This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json) Hash identifier: r7bbojKqcSDrNdL9LldmcbJl69yU06FKpCbDOLIpPnU= Subject key identifier: 90:CD:DC:20:7B:0F:EE:C9:94:5C:D4:4E:C4:21:39:02:9B:AE:1B:91 Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60 Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260 Certificate serial: 019B47A6BDCAB6D1A36BF2558DA7365BDF49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft Manifest number: 0D1E Signing time: Mon 22 Dec 2025 20:01:08 +0000 Manifest this update: Mon 22 Dec 2025 20:01:08 +0000 Manifest next update: Tue 23 Dec 2025 20:01:08 +0000 Files and hashes: 1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=) 2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: cLHTPeCP/YMBfLkDwpVI+xFVH1+Ahi7Fiq0ML3MTlGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:bd:ca:b6:d1:a3:6b:f2:55:8d:a7:36:5b:df:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260 Validity Not Before: Dec 22 20:01:08 2025 GMT Not After : Dec 23 20:01:08 2025 GMT Subject: CN=90cddc207b0feec9945cd44ec42139029bae1b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:36:97:f0:53:ed:3a:7f:7c:31:9c:01:5c: a0:55:48:46:00:bc:8f:52:23:89:e2:d4:93:7e:e6: 0c:2f:f0:82:cf:fb:2a:69:50:43:48:f9:3d:d5:1e: a4:13:bc:ab:37:f5:21:a0:75:b2:64:4f:40:e0:34: 07:5d:48:5b:41:be:b5:a0:1f:0a:80:af:76:32:a7: b4:20:bb:46:64:52:05:47:56:e4:02:c1:05:a6:25: d5:c8:8c:96:bd:b6:e9:7f:be:3f:62:a0:85:49:d7: 6c:2e:84:4d:32:17:40:db:89:7f:44:74:b6:a1:54: fb:ea:c3:f4:e8:61:4e:03:a7:04:f2:ba:da:3d:20: 4e:52:94:ae:1f:a9:20:02:ab:b4:fa:5a:52:28:36: 04:59:48:48:3d:03:8b:56:a8:ce:5a:58:d1:33:ea: c9:96:2b:95:bf:9a:3e:e5:f8:3b:06:14:f1:29:53: 18:98:09:80:6f:12:f6:08:d5:29:2e:e7:cd:a0:d4: ec:d3:15:ea:0e:a8:f6:0a:92:d6:48:1f:81:33:5f: 7c:37:f8:ee:d4:d5:ca:d3:ea:ec:b9:ce:56:89:63: e4:c7:4f:0d:6f:07:60:c4:28:c2:b7:57:fd:3c:85: 21:41:ec:8e:8b:79:70:79:b1:23:3f:db:94:b2:c0: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CD:DC:20:7B:0F:EE:C9:94:5C:D4:4E:C4:21:39:02:9B:AE:1B:91 X509v3 Authority Key Identifier: keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:80:a1:f4:d6:87:59:39:82:dc:57:f0:00:cb:11:e6:4a:6c: be:da:e9:7c:de:fc:df:b1:d1:b1:63:96:93:68:92:2e:26:11: 8a:07:b4:ad:36:df:b8:0b:9b:ac:d9:c9:92:8e:2b:21:46:5f: 28:3d:c9:01:4d:13:19:24:b5:d1:79:f2:f1:ce:4d:00:e6:26: 29:a1:f3:16:31:4f:4b:df:54:b3:d3:f4:45:99:b5:c7:14:0c: f1:02:8c:7b:d4:f0:fc:95:69:fc:94:d5:97:75:1a:dd:9e:ce: 47:a3:a5:f8:14:31:ba:21:0f:8a:58:6a:9d:16:4e:e3:7e:46: e7:fa:9a:d0:ec:af:9a:fb:80:c4:06:02:c9:9f:6e:82:2d:df: 98:40:be:dd:f3:3c:d0:4c:5a:4f:8b:62:6e:ec:53:9d:47:ad: 4e:99:5a:b1:a5:ab:e2:c5:c7:05:f9:59:df:71:ad:12:86:e0: eb:39:26:2f:ee:c7:75:29:16:fc:41:c5:f4:71:7f:46:c3:50: 2c:24:b9:36:d6:54:1d:6d:46:54:98:ec:80:08:34:16:a5:fb: 84:01:aa:7f:31:43:dd:c6:32:18:8e:64:3e:4a:d9:6c:a4:a7: 89:2a:15:11:e0:c4:a5:62:58:ca:37:52:e3:bc:76:bc:14:43: 01:88:5d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpr3KttGja/JVjac2W99JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTYxM2JlZWJiN2VmMzY5OTJjMDQ5MWFkMTNiMjY3MDcw NTcyNjAwHhcNMjUxMjIyMjAwMTA4WhcNMjUxMjIzMjAwMTA4WjAzMTEwLwYDVQQD Eyg5MGNkZGMyMDdiMGZlZWM5OTQ1Y2Q0NGVjNDIxMzkwMjliYWUxYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbI2l/BT7Tp/fDGcAVygVUhGALyP UiOJ4tSTfuYML/CCz/sqaVBDSPk91R6kE7yrN/UhoHWyZE9A4DQHXUhbQb61oB8K gK92Mqe0ILtGZFIFR1bkAsEFpiXVyIyWvbbpf74/YqCFSddsLoRNMhdA24l/RHS2 oVT76sP06GFOA6cE8rraPSBOUpSuH6kgAqu0+lpSKDYEWUhIPQOLVqjOWljRM+rJ liuVv5o+5fg7BhTxKVMYmAmAbxL2CNUpLufNoNTs0xXqDqj2CpLWSB+BM198N/ju 1NXK0+rsuc5WiWPkx08NbwdgxCjCt1f9PIUhQeyOi3lwebEjP9uUssBxdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDN3CB7D+7JlFzUTsQhOQKbrhuRMB8GA1UdIwQY MBaAFI/mE77rt+82mSwEka0TsmcHBXJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYt ZmE2NjU0YTJhNmZlLzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYtZmE2NjU0YTJhNmZl LzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoCh9NaH WTmC3FfwAMsR5kpsvtrpfN7837HRsWOWk2iSLiYRige0rTbfuAubrNnJko4rIUZf KD3JAU0TGSS10Xny8c5NAOYmKaHzFjFPS99Us9P0RZm1xxQM8QKMe9Tw/JVp/JTV l3Ua3Z7OR6Ol+BQxuiEPilhqnRZO435G5/qa0OyvmvuAxAYCyZ9ugi3fmEC+3fM8 0ExaT4tibuxTnUetTplasaWr4sXHBflZ33GtEobg6zkmL+7HdSkW/EHF9HF/RsNQ LCS5NtZUHW1GVJjsgAg0FqX7hAGqfzFD3cYyGI5kPkrZbKSniSoVEeDEpWJYyjdS 47x2vBRDAYhdxg== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:28 2025 by rpki-client