This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json) Hash identifier: 201D08CUGKDzwswC5BHmUDzWcFSSyxA73OPMX67jD+Q= Subject key identifier: A0:3C:48:A4:DE:A1:63:04:9E:7A:5A:D2:67:48:D6:37:2A:25:C7:24 Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Certificate serial: 019B3D233E845091137FA7A3879DF74E0110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 19:01:18 +0000 Manifest this update: Sat 20 Dec 2025 19:01:18 +0000 Manifest next update: Sun 21 Dec 2025 19:01:18 +0000 Files and hashes: 1: E9oFZpR0WuPEurk0UT599s3KKDk.roa (hash: Q0OtGh8qvr0qOtsRaXw0h+Pv9ovyY05P3QKCE0xqR6U=) 2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: N6PYzbYHcnvZQm1nn5WhFm7qaVtkrVh9XlhEMZTo49Y=) 3: rhwM13yb7i-t6Ly0MQtbcj3bZd8.roa (hash: rGHoCJ+25kyVkfObLSePRMqiDDa8j9R9c6PT4fGFhmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3e:84:50:91:13:7f:a7:a3:87:9d:f7:4e:01:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Validity Not Before: Dec 20 19:01:18 2025 GMT Not After : Dec 21 19:01:18 2025 GMT Subject: CN=a03c48a4dea163049e7a5ad26748d6372a25c724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:77:8b:65:e6:f6:02:70:fe:9d:56:7b:b9:84: f6:dd:fb:3b:36:8e:ff:4f:9a:b5:96:ac:81:b1:88: ea:d8:81:cf:dd:6e:fc:aa:5d:67:f3:e8:07:a7:b3: b8:02:ed:7b:99:34:1a:60:3a:30:69:51:db:03:b4: a2:4a:3f:30:88:30:95:0f:85:42:28:a0:44:92:b4: c8:19:e2:a2:6c:10:ae:36:83:0d:6e:1b:6c:de:4d: 5f:de:ff:f1:37:97:aa:c9:67:73:40:a2:23:f4:88: 89:20:61:bd:7c:6e:1b:14:fa:35:82:f0:f7:7a:20: 6a:98:27:7d:7a:94:92:5b:8b:32:07:17:09:0b:5d: d4:2c:07:d8:80:3d:1b:4b:a8:55:9b:20:90:28:7e: e7:08:6d:00:13:00:74:b0:e1:cd:95:1d:ff:25:26: 7e:f7:d9:26:a4:ad:ac:0e:5e:f3:9b:28:43:96:6b: 47:00:13:10:60:1e:8b:6c:ef:02:e7:85:ea:bd:67: 79:11:9e:56:46:59:18:52:49:9a:04:e2:96:02:5b: 3a:fa:6a:06:13:a1:b2:3d:ff:5f:31:64:f2:eb:a0: 8e:22:05:f8:06:77:b7:2f:18:3b:3d:66:9e:58:72: 51:97:0c:27:55:4e:03:4d:39:82:ee:59:10:3b:38: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3C:48:A4:DE:A1:63:04:9E:7A:5A:D2:67:48:D6:37:2A:25:C7:24 X509v3 Authority Key Identifier: keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:be:18:04:3c:cd:8a:89:ee:6b:6d:1b:27:7d:b0:96:ad:1a: 9d:ff:84:aa:0c:e8:ce:cf:2a:2f:4a:08:60:37:8d:74:34:93: 3c:c8:3d:c5:a6:99:47:b2:d4:12:10:5f:ad:a8:5b:2c:81:75: d4:d5:fc:92:52:0f:5b:05:67:81:f1:6f:b7:64:36:b9:b5:8a: 2a:aa:70:ca:19:a7:e6:bf:ea:bf:84:3a:a2:48:82:b6:8d:f1: ec:e8:2c:32:91:af:72:0c:1f:d6:e9:df:a7:74:5e:9c:56:71: a0:10:ba:2f:4e:20:08:70:09:da:f0:4d:73:00:63:da:f2:8c: f5:a8:4d:b6:cf:5b:58:fb:c0:2f:c3:91:5e:95:c1:68:bf:7c: 84:46:a2:a0:4a:ff:28:e4:c8:16:f4:3f:d9:bf:6f:be:51:5b: 58:81:a9:09:a3:24:16:91:bc:8d:d4:4d:98:83:72:45:b9:5c: ab:78:63:f3:f0:3e:49:db:50:1e:5b:71:63:ce:2a:29:12:92: a1:5f:78:70:e0:d1:48:fc:52:3e:5a:a6:0c:e9:2e:bf:b4:f0: 53:f7:ba:87:2d:d6:fd:c4:8c:24:27:04:3e:72:f5:0d:96:e6: 60:56:57:84:c9:ca:91:4d:5a:68:20:fb:4d:2b:35:c8:a8:8d: 1c:1c:ad:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iz6EUJETf6ejh533TgEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy YzU4ODcwHhcNMjUxMjIwMTkwMTE4WhcNMjUxMjIxMTkwMTE4WjAzMTEwLwYDVQQD EyhhMDNjNDhhNGRlYTE2MzA0OWU3YTVhZDI2NzQ4ZDYzNzJhMjVjNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6neLZeb2AnD+nVZ7uYT23fs7No7/ T5q1lqyBsYjq2IHP3W78ql1n8+gHp7O4Au17mTQaYDowaVHbA7SiSj8wiDCVD4VC KKBEkrTIGeKibBCuNoMNbhts3k1f3v/xN5eqyWdzQKIj9IiJIGG9fG4bFPo1gvD3 eiBqmCd9epSSW4syBxcJC13ULAfYgD0bS6hVmyCQKH7nCG0AEwB0sOHNlR3/JSZ+ 99kmpK2sDl7zmyhDlmtHABMQYB6LbO8C54XqvWd5EZ5WRlkYUkmaBOKWAls6+moG E6GyPf9fMWTy66COIgX4Bne3Lxg7PWaeWHJRlwwnVU4DTTmC7lkQOzitWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA8SKTeoWMEnnpa0mdI1jcqJcckMB8GA1UdIwQY MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt YjViOGQwMjQ0OGI4LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4 LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADL4YBDzN ionua20bJ32wlq0anf+Eqgzozs8qL0oIYDeNdDSTPMg9xaaZR7LUEhBfrahbLIF1 1NX8klIPWwVngfFvt2Q2ubWKKqpwyhmn5r/qv4Q6okiCto3x7OgsMpGvcgwf1unf p3RenFZxoBC6L04gCHAJ2vBNcwBj2vKM9ahNts9bWPvAL8ORXpXBaL98hEaioEr/ KOTIFvQ/2b9vvlFbWIGpCaMkFpG8jdRNmINyRblcq3hj8/A+SdtQHltxY84qKRKS oV94cODRSPxSPlqmDOkuv7TwU/e6hy3W/cSMJCcEPnL1DZbmYFZXhMnKkU1aaCD7 TSs1yKiNHBytTw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:04 2025 by rpki-client