This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json) Hash identifier: haCyS+p41zNQjlUb7OL9FQcXGdIgl7Yr+JfHfuJ0WlI= Subject key identifier: F9:9E:43:7A:E6:1E:3D:FB:8E:86:B5:BD:5C:ED:D8:63:B0:DF:C3:04 Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 019B518557F6D8ECF0A516F85E746527EE89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft Manifest number: 17BA Signing time: Wed 24 Dec 2025 18:00:51 +0000 Manifest this update: Wed 24 Dec 2025 18:00:51 +0000 Manifest next update: Thu 25 Dec 2025 18:00:51 +0000 Files and hashes: 1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=) 2: 6pI4rPUTKVvTrVOh8tqAaIsA1vY.roa (hash: aASYzp9cOFgGmo0AYwKequguAVA8BNkIMF2yI49ggIw=) 3: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=) 4: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=) 5: RHKQCLh9p5JzpuKanJX0DkMRUlA.roa (hash: o9uzhadYctQ+ct/9t6KVMIQQ2ktWwbMKXVh4ukOS++c=) 6: Tge76w--mLK8h6ItDfaBoPjYqVo.roa (hash: 9V3RUbTnMu3g1emAx63hoe2FPk/d/B5APDPw6pVAO0o=) 7: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=) 8: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: RKZ4pb9eZ5dB/C4IrJCHVbO6xRMYy5NBcCb5p6jlZv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:57:f6:d8:ec:f0:a5:16:f8:5e:74:65:27:ee:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Dec 24 18:00:51 2025 GMT Not After : Dec 25 18:00:51 2025 GMT Subject: CN=f99e437ae61e3dfb8e86b5bd5cedd863b0dfc304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:a1:09:b2:cc:74:e8:cb:e4:8f:0f:17:fc: 10:c4:78:aa:5c:d8:63:3b:03:26:e3:64:3c:ef:b3: c2:c7:71:c9:e0:d7:5a:98:0e:ff:f1:03:49:44:46: 12:99:c8:52:14:04:de:73:5b:cb:e3:62:c6:f4:fc: df:10:e2:4b:fa:15:d4:d1:36:e1:49:1a:99:b9:9d: 04:97:c4:6e:17:50:f4:a2:76:14:6b:b6:16:39:a7: 04:7d:0f:8e:c3:c9:b7:8b:65:d5:9c:f6:7c:6b:a9: 1e:91:f1:83:f7:50:42:28:16:e5:90:ef:6f:85:7a: f8:68:1f:0e:ff:0b:25:5f:c6:73:37:f0:25:48:56: c9:77:d2:fd:3c:e4:1f:3a:c2:69:aa:6d:36:78:0c: 60:7a:0e:d8:85:2e:c9:42:f9:df:a4:45:3b:f5:80: e3:fd:17:1f:63:74:e3:35:f6:9b:7e:cd:7b:82:1b: f9:ab:88:44:a9:97:b8:27:3b:00:49:f4:15:26:6f: 03:6d:b8:6d:22:1a:54:68:ca:b8:39:ea:28:ad:9b: ab:ac:e6:d3:63:f3:d8:d8:dd:f0:96:9d:a5:46:21: 73:d8:90:47:8a:82:d9:f6:e3:27:b9:b2:5a:1f:6b: 4c:80:0e:15:63:89:3d:ab:8a:f2:d7:68:05:00:60: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9E:43:7A:E6:1E:3D:FB:8E:86:B5:BD:5C:ED:D8:63:B0:DF:C3:04 X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:96:57:11:82:9c:55:ba:1e:f0:b3:b0:ec:93:0c:46:46:36: de:f3:ce:f4:bd:b8:c8:b6:74:b3:51:5e:f7:0c:9c:d9:08:36: 4c:67:3d:74:46:1d:0b:69:9e:b4:f4:66:46:5e:14:7e:6d:80: 99:cd:79:0d:1e:eb:00:50:97:9d:ad:a6:51:13:4a:8e:fe:49: b7:dc:db:63:81:cd:24:04:d6:9a:5f:f8:07:44:52:34:62:e2: 40:f1:19:f2:15:81:5d:45:d7:01:b0:40:ac:7c:1e:ad:32:cb: 6d:20:ef:02:fe:77:a8:f1:e8:60:93:41:98:5c:d8:bf:7b:bc: d2:83:60:5c:bf:e2:22:ba:dc:7c:ba:75:4a:35:8c:fa:ab:14: e5:a4:09:ea:8f:a2:a3:5d:98:b8:c4:7d:93:ee:a8:e0:31:ef: 4a:23:19:66:39:47:f2:e8:9b:52:2e:2d:ce:52:cb:7d:8d:70: 1a:fe:32:fd:22:01:e0:08:fb:6c:1c:42:0b:63:17:e1:b6:34: d1:f2:69:a9:a7:7f:2b:57:9b:73:19:81:66:c1:f8:98:d4:58: e3:53:2b:66:b7:a3:06:a9:92:79:93:57:76:70:41:de:c2:e6: b6:44:ed:d1:e2:e4:4f:5b:06:45:1a:b9:c0:2e:57:08:5a:88: 15:74:8c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhVf22OzwpRb4XnRlJ+6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjUxMjI0MTgwMDUxWhcNMjUxMjI1MTgwMDUxWjAzMTEwLwYDVQQD EyhmOTllNDM3YWU2MWUzZGZiOGU4NmI1YmQ1Y2VkZDg2M2IwZGZjMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPmhCbLMdOjL5I8PF/wQxHiqXNhj OwMm42Q877PCx3HJ4NdamA7/8QNJREYSmchSFATec1vL42LG9PzfEOJL+hXU0Tbh SRqZuZ0El8RuF1D0onYUa7YWOacEfQ+Ow8m3i2XVnPZ8a6kekfGD91BCKBblkO9v hXr4aB8O/wslX8ZzN/AlSFbJd9L9POQfOsJpqm02eAxgeg7YhS7JQvnfpEU79YDj /RcfY3TjNfabfs17ghv5q4hEqZe4JzsASfQVJm8DbbhtIhpUaMq4OeoorZurrObT Y/PY2N3wlp2lRiFz2JBHioLZ9uMnubJaH2tMgA4VY4k9q4ry12gFAGD7AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmeQ3rmHj37joa1vVzt2GOw38MEMB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5ZXEYKc Vboe8LOw7JMMRkY23vPO9L24yLZ0s1Fe9wyc2Qg2TGc9dEYdC2metPRmRl4Ufm2A mc15DR7rAFCXna2mURNKjv5Jt9zbY4HNJATWml/4B0RSNGLiQPEZ8hWBXUXXAbBA rHwerTLLbSDvAv53qPHoYJNBmFzYv3u80oNgXL/iIrrcfLp1SjWM+qsU5aQJ6o+i o12YuMR9k+6o4DHvSiMZZjlH8uibUi4tzlLLfY1wGv4y/SIB4Aj7bBxCC2MX4bY0 0fJpqad/K1ebcxmBZsH4mNRY41MrZrejBqmSeZNXdnBB3sLmtkTt0eLkT1sGRRq5 wC5XCFqIFXSMcg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:55 2025 by rpki-client