This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft File: JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json) Hash identifier: M770jLb8J4XC8yNSZD3Apk0tdXSb1b26i5iMJ7nOoFg= Subject key identifier: BA:C8:FF:F7:A0:9D:1E:01:C9:CC:0C:DF:F5:CF:7A:B1:FC:92:B1:2E Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2 Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2 Certificate serial: 019B3D90CE9A4815B78B55278405567F5204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 21:00:58 +0000 Manifest this update: Sat 20 Dec 2025 21:00:58 +0000 Manifest next update: Sun 21 Dec 2025 21:00:58 +0000 Files and hashes: 1: 4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa (hash: pBs68ICaSbGSqyGLZ9bB1efuQfGC5WelauRjyqdWgTI=) 2: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: 0+mexJdlqf7Ltv2tAb+wnfEFR9t4E0yn7hrku175ygw=) 3: WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa (hash: EcGFRU20uqBbFC1foj+y9OBYi5L7+bc1+NFOuFXpPjg=) 4: k_-rD0qGkNwGwcLu6HW3p8mmNtU.roa (hash: 2oKRAJvxuw9ZlCxWfoLf08ddChOQxfTyMJhpORXiSP8=) 5: p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (hash: JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=) 6: px36HXCD5Tde7rc7667drQlCUgM.roa (hash: DdLtjUoBr2/szAIeZWx5x3x5Gnlyu/gE0I7UYrAM/6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ce:9a:48:15:b7:8b:55:27:84:05:56:7f:52:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2 Validity Not Before: Dec 20 21:00:58 2025 GMT Not After : Dec 21 21:00:58 2025 GMT Subject: CN=bac8fff7a09d1e01c9cc0cdff5cf7ab1fc92b12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:43:f1:c4:7b:d0:95:b6:c7:05:f5:21:03: e9:2c:62:0c:72:23:ae:7f:42:11:ae:c5:9b:d8:56: 70:cd:68:d1:d7:83:94:f8:4f:d8:61:57:a5:29:8f: f8:2d:f7:fd:ae:fd:3e:4b:99:7a:f2:74:39:8b:61: 7e:1f:4e:40:5e:b7:b7:24:de:82:df:bf:b8:5a:1e: d3:86:ff:62:91:5e:58:47:39:2b:4b:56:d7:99:e8: 2e:00:e6:33:74:3f:c2:f3:a2:67:82:c1:99:0b:44: 20:f5:38:0c:7a:fd:9e:cb:da:2c:29:96:9c:d5:4d: f8:cb:db:8e:f9:39:b0:27:65:97:5d:36:d1:bf:8d: 3c:df:bf:40:9a:f2:20:94:43:21:cc:bb:1c:5f:a0: 28:b8:42:9d:58:5b:17:d1:24:63:cd:cf:d4:36:fe: e2:ac:ca:4c:0c:5e:8a:02:f2:fa:f2:fa:01:c9:27: bd:ac:88:28:c9:d4:b1:5b:ff:7a:a0:10:b2:b8:bf: 2a:75:07:c0:bb:23:f4:b2:cc:f2:a8:29:63:d8:b2: c4:4b:44:69:31:38:21:52:ab:65:ec:ce:4f:a9:0e: 77:11:51:2e:a8:99:c1:1c:38:c4:09:1e:5b:1e:df: 57:3d:7e:f4:8d:d7:a2:b2:8d:34:51:42:a0:6b:23: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C8:FF:F7:A0:9D:1E:01:C9:CC:0C:DF:F5:CF:7A:B1:FC:92:B1:2E X509v3 Authority Key Identifier: keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:47:7a:b1:64:96:c3:56:e5:b8:2d:58:ef:c6:86:29:71:15: da:2b:d1:b8:d8:a4:34:29:88:a3:25:f9:20:cf:ba:13:84:86: 6f:f0:fd:b6:28:b1:0a:8c:eb:db:5e:f7:06:b1:94:b9:66:f2: a0:04:e4:f2:f4:d8:59:77:a4:7f:21:43:75:91:8b:9d:f1:53: 00:02:fb:f5:13:ce:a8:80:af:11:92:b6:b9:aa:e2:10:ea:fc: 43:28:93:e1:11:a6:27:b6:84:21:fd:eb:6e:02:18:c9:52:c3: 99:cc:eb:76:bc:0c:b7:62:a5:a5:32:04:e3:33:63:c5:44:9f: e9:e3:6c:9b:c1:3a:45:8d:bc:4a:d8:91:e2:95:42:0e:1e:f6: b9:10:bb:73:23:3b:75:a9:66:7c:30:ca:4e:62:f8:c4:c9:ab: 66:e4:df:d4:7a:ad:fe:74:93:03:45:7e:04:96:93:7d:9f:7f: b2:f9:0a:14:96:4a:99:18:ff:46:ea:50:7b:b8:57:29:b2:9f: 3e:17:0f:22:e7:57:f6:fc:ce:ce:20:0e:9a:2c:1b:83:d8:df: 91:6b:2d:da:aa:78:e2:58:5e:d0:27:82:b8:f1:6c:01:57:fd: 51:25:68:18:75:ce:12:ce:eb:7f:96:c0:dc:c1:bc:54:84:2b: f1:b3:d0:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kM6aSBW3i1UnhAVWf1IEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ODYyM2VjYzhkY2I5MTNkMTAyMjhhOTQ2MGE4NmU2NjBj YjhmYjIwHhcNMjUxMjIwMjEwMDU4WhcNMjUxMjIxMjEwMDU4WjAzMTEwLwYDVQQD EyhiYWM4ZmZmN2EwOWQxZTAxYzljYzBjZGZmNWNmN2FiMWZjOTJiMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQBD8cR70JW2xwX1IQPpLGIMciOu f0IRrsWb2FZwzWjR14OU+E/YYVelKY/4Lff9rv0+S5l68nQ5i2F+H05AXre3JN6C 37+4Wh7Thv9ikV5YRzkrS1bXmeguAOYzdD/C86JngsGZC0Qg9TgMev2ey9osKZac 1U34y9uO+TmwJ2WXXTbRv408379AmvIglEMhzLscX6AouEKdWFsX0SRjzc/UNv7i rMpMDF6KAvL68voBySe9rIgoydSxW/96oBCyuL8qdQfAuyP0sszyqClj2LLES0Rp MTghUqtl7M5PqQ53EVEuqJnBHDjECR5bHt9XPX70jdeiso00UUKgayMzcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrI//egnR4BycwM3/XPerH8krEuMB8GA1UdIwQY MBaAFCWGI+zI3LkT0QIoqUYKhuZgy4+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NmFiOTUtYzJmZS00YjkzLTlhMmUt NTY4OWVlMDZlMTRjLzEvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC85NmFiOTUtYzJmZS00YjkzLTlhMmUtNTY4OWVlMDZlMTRj LzEvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUd6sWSW w1bluC1Y78aGKXEV2ivRuNikNCmIoyX5IM+6E4SGb/D9tiixCozr2173BrGUuWby oATk8vTYWXekfyFDdZGLnfFTAAL79RPOqICvEZK2uariEOr8QyiT4RGmJ7aEIf3r bgIYyVLDmczrdrwMt2KlpTIE4zNjxUSf6eNsm8E6RY28StiR4pVCDh72uRC7cyM7 dalmfDDKTmL4xMmrZuTf1Hqt/nSTA0V+BJaTfZ9/svkKFJZKmRj/RupQe7hXKbKf PhcPIudX9vzOziAOmiwbg9jfkWst2qp44lhe0CeCuPFsAVf9USVoGHXOEs7rf5bA 3MG8VIQr8bPQvA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:27:24 2025 by rpki-client