This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft File: _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json) Hash identifier: AVNI+NfUz+R4RdIQnfzg9iI0JCxbrR7NrzpKWMFEizU= Subject key identifier: EF:52:45:46:EF:4D:14:4D:BA:91:DC:67:B3:17:EA:27:AC:65:3C:9C Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be Certificate serial: 019B541883F03E9D751F105A351837E70791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft Manifest number: 118F Signing time: Thu 25 Dec 2025 06:00:51 +0000 Manifest this update: Thu 25 Dec 2025 06:00:51 +0000 Manifest next update: Fri 26 Dec 2025 06:00:51 +0000 Files and hashes: 1: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: PnyNV70TOQIZ/W27o/9aoa1xKLlJFITc13X2E+stQdU=) 2: hyHlTiMwzWbl8Nf4H5xHNXAVBxY.roa (hash: HU5uH/M7qdwsXDoyu+UBXkrcHBCx6l/8Z2W4bZISR9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:83:f0:3e:9d:75:1f:10:5a:35:18:37:e7:07:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be Validity Not Before: Dec 25 06:00:51 2025 GMT Not After : Dec 26 06:00:51 2025 GMT Subject: CN=ef524546ef4d144dba91dc67b317ea27ac653c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:9a:e5:56:e3:26:91:5a:12:e8:52:ae:38: 81:f6:99:a4:df:15:ba:4b:37:7b:83:67:27:14:a4: b8:f6:1f:d2:7b:ec:53:60:c4:87:0d:48:d8:c7:f4: e3:89:c7:26:bd:aa:13:04:05:0a:73:f9:ec:ac:81: 39:d6:65:8d:1a:a7:77:d6:68:3c:e8:6b:5f:23:37: bd:63:f6:73:55:09:f8:6c:5d:24:3c:64:32:d0:d3: 92:06:34:6d:4e:c3:3d:80:fa:33:69:ae:86:c0:e8: 6d:a8:d6:cc:9d:8a:bc:c1:92:47:f8:ed:25:8f:08: 98:13:0f:51:70:dc:fd:75:aa:21:1b:86:d6:16:cd: 6a:21:0c:26:c8:58:61:1f:0b:29:32:3e:ca:44:81: ba:3d:df:86:a7:8b:82:88:24:f1:bb:15:70:54:25: 7e:2d:03:22:02:56:3b:d2:de:ed:05:ee:d7:3d:90: ec:86:37:84:ba:7e:8f:a9:fd:59:21:8e:c5:5e:28: 72:b0:7c:57:37:a0:c0:29:f4:49:fa:7e:9b:32:a9: fc:8b:0a:3f:f8:da:b0:ef:cd:b0:39:14:63:ef:09: a1:99:75:6d:5e:cb:46:cb:57:6e:c8:66:c7:b1:b1: 3c:65:bc:bd:5a:5d:f7:48:e3:ed:7b:ec:8c:29:d6: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:52:45:46:EF:4D:14:4D:BA:91:DC:67:B3:17:EA:27:AC:65:3C:9C X509v3 Authority Key Identifier: keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2f:5b:ac:ca:9b:3e:31:ed:1f:f9:5d:b6:18:58:87:49:d2: ae:c8:36:cf:b3:23:01:a0:9b:5b:27:38:ec:9f:58:6b:77:90: a8:27:04:73:01:e6:0e:c6:52:4d:0a:49:5b:b2:16:b4:a7:aa: 50:3d:82:0f:5f:7a:c5:ab:87:8a:f1:87:50:4d:59:2a:5c:7e: d8:12:63:a6:b8:a4:39:58:27:a3:9c:b3:f3:85:19:90:5f:56: e6:78:6c:ef:55:60:6a:64:e9:ba:6c:fa:5a:04:15:cd:d8:02: 88:c2:1b:84:58:0c:b6:34:57:da:ff:d8:f9:3a:f3:d0:b2:1a: bd:ef:26:c0:19:c8:11:84:df:18:83:46:cd:f0:fb:f1:a4:ae: 74:fe:d9:e2:52:c9:b8:d2:e2:1b:3a:43:e1:35:95:7e:66:3c: 0f:4b:97:96:b3:89:fe:d5:f8:75:5c:e2:8f:5e:7c:90:a1:df: a9:a3:c1:03:16:54:0b:47:d9:59:65:00:fa:f5:f6:a6:9c:83: 06:64:0b:1c:6f:bb:59:d7:74:1a:66:3d:6b:b7:3f:39:63:f4: b2:a1:9f:fc:49:27:b2:a8:7a:51:4c:11:39:81:f2:b5:a1:1c: 36:ca:67:79:41:bc:8e:8d:08:42:bf:4d:b0:ee:06:5b:23:1a: 49:02:d0:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGIPwPp11HxBaNRg35weRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTYxZGZjNWY3MGJmMWI3NmYwNWU0NGE3NGVkMDI5MzEy NWU0YmUwHhcNMjUxMjI1MDYwMDUxWhcNMjUxMjI2MDYwMDUxWjAzMTEwLwYDVQQD EyhlZjUyNDU0NmVmNGQxNDRkYmE5MWRjNjdiMzE3ZWEyN2FjNjUzYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfia5VbjJpFaEuhSrjiB9pmk3xW6 Szd7g2cnFKS49h/Se+xTYMSHDUjYx/TjiccmvaoTBAUKc/nsrIE51mWNGqd31mg8 6GtfIze9Y/ZzVQn4bF0kPGQy0NOSBjRtTsM9gPozaa6GwOhtqNbMnYq8wZJH+O0l jwiYEw9RcNz9daohG4bWFs1qIQwmyFhhHwspMj7KRIG6Pd+Gp4uCiCTxuxVwVCV+ LQMiAlY70t7tBe7XPZDshjeEun6Pqf1ZIY7FXihysHxXN6DAKfRJ+n6bMqn8iwo/ +Nqw782wORRj7wmhmXVtXstGy1duyGbHsbE8Zby9Wl33SOPte+yMKdbgSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9SRUbvTRRNupHcZ7MX6iesZTycMB8GA1UdIwQY MBaAFPyWHfxfcL8bdvBeRKdO0CkxJeS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmU4Y2MtNzg1MS00MzJkLThjMDIt NTAyOWQwYzk5OWI2LzEvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmU4Y2MtNzg1MS00MzJkLThjMDItNTAyOWQwYzk5OWI2 LzEvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi9brMqb PjHtH/ldthhYh0nSrsg2z7MjAaCbWyc47J9Ya3eQqCcEcwHmDsZSTQpJW7IWtKeq UD2CD196xauHivGHUE1ZKlx+2BJjprikOVgno5yz84UZkF9W5nhs71VgamTpumz6 WgQVzdgCiMIbhFgMtjRX2v/Y+Trz0LIave8mwBnIEYTfGINGzfD78aSudP7Z4lLJ uNLiGzpD4TWVfmY8D0uXlrOJ/tX4dVzij158kKHfqaPBAxZUC0fZWWUA+vX2ppyD BmQLHG+7Wdd0GmY9a7c/OWP0sqGf/Eknsqh6UUwROYHytaEcNspneUG8jo0IQr9N sO4GWyMaSQLQQQ== -----END CERTIFICATE-----Generated at Thu Dec 25 12:30:33 2025 by rpki-client