This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft File: JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json) Hash identifier: Diii8SjVeYBurYv+CDW4a4mJFVA91vPYziGaoMT8t8E= Subject key identifier: 62:CF:0D:CE:45:03:3E:A4:AC:E6:EE:63:D7:3D:B2:35:1B:B6:BB:17 Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2 Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2 Certificate serial: 019B247607DB63156400F06D780902C7EC1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 00:01:13 +0000 Manifest this update: Tue 16 Dec 2025 00:01:13 +0000 Manifest next update: Wed 17 Dec 2025 00:01:13 +0000 Files and hashes: 1: 4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa (hash: pBs68ICaSbGSqyGLZ9bB1efuQfGC5WelauRjyqdWgTI=) 2: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: 3Wnz6N1S3ALJ4qcIkpl6tVGPeNG1b5od6bAjSVz1xWc=) 3: WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa (hash: EcGFRU20uqBbFC1foj+y9OBYi5L7+bc1+NFOuFXpPjg=) 4: k_-rD0qGkNwGwcLu6HW3p8mmNtU.roa (hash: 2oKRAJvxuw9ZlCxWfoLf08ddChOQxfTyMJhpORXiSP8=) 5: p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (hash: JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=) 6: px36HXCD5Tde7rc7667drQlCUgM.roa (hash: DdLtjUoBr2/szAIeZWx5x3x5Gnlyu/gE0I7UYrAM/6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:07:db:63:15:64:00:f0:6d:78:09:02:c7:ec:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2 Validity Not Before: Dec 16 00:01:13 2025 GMT Not After : Dec 17 00:01:13 2025 GMT Subject: CN=62cf0dce45033ea4ace6ee63d73db2351bb6bb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:4a:f6:ce:49:18:f4:c6:a7:3f:7c:af:57: bb:be:03:ea:90:e6:ea:2b:ad:00:01:da:5c:40:44: bb:0a:ab:9e:6b:9c:2c:ac:04:d8:c3:a8:2f:79:74: 65:34:68:08:c5:d5:e6:b2:ec:8f:0e:63:5d:66:39: ab:b1:18:e5:df:35:c0:8b:62:56:78:47:67:b0:0d: 43:49:85:fb:8a:ea:b0:10:67:b8:42:e2:ae:21:9d: e2:7c:7f:28:15:60:4a:94:95:41:21:fc:7f:01:10: 8c:22:d2:e2:ad:7e:e0:bd:72:f9:33:80:9e:ff:1b: 78:47:b9:2c:e9:e8:57:e4:df:3c:60:cf:34:5e:d2: 71:b4:d1:14:35:6c:a2:fe:d9:3b:8e:50:34:1f:45: 5d:c2:8a:2f:24:a3:23:ac:99:f6:ac:39:38:5f:db: 37:1f:8d:9d:67:0e:5a:32:5f:dc:e0:ba:dd:48:2e: 33:d4:81:14:ef:03:7d:06:a4:d0:fb:55:43:c4:a2: 55:5e:9a:4d:28:63:49:9d:47:00:87:54:30:8a:54: 7b:8c:38:24:9d:2f:75:e6:9a:fd:e1:3d:ec:30:dc: 4a:71:f8:e6:8c:87:7e:b7:00:bc:ff:6b:d6:9b:3c: 31:27:99:c2:67:c6:2f:3f:88:96:af:6c:c5:27:c5: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CF:0D:CE:45:03:3E:A4:AC:E6:EE:63:D7:3D:B2:35:1B:B6:BB:17 X509v3 Authority Key Identifier: keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ec:76:41:f8:89:0d:19:b9:06:a6:11:88:a0:ee:d9:e8:c2: d9:77:31:5c:85:c7:3f:d7:6f:18:6c:d2:8a:0d:6f:b8:5f:16: fb:71:06:f6:6e:1f:73:5a:0d:c6:d0:68:7c:87:63:2d:75:f0: c8:24:cb:bb:c1:fb:b3:f3:9a:3f:3d:f9:9b:fb:17:81:01:23: a2:e0:0b:fd:bc:b7:5a:88:d1:02:0a:44:68:cc:e7:e1:c9:4e: cb:b1:c3:0c:30:e1:60:0c:22:87:7e:92:f9:5c:98:72:b4:26: 65:2a:b2:f3:8c:26:3b:18:7f:de:34:96:c9:2a:b8:7c:2d:bd: 13:19:e1:07:e1:a7:8f:90:38:0b:74:71:86:93:36:1a:ae:e2: 25:74:26:20:2b:a3:e8:d8:5f:24:1c:06:a0:f5:4f:9d:45:34: 33:ef:9b:2e:af:e8:f3:50:ad:d1:a1:44:01:82:1e:4e:d4:29: 49:07:b9:0d:9d:2f:ec:3c:41:a2:99:ae:d7:c5:d8:49:92:83: ba:85:cd:86:55:af:33:a1:2f:8f:9f:10:7b:dd:2f:e2:9f:6e: 61:cd:80:d0:36:69:42:36:9a:34:b3:bc:d5:61:f1:6f:47:3d: df:8d:3f:5e:19:7b:fe:7d:fa:17:ab:1a:b1:9e:bc:68:b9:73: f5:99:c8:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdgfbYxVkAPBteAkCx+weMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ODYyM2VjYzhkY2I5MTNkMTAyMjhhOTQ2MGE4NmU2NjBj YjhmYjIwHhcNMjUxMjE2MDAwMTEzWhcNMjUxMjE3MDAwMTEzWjAzMTEwLwYDVQQD Eyg2MmNmMGRjZTQ1MDMzZWE0YWNlNmVlNjNkNzNkYjIzNTFiYjZiYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuehK9s5JGPTGpz98r1e7vgPqkObq K60AAdpcQES7Cquea5wsrATYw6gveXRlNGgIxdXmsuyPDmNdZjmrsRjl3zXAi2JW eEdnsA1DSYX7iuqwEGe4QuKuIZ3ifH8oFWBKlJVBIfx/ARCMItLirX7gvXL5M4Ce /xt4R7ks6ehX5N88YM80XtJxtNEUNWyi/tk7jlA0H0VdwoovJKMjrJn2rDk4X9s3 H42dZw5aMl/c4LrdSC4z1IEU7wN9BqTQ+1VDxKJVXppNKGNJnUcAh1QwilR7jDgk nS915pr94T3sMNxKcfjmjId+twC8/2vWmzwxJ5nCZ8YvP4iWr2zFJ8VWIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLPDc5FAz6krObuY9c9sjUbtrsXMB8GA1UdIwQY MBaAFCWGI+zI3LkT0QIoqUYKhuZgy4+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NmFiOTUtYzJmZS00YjkzLTlhMmUt NTY4OWVlMDZlMTRjLzEvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC85NmFiOTUtYzJmZS00YjkzLTlhMmUtNTY4OWVlMDZlMTRj LzEvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOx2QfiJ DRm5BqYRiKDu2ejC2XcxXIXHP9dvGGzSig1vuF8W+3EG9m4fc1oNxtBofIdjLXXw yCTLu8H7s/OaPz35m/sXgQEjouAL/by3WojRAgpEaMzn4clOy7HDDDDhYAwih36S +VyYcrQmZSqy84wmOxh/3jSWySq4fC29ExnhB+Gnj5A4C3RxhpM2Gq7iJXQmICuj 6NhfJBwGoPVPnUU0M++bLq/o81Ct0aFEAYIeTtQpSQe5DZ0v7DxBopmu18XYSZKD uoXNhlWvM6Evj58Qe90v4p9uYc2A0DZpQjaaNLO81WHxb0c9340/Xhl7/n36F6sa sZ68aLlz9ZnIkA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:44:26 2025 by rpki-client