This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft File: jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json) Hash identifier: HNr+3zQUBZH/dRBBl2HiR+Y/VbFE9mHdAZkD7v/XEW0= Subject key identifier: FF:FC:39:68:BE:2F:64:02:AE:52:87:FE:58:D0:E9:BE:BA:3E:B0:E9 Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A Certificate issuer: /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a Certificate serial: 019B4100124CEBF3F7E843073C7F41D84402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft Manifest number: 0288 Signing time: Sun 21 Dec 2025 13:01:22 +0000 Manifest this update: Sun 21 Dec 2025 13:01:22 +0000 Manifest next update: Mon 22 Dec 2025 13:01:22 +0000 Files and hashes: 1: M-gXFd7N6RQlOS3FU49vKYSovUs.roa (hash: 3OvRn3YgHg1m6lctKtBNgoRt6uS+lTyZBl7EBoP4/D0=) 2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: 41xX157h+VWrueJED0J8tYIlLVbOGP8yIrkMcqhZixU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:12:4c:eb:f3:f7:e8:43:07:3c:7f:41:d8:44:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a Validity Not Before: Dec 21 13:01:22 2025 GMT Not After : Dec 22 13:01:22 2025 GMT Subject: CN=fffc3968be2f6402ae5287fe58d0e9beba3eb0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:63:dd:21:c1:b4:01:4a:82:46:fd:db:ea: d7:1f:8f:b2:46:99:e8:e8:f1:e5:fc:60:4c:68:09: f9:41:e8:9b:9e:d1:b0:c9:66:22:71:3c:cf:72:31: 01:bc:b5:33:9c:15:bd:89:1b:0b:31:06:e7:a2:e7: d8:fb:77:2d:53:aa:f7:80:87:33:15:89:52:56:68: c8:c4:bc:6f:4d:57:ca:dd:0d:65:7a:60:f0:87:7e: a7:9a:72:b7:48:67:55:55:df:44:47:ef:f5:e6:c0: 30:5e:66:f3:bf:b3:ba:d1:cc:05:c1:b7:be:c0:ab: 0a:ee:fc:98:8d:ec:00:8b:d3:13:24:1e:4f:e0:63: 16:2b:2b:09:e4:dd:cb:c7:7c:ea:3f:3f:86:4d:30: 4b:cf:68:09:ec:12:a8:ce:15:ba:3a:3f:4f:a9:84: 6f:52:13:25:db:15:1c:9a:c4:99:71:ff:62:55:6c: 4d:c4:1c:41:a9:ff:62:cf:ab:ed:88:e7:3e:02:32: 62:ab:5a:05:7a:2f:8c:1c:95:b5:25:8a:88:2f:fd: 5c:35:62:71:fe:f4:21:7a:dd:e5:0b:c8:14:17:67: 7e:51:ec:d5:7f:56:bc:71:d0:af:74:6f:34:87:82: a0:b8:36:64:a1:16:c8:1a:09:3c:97:6d:1c:7f:a5: c9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FC:39:68:BE:2F:64:02:AE:52:87:FE:58:D0:E9:BE:BA:3E:B0:E9 X509v3 Authority Key Identifier: keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:94:91:0c:cb:bd:cf:58:79:83:4a:40:eb:21:4f:5b:7c:c7: b6:11:4f:12:5b:f6:e2:5c:e9:c1:60:db:7d:e6:62:ab:74:9b: dd:cb:5d:02:b0:bb:6e:77:75:80:48:aa:fd:f6:a4:1f:60:1b: a6:b4:3c:31:6d:28:fa:42:e4:35:47:d4:07:3f:35:1e:62:e2: 8c:af:93:ca:be:e1:f7:49:a3:b2:e2:03:55:d5:bc:29:57:f5: 47:68:52:89:f0:87:5c:47:b5:67:52:f7:0b:ab:5a:6f:ce:89: e7:cc:ea:a5:b2:c2:a7:dd:7b:17:6e:c5:4c:11:db:7e:29:6c: 0a:30:dc:30:52:3f:c5:77:a9:7c:29:f6:75:26:f8:db:dd:97: 0c:34:26:d2:92:fc:75:7e:22:88:35:1b:99:92:3b:7a:a8:d0: 6f:2f:77:8f:8f:1e:6f:36:73:a1:c0:1a:05:b7:d7:be:11:47: b9:2f:97:7d:9c:a5:54:53:a9:b0:6c:6f:f0:39:ff:96:6a:28: db:a1:a0:e4:3b:46:66:88:aa:01:94:79:74:f5:02:6a:41:65: 15:ab:ee:2e:4d:08:01:13:fb:b6:e1:c0:6b:9a:8d:ac:37:63: 04:5b:bb:8a:d9:cb:66:28:cc:40:ee:e3:96:c2:0a:1c:85:42: 59:c9:db:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBABJM6/P36EMHPH9B2EQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODA0NWY5ZGYwOGM1MzA1N2U5ZGY5ZmI3YjdhNTc1MTAz ZmZmNGEwHhcNMjUxMjIxMTMwMTIyWhcNMjUxMjIyMTMwMTIyWjAzMTEwLwYDVQQD EyhmZmZjMzk2OGJlMmY2NDAyYWU1Mjg3ZmU1OGQwZTliZWJhM2ViMGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEhj3SHBtAFKgkb92+rXH4+yRpno 6PHl/GBMaAn5QeibntGwyWYicTzPcjEBvLUznBW9iRsLMQbnoufY+3ctU6r3gIcz FYlSVmjIxLxvTVfK3Q1lemDwh36nmnK3SGdVVd9ER+/15sAwXmbzv7O60cwFwbe+ wKsK7vyYjewAi9MTJB5P4GMWKysJ5N3Lx3zqPz+GTTBLz2gJ7BKozhW6Oj9PqYRv UhMl2xUcmsSZcf9iVWxNxBxBqf9iz6vtiOc+AjJiq1oFei+MHJW1JYqIL/1cNWJx /vQhet3lC8gUF2d+UezVf1a8cdCvdG80h4KguDZkoRbIGgk8l20cf6XJSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/8OWi+L2QCrlKH/ljQ6b66PrDpMB8GA1UdIwQY MBaAFI2ARfnfCMUwV+nfn7e3pXUQP/9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNjcxYmYtYWFhMC00ZmQzLTg1ZmMt ODIxZTY5NDEzMTMxLzEvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNjcxYmYtYWFhMC00ZmQzLTg1ZmMtODIxZTY5NDEzMTMx LzEvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZSRDMu9 z1h5g0pA6yFPW3zHthFPElv24lzpwWDbfeZiq3Sb3ctdArC7bnd1gEiq/fakH2Ab prQ8MW0o+kLkNUfUBz81HmLijK+Tyr7h90mjsuIDVdW8KVf1R2hSifCHXEe1Z1L3 C6tab86J58zqpbLCp917F27FTBHbfilsCjDcMFI/xXepfCn2dSb4292XDDQm0pL8 dX4iiDUbmZI7eqjQby93j48ebzZzocAaBbfXvhFHuS+XfZylVFOpsGxv8Dn/lmoo 26Gg5DtGZoiqAZR5dPUCakFlFavuLk0IARP7tuHAa5qNrDdjBFu7itnLZijMQO7j lsIKHIVCWcnbTg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:26:54 2025 by rpki-client