This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft File: jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json) Hash identifier: /iUY8OraoXKmeb5Xv6hBgh0B7at7tPQo8qHlq8Jodg0= Subject key identifier: 79:71:B1:89:19:C7:16:47:FB:E4:12:11:C9:04:69:9B:C9:E2:A1:42 Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A Certificate issuer: /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a Certificate serial: 019B5C091E188B87C8DC8B56546D2DBDB689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft Manifest number: 0296 Signing time: Fri 26 Dec 2025 19:00:59 +0000 Manifest this update: Fri 26 Dec 2025 19:00:59 +0000 Manifest next update: Sat 27 Dec 2025 19:00:59 +0000 Files and hashes: 1: M-gXFd7N6RQlOS3FU49vKYSovUs.roa (hash: 3OvRn3YgHg1m6lctKtBNgoRt6uS+lTyZBl7EBoP4/D0=) 2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: sFhbrGrAsoXbTGbV3R5uj2pjuYl5paZdnyffxYmUB0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:1e:18:8b:87:c8:dc:8b:56:54:6d:2d:bd:b6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a Validity Not Before: Dec 26 19:00:59 2025 GMT Not After : Dec 27 19:00:59 2025 GMT Subject: CN=7971b18919c71647fbe41211c904699bc9e2a142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:5e:19:dc:ca:b3:1a:06:b4:e2:65:76:4d: da:90:46:51:fa:34:39:01:30:81:54:7c:cb:c6:f9: 77:55:10:7d:53:82:2f:80:3f:ba:3d:6c:37:61:88: d4:99:0c:fa:ba:60:4e:9f:81:fb:69:e1:4c:d8:49: bf:bd:ef:74:2d:e1:d2:c7:52:f5:94:6c:c0:26:d4: 86:d7:b9:bf:53:b0:75:ae:33:fc:96:22:ea:56:4f: bc:a4:ef:8c:66:9f:8f:a3:2a:44:f5:c6:83:60:c5: db:13:a5:d7:2b:c9:68:f4:47:7d:52:ca:ca:e1:70: 70:fe:b2:bf:2a:fb:31:9d:90:c0:ab:b3:4b:47:93: 87:d9:22:d1:b1:cc:ce:19:66:04:07:2b:f8:0b:e4: 94:76:c5:fa:f0:ed:ae:b3:28:91:d4:ed:5a:73:f2: c2:2b:99:79:77:32:b7:7c:93:68:4e:84:1b:b6:e1: bb:10:95:37:34:6e:67:46:0d:f1:c2:ff:b6:a5:2a: 94:10:b4:57:ac:8c:a2:1c:a1:4d:f4:63:b0:c2:e2: 43:71:e7:4a:c1:bf:fc:eb:fd:b7:84:b1:83:37:a8: f5:99:cd:00:7c:fb:e9:48:69:c9:54:4d:42:e9:29: c1:64:56:7c:2b:a4:22:bb:06:8e:a9:42:46:8c:d2: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:71:B1:89:19:C7:16:47:FB:E4:12:11:C9:04:69:9B:C9:E2:A1:42 X509v3 Authority Key Identifier: keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:31:43:5b:dc:60:1a:f8:a9:4f:ed:f5:6f:b6:1e:e7:3a:32: 48:e7:ac:53:cc:e0:24:4f:4b:7c:78:d6:4a:32:ae:9b:d4:5e: b9:d7:6e:25:af:6a:cf:2c:37:e2:ee:7e:76:8c:fa:92:eb:ca: b0:8d:f0:ff:b2:71:89:b9:bb:e4:e8:78:8b:0c:e2:09:9f:f7: c0:89:f1:94:cc:1b:c2:a0:00:aa:4e:e9:ae:63:e9:61:70:e5: 30:e4:ee:cf:e9:c0:ed:11:75:41:4c:16:e6:39:1d:67:53:5f: a3:fc:38:8e:72:19:e1:b3:79:fd:a8:df:09:24:12:c6:ce:78: 32:b8:f2:85:bd:c5:b4:60:9a:16:ad:9c:2e:45:3e:72:4a:68: 6f:8a:db:ef:a8:bf:dc:12:67:8b:30:19:bb:01:f9:91:2c:04: 72:9a:b8:eb:d3:a1:ed:8c:54:6c:82:58:b7:22:c9:1a:6d:22: ef:c4:59:07:80:c5:a0:58:10:cc:42:65:c1:cf:42:d7:b1:29: 07:90:42:be:06:1e:f5:98:a8:81:b3:63:2c:6c:d8:3f:3e:3a: cf:60:74:da:8c:3e:6b:b7:08:8a:83:08:d7:c1:1c:bd:7f:d8: 58:94:8c:4c:91:a4:40:96:7e:91:15:86:ee:92:3d:09:d7:28: 17:ed:c1:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCR4Yi4fI3ItWVG0tvbaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODA0NWY5ZGYwOGM1MzA1N2U5ZGY5ZmI3YjdhNTc1MTAz ZmZmNGEwHhcNMjUxMjI2MTkwMDU5WhcNMjUxMjI3MTkwMDU5WjAzMTEwLwYDVQQD Eyg3OTcxYjE4OTE5YzcxNjQ3ZmJlNDEyMTFjOTA0Njk5YmM5ZTJhMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLxeGdzKsxoGtOJldk3akEZR+jQ5 ATCBVHzLxvl3VRB9U4IvgD+6PWw3YYjUmQz6umBOn4H7aeFM2Em/ve90LeHSx1L1 lGzAJtSG17m/U7B1rjP8liLqVk+8pO+MZp+PoypE9caDYMXbE6XXK8lo9Ed9UsrK 4XBw/rK/KvsxnZDAq7NLR5OH2SLRsczOGWYEByv4C+SUdsX68O2usyiR1O1ac/LC K5l5dzK3fJNoToQbtuG7EJU3NG5nRg3xwv+2pSqUELRXrIyiHKFN9GOwwuJDcedK wb/86/23hLGDN6j1mc0AfPvpSGnJVE1C6SnBZFZ8K6QiuwaOqUJGjNJPnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlxsYkZxxZH++QSEckEaZvJ4qFCMB8GA1UdIwQY MBaAFI2ARfnfCMUwV+nfn7e3pXUQP/9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNjcxYmYtYWFhMC00ZmQzLTg1ZmMt ODIxZTY5NDEzMTMxLzEvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNjcxYmYtYWFhMC00ZmQzLTg1ZmMtODIxZTY5NDEzMTMx LzEvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDFDW9xg GvipT+31b7Ye5zoySOesU8zgJE9LfHjWSjKum9ReudduJa9qzyw34u5+doz6kuvK sI3w/7Jxibm75Oh4iwziCZ/3wInxlMwbwqAAqk7prmPpYXDlMOTuz+nA7RF1QUwW 5jkdZ1Nfo/w4jnIZ4bN5/ajfCSQSxs54Mrjyhb3FtGCaFq2cLkU+ckpob4rb76i/ 3BJnizAZuwH5kSwEcpq469Oh7YxUbIJYtyLJGm0i78RZB4DFoFgQzEJlwc9C17Ep B5BCvgYe9ZiogbNjLGzYPz46z2B02ow+a7cIioMI18EcvX/YWJSMTJGkQJZ+kRWG 7pI9CdcoF+3B5g== -----END CERTIFICATE-----Generated at Fri Dec 26 21:01:17 2025 by rpki-client