This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json) Hash identifier: iMmPdVIoYauo0QkstP0iz5Ln3B5BeLbASuEtqGuQ3PM= Subject key identifier: 1D:A8:37:41:7B:04:C7:30:D2:A3:89:5E:D8:02:91:D1:6A:7D:BB:26 Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338 Certificate serial: 019B1D9901DA35E9A54AF26AE14E6B5BEC7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 16:02:05 +0000 Manifest this update: Sun 14 Dec 2025 16:02:05 +0000 Manifest next update: Mon 15 Dec 2025 16:02:05 +0000 Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=) 2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=) 3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: G3mhjk9cNUHETtSbIBV0Avx2nITWZ1h3sVSuZLuygDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:01:da:35:e9:a5:4a:f2:6a:e1:4e:6b:5b:ec:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338 Validity Not Before: Dec 14 16:02:05 2025 GMT Not After : Dec 15 16:02:05 2025 GMT Subject: CN=1da837417b04c730d2a3895ed80291d16a7dbb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:27:39:b2:b6:3a:c2:13:b3:89:bc:b6:f3:c6: 09:32:28:6a:3d:74:12:e6:a3:db:d3:36:07:03:dc: 1e:39:de:24:35:f2:83:4b:9e:60:3e:65:83:7a:e4: a2:50:ee:ad:e3:b1:f6:8c:87:ee:80:cf:68:2d:e6: 5c:76:92:ca:f7:66:ee:76:4a:57:0e:75:ad:25:3a: 83:b8:a3:56:de:7f:11:34:7f:b4:50:e2:72:74:7d: c6:06:60:67:df:c8:26:3a:74:2b:12:3e:e5:a0:a6: ff:98:69:80:0d:09:0d:c6:75:d1:d4:e8:1c:e7:bf: 55:1b:ae:9c:1f:3b:30:14:44:b4:09:bc:7b:a9:d7: 84:ab:d5:74:e2:d5:31:38:71:2f:7e:e2:58:ee:46: 78:fe:55:c4:3b:fd:85:14:31:fd:fb:aa:dd:ce:87: 41:c8:06:04:6e:78:fa:2b:bd:95:09:0f:b6:cd:0b: 1a:5f:6d:82:e0:c5:fd:46:b0:e8:5a:66:ad:26:c7: ad:64:b9:17:4f:3b:43:bb:53:3c:99:72:0b:f2:eb: d9:bc:fd:91:44:f5:0a:45:bb:54:24:ab:6b:ba:f5: fc:de:d3:30:f0:13:b6:89:b5:f2:84:61:3c:8f:a9: 15:b5:29:ac:df:16:63:da:86:a7:9d:40:2e:33:5e: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A8:37:41:7B:04:C7:30:D2:A3:89:5E:D8:02:91:D1:6A:7D:BB:26 X509v3 Authority Key Identifier: keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:55:f4:61:f0:a7:0e:62:35:88:d0:04:33:15:8c:d1:2c:96: 20:5f:59:ca:c7:b5:02:c2:4c:94:dc:90:a6:c6:a6:e0:8d:63: 04:87:f2:13:fe:60:c7:d2:39:4b:a3:b7:f3:2f:9e:a2:74:a0: fe:61:04:b1:fe:b3:0e:e2:12:81:03:14:00:8c:eb:b9:e8:24: 1a:2a:25:d7:80:d4:41:cf:34:8f:89:e3:02:62:6b:63:30:f0: 1f:4b:88:2a:15:25:28:96:50:9d:39:99:51:92:9f:d9:78:27: df:c9:f8:4d:fb:99:39:3f:47:74:03:e3:ef:e7:d5:7a:e2:5e: 25:05:0c:61:fe:71:d9:75:7d:75:99:c3:d2:1b:71:7a:43:83: 6f:ce:d6:de:3d:64:0f:a6:42:40:cf:2c:32:eb:13:d7:b7:39: 15:17:4d:22:79:1b:83:6b:a4:0d:0f:57:c7:90:21:4b:f5:a6: bd:09:e7:03:ac:c7:84:f4:58:63:8f:45:16:f5:f5:aa:c2:92: 7b:e0:56:1f:7f:27:d1:18:c4:cb:65:a8:4c:8c:61:f3:f4:3e: e0:b4:3d:fc:62:50:37:02:cc:9e:e4:a7:a7:f9:90:b0:70:a8: f4:74:7e:a1:a2:e6:81:67:3d:b9:b9:7e:59:06:fc:16:98:24: 92:0a:fc:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmQHaNemlSvJq4U5rW+x8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4 NzEzMzgwHhcNMjUxMjE0MTYwMjA1WhcNMjUxMjE1MTYwMjA1WjAzMTEwLwYDVQQD EygxZGE4Mzc0MTdiMDRjNzMwZDJhMzg5NWVkODAyOTFkMTZhN2RiYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ic5srY6whOziby288YJMihqPXQS 5qPb0zYHA9weOd4kNfKDS55gPmWDeuSiUO6t47H2jIfugM9oLeZcdpLK92budkpX DnWtJTqDuKNW3n8RNH+0UOJydH3GBmBn38gmOnQrEj7loKb/mGmADQkNxnXR1Ogc 579VG66cHzswFES0Cbx7qdeEq9V04tUxOHEvfuJY7kZ4/lXEO/2FFDH9+6rdzodB yAYEbnj6K72VCQ+2zQsaX22C4MX9RrDoWmatJsetZLkXTztDu1M8mXIL8uvZvP2R RPUKRbtUJKtruvX83tMw8BO2ibXyhGE8j6kVtSms3xZj2oannUAuM17gTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2oN0F7BMcw0qOJXtgCkdFqfbsmMB8GA1UdIwQY MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt NTk5ZDFjYTZhNWZkLzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFX0YfCn DmI1iNAEMxWM0SyWIF9Zyse1AsJMlNyQpsam4I1jBIfyE/5gx9I5S6O38y+eonSg /mEEsf6zDuISgQMUAIzruegkGiol14DUQc80j4njAmJrYzDwH0uIKhUlKJZQnTmZ UZKf2Xgn38n4TfuZOT9HdAPj7+fVeuJeJQUMYf5x2XV9dZnD0htxekODb87W3j1k D6ZCQM8sMusT17c5FRdNInkbg2ukDQ9Xx5AhS/WmvQnnA6zHhPRYY49FFvX1qsKS e+BWH38n0RjEy2WoTIxh8/Q+4LQ9/GJQNwLMnuSnp/mQsHCo9HR+oaLmgWc9ubl+ WQb8Fpgkkgr86w== -----END CERTIFICATE-----Generated at Sun Dec 14 19:13:41 2025 by rpki-client