This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json) Hash identifier: dWfV43fWhk9Nz677+TWYVlg1spLpBmVLncoDX5bxRrs= Subject key identifier: 05:C7:24:4C:A4:78:05:DB:B7:69:97:29:21:13:26:9E:AB:1E:16:3A Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Certificate serial: 019B202B5960DF7368BC2D51FDB8C5C983D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 04:01:10 +0000 Manifest this update: Mon 15 Dec 2025 04:01:10 +0000 Manifest next update: Tue 16 Dec 2025 04:01:10 +0000 Files and hashes: 1: E9oFZpR0WuPEurk0UT599s3KKDk.roa (hash: Q0OtGh8qvr0qOtsRaXw0h+Pv9ovyY05P3QKCE0xqR6U=) 2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: +vICxeTazW8SoXR8osLnpu+pDD5QqLPdAhG/d8S4osg=) 3: rhwM13yb7i-t6Ly0MQtbcj3bZd8.roa (hash: rGHoCJ+25kyVkfObLSePRMqiDDa8j9R9c6PT4fGFhmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:59:60:df:73:68:bc:2d:51:fd:b8:c5:c9:83:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Validity Not Before: Dec 15 04:01:10 2025 GMT Not After : Dec 16 04:01:10 2025 GMT Subject: CN=05c7244ca47805dbb76997292113269eab1e163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:c8:c3:a6:17:84:04:79:f7:74:14:78:4e: 2e:2d:73:7a:7e:08:d6:4f:21:d6:6e:e1:7e:b7:6c: 97:46:fc:ed:10:00:a3:7e:d5:ce:b1:e1:3a:b1:52: e8:f8:f2:52:ed:5b:77:61:9d:c6:0b:ba:e1:40:65: 2d:e3:72:a9:ac:87:5f:12:54:10:9e:05:2a:ea:ee: 9c:af:c7:5b:0b:db:38:3b:44:cf:2a:99:7e:a1:dd: c3:19:20:b4:35:10:97:09:03:11:01:a3:00:57:41: f5:ed:7e:77:f7:b6:e9:47:eb:d4:c3:6c:fa:8d:6a: d4:98:b8:83:ce:6a:a7:a0:b9:51:f5:63:72:ee:9a: 70:12:c1:b8:52:fa:dc:7c:5e:76:7b:d2:9c:3d:48: a5:10:88:a1:c2:75:ad:67:3a:41:03:cb:bb:88:14: 85:68:c4:18:f4:2b:fb:30:a6:7f:66:45:2d:f3:a1: d0:3a:3f:0a:e5:e2:63:50:24:8e:a7:83:4c:4c:54: a2:8c:75:5f:af:be:38:0a:90:ad:ba:13:88:88:64: 06:19:73:5d:4e:d7:b4:51:4a:7e:7a:af:c4:1e:4d: 9f:0a:d2:d4:38:7d:97:0e:5e:4f:a2:ab:d5:29:67: a0:07:c3:34:d3:70:1b:51:a5:b4:dd:bb:10:66:a2: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C7:24:4C:A4:78:05:DB:B7:69:97:29:21:13:26:9E:AB:1E:16:3A X509v3 Authority Key Identifier: keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ea:9b:03:42:78:6b:8e:92:8b:98:e2:9c:3c:d6:2b:2d:52: 1c:4c:59:0e:6b:41:cb:0a:31:4c:6c:ea:7d:51:35:56:87:d9: f1:39:9d:94:be:78:82:09:03:2a:22:cb:df:8b:39:5b:19:dc: 16:b2:7c:3a:6e:36:8c:f3:a3:fb:55:01:e5:65:0f:91:47:aa: c0:bb:2b:9f:97:cd:8c:dc:15:d8:6e:4d:9a:9a:83:10:1c:23: db:18:db:d0:26:42:21:0b:1a:92:d5:9f:49:22:54:f7:ba:45: ed:c2:2a:87:7a:40:fe:7b:25:7d:db:f0:7b:27:ea:26:07:39: e6:eb:fc:e3:b4:9c:c3:67:5b:47:a7:b8:eb:83:c5:45:bc:af: 2e:c1:3d:2d:eb:4a:ef:4c:55:10:ba:3f:aa:f4:29:eb:6f:73: b4:03:03:bd:b9:bf:01:1a:cf:b2:fd:f8:d7:1d:cf:4a:eb:93: 39:e7:67:0d:70:0a:28:25:4f:a5:5c:01:74:24:a0:2d:c1:6c: f9:dc:b6:ea:ca:ef:b7:69:60:ec:f4:5f:3f:df:14:2d:44:54: 77:2b:e4:36:f0:d6:f0:d5:93:ae:ad:0f:16:24:fc:cb:a5:e9: 3c:d4:5d:3f:9d:2c:8b:ee:14:5d:20:21:cc:41:78:41:2b:c5: 0d:47:f7:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK1lg33NovC1R/bjFyYPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy YzU4ODcwHhcNMjUxMjE1MDQwMTEwWhcNMjUxMjE2MDQwMTEwWjAzMTEwLwYDVQQD EygwNWM3MjQ0Y2E0NzgwNWRiYjc2OTk3MjkyMTEzMjY5ZWFiMWUxNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJrIw6YXhAR593QUeE4uLXN6fgjW TyHWbuF+t2yXRvztEACjftXOseE6sVLo+PJS7Vt3YZ3GC7rhQGUt43KprIdfElQQ ngUq6u6cr8dbC9s4O0TPKpl+od3DGSC0NRCXCQMRAaMAV0H17X5397bpR+vUw2z6 jWrUmLiDzmqnoLlR9WNy7ppwEsG4UvrcfF52e9KcPUilEIihwnWtZzpBA8u7iBSF aMQY9Cv7MKZ/ZkUt86HQOj8K5eJjUCSOp4NMTFSijHVfr744CpCtuhOIiGQGGXNd Tte0UUp+eq/EHk2fCtLUOH2XDl5PoqvVKWegB8M003AbUaW03bsQZqKaYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXHJEykeAXbt2mXKSETJp6rHhY6MB8GA1UdIwQY MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt YjViOGQwMjQ0OGI4LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4 LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+qbA0J4 a46Si5jinDzWKy1SHExZDmtBywoxTGzqfVE1VofZ8TmdlL54ggkDKiLL34s5Wxnc FrJ8Om42jPOj+1UB5WUPkUeqwLsrn5fNjNwV2G5NmpqDEBwj2xjb0CZCIQsaktWf SSJU97pF7cIqh3pA/nslfdvweyfqJgc55uv847Scw2dbR6e464PFRbyvLsE9LetK 70xVELo/qvQp629ztAMDvbm/ARrPsv341x3PSuuTOednDXAKKCVPpVwBdCSgLcFs +dy26srvt2lg7PRfP98ULURUdyvkNvDW8NWTrq0PFiT8y6XpPNRdP50si+4UXSAh zEF4QSvFDUf3gw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:31 2025 by rpki-client