This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json) Hash identifier: 2WuG1lhjK9V5RR56IGML7MGASt31LLogIl2/AQyWOag= Subject key identifier: CE:AE:F9:C0:DB:0A:DE:B1:B7:F6:37:AF:42:AD:25:00:7B:5A:04:0B Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Certificate serial: 019B3F7F4EB08ABEC7C49F6C12D56EC67737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft Manifest number: 1155 Signing time: Sun 21 Dec 2025 06:01:06 +0000 Manifest this update: Sun 21 Dec 2025 06:01:06 +0000 Manifest next update: Mon 22 Dec 2025 06:01:06 +0000 Files and hashes: 1: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=) 2: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: hC2wfO9wLw5r3ok3+FC2EZL/+cUx5fS5ftdwLZO3eHM=) 3: pdhN-MZpD_hNi80yknZO7jZPsqI.roa (hash: Vq61y4v3/rCjHkyR2L7fl+qX1NPi84b5r+WF68rRDB4=) 4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:4e:b0:8a:be:c7:c4:9f:6c:12:d5:6e:c6:77:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Validity Not Before: Dec 21 06:01:06 2025 GMT Not After : Dec 22 06:01:06 2025 GMT Subject: CN=ceaef9c0db0adeb1b7f637af42ad25007b5a040b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:60:01:a1:f8:8c:c4:9c:8f:25:6b:1e:b1: b1:33:8c:a0:66:99:59:59:ad:50:cc:cb:55:18:d9: 59:f3:bc:09:26:a7:cb:07:d7:67:1b:3e:cc:49:0e: 89:bb:6d:64:12:9f:a8:78:d2:45:b7:f1:c3:f0:54: 92:6a:97:e2:b3:d1:d5:0b:34:bd:7a:c6:4e:68:0f: a1:6c:73:98:70:f1:da:6a:0a:4f:de:74:5f:1f:cc: 76:b5:d0:9e:3d:c0:26:36:fe:74:ba:ed:c9:81:ed: 0a:46:50:e4:f5:0e:eb:46:8e:33:ea:d5:9e:71:2d: c6:9b:ef:f9:d9:d1:56:4b:aa:20:e2:5b:83:93:c8: 3d:14:ce:f5:ce:a5:06:d1:45:31:9f:8a:f8:ab:b0: 9e:22:97:d8:57:8c:04:d4:e2:25:88:c5:fe:a8:14: f0:39:67:13:f6:85:74:5d:e8:f9:05:8e:91:a4:30: 25:fe:73:7e:9f:36:bf:d0:25:b8:e2:4e:90:72:83: fb:4b:ae:88:22:69:92:76:23:8d:cb:da:73:76:87: c8:b9:80:ef:f3:c6:be:91:3b:f1:dc:ff:07:1a:91: 99:1b:55:54:c4:41:c6:c8:dc:7f:41:7c:1c:3d:73: 88:ef:bd:db:ec:e6:81:1d:98:20:d7:04:5a:59:c1: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AE:F9:C0:DB:0A:DE:B1:B7:F6:37:AF:42:AD:25:00:7B:5A:04:0B X509v3 Authority Key Identifier: keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2b:62:09:da:57:ee:06:91:53:99:ee:a5:3a:a7:f9:2c:e8: 01:ad:17:d4:4b:b3:47:23:7f:4f:24:fd:0e:a7:52:a0:f4:c8: 4c:df:62:11:ae:a7:fc:e5:94:83:aa:1b:df:05:fd:d6:c5:0d: 09:e4:24:6b:04:cb:58:dd:d5:8a:25:50:b9:16:26:fc:a1:45: 27:cd:3f:85:5e:d7:b7:4b:18:4a:5a:07:14:94:96:0b:07:40: 13:54:1c:59:ec:17:d3:aa:2a:6b:a3:d2:16:ea:3e:c7:20:fb: 67:e9:30:13:e7:35:e5:4e:21:6e:31:f1:a6:71:50:72:54:a4: 38:44:3d:7c:a7:57:eb:94:85:e7:ce:9d:6e:87:38:58:89:7d: 5c:48:3e:2c:bd:c0:54:79:f1:42:55:9f:12:91:9d:d0:03:4a: db:d5:ae:7a:1d:c9:68:71:cf:3d:44:a2:63:e4:56:44:62:3a: 12:ad:80:c8:3e:09:1b:7b:5e:f7:11:87:75:fa:6e:31:6b:c2: 0c:fb:7b:d5:45:c2:5f:14:68:ba:2c:88:1b:b0:7e:b7:71:9d: fb:d0:8b:4a:37:6c:80:64:d7:2e:9a:42:17:99:06:7b:70:cb: f7:6a:c8:5d:c8:cd:e4:06:18:f3:85:6d:a3:ba:d5:37:0d:30: 79:65:ef:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f06wir7HxJ9sEtVuxnc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy MzZjY2IwHhcNMjUxMjIxMDYwMTA2WhcNMjUxMjIyMDYwMTA2WjAzMTEwLwYDVQQD EyhjZWFlZjljMGRiMGFkZWIxYjdmNjM3YWY0MmFkMjUwMDdiNWEwNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfVgAaH4jMScjyVrHrGxM4ygZplZ Wa1QzMtVGNlZ87wJJqfLB9dnGz7MSQ6Ju21kEp+oeNJFt/HD8FSSapfis9HVCzS9 esZOaA+hbHOYcPHaagpP3nRfH8x2tdCePcAmNv50uu3Jge0KRlDk9Q7rRo4z6tWe cS3Gm+/52dFWS6og4luDk8g9FM71zqUG0UUxn4r4q7CeIpfYV4wE1OIliMX+qBTw OWcT9oV0Xej5BY6RpDAl/nN+nza/0CW44k6QcoP7S66IImmSdiONy9pzdofIuYDv 88a+kTvx3P8HGpGZG1VUxEHGyNx/QXwcPXOI773b7OaBHZgg1wRaWcEjUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6u+cDbCt6xt/Y3r0KtJQB7WgQLMB8GA1UdIwQY MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMStiCdpX 7gaRU5nupTqn+SzoAa0X1EuzRyN/TyT9DqdSoPTITN9iEa6n/OWUg6ob3wX91sUN CeQkawTLWN3ViiVQuRYm/KFFJ80/hV7Xt0sYSloHFJSWCwdAE1QcWewX06oqa6PS Fuo+xyD7Z+kwE+c15U4hbjHxpnFQclSkOEQ9fKdX65SF586dboc4WIl9XEg+LL3A VHnxQlWfEpGd0ANK29Wueh3JaHHPPUSiY+RWRGI6Eq2AyD4JG3te9xGHdfpuMWvC DPt71UXCXxRouiyIG7B+t3Gd+9CLSjdsgGTXLppCF5kGe3DL92rIXcjN5AYY84Vt o7rVNw0weWXv+A== -----END CERTIFICATE-----Generated at Sun Dec 21 10:44:49 2025 by rpki-client