This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json) Hash identifier: jO5C8xDvNudTcP8OFaRLvQo3qPscljVb79jpn8JfAN0= Subject key identifier: 3F:2C:7A:92:61:8E:21:C9:F2:49:5E:8D:82:49:52:2E:71:E0:91:21 Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 019AF0F5F2296DE646248212173A02F18547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft Manifest number: 1788 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=) 2: 6pI4rPUTKVvTrVOh8tqAaIsA1vY.roa (hash: aASYzp9cOFgGmo0AYwKequguAVA8BNkIMF2yI49ggIw=) 3: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=) 4: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=) 5: RHKQCLh9p5JzpuKanJX0DkMRUlA.roa (hash: o9uzhadYctQ+ct/9t6KVMIQQ2ktWwbMKXVh4ukOS++c=) 6: Tge76w--mLK8h6ItDfaBoPjYqVo.roa (hash: 9V3RUbTnMu3g1emAx63hoe2FPk/d/B5APDPw6pVAO0o=) 7: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=) 8: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: OvGwIYy2fOo/U0IpXujkTafINHe9fS4i5u5mSvihnTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f2:29:6d:e6:46:24:82:12:17:3a:02:f1:85:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=3f2c7a92618e21c9f2495e8d8249522e71e09121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:e9:8e:4e:18:e2:eb:64:37:44:35:ab:ae: e0:fc:58:ae:3b:ad:bc:53:21:6c:08:5a:6d:b7:93: ed:62:9c:5d:d1:be:b0:93:ff:fd:b9:03:d2:72:d3: ad:95:0a:d6:70:86:ce:4b:fe:cc:cc:3c:e0:91:e5: 1c:93:5c:0f:45:54:14:d9:d1:24:40:9d:60:c2:99: 75:7b:a8:ac:9e:83:3c:cb:bb:ae:b5:24:87:52:29: ac:99:13:d6:58:35:57:c5:66:ac:b8:d6:83:af:e2: d5:bb:b8:ee:1b:b1:36:6a:4b:8b:64:9c:e9:68:58: 56:fe:62:33:c2:84:e3:fb:c6:75:72:8b:a3:c9:56: 22:44:29:b6:e0:66:f0:5e:da:c9:88:35:54:c8:bb: 81:df:a3:27:e8:68:37:ef:f4:bd:2d:b0:52:1f:42: 24:21:b9:54:18:91:d1:6a:02:ea:9d:61:6d:6c:2b: f2:44:ad:8d:b9:74:d9:24:cc:44:2a:49:ac:0f:ea: 7b:93:41:8f:45:c9:17:71:a6:c0:48:d1:56:47:02: 11:37:9e:6a:9c:5a:3c:59:4b:24:6e:7d:25:45:9d: 08:94:52:3d:b7:8a:7c:e6:36:dc:3a:f4:56:d6:c7: c9:be:47:23:71:c0:54:6e:be:a6:8b:82:f4:87:aa: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2C:7A:92:61:8E:21:C9:F2:49:5E:8D:82:49:52:2E:71:E0:91:21 X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:00:19:5f:18:63:89:b3:33:a0:1a:e1:78:6c:29:6a:ac:e1: c4:4a:1d:86:73:5c:f7:20:f8:1a:27:1a:6d:eb:a4:6a:c4:7d: a1:29:25:39:e5:6f:50:94:8c:3c:8b:ee:1c:91:6e:b0:73:a4: 38:86:f0:f1:06:5c:75:da:96:c5:8d:e6:0a:d7:b7:a7:2d:27: e8:5c:a1:be:71:7c:ab:ef:3e:19:f9:c7:cb:68:13:f6:b2:5e: 9c:90:4b:63:97:06:5a:c6:ad:94:b9:cf:d8:e4:96:05:6e:df: fb:a0:73:54:d9:3f:73:64:c6:fe:12:26:2a:08:84:95:a9:17: 2a:05:f9:d4:04:65:6e:f5:ff:a0:1e:73:ca:e4:4b:59:a5:4d: bf:2f:ce:46:b2:3c:06:67:76:19:23:aa:bd:c9:b4:ab:0d:a4: 87:96:6f:71:b7:c6:38:6c:29:67:fa:40:c4:d2:83:52:3c:e2: 2e:ca:29:e1:a2:c5:be:83:d9:04:95:e2:f9:79:95:69:97:ab: a8:f9:c5:38:39:de:e7:d9:d2:62:65:8a:b0:51:89:de:e8:60: 32:cd:aa:57:f7:64:13:41:dc:bc:ac:5f:b5:4a:a3:cc:62:49: 6c:cc:a4:70:3b:4b:fe:0b:4d:be:c0:b5:fb:02:0f:36:3a:8f: fc:21:f4:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fIpbeZGJIISFzoC8YVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EygzZjJjN2E5MjYxOGUyMWM5ZjI0OTVlOGQ4MjQ5NTIyZTcxZTA5MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMTpjk4Y4utkN0Q1q67g/FiuO628 UyFsCFptt5PtYpxd0b6wk//9uQPSctOtlQrWcIbOS/7MzDzgkeUck1wPRVQU2dEk QJ1gwpl1e6isnoM8y7uutSSHUimsmRPWWDVXxWasuNaDr+LVu7juG7E2akuLZJzp aFhW/mIzwoTj+8Z1coujyVYiRCm24GbwXtrJiDVUyLuB36Mn6Gg37/S9LbBSH0Ik IblUGJHRagLqnWFtbCvyRK2NuXTZJMxEKkmsD+p7k0GPRckXcabASNFWRwIRN55q nFo8WUskbn0lRZ0IlFI9t4p85jbcOvRW1sfJvkcjccBUbr6mi4L0h6ofWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8sepJhjiHJ8klejYJJUi5x4JEhMB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAAZXxhj ibMzoBrheGwpaqzhxEodhnNc9yD4GicabeukasR9oSklOeVvUJSMPIvuHJFusHOk OIbw8QZcddqWxY3mCte3py0n6FyhvnF8q+8+GfnHy2gT9rJenJBLY5cGWsatlLnP 2OSWBW7f+6BzVNk/c2TG/hImKgiElakXKgX51ARlbvX/oB5zyuRLWaVNvy/ORrI8 Bmd2GSOqvcm0qw2kh5ZvcbfGOGwpZ/pAxNKDUjziLsop4aLFvoPZBJXi+XmVaZer qPnFODne59nSYmWKsFGJ3uhgMs2qV/dkE0HcvKxftUqjzGJJbMykcDtL/gtNvsC1 +wIPNjqP/CH0hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:53:56 2025 by rpki-client