This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json) Hash identifier: UC04Qoaz7gM+L+QAirr3P91Kn52mSd2ie+rvdJQozUY= Subject key identifier: 1B:F2:AE:55:0B:FC:CF:6A:DB:CA:C2:88:1F:AC:9C:C7:06:52:32:8A Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44 Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44 Certificate serial: 019B3C46CA65EE90E8EB37FB658DC851A928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft Manifest number: 1389 Signing time: Sat 20 Dec 2025 15:00:30 +0000 Manifest this update: Sat 20 Dec 2025 15:00:30 +0000 Manifest next update: Sun 21 Dec 2025 15:00:30 +0000 Files and hashes: 1: c3WDl8SfFCkca3Wid6jBSPNKAGE.roa (hash: lxKRn2VdYBDHJ0paIp1wPq/rCuS2/hh20C+G3q+EDZo=) 2: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: GCuFLdGxqJpEd7BYzGhZ5XHcijhsshJCidM/ARIg6J8=) 3: ly2mgBHHZLNGBUFfqCjRrV2SvFo.roa (hash: shkitV/EoiiYPYmD6wkEJAUrA2P9DugMTMa+mPtgOi8=) 4: praewBGKObVyHJrk-EW3SR6etDM.roa (hash: SH0U3WS8ZCn7PM3WLsz5WjDkQUu5ZhLAkIQAfKgw1ew=) 5: yfYVimwILKV-qGFqMNBusDCcVjQ.roa (hash: nk++/uFa+Aub+3IrRDF5TU2OMotYcxaO9cJ/XQbZB+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:ca:65:ee:90:e8:eb:37:fb:65:8d:c8:51:a9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44 Validity Not Before: Dec 20 15:00:30 2025 GMT Not After : Dec 21 15:00:30 2025 GMT Subject: CN=1bf2ae550bfccf6adbcac2881fac9cc70652328a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:8d:f7:82:c1:e3:f0:01:16:a3:d2:d3:f7: f1:a1:fe:ec:c5:50:e9:4b:4c:39:85:1c:7a:30:3c: af:a2:37:19:ca:a7:26:36:f4:d7:dd:80:60:19:cf: 28:a7:5f:d1:da:a9:75:c0:b1:58:f2:bb:3d:a7:df: e7:95:c0:dd:d0:18:b6:13:a0:d3:d3:55:c5:a0:3d: 27:54:a7:70:22:98:99:17:b6:4e:71:6e:ad:33:71: b6:63:9c:bb:c3:66:e5:97:07:b4:f2:d6:35:55:1e: 06:dd:9f:a3:be:5a:53:44:08:d4:9b:6b:ea:db:7c: 44:99:77:f7:ff:5c:a4:de:26:30:40:b1:fa:9b:43: ed:42:fa:02:57:ec:88:92:cc:38:4c:5c:93:07:51: e0:86:46:77:f1:ab:2e:47:0b:e3:a3:de:67:6a:ed: b1:86:3d:a4:3b:ac:96:33:2a:6f:ab:61:af:a7:e8: b0:22:88:9f:94:be:84:61:de:7f:d2:31:f1:51:61: b2:1e:54:fc:a8:20:f8:0b:51:55:7b:27:d8:ba:44: 0a:2b:02:4c:da:d1:69:19:5e:90:f7:4e:e8:cd:ce: e7:88:cc:d8:c7:1a:2a:48:67:74:83:9a:2a:9f:fa: 91:89:40:2b:10:7b:c8:0c:99:ea:9d:7a:7d:e2:e5: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F2:AE:55:0B:FC:CF:6A:DB:CA:C2:88:1F:AC:9C:C7:06:52:32:8A X509v3 Authority Key Identifier: keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:49:7a:fc:c2:53:f4:bb:af:7d:3f:ff:e2:1b:d7:9f:34:ea: 1c:2b:79:05:fb:23:64:c8:ad:70:ea:74:a3:9d:a9:cb:50:54: 46:f6:46:62:f7:37:99:4b:61:79:ae:51:7c:a2:c8:ff:21:3d: 3c:59:5c:7a:96:15:0b:af:fe:b9:df:df:5d:09:11:9e:f8:94: d5:ae:83:35:90:ed:eb:62:87:ab:e1:ab:9b:45:17:da:04:c0: 4f:c8:40:bf:07:33:46:4d:2b:ba:cd:53:9f:8a:3e:94:bc:dc: 0b:ae:b1:b6:9e:6a:0a:f5:71:f9:7e:ec:f0:4b:54:1e:8e:ab: d4:50:5b:8a:a1:cd:8e:75:c9:5f:fd:b9:7b:80:5f:3c:d2:5f: 13:70:78:c3:56:dd:0c:bd:e9:c7:be:2f:61:51:72:d2:34:81: eb:a2:69:3c:65:f0:19:fb:9d:23:25:17:e0:2e:bf:a9:47:2a: 28:8a:60:d2:1b:77:c3:52:00:e6:63:d1:99:1c:60:6a:3c:74: 0f:86:b6:dc:9c:9d:35:94:c5:86:45:24:7a:bb:c7:81:65:42: 13:71:8e:b2:ad:f1:db:30:5f:dd:a5:1f:c3:4e:e3:26:84:5d: e6:ae:30:49:27:1b:da:ef:ee:5d:9b:36:1c:86:3e:13:7f:db: 45:ab:09:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rspl7pDo6zf7ZY3IUakoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk M2ZjNDQwHhcNMjUxMjIwMTUwMDMwWhcNMjUxMjIxMTUwMDMwWjAzMTEwLwYDVQQD EygxYmYyYWU1NTBiZmNjZjZhZGJjYWMyODgxZmFjOWNjNzA2NTIzMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoKN94LB4/ABFqPS0/fxof7sxVDp S0w5hRx6MDyvojcZyqcmNvTX3YBgGc8op1/R2ql1wLFY8rs9p9/nlcDd0Bi2E6DT 01XFoD0nVKdwIpiZF7ZOcW6tM3G2Y5y7w2bllwe08tY1VR4G3Z+jvlpTRAjUm2vq 23xEmXf3/1yk3iYwQLH6m0PtQvoCV+yIksw4TFyTB1HghkZ38asuRwvjo95nau2x hj2kO6yWMypvq2Gvp+iwIoiflL6EYd5/0jHxUWGyHlT8qCD4C1FVeyfYukQKKwJM 2tFpGV6Q907ozc7niMzYxxoqSGd0g5oqn/qRiUArEHvIDJnqnXp94uUpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvyrlUL/M9q28rCiB+snMcGUjKKMB8GA1UdIwQY MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt M2FlNzExYWYwMzRiLzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEl6/MJT 9LuvfT//4hvXnzTqHCt5BfsjZMitcOp0o52py1BURvZGYvc3mUthea5RfKLI/yE9 PFlcepYVC6/+ud/fXQkRnviU1a6DNZDt62KHq+Grm0UX2gTAT8hAvwczRk0rus1T n4o+lLzcC66xtp5qCvVx+X7s8EtUHo6r1FBbiqHNjnXJX/25e4BfPNJfE3B4w1bd DL3px74vYVFy0jSB66JpPGXwGfudIyUX4C6/qUcqKIpg0ht3w1IA5mPRmRxgajx0 D4a23JydNZTFhkUkervHgWVCE3GOsq3x2zBf3aUfw07jJoRd5q4wSScb2u/uXZs2 HIY+E3/bRasJtg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:17 2025 by rpki-client