This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json) Hash identifier: j12epZglVJbZL24hK13gmcuqp2U21LBnRQ/2JhHNgco= Subject key identifier: D0:2A:E5:A7:17:B2:7A:62:A7:4A:15:DE:02:EF:7A:C9:35:56:76:0B Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Certificate serial: 019B4D03FD425DC32321262DC5F9653DAE23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft Manifest number: 115C Signing time: Tue 23 Dec 2025 21:01:05 +0000 Manifest this update: Tue 23 Dec 2025 21:01:05 +0000 Manifest next update: Wed 24 Dec 2025 21:01:05 +0000 Files and hashes: 1: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=) 2: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: FxALR/3yjae8p22YDk3Fu57vgfXwbcG6lR6G57mKIy4=) 3: pdhN-MZpD_hNi80yknZO7jZPsqI.roa (hash: Vq61y4v3/rCjHkyR2L7fl+qX1NPi84b5r+WF68rRDB4=) 4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:03:fd:42:5d:c3:23:21:26:2d:c5:f9:65:3d:ae:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Validity Not Before: Dec 23 21:01:05 2025 GMT Not After : Dec 24 21:01:05 2025 GMT Subject: CN=d02ae5a717b27a62a74a15de02ef7ac93556760b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:1b:59:83:4c:c7:a1:6c:1c:7c:a4:ac:fe: c9:30:c3:ff:0d:f0:87:33:96:22:f0:62:01:dc:67: 58:24:8e:ee:e3:e3:1f:78:a4:b8:eb:56:4d:e7:df: 13:8a:65:f9:93:57:36:64:94:d3:02:de:7e:1c:f7: a2:9f:ad:57:c3:e5:11:80:f5:be:86:32:4f:a1:04: bb:19:c3:77:62:2a:48:7f:59:a7:8b:4a:64:57:ef: 44:98:f2:bc:2d:f9:31:df:ed:ff:09:29:c8:6f:47: 71:66:b2:81:b3:bc:fd:f5:df:28:d9:d2:07:7e:c3: f6:6d:3d:05:a0:66:82:7c:fc:18:79:4c:62:85:f2: d4:37:1e:9e:ce:6c:db:9c:d0:7a:18:ab:8c:9a:ce: 10:7c:65:aa:a2:95:95:1c:57:0d:bd:83:48:41:46: 91:4b:24:ca:56:6c:86:58:35:c4:29:a5:39:02:63: dc:b4:ad:2a:57:98:1e:e9:fe:08:a0:4b:cc:6a:7d: 7a:d7:4b:c1:3e:b7:41:a4:68:d5:f4:99:9a:20:24: 13:fa:c8:44:a2:da:5b:4f:b6:34:b4:7d:f5:bf:a2: 4a:b9:61:11:4c:e1:97:c7:04:d9:f6:80:65:d1:a8: ef:84:41:41:56:0c:79:f1:98:88:8d:9d:0e:f8:31: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2A:E5:A7:17:B2:7A:62:A7:4A:15:DE:02:EF:7A:C9:35:56:76:0B X509v3 Authority Key Identifier: keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b7:2e:96:08:2e:63:63:85:e3:bc:47:a1:26:b1:f7:66:95: a6:33:b1:cd:f4:94:cb:5d:4d:96:cc:6d:cf:19:31:c6:f7:7c: 77:e6:a3:df:2b:21:84:d8:50:07:fb:17:e6:23:0f:b6:c4:5e: 94:31:8a:33:d8:76:2c:d1:7c:7a:ec:b3:c9:78:10:47:e4:33: a9:63:dc:c6:55:72:30:02:6f:a9:59:8f:e8:8f:b0:67:76:c4: b3:74:fb:84:77:7a:22:7b:ec:ce:b7:a9:ad:25:c8:06:f1:90: 2a:1b:f8:d4:01:f0:ad:f2:ee:3a:de:47:5f:66:38:29:6e:c7: 8d:5f:e6:df:76:f9:7f:5e:3d:c5:90:bd:da:e2:55:df:68:28: a2:a2:d3:5c:89:11:58:9d:2c:94:3e:dc:8e:3d:3f:00:c9:49: 69:27:ec:bc:1d:f4:05:f9:39:73:7c:02:9b:df:cb:05:10:76: a4:2b:0b:9f:4a:27:7c:73:82:48:08:d0:4d:47:78:9a:92:fa: 77:6f:4c:1a:f1:66:40:11:e3:a1:fc:8c:c1:f0:f5:52:e7:bc: 22:f9:4a:12:2d:b5:aa:21:3e:87:f7:53:3f:f2:d7:fb:50:0d: a4:ea:c9:eb:61:4b:98:1f:49:4d:3f:ee:a6:43:38:4f:d2:3a: 92:05:d1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNA/1CXcMjISYtxfllPa4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy MzZjY2IwHhcNMjUxMjIzMjEwMTA1WhcNMjUxMjI0MjEwMTA1WjAzMTEwLwYDVQQD EyhkMDJhZTVhNzE3YjI3YTYyYTc0YTE1ZGUwMmVmN2FjOTM1NTY3NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx0bWYNMx6FsHHykrP7JMMP/DfCH M5Yi8GIB3GdYJI7u4+MfeKS461ZN598TimX5k1c2ZJTTAt5+HPein61Xw+URgPW+ hjJPoQS7GcN3YipIf1mni0pkV+9EmPK8Lfkx3+3/CSnIb0dxZrKBs7z99d8o2dIH fsP2bT0FoGaCfPwYeUxihfLUNx6ezmzbnNB6GKuMms4QfGWqopWVHFcNvYNIQUaR SyTKVmyGWDXEKaU5AmPctK0qV5ge6f4IoEvMan1610vBPrdBpGjV9JmaICQT+shE otpbT7Y0tH31v6JKuWERTOGXxwTZ9oBl0ajvhEFBVgx58ZiIjZ0O+DFTvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAq5acXsnpip0oV3gLvesk1VnYLMB8GA1UdIwQY MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7culggu Y2OF47xHoSax92aVpjOxzfSUy11Nlsxtzxkxxvd8d+aj3yshhNhQB/sX5iMPtsRe lDGKM9h2LNF8euyzyXgQR+QzqWPcxlVyMAJvqVmP6I+wZ3bEs3T7hHd6Invszrep rSXIBvGQKhv41AHwrfLuOt5HX2Y4KW7HjV/m33b5f149xZC92uJV32gooqLTXIkR WJ0slD7cjj0/AMlJaSfsvB30Bfk5c3wCm9/LBRB2pCsLn0onfHOCSAjQTUd4mpL6 d29MGvFmQBHjofyMwfD1Uue8IvlKEi21qiE+h/dTP/LX+1ANpOrJ62FLmB9JTT/u pkM4T9I6kgXRyg== -----END CERTIFICATE-----Generated at Wed Dec 24 03:02:04 2025 by rpki-client