This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json) Hash identifier: IRTuiLFGOQF3QiDjga/tfTD0olPpuBh+TrDUKWj6VCQ= Subject key identifier: 28:FC:48:0F:EF:A8:4F:03:5D:13:0A:31:50:96:E9:66:65:50:AD:7F Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Certificate serial: 019B1C4E90AF2448B3FD8BF753395CFCC17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 10:01:09 +0000 Manifest this update: Sun 14 Dec 2025 10:01:09 +0000 Manifest next update: Mon 15 Dec 2025 10:01:09 +0000 Files and hashes: 1: E9oFZpR0WuPEurk0UT599s3KKDk.roa (hash: Q0OtGh8qvr0qOtsRaXw0h+Pv9ovyY05P3QKCE0xqR6U=) 2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: ECLZNYESyGVBDRhNQw7gK9UagF1LgW2EdqCTqbnIUe8=) 3: rhwM13yb7i-t6Ly0MQtbcj3bZd8.roa (hash: rGHoCJ+25kyVkfObLSePRMqiDDa8j9R9c6PT4fGFhmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:90:af:24:48:b3:fd:8b:f7:53:39:5c:fc:c1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Validity Not Before: Dec 14 10:01:09 2025 GMT Not After : Dec 15 10:01:09 2025 GMT Subject: CN=28fc480fefa84f035d130a315096e9666550ad7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:f3:36:15:07:be:c1:59:d7:85:1a:a8:68: 6d:0a:9f:17:49:14:39:bc:dd:62:68:84:79:0c:67: 5c:b9:50:74:df:05:3c:30:cc:f0:34:9a:2d:7d:7c: 6f:00:60:f4:82:51:26:12:3f:5e:0f:9c:02:9e:87: 73:9a:c1:91:82:fd:e7:0b:3d:ca:5c:9b:f7:d3:1b: 07:89:c2:8d:66:f9:66:0a:1a:5b:46:cb:5e:58:54: 4d:5b:40:b0:33:d1:ff:44:08:8f:e5:99:db:41:9d: 79:89:06:8f:5f:19:b0:14:f1:00:95:4c:7b:3c:e7: 03:87:7b:dc:d1:f0:ac:9a:ae:af:c6:ca:a5:bc:1e: 79:22:4a:54:7b:e4:aa:6e:4a:cf:90:56:ea:2a:61: db:9c:6a:11:72:d8:99:b6:c8:28:c5:bd:3f:62:1b: b9:5b:be:ad:b1:87:aa:d4:b0:c3:60:48:3f:45:10: 76:3b:07:73:35:64:24:a9:1b:77:65:ac:ae:c9:c3: 71:71:1c:24:25:d2:a5:f0:d2:ee:c2:02:81:5e:eb: a1:9d:5d:8e:6d:1b:4b:40:a7:ea:20:6f:e2:c4:fe: 08:e4:dd:7f:3b:97:5e:5a:74:26:82:97:e5:6f:58: e0:c9:b1:d9:bc:0c:dc:4d:ea:c0:5e:69:6c:89:16: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FC:48:0F:EF:A8:4F:03:5D:13:0A:31:50:96:E9:66:65:50:AD:7F X509v3 Authority Key Identifier: keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f5:94:b3:31:5d:5d:6a:ac:16:e9:66:b0:11:b8:a0:81:30: 83:1c:7e:f1:a9:d8:1d:44:79:9b:2c:0d:fb:b7:2d:d9:77:56: 29:e1:81:b5:22:24:a7:cb:28:0a:52:6d:a4:f3:fc:19:97:8d: d1:5e:d9:11:8e:ab:ed:7c:77:ce:63:9b:be:0f:57:f7:67:2f: 10:71:e4:75:87:75:1a:7b:bc:1d:d9:ee:3b:73:e4:be:c1:2c: d8:97:ee:dd:63:0c:e1:3b:51:09:5e:ab:33:a1:0f:3f:24:2b: 7c:ae:b1:7b:05:b8:69:00:82:49:82:a6:a9:fd:a2:56:bf:40: 08:9c:cb:0f:4b:75:ac:d7:16:28:b2:30:3e:2d:86:bb:52:e8: 6c:75:b0:84:ae:56:04:d9:58:16:1e:d4:12:29:62:97:89:f7: d7:ab:5b:e8:b0:48:1a:12:71:91:c3:b2:0b:e1:a1:9f:b4:7e: f9:ed:58:51:0e:b8:1f:8e:41:e9:ca:f0:ee:e5:3f:1d:ac:7d: b4:c7:5a:94:4d:38:02:5e:2e:6e:4c:60:e4:5f:9e:ea:c2:a0: fb:a4:dd:20:13:f7:6f:bf:ca:03:93:72:ae:f7:c1:4d:d7:84: c9:11:00:88:0e:05:9e:73:2d:64:0d:4a:30:13:94:48:2a:6e: 2a:83:ec:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTpCvJEiz/Yv3Uzlc/MF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy YzU4ODcwHhcNMjUxMjE0MTAwMTA5WhcNMjUxMjE1MTAwMTA5WjAzMTEwLwYDVQQD EygyOGZjNDgwZmVmYTg0ZjAzNWQxMzBhMzE1MDk2ZTk2NjY1NTBhZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYjzNhUHvsFZ14UaqGhtCp8XSRQ5 vN1iaIR5DGdcuVB03wU8MMzwNJotfXxvAGD0glEmEj9eD5wCnodzmsGRgv3nCz3K XJv30xsHicKNZvlmChpbRsteWFRNW0CwM9H/RAiP5ZnbQZ15iQaPXxmwFPEAlUx7 POcDh3vc0fCsmq6vxsqlvB55IkpUe+SqbkrPkFbqKmHbnGoRctiZtsgoxb0/Yhu5 W76tsYeq1LDDYEg/RRB2OwdzNWQkqRt3ZayuycNxcRwkJdKl8NLuwgKBXuuhnV2O bRtLQKfqIG/ixP4I5N1/O5deWnQmgpflb1jgybHZvAzcTerAXmlsiRb4vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj8SA/vqE8DXRMKMVCW6WZlUK1/MB8GA1UdIwQY MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt YjViOGQwMjQ0OGI4LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4 LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/WUszFd XWqsFulmsBG4oIEwgxx+8anYHUR5mywN+7ct2XdWKeGBtSIkp8soClJtpPP8GZeN 0V7ZEY6r7Xx3zmObvg9X92cvEHHkdYd1Gnu8HdnuO3PkvsEs2Jfu3WMM4TtRCV6r M6EPPyQrfK6xewW4aQCCSYKmqf2iVr9ACJzLD0t1rNcWKLIwPi2Gu1LobHWwhK5W BNlYFh7UEilil4n316tb6LBIGhJxkcOyC+Ghn7R++e1YUQ64H45B6crw7uU/Hax9 tMdalE04Al4ubkxg5F+e6sKg+6TdIBP3b7/KA5NyrvfBTdeEyREAiA4FnnMtZA1K MBOUSCpuKoPshw== -----END CERTIFICATE-----Generated at Sun Dec 14 15:08:30 2025 by rpki-client