This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json) Hash identifier: UuX8PZVrOXdr/AjDfUaY4S1z8mtdKPBDcOXr9wkbzO0= Subject key identifier: 08:F2:39:D9:A2:94:2E:C0:CA:E7:49:FB:41:DB:F2:C0:FF:72:58:CF Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338 Certificate serial: 019AF50AEBD0DFA7EFF36BF853A83FCDF2A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:02:04 +0000 Manifest this update: Sat 06 Dec 2025 19:02:04 +0000 Manifest next update: Sun 07 Dec 2025 19:02:04 +0000 Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=) 2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=) 3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: f4Giu8dsbObDu8ovHnhqyOVTQ6HXDNxCcWTj8QZRfUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:eb:d0:df:a7:ef:f3:6b:f8:53:a8:3f:cd:f2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338 Validity Not Before: Dec 6 19:02:04 2025 GMT Not After : Dec 7 19:02:04 2025 GMT Subject: CN=08f239d9a2942ec0cae749fb41dbf2c0ff7258cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:9c:35:42:6f:88:cd:f2:33:42:ff:ff:c1: 97:e6:e7:5d:b0:b5:a0:2c:7f:e4:91:a6:ee:e9:f1: 0f:fd:80:e1:3e:3f:31:ed:1a:78:0b:c5:a5:86:e8: 29:d6:03:b3:bf:8e:1a:05:e9:48:4d:5d:fc:e3:d0: 9a:eb:20:9f:7c:57:c2:c4:dc:19:73:db:cf:60:1a: 83:1f:11:5b:f8:85:ca:de:98:c3:55:37:66:a9:1d: 5b:0d:1d:25:56:3b:4a:52:fb:76:cf:d0:0b:59:7e: d5:4a:53:c0:da:08:c3:83:6d:c0:be:ae:ae:bd:b9: c7:d8:49:aa:26:2c:bc:f8:2b:1b:51:f4:85:7b:16: 38:76:24:83:58:cf:92:63:af:9c:20:bf:62:73:04: 84:24:f0:23:35:73:f9:6c:a3:c4:e7:6e:cb:61:15: 1a:e1:20:83:f4:43:07:0b:65:da:06:c3:a5:88:43: 81:f7:4e:3a:3c:d8:9e:fd:45:fe:4f:c9:35:22:d7: 2f:fa:ce:58:16:09:0d:a4:87:8e:ec:86:13:e5:7e: 76:0b:a3:15:9d:0f:76:27:31:64:23:53:73:b7:98: 4e:ea:83:72:ae:52:1e:87:70:f4:84:21:cb:a2:5c: ee:c1:01:f4:7e:2c:ea:79:23:cc:4f:13:15:2d:a2: 8f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F2:39:D9:A2:94:2E:C0:CA:E7:49:FB:41:DB:F2:C0:FF:72:58:CF X509v3 Authority Key Identifier: keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4b:02:d3:53:10:1f:53:b7:7b:74:08:03:45:ca:98:ae:18: cf:c2:59:81:31:b2:a3:5a:4e:d3:38:74:6b:62:13:45:f9:48: 54:d8:d2:af:4c:c0:04:24:78:a2:ec:97:9e:f8:14:38:b8:f8: 81:33:29:1c:4b:17:d1:05:c6:71:a8:57:30:76:54:b9:10:c4: e1:e7:ce:f9:47:9c:45:04:f3:a0:a1:42:34:59:bf:24:30:4d: a3:ac:9d:d0:fb:8d:a5:f8:50:aa:cf:2c:73:67:69:8c:d5:0f: d3:80:2a:d8:c8:fa:7d:af:e9:a1:1b:89:b1:2b:da:7a:21:9c: 5a:08:e9:6b:c9:53:e7:da:ce:e7:1e:cd:49:9f:11:3d:b7:ee: 17:bf:46:9f:e4:4b:b4:08:82:5d:8c:e5:8c:58:0a:64:43:7a: 6a:ab:d7:ad:bf:8d:9f:f1:d2:46:29:fb:98:04:3b:e0:a9:43: 6e:79:22:98:a4:e1:01:58:ef:fb:1c:b3:ed:ce:c4:ae:b8:90: 9d:93:02:3a:8b:b2:d2:54:08:1a:2b:51:8d:f1:8a:f2:03:2d: 75:7b:59:10:16:98:15:7b:a2:d1:75:67:ba:27:5b:bf:ca:4a: 4d:ea:79:d8:7f:66:d3:bc:56:32:f7:eb:87:b9:da:22:c5:62: df:a8:f6:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuvQ36fv82v4U6g/zfKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4 NzEzMzgwHhcNMjUxMjA2MTkwMjA0WhcNMjUxMjA3MTkwMjA0WjAzMTEwLwYDVQQD EygwOGYyMzlkOWEyOTQyZWMwY2FlNzQ5ZmI0MWRiZjJjMGZmNzI1OGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeCcNUJviM3yM0L//8GX5uddsLWg LH/kkabu6fEP/YDhPj8x7Rp4C8Wlhugp1gOzv44aBelITV3849Ca6yCffFfCxNwZ c9vPYBqDHxFb+IXK3pjDVTdmqR1bDR0lVjtKUvt2z9ALWX7VSlPA2gjDg23Avq6u vbnH2EmqJiy8+CsbUfSFexY4diSDWM+SY6+cIL9icwSEJPAjNXP5bKPE527LYRUa 4SCD9EMHC2XaBsOliEOB9046PNie/UX+T8k1Itcv+s5YFgkNpIeO7IYT5X52C6MV nQ92JzFkI1Nzt5hO6oNyrlIeh3D0hCHLolzuwQH0fizqeSPMTxMVLaKPHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjyOdmilC7AyudJ+0Hb8sD/cljPMB8GA1UdIwQY MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt NTk5ZDFjYTZhNWZkLzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0sC01MQ H1O3e3QIA0XKmK4Yz8JZgTGyo1pO0zh0a2ITRflIVNjSr0zABCR4ouyXnvgUOLj4 gTMpHEsX0QXGcahXMHZUuRDE4efO+UecRQTzoKFCNFm/JDBNo6yd0PuNpfhQqs8s c2dpjNUP04Aq2Mj6fa/poRuJsSvaeiGcWgjpa8lT59rO5x7NSZ8RPbfuF79Gn+RL tAiCXYzljFgKZEN6aqvXrb+Nn/HSRin7mAQ74KlDbnkimKThAVjv+xyz7c7ErriQ nZMCOouy0lQIGitRjfGK8gMtdXtZEBaYFXui0XVnuidbv8pKTep52H9m07xWMvfr h7naIsVi36j2Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:37 2025 by rpki-client