This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json) Hash identifier: hkGJhcxYYsI2DkIkeZzM5vWMJ6CJCAGdokzwrzJhtVY= Subject key identifier: 5E:B5:AE:D8:D2:70:D8:4E:AC:DB:B4:87:19:C0:B3:9E:67:8E:F3:05 Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60 Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260 Certificate serial: 019AF2ADAD8CC847770D86A73B36962D1D2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft Manifest number: 0CF2 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=) 2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: qdrr16EL9JL0XR0ea6L+Tythql4/5lNy93T0q/NdHC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ad:8c:c8:47:77:0d:86:a7:3b:36:96:2d:1d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260 Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=5eb5aed8d270d84eacdbb48719c0b39e678ef305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:f5:e4:10:38:71:fe:80:fa:7e:fe:96:75: a8:76:ac:a6:46:ff:a7:d0:e8:75:0f:9f:14:77:8c: 68:7d:1c:ba:cb:12:08:77:86:65:7b:0b:b9:8d:dd: a0:da:58:73:8f:ce:fe:99:53:c5:b3:49:a7:14:5c: 6c:77:3a:11:61:cb:f7:7c:8f:a4:77:7e:73:5f:3c: b3:ed:0c:11:89:9f:44:df:4e:3b:55:5a:65:8d:b3: 88:4f:e0:5d:15:90:fe:55:ac:d2:ed:45:9d:26:96: b3:02:5b:89:33:2b:27:50:65:30:98:5c:82:89:b7: 21:18:80:83:42:aa:04:72:c2:26:bd:2b:d7:e6:41: 0b:24:09:2c:cb:1f:09:3f:c3:a4:af:af:0e:91:c5: 5c:b8:66:1e:f8:1c:e5:13:52:70:f2:23:e2:6e:c2: c1:19:13:d7:19:7f:a5:0b:e5:dc:16:94:ef:18:c3: 8b:e4:0c:a2:86:ee:d2:36:91:87:72:9b:d1:8a:da: 8f:c1:69:67:74:a7:4a:c2:31:6a:77:59:58:4a:f4: a9:8a:db:60:17:3c:51:5e:8a:b7:72:e4:f0:a8:7e: 2b:9a:dc:3d:89:4a:6e:a9:97:4a:e3:3c:54:e2:f4: 4a:2a:04:7f:fb:e3:cd:6b:95:d9:dd:5a:c2:45:22: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B5:AE:D8:D2:70:D8:4E:AC:DB:B4:87:19:C0:B3:9E:67:8E:F3:05 X509v3 Authority Key Identifier: keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:f1:f5:03:13:c2:58:19:ff:f1:0c:bc:55:1c:49:94:14:c3: 64:ef:98:58:b3:3f:7c:c2:56:6c:67:79:02:5d:d8:87:03:63: da:60:19:8f:db:3f:5b:5f:27:f7:11:92:f6:8c:69:8a:15:52: b6:c5:1a:39:21:53:3b:6e:a5:b3:70:83:02:fb:5b:29:e0:65: 9a:65:3b:a2:5c:38:8b:2c:0b:32:27:a6:3c:06:57:c4:57:3c: e5:fe:a5:70:a7:ae:c4:a6:b5:cc:05:f5:b0:c7:44:b0:61:7f: 60:1a:06:df:62:f9:c8:69:0e:0c:9e:96:45:4a:0a:c3:3f:47: d9:43:e6:47:8d:b9:4a:77:5d:10:48:db:f6:fb:07:f4:31:49: 24:29:00:22:3b:40:4e:06:55:a8:e7:fb:f0:4b:ce:69:49:8b: c4:4d:6a:46:18:4d:be:7e:a9:5f:ee:8d:4e:49:51:e6:09:2d: 80:68:e8:25:b3:31:32:72:05:89:07:9b:86:36:5f:00:1e:8b: ac:92:2f:fe:16:4d:df:04:d6:13:2b:a3:a3:0b:0d:7d:19:69: 2d:bb:40:0c:52:e0:59:ee:47:d5:25:65:c5:96:87:4e:b1:b2: 4b:e2:bd:5f:65:89:4e:3f:32:03:1a:a6:26:b4:58:42:31:79: 05:2d:1b:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra2MyEd3DYanOzaWLR0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTYxM2JlZWJiN2VmMzY5OTJjMDQ5MWFkMTNiMjY3MDcw NTcyNjAwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD Eyg1ZWI1YWVkOGQyNzBkODRlYWNkYmI0ODcxOWMwYjM5ZTY3OGVmMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR/15BA4cf6A+n7+lnWodqymRv+n 0Oh1D58Ud4xofRy6yxIId4Zlewu5jd2g2lhzj87+mVPFs0mnFFxsdzoRYcv3fI+k d35zXzyz7QwRiZ9E3047VVpljbOIT+BdFZD+VazS7UWdJpazAluJMysnUGUwmFyC ibchGICDQqoEcsImvSvX5kELJAksyx8JP8Okr68OkcVcuGYe+BzlE1Jw8iPibsLB GRPXGX+lC+XcFpTvGMOL5Ayihu7SNpGHcpvRitqPwWlndKdKwjFqd1lYSvSpittg FzxRXoq3cuTwqH4rmtw9iUpuqZdK4zxU4vRKKgR/++PNa5XZ3VrCRSJATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF61rtjScNhOrNu0hxnAs55njvMFMB8GA1UdIwQY MBaAFI/mE77rt+82mSwEka0TsmcHBXJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYt ZmE2NjU0YTJhNmZlLzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYtZmE2NjU0YTJhNmZl LzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0PH1AxPC WBn/8Qy8VRxJlBTDZO+YWLM/fMJWbGd5Al3YhwNj2mAZj9s/W18n9xGS9oxpihVS tsUaOSFTO26ls3CDAvtbKeBlmmU7olw4iywLMiemPAZXxFc85f6lcKeuxKa1zAX1 sMdEsGF/YBoG32L5yGkODJ6WRUoKwz9H2UPmR425SnddEEjb9vsH9DFJJCkAIjtA TgZVqOf78EvOaUmLxE1qRhhNvn6pX+6NTklR5gktgGjoJbMxMnIFiQebhjZfAB6L rJIv/hZN3wTWEyujowsNfRlpLbtADFLgWe5H1SVlxZaHTrGyS+K9X2WJTj8yAxqm JrRYQjF5BS0bSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:59 2025 by rpki-client