This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json) Hash identifier: 7mx4i8WnQhgAcmpE2aMzZf2UYh4b0/1LDICd1bNKu14= Subject key identifier: 90:F5:24:6C:85:DB:1A:A6:6A:52:C5:CD:C4:3A:E2:1F:81:6E:01:0C Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e Certificate serial: 019B3D22E1272E6918BDE4C0D551F399620D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft Manifest number: 0426 Signing time: Sat 20 Dec 2025 19:00:54 +0000 Manifest this update: Sat 20 Dec 2025 19:00:54 +0000 Manifest next update: Sun 21 Dec 2025 19:00:54 +0000 Files and hashes: 1: EdJTz8Dy_KYllN7oDQj7wcm2rcA.roa (hash: fBqhHICDr0X6YXFTTdlTIs7rIkllOmDVf3b+eCpH7zk=) 2: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: oP/FOVS1WuALWEO+y8kbIW9h/1mVG5I9YqB5UfJvnNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:e1:27:2e:69:18:bd:e4:c0:d5:51:f3:99:62:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e Validity Not Before: Dec 20 19:00:54 2025 GMT Not After : Dec 21 19:00:54 2025 GMT Subject: CN=90f5246c85db1aa66a52c5cdc43ae21f816e010c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:ba:05:06:7a:c9:89:02:a3:ec:0b:07:3f: 04:0a:81:92:0f:e2:ac:54:55:3e:bc:d5:29:48:9e: f9:94:13:97:c3:bd:57:4f:2a:81:72:d6:13:78:c0: aa:43:c8:b7:1f:35:9f:8b:8c:34:80:e4:7f:39:a1: fd:d0:a3:47:d2:f0:40:01:38:de:b3:7d:83:f7:c6: 44:87:b2:13:8b:79:5b:33:26:e7:eb:99:d8:9c:5f: e7:36:0c:ca:96:af:32:38:e4:8f:f1:c9:93:99:97: 85:82:1a:a9:b0:f4:9a:34:7f:aa:38:19:44:27:72: 9d:d2:3b:38:10:7a:38:d9:ea:fb:3b:b8:e0:ab:9e: a6:94:cc:a6:38:bc:5c:ad:fb:c4:90:dc:e3:ec:f2: bc:3d:b1:c3:d5:4b:c7:48:b2:5b:f2:90:8d:12:23: 06:e9:dd:00:3e:5c:a5:67:c9:d4:ba:7c:21:59:29: 85:ff:d3:4b:54:f5:fe:38:4b:e6:b8:04:f1:1d:6e: bb:be:75:c1:2e:35:00:71:5b:94:cd:01:d4:ca:72: 9b:5d:69:dc:22:13:2d:38:cf:96:b6:0f:a8:54:c5: bf:8b:bb:d5:5b:3b:ff:cd:86:5c:59:04:0c:c1:0f: 00:8a:ac:ac:65:33:63:b0:f6:98:0d:da:a4:fd:fe: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F5:24:6C:85:DB:1A:A6:6A:52:C5:CD:C4:3A:E2:1F:81:6E:01:0C X509v3 Authority Key Identifier: keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8b:4f:58:6e:01:cb:b2:02:59:ee:f6:b6:d0:be:d9:01:98: c2:15:cb:db:82:82:3e:ec:a6:b3:dc:70:77:a8:4b:65:bb:6c: 3b:92:7e:b7:3d:ea:b8:b2:b4:3e:c2:79:13:73:8d:47:04:59: 4d:e6:d9:f8:63:b6:fd:be:36:fb:4d:59:b9:a6:9c:f8:6a:ae: ef:3f:6c:ed:a6:a3:7d:41:0c:8a:ac:fe:26:b7:6c:65:98:68: cd:fa:44:19:70:a7:15:5a:08:6d:4f:1b:d3:1f:09:ee:48:ca: 28:0a:a3:1a:f8:67:f2:4e:fc:d7:4e:42:99:8a:26:7c:31:d7: bc:5b:91:cd:6f:04:21:8d:de:44:b2:2b:ac:1a:32:f7:d5:d0: 12:55:5d:fc:fc:fc:d1:78:ae:a7:31:7c:33:17:65:5a:63:e2: c8:6f:8c:e3:f4:fc:b8:68:19:95:d1:dd:7a:1b:9b:d7:72:3f: 56:89:5e:31:98:49:c9:4b:b0:f5:33:cb:43:49:b5:fa:70:11: 57:aa:01:38:37:b3:1e:54:df:f3:71:83:22:21:b3:a3:78:9b: 3e:31:d9:59:77:6b:d0:2e:71:12:fb:6c:bf:59:1d:3b:69:c8: 6b:06:ad:6f:e0:e3:a8:1f:b6:a4:bd:13:2b:8e:67:2d:d7:d6: d4:eb:10:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IuEnLmkYveTA1VHzmWINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODBiNDU0NTVkODk3MzFmODdiYjUzZjRkYmU2NDExODk4 MzdkNGUwHhcNMjUxMjIwMTkwMDU0WhcNMjUxMjIxMTkwMDU0WjAzMTEwLwYDVQQD Eyg5MGY1MjQ2Yzg1ZGIxYWE2NmE1MmM1Y2RjNDNhZTIxZjgxNmUwMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41i6BQZ6yYkCo+wLBz8ECoGSD+Ks VFU+vNUpSJ75lBOXw71XTyqBctYTeMCqQ8i3HzWfi4w0gOR/OaH90KNH0vBAATje s32D98ZEh7ITi3lbMybn65nYnF/nNgzKlq8yOOSP8cmTmZeFghqpsPSaNH+qOBlE J3Kd0js4EHo42er7O7jgq56mlMymOLxcrfvEkNzj7PK8PbHD1UvHSLJb8pCNEiMG 6d0APlylZ8nUunwhWSmF/9NLVPX+OEvmuATxHW67vnXBLjUAcVuUzQHUynKbXWnc IhMtOM+Wtg+oVMW/i7vVWzv/zYZcWQQMwQ8AiqysZTNjsPaYDdqk/f7BxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD1JGyF2xqmalLFzcQ64h+BbgEMMB8GA1UdIwQY MBaAFI2AtFRV2Jcx+Hu1P02+ZBGJg31OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTct MzgwZTViZGZhNWUwLzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTctMzgwZTViZGZhNWUw LzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYtPWG4B y7ICWe72ttC+2QGYwhXL24KCPuyms9xwd6hLZbtsO5J+tz3quLK0PsJ5E3ONRwRZ TebZ+GO2/b42+01Zuaac+Gqu7z9s7aajfUEMiqz+JrdsZZhozfpEGXCnFVoIbU8b 0x8J7kjKKAqjGvhn8k78105CmYomfDHXvFuRzW8EIY3eRLIrrBoy99XQElVd/Pz8 0XiupzF8MxdlWmPiyG+M4/T8uGgZldHdehub13I/VoleMZhJyUuw9TPLQ0m1+nAR V6oBODezHlTf83GDIiGzo3ibPjHZWXdr0C5xEvtsv1kdO2nIawatb+DjqB+2pL0T K45nLdfW1OsQSg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:15:54 2025 by rpki-client