This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json) Hash identifier: I61Eb9Q7jPDHxVN7BJ4lhRuTiVRTwPCp8kf9AAN7xmw= Subject key identifier: A1:A8:E9:A2:02:5A:1A:A0:14:4A:70:D0:40:5C:88:E0:B4:DF:F7:B9 Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e Certificate serial: 019B1A5FC8916EB8CE16B5C4D77C2BCE4A32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft Manifest number: 0414 Signing time: Sun 14 Dec 2025 01:00:43 +0000 Manifest this update: Sun 14 Dec 2025 01:00:43 +0000 Manifest next update: Mon 15 Dec 2025 01:00:43 +0000 Files and hashes: 1: EdJTz8Dy_KYllN7oDQj7wcm2rcA.roa (hash: fBqhHICDr0X6YXFTTdlTIs7rIkllOmDVf3b+eCpH7zk=) 2: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: FgKNgZ7Eiawcemla7PFi3RXlPo/IhJnF9qeDl4/b1i0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:c8:91:6e:b8:ce:16:b5:c4:d7:7c:2b:ce:4a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e Validity Not Before: Dec 14 01:00:43 2025 GMT Not After : Dec 15 01:00:43 2025 GMT Subject: CN=a1a8e9a2025a1aa0144a70d0405c88e0b4dff7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:e4:0e:70:ca:21:cc:b5:c7:27:d9:a8:6a: 91:ce:1f:81:5b:3c:d0:d2:91:d3:c0:38:3c:82:dd: b6:3d:c2:98:9c:87:53:0a:92:d7:91:02:a7:91:9e: 38:0f:00:3c:8b:82:f3:d0:90:c2:da:cd:5a:4c:02: 0b:a9:93:b1:67:c4:aa:d0:b1:7d:b5:6c:93:5b:2a: c0:9b:24:ec:aa:6c:8a:70:dc:ac:20:25:df:88:47: 94:45:32:d0:85:2b:dd:74:d5:bb:35:8c:64:e1:63: c3:a4:14:10:aa:cb:34:aa:b0:d5:ea:3d:50:c3:1c: 62:bf:b7:8a:8f:63:78:d3:dc:56:41:1e:c3:ff:b9: 5c:06:83:73:24:59:ae:59:ca:fa:0d:cf:5a:33:5a: 04:b1:fa:d6:5c:18:ad:1f:ef:07:9b:48:c5:bf:69: d5:15:fe:d7:7d:8a:b1:36:45:b8:4c:f5:27:5e:48: 15:ed:bc:cf:f0:9f:9f:dc:89:5f:36:2f:7f:8f:52: 5f:69:39:6c:fb:21:02:48:49:34:b5:ea:0f:fd:6f: 02:73:6b:1b:a7:70:19:81:b3:c8:f8:35:a0:34:de: b7:96:8f:fb:a7:00:d8:fb:43:10:1d:c9:35:e6:99: 86:72:95:71:68:4a:ae:a5:cd:5d:df:87:21:6e:ab: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A8:E9:A2:02:5A:1A:A0:14:4A:70:D0:40:5C:88:E0:B4:DF:F7:B9 X509v3 Authority Key Identifier: keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:1c:9d:a6:50:c9:27:87:92:6d:05:7d:4b:28:cd:cc:bf:66: 28:97:9b:37:be:09:af:dd:b5:4a:41:22:b0:32:87:00:28:e1: cf:1c:43:ec:5e:d7:e3:37:59:39:8e:88:15:b8:90:2e:77:89: 42:3c:a0:59:5d:cc:c2:d1:04:c8:0f:c3:4c:11:69:ba:d3:78: 0e:bf:fd:89:8f:00:24:1a:08:f5:aa:35:11:ff:d7:7f:d4:34: 0f:77:fc:01:79:0d:7c:e3:bf:d4:38:25:ee:44:21:03:55:f0: 06:46:71:94:48:ad:84:9e:55:92:b2:78:00:da:52:0d:7a:0d: 75:5f:8b:bb:f1:0b:ff:c6:41:8e:87:75:b2:e0:71:69:a5:f0: d2:34:55:bc:48:90:93:bb:f5:47:0b:93:21:54:83:77:e6:2b: c2:1c:ea:e4:26:47:2e:27:9c:f5:cd:11:d1:b5:b3:2e:d0:b2: 68:f5:81:a6:7d:78:2e:61:73:be:3f:3b:73:b2:b0:68:4b:a9: d0:30:aa:81:4c:27:9a:d9:6d:64:d9:6f:8d:ea:d2:41:9a:2f: 3b:af:a3:de:f9:eb:99:3e:bb:e9:f1:0c:dc:af:eb:e9:f9:4b: b6:4c:1f:80:6f:60:96:04:f4:4d:2f:89:6f:45:92:d4:d7:5e: 29:e2:bc:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX8iRbrjOFrXE13wrzkoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODBiNDU0NTVkODk3MzFmODdiYjUzZjRkYmU2NDExODk4 MzdkNGUwHhcNMjUxMjE0MDEwMDQzWhcNMjUxMjE1MDEwMDQzWjAzMTEwLwYDVQQD EyhhMWE4ZTlhMjAyNWExYWEwMTQ0YTcwZDA0MDVjODhlMGI0ZGZmN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4zkDnDKIcy1xyfZqGqRzh+BWzzQ 0pHTwDg8gt22PcKYnIdTCpLXkQKnkZ44DwA8i4Lz0JDC2s1aTAILqZOxZ8Sq0LF9 tWyTWyrAmyTsqmyKcNysICXfiEeURTLQhSvddNW7NYxk4WPDpBQQqss0qrDV6j1Q wxxiv7eKj2N409xWQR7D/7lcBoNzJFmuWcr6Dc9aM1oEsfrWXBitH+8Hm0jFv2nV Ff7XfYqxNkW4TPUnXkgV7bzP8J+f3IlfNi9/j1JfaTls+yECSEk0teoP/W8Cc2sb p3AZgbPI+DWgNN63lo/7pwDY+0MQHck15pmGcpVxaEqupc1d34chbqsNDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGo6aICWhqgFEpw0EBciOC03/e5MB8GA1UdIwQY MBaAFI2AtFRV2Jcx+Hu1P02+ZBGJg31OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTct MzgwZTViZGZhNWUwLzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTctMzgwZTViZGZhNWUw LzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRydplDJ J4eSbQV9SyjNzL9mKJebN74Jr921SkEisDKHACjhzxxD7F7X4zdZOY6IFbiQLneJ QjygWV3MwtEEyA/DTBFputN4Dr/9iY8AJBoI9ao1Ef/Xf9Q0D3f8AXkNfOO/1Dgl 7kQhA1XwBkZxlEithJ5VkrJ4ANpSDXoNdV+Lu/EL/8ZBjod1suBxaaXw0jRVvEiQ k7v1RwuTIVSDd+Yrwhzq5CZHLiec9c0R0bWzLtCyaPWBpn14LmFzvj87c7KwaEup 0DCqgUwnmtltZNlvjerSQZovO6+j3vnrmT676fEM3K/r6flLtkwfgG9glgT0TS+J b0WS1NdeKeK8mw== -----END CERTIFICATE-----Generated at Sun Dec 14 09:31:22 2025 by rpki-client