This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft File: jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft (raw, json) Hash identifier: XdYwAfMb7gavmJZSqTqE98Er80rpjGDe6ZvMlb0OoAY= Subject key identifier: BD:50:ED:66:D1:DB:B1:3F:18:EE:4E:25:5A:A2:F2:4C:8E:03:76:0A Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55 Certificate issuer: /CN=8f2ae45c509041a796a968953581f51d45bfce55 Certificate serial: 019B3EA345A7A95B4208AA264D31D4C7DC3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 02:00:46 +0000 Manifest this update: Sun 21 Dec 2025 02:00:46 +0000 Manifest next update: Mon 22 Dec 2025 02:00:46 +0000 Files and hashes: 1: 5QH7uoE58dfucr5l0cknmb5_6nM.roa (hash: am7mbJzCmfdx1pMjvSb/IknD/TSfo87lHt1mL7pdZCQ=) 2: U9TChuEsKrileu5LPlClTPiblHw.roa (hash: iW3rj/qTsfRQaeDi2vFF7FLZOCFmBBPXZ/tRsBWwt4A=) 3: botr4mqTB6e3Z366JpSN6qT4H4s.roa (hash: aKjhoPVp3MyiJCkQJ3KF625JVgfmfjs5tdeStuyIYnY=) 4: jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl (hash: HACK6Motl3csuy9H6et6gcVsy53ywdIcIOUgTJaG51w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:45:a7:a9:5b:42:08:aa:26:4d:31:d4:c7:dc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55 Validity Not Before: Dec 21 02:00:46 2025 GMT Not After : Dec 22 02:00:46 2025 GMT Subject: CN=bd50ed66d1dbb13f18ee4e255aa2f24c8e03760a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:74:23:49:01:0a:c2:d7:a4:4d:5b:92:b4: 4b:5d:f5:7c:99:d2:45:ca:94:c8:33:21:8b:57:1f: 67:d1:00:be:47:35:a4:02:ea:69:e6:88:19:a6:da: 06:e2:ea:de:95:da:86:6d:6f:47:7b:60:f9:d0:72: 94:84:e3:e3:48:ed:b5:9e:1c:ad:16:0a:73:38:7f: e1:be:b9:5c:ec:a0:5a:ad:39:b4:64:8d:71:41:2e: 7a:ea:10:b5:61:0b:27:44:32:b7:70:24:c4:d2:f5: 6d:df:ed:de:8f:c5:3c:6d:6c:42:d7:5f:60:ef:a7: 4c:95:57:02:e9:0e:ec:17:f1:67:d3:a1:79:cc:81: 24:aa:f0:42:d4:af:eb:a8:51:00:f5:26:ba:28:a5: ae:25:fc:d8:ce:36:be:4c:b2:40:ba:17:31:6c:1c: f0:3d:b1:52:28:4e:cb:73:3e:09:2e:63:d3:07:6e: 46:f2:ba:6c:6e:26:f1:73:90:96:54:f2:2f:ac:75: c4:9b:f8:55:a9:f0:92:b9:d4:bf:28:39:f7:24:5f: c0:1b:90:05:9e:81:c7:1d:89:18:06:e1:b8:bc:8a: c6:10:34:1a:a0:2d:a5:95:04:a5:b7:c1:bd:0e:fa: ac:e0:ac:5a:6f:12:8b:24:1c:19:ab:36:2d:84:d2: 87:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:50:ED:66:D1:DB:B1:3F:18:EE:4E:25:5A:A2:F2:4C:8E:03:76:0A X509v3 Authority Key Identifier: keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f1:8f:45:7b:d8:c2:f9:78:cd:fb:da:ca:2b:38:b0:48:b8: c6:18:86:e7:49:85:03:d0:68:b0:77:9e:1f:8a:9b:a0:2a:06: 24:d2:55:d4:9d:08:fc:ce:f3:40:87:21:80:b4:ba:c1:60:93: c5:96:37:b9:a7:99:d3:ba:b4:f5:b2:be:ec:ee:5e:0b:30:c3: 0a:b0:4f:6a:77:84:4c:db:dd:0e:c1:03:dc:87:45:28:ee:7b: 3e:fb:af:f3:56:07:22:a7:82:b9:6b:c0:1e:f5:31:5f:fb:56: a5:55:31:ce:b0:88:79:7f:05:ff:28:a4:a7:aa:51:7d:0e:0a: f9:0a:99:dd:67:51:79:7d:17:09:33:48:90:7a:20:5f:1e:3a: 13:cf:41:b0:c5:1c:39:d0:af:62:63:b3:b0:c2:7f:f2:8a:96: 92:f5:3d:e4:d8:d2:88:dd:05:fd:1b:43:ac:9e:a0:b9:c8:2d: 69:83:cb:0f:17:02:12:8c:84:69:74:9c:54:cd:5c:8d:6f:e5: 27:8d:f3:e7:c3:86:e7:5e:2d:f4:a0:1e:e1:cd:30:f8:ed:8c: 8c:55:6a:13:f0:6d:6e:8c:99:61:1d:5f:39:8f:41:09:67:d4: d5:1e:6f:eb:9b:31:6e:68:af:d6:fb:b6:e3:07:68:a5:39:dd: 32:dc:5f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o0WnqVtCCKomTTHUx9w6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMmFlNDVjNTA5MDQxYTc5NmE5Njg5NTM1ODFmNTFkNDVi ZmNlNTUwHhcNMjUxMjIxMDIwMDQ2WhcNMjUxMjIyMDIwMDQ2WjAzMTEwLwYDVQQD EyhiZDUwZWQ2NmQxZGJiMTNmMThlZTRlMjU1YWEyZjI0YzhlMDM3NjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst50I0kBCsLXpE1bkrRLXfV8mdJF ypTIMyGLVx9n0QC+RzWkAupp5ogZptoG4ureldqGbW9He2D50HKUhOPjSO21nhyt FgpzOH/hvrlc7KBarTm0ZI1xQS566hC1YQsnRDK3cCTE0vVt3+3ej8U8bWxC119g 76dMlVcC6Q7sF/Fn06F5zIEkqvBC1K/rqFEA9Sa6KKWuJfzYzja+TLJAuhcxbBzw PbFSKE7Lcz4JLmPTB25G8rpsbibxc5CWVPIvrHXEm/hVqfCSudS/KDn3JF/AG5AF noHHHYkYBuG4vIrGEDQaoC2llQSlt8G9Dvqs4KxabxKLJBwZqzYthNKHhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1Q7WbR27E/GO5OJVqi8kyOA3YKMB8GA1UdIwQY MBaAFI8q5FxQkEGnlqlolTWB9R1Fv85VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzct YWM3ZjIxYjZiNzRkLzEvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzctYWM3ZjIxYjZiNzRk LzEvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPGPRXvY wvl4zfvayis4sEi4xhiG50mFA9BosHeeH4qboCoGJNJV1J0I/M7zQIchgLS6wWCT xZY3uaeZ07q09bK+7O5eCzDDCrBPaneETNvdDsED3IdFKO57Pvuv81YHIqeCuWvA HvUxX/tWpVUxzrCIeX8F/yikp6pRfQ4K+QqZ3WdReX0XCTNIkHogXx46E89BsMUc OdCvYmOzsMJ/8oqWkvU95NjSiN0F/RtDrJ6gucgtaYPLDxcCEoyEaXScVM1cjW/l J43z58OG514t9KAe4c0w+O2MjFVqE/BtboyZYR1fOY9BCWfU1R5v65sxbmiv1vu2 4wdopTndMtxfRA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:52 2025 by rpki-client