This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json) Hash identifier: clg0zDodEa454Ggwah2YXBl83fuOakrg49JshGHXyuc= Subject key identifier: 53:D9:B5:91:2B:A9:01:AE:59:BF:8B:3E:16:A1:06:82:6E:62:CA:6F Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f Certificate serial: 019B40FFF324CB31CF46501CED4D7318A4C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 13:01:14 +0000 Manifest this update: Sun 21 Dec 2025 13:01:14 +0000 Manifest next update: Mon 22 Dec 2025 13:01:14 +0000 Files and hashes: 1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=) 2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=) 3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=) 4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: jdu7HF29jqKmty5eFjrc/KANHm6VY4K/k6uMJkbDAz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:f3:24:cb:31:cf:46:50:1c:ed:4d:73:18:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f Validity Not Before: Dec 21 13:01:14 2025 GMT Not After : Dec 22 13:01:14 2025 GMT Subject: CN=53d9b5912ba901ae59bf8b3e16a106826e62ca6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9d:d8:54:06:a9:ae:7a:d4:d0:46:b9:be:48: 5e:4e:e7:f9:a7:bb:6b:13:b7:36:ed:de:11:cf:e7: da:6c:47:e9:23:c9:9e:22:69:d7:4a:e4:e8:74:36: 79:70:ad:ea:a0:2c:1b:86:e8:98:e3:c4:c7:80:31: 2d:27:f2:a2:bf:5d:cf:df:25:b4:a8:04:79:31:15: ad:9a:7b:03:e4:3a:57:0c:93:b1:88:20:66:db:19: c4:16:19:18:22:83:ae:39:c7:d5:3e:dc:e5:79:67: f3:aa:d2:a3:2a:67:c4:ee:d5:3c:ba:a7:53:b4:64: 0a:79:0c:be:74:68:de:3d:94:14:38:60:f8:31:0e: 50:ad:b6:85:9c:4e:b5:59:e8:49:c3:a6:4b:db:43: 16:d0:f3:17:d3:dc:99:f9:46:b7:66:4b:e6:55:72: 9d:b7:64:17:6f:84:3c:23:20:55:dc:1c:f4:b4:38: 3a:cb:4f:04:ea:4e:c7:fc:4e:79:3f:3d:fa:8f:42: 45:23:72:25:e6:ce:5c:86:b9:68:3b:3f:e2:cb:0d: 22:a1:76:f6:82:41:a7:6c:fe:52:97:f0:9e:50:a3: b0:5e:a7:2c:a4:0f:d6:4d:c9:d7:01:0a:9d:e1:4b: be:e0:6a:ae:76:e5:4a:cb:56:85:bd:85:08:d9:d3: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:B5:91:2B:A9:01:AE:59:BF:8B:3E:16:A1:06:82:6E:62:CA:6F X509v3 Authority Key Identifier: keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:04:75:57:1b:6a:b6:0c:79:d2:55:59:78:46:cb:ba:4b:c4: bd:34:06:0f:8c:ef:dc:2d:80:0d:e7:48:3a:fb:67:a0:4d:d7: 7f:e0:c2:94:bf:81:a5:31:59:d1:26:fd:40:68:91:d5:a2:4f: f8:7b:d3:36:c5:9d:67:05:9e:70:43:15:3a:06:4a:36:d8:f5: 58:57:6c:51:c1:bf:28:cd:71:59:cd:8e:d0:d8:c1:30:e9:30: be:27:1a:66:08:20:22:27:ee:fe:10:e4:e3:0c:43:d2:bd:70: 3b:64:9d:82:d5:ad:ac:c1:6a:0c:40:c7:5b:4f:4d:f1:36:da: 0b:fe:4a:a3:23:f9:bc:ac:91:23:d1:54:fd:38:d0:32:7a:9c: b2:77:de:05:e2:59:2d:71:77:9f:44:22:67:68:2a:15:97:24: 2d:3c:4e:39:32:00:86:75:f0:b9:f0:5d:45:5f:b1:f3:c6:3c: ff:c0:ca:e4:89:c7:5d:59:32:7c:4f:bd:94:90:47:f3:24:7e: 3f:17:1e:08:6b:ee:5a:54:1b:aa:a6:da:45:7e:8e:24:b7:f8: 6d:ce:4f:f1:2c:6f:ce:26:40:d1:22:ac:ae:39:a3:8e:6c:5a: c9:1b:be:33:67:20:29:67:bb:13:86:0e:07:58:08:77:45:ab: 71:bf:da:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//MkyzHPRlAc7U1zGKTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODc0MDc5OWM5MWMyNjMwYTgwOTIxNzhkYjgyNGYzYTg4 OWE3NWYwHhcNMjUxMjIxMTMwMTE0WhcNMjUxMjIyMTMwMTE0WjAzMTEwLwYDVQQD Eyg1M2Q5YjU5MTJiYTkwMWFlNTliZjhiM2UxNmExMDY4MjZlNjJjYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ3YVAaprnrU0Ea5vkheTuf5p7tr E7c27d4Rz+fabEfpI8meImnXSuTodDZ5cK3qoCwbhuiY48THgDEtJ/Kiv13P3yW0 qAR5MRWtmnsD5DpXDJOxiCBm2xnEFhkYIoOuOcfVPtzleWfzqtKjKmfE7tU8uqdT tGQKeQy+dGjePZQUOGD4MQ5QrbaFnE61WehJw6ZL20MW0PMX09yZ+Ua3ZkvmVXKd t2QXb4Q8IyBV3Bz0tDg6y08E6k7H/E55Pz36j0JFI3Il5s5chrloOz/iyw0ioXb2 gkGnbP5Sl/CeUKOwXqcspA/WTcnXAQqd4Uu+4GquduVKy1aFvYUI2dO2awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPZtZErqQGuWb+LPhahBoJuYspvMB8GA1UdIwQY MBaAFI2HQHmckcJjCoCSF424JPOoiadfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4Mjkt NTJiODE2NjgyOWQ3LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4MjktNTJiODE2NjgyOWQ3 LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwR1Vxtq tgx50lVZeEbLukvEvTQGD4zv3C2ADedIOvtnoE3Xf+DClL+BpTFZ0Sb9QGiR1aJP +HvTNsWdZwWecEMVOgZKNtj1WFdsUcG/KM1xWc2O0NjBMOkwvicaZgggIifu/hDk 4wxD0r1wO2SdgtWtrMFqDEDHW09N8TbaC/5KoyP5vKyRI9FU/TjQMnqcsnfeBeJZ LXF3n0QiZ2gqFZckLTxOOTIAhnXwufBdRV+x88Y8/8DK5InHXVkyfE+9lJBH8yR+ PxceCGvuWlQbqqbaRX6OJLf4bc5P8SxvziZA0SKsrjmjjmxayRu+M2cgKWe7E4YO B1gId0Wrcb/aQA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:50 2025 by rpki-client