This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft File: jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json) Hash identifier: 6BeMtRG/0aK1B/jVELIy5vsET9AWJ604BMmBTHLx6is= Subject key identifier: 5E:AF:EE:12:64:B5:1C:14:E0:48:BC:9F:39:C6:73:A9:AA:24:5C:9D Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c Certificate serial: 019AF465384AFF4569D7A7A3055CC4F8E4E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 16:01:05 +0000 Manifest this update: Sat 06 Dec 2025 16:01:05 +0000 Manifest next update: Sun 07 Dec 2025 16:01:05 +0000 Files and hashes: 1: 8DFREsz67roq72EhqNj788hY8vo.roa (hash: 0z/SHGgj6DLr9WZ0vWVXRQYl+WMBwxnXd13RzpBpoyE=) 2: gYXXaClMotLbmJoUOleGHhnd0Lw.roa (hash: FBHlvCazQHDRqfw7wpw/U/KCEUCJ9oh5ACEVfJCqvj4=) 3: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: RhOJyPGphYwvbtFqXcaGUiROopRbZQsztI/9UvzI3PY=) 4: qbA_9GdwQHPtmS9g6PrCyj74AbM.roa (hash: bivTcz5xx7Jgw1fjpQZeDQON5L3d9aNyp2TKXc5yy2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:38:4a:ff:45:69:d7:a7:a3:05:5c:c4:f8:e4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c Validity Not Before: Dec 6 16:01:05 2025 GMT Not After : Dec 7 16:01:05 2025 GMT Subject: CN=5eafee1264b51c14e048bc9f39c673a9aa245c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:6b:00:cc:82:dd:be:6e:6b:34:b1:45:5e: 53:8c:5b:e6:4f:43:c8:2b:79:bf:33:88:82:10:bf: 74:e1:8c:d7:c3:5c:ee:a8:e8:f5:fd:56:8d:14:ba: 38:bc:0c:18:82:e1:fa:3a:a4:0b:da:67:8d:4f:05: 7c:4b:78:19:55:ae:5b:59:f9:58:e4:0f:94:10:c7: 2d:a2:12:72:d8:24:7a:c8:17:96:2a:7b:1c:3a:39: 2c:ea:98:de:72:38:63:d5:0f:34:29:1d:9a:c1:fa: eb:d5:e1:00:68:26:29:b3:a7:da:55:cd:07:22:fe: ff:91:5e:f8:a3:e7:dd:62:80:d3:05:80:2a:99:2e: ee:1e:dd:e4:96:46:56:52:e5:83:b2:c7:96:9c:53: b6:f1:61:2e:21:37:ce:00:0b:a2:54:32:56:ae:bd: 1e:a3:c7:de:d2:3a:00:91:32:50:b5:af:f2:da:94: 68:b0:3e:38:cf:af:1e:e2:b2:10:cc:f5:54:8d:8e: 0f:cf:62:3c:60:ee:43:32:b5:e3:19:05:48:40:cd: 01:2a:17:71:a6:a4:02:56:d2:c8:44:f6:3a:04:22: 50:f0:76:74:a1:42:47:39:04:32:3e:85:a8:62:45: e3:26:ea:07:e1:87:8f:72:9d:19:79:c5:2c:a7:a8: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AF:EE:12:64:B5:1C:14:E0:48:BC:9F:39:C6:73:A9:AA:24:5C:9D X509v3 Authority Key Identifier: keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1f:a4:53:fe:58:f5:08:ad:4e:fe:63:c4:45:a6:dc:1a:48: eb:62:26:4e:ec:97:d7:1e:5c:c9:86:88:a8:e6:ec:c9:71:d4: d4:41:e1:be:4b:42:16:45:af:54:e5:cd:f2:e3:26:5e:81:03: 97:96:e5:ef:cf:05:9f:44:92:7f:d7:83:4a:e9:a8:12:e4:02: cb:9c:f5:5c:53:8c:63:25:f4:a8:ee:4d:a0:92:d7:bc:18:8e: 78:7a:11:9f:f4:76:37:29:ed:6d:c3:a3:4f:f2:56:32:38:94: 36:c4:6e:6f:1c:0f:f6:1e:43:78:5e:c4:e6:9b:19:ec:e7:d2: 0c:74:97:72:3d:6f:93:eb:ec:86:79:a0:b8:61:2e:99:2d:fa: 34:55:3c:cc:70:0d:c1:27:9b:df:8b:cf:eb:b3:cb:ac:7d:1c: 60:6a:83:ee:20:32:be:86:36:6a:65:6f:78:69:da:fa:f5:1d: f7:32:d8:02:bc:f5:b1:66:61:98:5f:49:c5:26:6a:89:70:e3: fc:2e:19:3c:83:8a:da:73:f6:33:00:e8:7e:1e:b5:d1:22:ba: 58:ab:9c:0b:40:ad:4a:5b:d4:be:82:69:cc:a9:6b:84:19:ee: 52:c9:6a:26:ec:d0:fe:59:79:49:37:0e:5b:56:c1:93:b9:86: 01:9f:3b:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZThK/0Vp16ejBVzE+OThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyZjRkZWQ5MjI1N2U2N2JhNzRmMTc2MmM4YmM5MTRl YmQ2MWMwHhcNMjUxMjA2MTYwMTA1WhcNMjUxMjA3MTYwMTA1WjAzMTEwLwYDVQQD Eyg1ZWFmZWUxMjY0YjUxYzE0ZTA0OGJjOWYzOWM2NzNhOWFhMjQ1YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqhrAMyC3b5uazSxRV5TjFvmT0PI K3m/M4iCEL904YzXw1zuqOj1/VaNFLo4vAwYguH6OqQL2meNTwV8S3gZVa5bWflY 5A+UEMctohJy2CR6yBeWKnscOjks6pjecjhj1Q80KR2awfrr1eEAaCYps6faVc0H Iv7/kV74o+fdYoDTBYAqmS7uHt3klkZWUuWDsseWnFO28WEuITfOAAuiVDJWrr0e o8fe0joAkTJQta/y2pRosD44z68e4rIQzPVUjY4Pz2I8YO5DMrXjGQVIQM0BKhdx pqQCVtLIRPY6BCJQ8HZ0oUJHOQQyPoWoYkXjJuoH4YePcp0ZecUsp6hfkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6v7hJktRwU4Ei8nznGc6mqJFydMB8GA1UdIwQY MBaAFI2JL03tkiV+Z7p08XYsi8kU69YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMt MGJkOWRkZjM5NzBlLzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMtMGJkOWRkZjM5NzBl LzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMx+kU/5Y 9QitTv5jxEWm3BpI62ImTuyX1x5cyYaIqObsyXHU1EHhvktCFkWvVOXN8uMmXoED l5bl788Fn0SSf9eDSumoEuQCy5z1XFOMYyX0qO5NoJLXvBiOeHoRn/R2NyntbcOj T/JWMjiUNsRubxwP9h5DeF7E5psZ7OfSDHSXcj1vk+vshnmguGEumS36NFU8zHAN wSeb34vP67PLrH0cYGqD7iAyvoY2amVveGna+vUd9zLYArz1sWZhmF9JxSZqiXDj /C4ZPIOK2nP2MwDofh610SK6WKucC0CtSlvUvoJpzKlrhBnuUslqJuzQ/ll5STcO W1bBk7mGAZ87ew== -----END CERTIFICATE-----Generated at Sat Dec 6 22:38:57 2025 by rpki-client