:ae:79:85:1f:39:f1:33:e0:f0:e1:d6:e3:b9:10:c5:bd: c5:c2:8d:ac:e7:be:10:ae:8e:33:75:88:a3:f4:36:52:2c:87: c4:ed:b1:40:b0:fc:a0:1c:9d:f6:f0:11:cf:a8:bf:3e:4f:46: 59:25:e2:1d:1c:57:22:26:36:f7:e4:ff:fd:5c:04:da:ad:5f: f7:2c:ea:78:3e:6d:14:f8:6d:7f:fd:93:1a:21:69:89:87:a7: 4e:c4:37:06:7d:96:86:27:cb:17:81:6b:74:06:50:95:4d:24: 66:38:8e:6b:f6:75:53:7e:33:59:ec:30:ca:03:ea:3d:ed:c6: e9:5e:a1:85:c3:fa:7a:9e:74:2c:36:94:d8:16:65:93:d8:81: 3c:9a:7d:28:eb:73:fc:81:a9:d3:0e:ed:c7:71:50:ac:ab:50: 82:db:22:d5:02:f0:df:ef:9e:ee:de:03:ed:36:32:c3:cf:67: 54:4f:63:c5:9f:31:13:de:e4:00:f1:37:58:5b:6f:33:9f:59: 67:60:33:32:71:85:47:9a:69:bc:45:18:3d:ab:45:88:21:59: cd:bc:75:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+izAje2wEOXWDYUuhxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy MzZjY2IwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD EygyNDhjOGRkYmU4NTQ1ZjZmOTMzNjUzMmViODIyMGIxMmM5NjQ2ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwoUg1hsPhNKXZlRibgg6NiBBifG 1+moWLjig91NDG00HHRrhEY4d+cZ+WsNPJ0ZQpFBWDtAssSQU3OS3+dH1ULmIIBi JKKapps+Hp+PSieOgbGG6GiamXQFYAg7V28e0iMP6ce/T5kSfV1+3QVrYaAF6V4E 2moD3P2QUNeTT75Zv134xLnN3A6lQdABnt5k6OvseEbZ6KctshpgYfZckRYPfsOf Sc+n3jrneBqKmfGPYk8SFQEtobN827KT55780pRBD1rZuClK7VuRQYitiGsnuUQt 9NVnEeGo3SmOdt1UgL/DRIZMg6GLCB3AG+zuAdjWbHooDX4ex5TEB8JYQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSMjdvoVF9vkzZTLrgiCxLJZG9WMB8GA1UdIwQY MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIRVUOlB lN0YgZDJKRvB5OmMckXrMAGNoRWPrBbjSkpG998oU5GueYUfOfEz4PDh1uO5EMW9 xcKNrOe+EK6OM3WIo/Q2UiyHxO2xQLD8oByd9vARz6i/Pk9GWSXiHRxXIiY29+T/ /VwE2q1f9yzqeD5tFPhtf/2TGiFpiYenTsQ3Bn2WhifLF4FrdAZQlU0kZjiOa/Z1 U34zWewwygPqPe3G6V6hhcP6ep50LDaU2BZlk9iBPJp9KOtz/IGp0w7tx3FQrKtQ gtsi1QLw3++e7t4D7TYyw89nVE9jxZ8xE97kAPE3WFtvM59ZZ2AzMnGFR5ppvEUY PatFiCFZzbx1sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:14 2025 by rpki-client