This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json) Hash identifier: xtK8PX5vUspmpf6NGsaiqm9znVGVCs2YSnUt2q4m7mY= Subject key identifier: 58:64:19:43:7D:6C:EE:D5:4A:16:19:4D:C5:F8:7B:B8:16:16:F7:85 Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 019B329EFBE297A70A493343BB5BC5ABA4EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft Manifest number: 17AA Signing time: Thu 18 Dec 2025 18:00:38 +0000 Manifest this update: Thu 18 Dec 2025 18:00:38 +0000 Manifest next update: Fri 19 Dec 2025 18:00:38 +0000 Files and hashes: 1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=) 2: 6pI4rPUTKVvTrVOh8tqAaIsA1vY.roa (hash: aASYzp9cOFgGmo0AYwKequguAVA8BNkIMF2yI49ggIw=) 3: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=) 4: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=) 5: RHKQCLh9p5JzpuKanJX0DkMRUlA.roa (hash: o9uzhadYctQ+ct/9t6KVMIQQ2ktWwbMKXVh4ukOS++c=) 6: Tge76w--mLK8h6ItDfaBoPjYqVo.roa (hash: 9V3RUbTnMu3g1emAx63hoe2FPk/d/B5APDPw6pVAO0o=) 7: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=) 8: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: sgm3xwU8ZebbQdHzD4qLaVb7FkWyj64RCJZzvH2kd5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:fb:e2:97:a7:0a:49:33:43:bb:5b:c5:ab:a4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Dec 18 18:00:38 2025 GMT Not After : Dec 19 18:00:38 2025 GMT Subject: CN=586419437d6ceed54a16194dc5f87bb81616f785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:57:a2:7d:52:03:76:62:27:97:1f:e6:87: 86:dc:98:95:04:5b:94:5a:a7:8f:64:99:2f:a5:c2: 24:8e:49:57:26:95:1b:ce:c5:2a:7d:87:1a:9d:93: 74:6e:0b:9d:46:0a:24:a6:09:a3:40:d4:a7:41:80: d7:ae:0d:99:a0:70:aa:e4:b6:d7:5f:1d:7e:c7:0e: 33:09:3a:ec:fb:41:ac:04:a9:85:0a:30:46:83:9a: 33:04:57:0a:ee:e9:34:4a:2b:c0:de:26:d0:32:bd: 93:99:d0:e2:4e:c5:d9:dc:3f:ff:22:e0:ac:fc:b9: 55:0b:01:73:63:13:28:34:c1:e1:07:e8:fe:7b:7d: ab:c0:b5:34:3c:8a:1b:7b:3d:89:a2:b1:9f:cc:31: d9:57:af:31:aa:99:4c:38:cb:05:7e:a9:e9:c6:f3: 16:aa:0a:16:c2:01:49:6e:be:8d:6d:be:a1:b8:9c: 5e:48:64:58:f1:82:c5:be:b2:53:9f:19:30:3b:63: 76:bb:bd:96:b5:b6:3f:cf:db:e0:46:a8:70:05:c6: 07:79:d7:9d:23:7b:7c:92:ad:6d:2d:a4:49:dd:90: ad:3b:84:bd:e7:0b:e1:d7:2c:ce:86:f5:a0:22:48: 7d:3b:d3:7e:0f:51:92:0e:6a:31:75:e3:9b:48:7c: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:64:19:43:7D:6C:EE:D5:4A:16:19:4D:C5:F8:7B:B8:16:16:F7:85 X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:bd:77:8f:5f:26:c0:6b:e0:e8:26:40:a4:ef:32:93:12:7c: f6:70:78:8d:3c:29:f0:02:94:61:88:0e:b5:df:60:56:58:3c: c3:92:55:04:72:18:dd:d5:fe:1c:ec:fb:fb:4b:c7:5e:17:d1: a5:3c:ae:eb:ec:c4:5e:8d:94:10:a8:2b:b9:cb:09:63:1d:a7: aa:08:37:68:a6:a5:bb:06:76:22:ff:9c:0c:a7:49:ce:53:a6: 55:b7:26:48:b4:80:bf:d7:86:72:af:d2:31:ae:06:37:bb:92: 4b:5c:2f:fe:53:d0:a6:e5:30:da:6b:a8:5c:af:65:e1:ee:2c: 47:29:5f:75:01:c5:39:38:7f:7c:7b:ad:15:f2:d0:25:c3:8b: 2f:e3:ce:8c:80:6b:79:93:56:49:e2:56:d1:68:23:ed:96:06: b2:fb:9f:47:88:40:6b:30:95:9f:30:2c:34:5f:37:44:c5:0d: d4:b1:11:03:32:a3:b7:85:75:b2:24:b6:b6:8b:c4:03:87:10: ca:94:6d:d7:e4:d3:0e:33:86:b4:f4:96:92:6d:f6:9f:4a:de: 81:34:30:cf:79:a0:94:38:0f:a5:6b:7e:c4:70:01:a7:b7:c7: c6:34:bc:c5:ee:63:76:16:af:08:d3:97:4b:79:51:38:77:1e: f8:fa:02:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynvvil6cKSTNDu1vFq6TqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjUxMjE4MTgwMDM4WhcNMjUxMjE5MTgwMDM4WjAzMTEwLwYDVQQD Eyg1ODY0MTk0MzdkNmNlZWQ1NGExNjE5NGRjNWY4N2JiODE2MTZmNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHdXon1SA3ZiJ5cf5oeG3JiVBFuU WqePZJkvpcIkjklXJpUbzsUqfYcanZN0bgudRgokpgmjQNSnQYDXrg2ZoHCq5LbX Xx1+xw4zCTrs+0GsBKmFCjBGg5ozBFcK7uk0SivA3ibQMr2TmdDiTsXZ3D//IuCs /LlVCwFzYxMoNMHhB+j+e32rwLU0PIobez2JorGfzDHZV68xqplMOMsFfqnpxvMW qgoWwgFJbr6Nbb6huJxeSGRY8YLFvrJTnxkwO2N2u72WtbY/z9vgRqhwBcYHeded I3t8kq1tLaRJ3ZCtO4S95wvh1yzOhvWgIkh9O9N+D1GSDmoxdeObSHxxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhkGUN9bO7VShYZTcX4e7gWFveFMB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML13j18m wGvg6CZApO8ykxJ89nB4jTwp8AKUYYgOtd9gVlg8w5JVBHIY3dX+HOz7+0vHXhfR pTyu6+zEXo2UEKgrucsJYx2nqgg3aKaluwZ2Iv+cDKdJzlOmVbcmSLSAv9eGcq/S Ma4GN7uSS1wv/lPQpuUw2muoXK9l4e4sRylfdQHFOTh/fHutFfLQJcOLL+POjIBr eZNWSeJW0Wgj7ZYGsvufR4hAazCVnzAsNF83RMUN1LERAzKjt4V1siS2tovEA4cQ ypRt1+TTDjOGtPSWkm32n0regTQwz3mglDgPpWt+xHABp7fHxjS8xe5jdhavCNOX S3lROHce+PoC6w== -----END CERTIFICATE-----Generated at Thu Dec 18 23:46:24 2025 by rpki-client