This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json) Hash identifier: Q3u5qdHBbMTPcCOzlVxoUrNmzmnwmRU7NONJ6A02eO4= Subject key identifier: EB:75:ED:4E:A6:8C:98:04:9A:77:28:34:BA:D1:48:58:7C:D5:5F:87 Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338 Certificate serial: 019B44389948F546A2C41D77E4ABA0E4348B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 04:01:58 +0000 Manifest this update: Mon 22 Dec 2025 04:01:58 +0000 Manifest next update: Tue 23 Dec 2025 04:01:58 +0000 Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=) 2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=) 3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: zmEfIW2ti6bMS6iLZdBGWn3ByES6w6fH6MTtJT/h6k0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:99:48:f5:46:a2:c4:1d:77:e4:ab:a0:e4:34:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338 Validity Not Before: Dec 22 04:01:58 2025 GMT Not After : Dec 23 04:01:58 2025 GMT Subject: CN=eb75ed4ea68c98049a772834bad148587cd55f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:d9:53:dd:c1:05:c4:b7:37:bf:20:87:42: 9c:c2:8c:cc:48:d1:d9:c2:e2:6c:aa:fc:44:ce:e7: 8d:51:a3:f3:d8:12:e6:15:f6:7a:7b:1c:9c:11:0d: 30:06:12:08:ea:2d:28:e0:4f:f8:8f:14:3d:92:4d: 8c:73:ad:2f:f9:21:90:87:ca:67:14:2f:ac:95:86: d7:a0:4b:7e:f3:a6:be:8e:d7:b8:fb:4c:90:5c:fe: 3f:fc:76:31:fa:a0:97:82:07:8f:b4:f6:dd:cb:ba: 46:05:8b:84:3a:f0:6d:f5:53:67:bd:b8:92:f5:a7: fc:81:89:cf:b6:d9:0f:0f:73:e9:ca:c8:f0:53:d3: 52:a5:48:19:bf:96:86:37:6c:31:f6:a2:e0:30:b1: 46:b6:8f:03:0a:14:fe:88:4e:16:2d:ba:5e:97:4f: 7f:90:9b:c5:8d:fa:b6:1e:ae:91:58:92:70:99:ee: 35:ab:83:9e:39:57:03:76:64:48:ac:c4:10:61:36: 76:8b:fd:60:31:11:a2:ea:11:9f:a0:64:6f:d1:41: 59:c6:8c:8d:04:e5:03:b6:59:8c:e7:4b:50:13:a0: e2:c3:33:48:61:ae:53:ed:94:2d:25:49:91:ed:c3: cb:36:10:64:a2:bb:66:a8:d6:81:e9:36:83:0a:89: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:75:ED:4E:A6:8C:98:04:9A:77:28:34:BA:D1:48:58:7C:D5:5F:87 X509v3 Authority Key Identifier: keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:5f:bb:cc:a2:7b:3b:40:a6:cb:a6:cc:96:de:34:7a:15:ff: 0b:66:fa:c8:62:ac:a2:4e:7c:b9:cc:ec:b5:38:39:75:65:00: 18:22:15:da:4a:b8:89:d9:6b:af:b9:3a:1c:23:93:28:d8:10: da:2b:c8:dd:f2:02:ea:2f:e1:29:51:06:38:4b:87:d4:79:6e: 74:5c:c4:09:4e:df:58:81:cd:3e:43:f4:6c:41:a2:7a:18:14: 28:c5:c6:04:1f:12:82:e3:78:0d:12:6a:ac:30:3f:fc:90:bd: 08:fa:f0:68:8c:4e:ac:3a:cc:5e:d6:5f:53:0f:40:11:ea:4d: a6:db:f1:37:47:1f:da:11:42:7c:b6:b9:c9:b6:f8:7a:52:a7: fa:d9:ec:70:92:77:af:69:a3:c2:28:65:67:d4:dd:d5:96:a2: 78:33:4e:63:8d:34:5e:d4:5c:96:a6:fd:19:ee:09:af:6e:98: 20:9a:93:5a:13:ef:9b:f4:c0:88:76:b3:d3:87:e9:d2:52:cc: d7:87:8f:65:10:57:9e:2d:c8:48:32:16:d4:14:20:38:ff:6a: b4:4d:b7:3e:f6:11:03:8d:5b:61:97:b9:a7:a6:14:8e:46:ef: 3b:1d:24:d1:97:cd:e5:c6:a1:ea:28:20:e4:37:05:1c:09:43: 00:53:57:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOJlI9UaixB135Kug5DSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4 NzEzMzgwHhcNMjUxMjIyMDQwMTU4WhcNMjUxMjIzMDQwMTU4WjAzMTEwLwYDVQQD EyhlYjc1ZWQ0ZWE2OGM5ODA0OWE3NzI4MzRiYWQxNDg1ODdjZDU1Zjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzPZU93BBcS3N78gh0KcwozMSNHZ wuJsqvxEzueNUaPz2BLmFfZ6exycEQ0wBhII6i0o4E/4jxQ9kk2Mc60v+SGQh8pn FC+slYbXoEt+86a+jte4+0yQXP4//HYx+qCXggePtPbdy7pGBYuEOvBt9VNnvbiS 9af8gYnPttkPD3PpysjwU9NSpUgZv5aGN2wx9qLgMLFGto8DChT+iE4WLbpel09/ kJvFjfq2Hq6RWJJwme41q4OeOVcDdmRIrMQQYTZ2i/1gMRGi6hGfoGRv0UFZxoyN BOUDtlmM50tQE6DiwzNIYa5T7ZQtJUmR7cPLNhBkortmqNaB6TaDCol6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt17U6mjJgEmncoNLrRSFh81V+HMB8GA1UdIwQY MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt NTk5ZDFjYTZhNWZkLzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1+7zKJ7 O0Cmy6bMlt40ehX/C2b6yGKsok58uczstTg5dWUAGCIV2kq4idlrr7k6HCOTKNgQ 2ivI3fIC6i/hKVEGOEuH1HludFzECU7fWIHNPkP0bEGiehgUKMXGBB8SguN4DRJq rDA//JC9CPrwaIxOrDrMXtZfUw9AEepNptvxN0cf2hFCfLa5ybb4elKn+tnscJJ3 r2mjwihlZ9Td1ZaieDNOY400XtRclqb9Ge4Jr26YIJqTWhPvm/TAiHaz04fp0lLM 14ePZRBXni3ISDIW1BQgOP9qtE23PvYRA41bYZe5p6YUjkbvOx0k0ZfN5cah6igg 5DcFHAlDAFNXIA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:51 2025 by rpki-client