This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft File: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft (raw, json) Hash identifier: hBUqolTmPMNgJmMa7/fM+pUXyaKFY2Q0vJgxrYPiNQ0= Subject key identifier: 34:56:08:4A:1E:B9:38:54:43:95:74:2E:58:6B:44:AF:D2:F0:54:28 Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4 Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4 Certificate serial: 019AFBB18A3CED0A3EC314D297C4362DD50E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft Manifest number: 1487 Signing time: Mon 08 Dec 2025 02:01:47 +0000 Manifest this update: Mon 08 Dec 2025 02:01:47 +0000 Manifest next update: Tue 09 Dec 2025 02:01:47 +0000 Files and hashes: 1: 4OlXHZjPNi_ZrlyOHLrnACz2H5w.roa (hash: WcKTWMqR73pqlk4NefweGCzhLoO2KaXXmg8w4iimJxY=) 2: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl (hash: zoOol9d8Ze2zoqALA4nMBGAt/F8YvRByQNPDIzDEqPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:8a:3c:ed:0a:3e:c3:14:d2:97:c4:36:2d:d5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4 Validity Not Before: Dec 8 02:01:47 2025 GMT Not After : Dec 9 02:01:47 2025 GMT Subject: CN=3456084a1eb938544395742e586b44afd2f05428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:05:98:dc:d3:03:71:c3:c4:1a:06:21:78: f7:b7:4e:2e:aa:15:99:dd:e9:10:37:7b:96:13:85: a9:82:4f:16:ac:ca:f7:07:22:9a:e3:b3:d9:96:f7: 98:54:a3:94:11:7c:df:3b:b3:62:f7:27:53:b4:93: 5a:af:9d:28:7c:e1:66:d3:e2:d5:b7:99:5f:9e:cd: 01:69:d5:b3:da:ee:0b:c6:dc:8a:92:b1:dd:24:ba: 33:ee:a2:4f:38:a9:83:3b:8f:d1:3c:b9:1c:88:c9: b1:fa:da:ff:c8:57:6d:52:a4:91:e9:02:0a:b0:61: 40:12:b7:31:60:a7:f0:70:a8:ad:80:06:ef:03:a5: 37:1d:57:3e:31:4c:26:a1:6a:eb:7f:32:37:08:54: a1:dc:d1:65:1e:38:d2:0a:ad:8f:28:86:1c:a8:2a: 1b:82:93:ae:d7:b6:1d:60:28:91:6b:f7:ec:e6:1b: 57:2f:a0:39:8b:91:06:8d:92:a1:1b:f5:15:e8:b9: 13:da:f9:df:bb:36:d9:3e:ba:6e:f4:8d:46:05:a6: 01:32:70:1d:d4:5d:b5:2b:d4:67:92:cb:c0:ee:78: 69:c7:15:af:ab:c0:da:9e:ce:04:06:9a:6c:9d:56: ad:f5:ef:f9:95:a7:6a:00:bd:19:51:7e:b7:a6:39: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:56:08:4A:1E:B9:38:54:43:95:74:2E:58:6B:44:AF:D2:F0:54:28 X509v3 Authority Key Identifier: keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:7b:e1:08:2d:0f:c1:82:1d:75:01:ac:f9:ed:a2:67:d0:35: 36:d5:93:69:40:cc:b2:6c:a7:22:05:92:03:86:4a:f4:bd:e8: 55:ae:44:4b:6a:b5:7f:65:9c:7b:0c:d4:a2:6e:03:62:9f:b3: 4d:ce:df:5f:3f:11:67:2a:4a:d1:de:a0:fb:04:a1:f0:47:71: bc:9c:bd:9c:84:a9:9a:99:a6:61:f9:ea:5c:fa:7c:86:77:60: 69:f0:c4:0a:b5:48:35:5a:54:ff:ce:75:5b:95:f1:c6:65:aa: 1b:67:a4:73:42:d8:56:17:3a:1e:d1:c6:80:a4:6f:66:69:f3: ff:ca:e3:ef:ff:96:44:b3:1b:15:ba:df:81:ed:a4:c5:17:e8: aa:af:2c:f8:7e:54:a4:23:bd:b4:85:b3:80:bc:3b:b0:fd:ac: 80:3c:42:fa:a9:f0:6f:52:df:38:cc:f8:a1:16:78:e2:ef:98: 55:fb:41:18:68:2b:e3:cf:99:ff:b5:41:6a:0d:4f:74:f3:2a: 73:96:61:10:a4:28:1d:fe:e6:0d:96:df:51:cd:c1:47:3a:75: 68:d5:6b:4a:c4:0e:cc:d6:e7:21:78:de:16:be:0d:0f:de:46: 10:d2:70:df:93:22:60:0b:69:a4:08:e9:33:85:e9:55:4e:4f: 01:1f:b3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sYo87Qo+wxTSl8Q2LdUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZDA5ODE3ZGZlYTRjNjZjOTQxOGY5ZjM5MDZmMWQwZTA3 Y2M5ZDQwHhcNMjUxMjA4MDIwMTQ3WhcNMjUxMjA5MDIwMTQ3WjAzMTEwLwYDVQQD EygzNDU2MDg0YTFlYjkzODU0NDM5NTc0MmU1ODZiNDRhZmQyZjA1NDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZkFmNzTA3HDxBoGIXj3t04uqhWZ 3ekQN3uWE4Wpgk8WrMr3ByKa47PZlveYVKOUEXzfO7Ni9ydTtJNar50ofOFm0+LV t5lfns0BadWz2u4LxtyKkrHdJLoz7qJPOKmDO4/RPLkciMmx+tr/yFdtUqSR6QIK sGFAErcxYKfwcKitgAbvA6U3HVc+MUwmoWrrfzI3CFSh3NFlHjjSCq2PKIYcqCob gpOu17YdYCiRa/fs5htXL6A5i5EGjZKhG/UV6LkT2vnfuzbZPrpu9I1GBaYBMnAd 1F21K9RnksvA7nhpxxWvq8Dans4EBppsnVat9e/5ladqAL0ZUX63pjnYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRWCEoeuThUQ5V0LlhrRK/S8FQoMB8GA1UdIwQY MBaAFI3QmBff6kxmyUGPnzkG8dDgfMnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamRDWUY5X3FUR2JKUVktZk9RYngwT0I4eWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MzM3ZWMtYjRkZS00NDlhLWI2MDct ZWE5Y2I1MjdhZTcxLzEvamRDWUY5X3FUR2JKUVktZk9RYngwT0I4eWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MzM3ZWMtYjRkZS00NDlhLWI2MDctZWE5Y2I1MjdhZTcx LzEvamRDWUY5X3FUR2JKUVktZk9RYngwT0I4eWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnvhCC0P wYIddQGs+e2iZ9A1NtWTaUDMsmynIgWSA4ZK9L3oVa5ES2q1f2WcewzUom4DYp+z Tc7fXz8RZypK0d6g+wSh8EdxvJy9nISpmpmmYfnqXPp8hndgafDECrVINVpU/851 W5XxxmWqG2ekc0LYVhc6HtHGgKRvZmnz/8rj7/+WRLMbFbrfge2kxRfoqq8s+H5U pCO9tIWzgLw7sP2sgDxC+qnwb1LfOMz4oRZ44u+YVftBGGgr48+Z/7VBag1PdPMq c5ZhEKQoHf7mDZbfUc3BRzp1aNVrSsQOzNbnIXjeFr4ND95GENJw35MiYAtppAjp M4XpVU5PAR+zmA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:40:06 2025 by rpki-client