This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json) Hash identifier: Z0U2amLQSnIOtZ6+uHwJCQz/FMiwWCMzfvzZH+R/Ppc= Subject key identifier: EB:1F:FB:11:20:7B:2F:C1:42:1D:36:04:8F:C5:19:57:57:6D:DA:D0 Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a Certificate serial: 019B51179EC18B617E18F59DF06BDCE062CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft Manifest number: 04BF Signing time: Wed 24 Dec 2025 16:01:00 +0000 Manifest this update: Wed 24 Dec 2025 16:01:00 +0000 Manifest next update: Thu 25 Dec 2025 16:01:00 +0000 Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=) 2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: vkjcU+2k0hzZiEiilcgrfypaPRgmlVEcc4eX4+DJrwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:9e:c1:8b:61:7e:18:f5:9d:f0:6b:dc:e0:62:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a Validity Not Before: Dec 24 16:01:00 2025 GMT Not After : Dec 25 16:01:00 2025 GMT Subject: CN=eb1ffb11207b2fc1421d36048fc51957576ddad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:e4:dd:fb:24:b7:84:a3:6b:34:67:6d:49: 1d:f1:c2:4a:a4:d2:0a:ee:11:15:0d:5c:19:e5:98: e4:8e:89:2d:26:82:3c:9f:87:4a:66:ad:bf:89:1a: 13:c8:11:ad:70:0b:ae:41:b6:76:1d:78:b0:b1:de: 06:2d:00:a0:85:2b:c4:32:05:33:09:e8:ad:28:6d: e3:fc:89:aa:0a:1c:e3:3c:64:f0:c8:28:01:04:d1: 42:ef:8d:14:17:e5:d5:76:0e:c4:62:38:ea:df:d0: df:57:b1:cc:9c:e4:2f:4a:b6:1f:c7:8a:10:27:cc: d5:67:9d:e1:0b:a0:37:2b:47:77:ba:6e:c8:ea:48: b2:55:23:e9:21:04:47:5b:a0:81:6a:b2:fa:3f:b6: b9:ee:3a:04:8a:a8:22:b3:ed:9b:cf:66:a2:dc:f0: be:b7:c2:e0:35:5e:6e:75:dd:fd:cb:53:64:e8:79: 57:0d:69:82:ca:35:24:16:20:01:11:e1:f8:39:c8: 43:39:53:a3:f7:02:86:b9:ab:d4:b3:86:24:e5:ef: 89:f4:78:e3:43:a6:ec:53:60:85:9d:43:19:9e:79: 3b:ab:73:74:8d:74:93:f0:56:26:02:da:97:f4:7e: 4d:9f:06:73:27:be:bb:a5:b4:6b:71:a1:7f:80:51: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:FB:11:20:7B:2F:C1:42:1D:36:04:8F:C5:19:57:57:6D:DA:D0 X509v3 Authority Key Identifier: keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ad:e3:a9:fa:b5:ae:63:03:c9:9b:da:af:5f:ac:82:2d:82: 9b:24:06:64:77:10:4d:dd:29:0e:b6:45:98:b1:ad:8d:1b:c4: 3d:de:02:a0:25:70:82:70:5b:54:d1:af:1d:cd:64:90:96:61: 8c:60:5f:0d:8c:04:1a:95:f8:11:26:d2:2f:d1:6e:5c:10:ce: b1:96:4d:a8:21:68:f1:1b:fc:47:46:bb:43:d6:40:db:08:30: 4f:4d:2c:2c:67:c1:54:ca:a9:01:3a:72:43:3a:b9:6d:4c:d6: bb:fd:31:78:f5:3c:ee:96:c6:cd:f7:90:cf:46:72:05:8f:2f: 15:61:2d:df:01:59:30:6b:94:d9:a1:3d:f4:14:6a:19:42:87: 8e:12:bf:80:bf:93:49:fb:cb:70:bb:e5:b6:a6:a2:c1:bb:dd: 29:dd:3d:91:70:f1:0a:08:52:a9:34:76:9c:4f:94:45:cc:28: 8a:5f:24:9e:5d:58:3b:89:01:0f:c0:c1:b2:fe:37:fa:79:ed: 50:97:48:4b:8a:e0:93:63:6c:4d:09:02:8d:6f:2d:f2:ee:3c: ce:60:3e:07:0d:9f:f2:cc:60:56:ad:cd:2d:11:3c:d6:fe:6d: 31:70:5e:96:fe:ff:b4:c0:41:d3:52:a3:85:8f:5b:23:32:ff: 1b:07:29:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF57Bi2F+GPWd8Gvc4GLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWNiNjhjODBkNmQ4ZDE2NDg5MjIzMGY5ZDExZjI1NTFi ZWQzOGEwHhcNMjUxMjI0MTYwMTAwWhcNMjUxMjI1MTYwMTAwWjAzMTEwLwYDVQQD EyhlYjFmZmIxMTIwN2IyZmMxNDIxZDM2MDQ4ZmM1MTk1NzU3NmRkYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuzk3fskt4SjazRnbUkd8cJKpNIK 7hEVDVwZ5ZjkjoktJoI8n4dKZq2/iRoTyBGtcAuuQbZ2HXiwsd4GLQCghSvEMgUz CeitKG3j/ImqChzjPGTwyCgBBNFC740UF+XVdg7EYjjq39DfV7HMnOQvSrYfx4oQ J8zVZ53hC6A3K0d3um7I6kiyVSPpIQRHW6CBarL6P7a57joEiqgis+2bz2ai3PC+ t8LgNV5udd39y1Nk6HlXDWmCyjUkFiABEeH4OchDOVOj9wKGuavUs4Yk5e+J9Hjj Q6bsU2CFnUMZnnk7q3N0jXST8FYmAtqX9H5NnwZzJ767pbRrcaF/gFG3LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsf+xEgey/BQh02BI/FGVdXbdrQMB8GA1UdIwQY MBaAFIzstoyA1tjRZIkiMPnRHyVRvtOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMTU5YWQtMWJmYi00OTBlLThkNzgt ZWIwMDEyMWE1NWU1LzEvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9jMTU5YWQtMWJmYi00OTBlLThkNzgtZWIwMDEyMWE1NWU1 LzEvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK3jqfq1 rmMDyZvar1+sgi2CmyQGZHcQTd0pDrZFmLGtjRvEPd4CoCVwgnBbVNGvHc1kkJZh jGBfDYwEGpX4ESbSL9FuXBDOsZZNqCFo8Rv8R0a7Q9ZA2wgwT00sLGfBVMqpATpy Qzq5bUzWu/0xePU87pbGzfeQz0ZyBY8vFWEt3wFZMGuU2aE99BRqGUKHjhK/gL+T SfvLcLvltqaiwbvdKd09kXDxCghSqTR2nE+URcwoil8knl1YO4kBD8DBsv43+nnt UJdIS4rgk2NsTQkCjW8t8u48zmA+Bw2f8sxgVq3NLRE81v5tMXBelv7/tMBB01Kj hY9bIzL/GwcpRA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:08 2025 by rpki-client