This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json) Hash identifier: s/n5Jh8swMFAD0ZmJtz5Tot92bXJ42vK6zQmFTEablw= Subject key identifier: A9:22:59:27:26:92:C5:F8:8B:C0:C7:5D:F8:07:66:66:B3:7E:14:FB Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 019B3C46E84B0CF7F529D43E26ADCEAA1E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft Manifest number: 17AF Signing time: Sat 20 Dec 2025 15:00:38 +0000 Manifest this update: Sat 20 Dec 2025 15:00:38 +0000 Manifest next update: Sun 21 Dec 2025 15:00:38 +0000 Files and hashes: 1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=) 2: 6pI4rPUTKVvTrVOh8tqAaIsA1vY.roa (hash: aASYzp9cOFgGmo0AYwKequguAVA8BNkIMF2yI49ggIw=) 3: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=) 4: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=) 5: RHKQCLh9p5JzpuKanJX0DkMRUlA.roa (hash: o9uzhadYctQ+ct/9t6KVMIQQ2ktWwbMKXVh4ukOS++c=) 6: Tge76w--mLK8h6ItDfaBoPjYqVo.roa (hash: 9V3RUbTnMu3g1emAx63hoe2FPk/d/B5APDPw6pVAO0o=) 7: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=) 8: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: tSsbaeAATY1GJXo7TBXhOrI5q2r5OJIyy+p8rZoKHo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:e8:4b:0c:f7:f5:29:d4:3e:26:ad:ce:aa:1e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Dec 20 15:00:38 2025 GMT Not After : Dec 21 15:00:38 2025 GMT Subject: CN=a92259272692c5f88bc0c75df8076666b37e14fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c0:ba:d0:37:fb:49:32:6d:d3:14:15:4e:8c: 55:9f:9b:6b:f2:af:e7:16:79:d9:64:61:f3:6a:14: 04:7e:0e:3c:10:14:71:9e:38:ba:e9:9e:40:97:d1: 50:63:ce:dd:d2:fc:e1:d1:b3:dc:16:ef:04:8e:e8: de:40:ca:05:54:5b:1e:1b:2e:e8:76:33:f5:0e:d6: 64:e5:a4:98:92:77:87:94:5c:ca:ef:2d:3a:5c:86: 3f:67:9d:9f:e8:c5:3f:9b:a8:df:9d:1f:bd:1d:cf: d7:58:ef:9f:39:46:4e:d5:5c:31:73:3c:e6:92:e4: fb:6e:62:c3:8a:cd:eb:f2:db:00:0f:26:44:ce:db: 41:95:04:a5:ee:37:20:7a:c3:a2:63:b9:b4:67:4a: 61:17:41:cb:76:bd:57:5d:62:0e:bd:10:62:d5:7b: 08:85:86:f5:55:e2:4a:37:26:9d:2c:ec:ae:a1:75: 07:1d:1a:8b:61:ac:27:74:17:27:cb:63:14:15:30: 74:a4:89:38:cf:1c:33:b5:43:50:57:0a:f9:7f:33: 86:8e:92:f1:e6:39:01:ec:61:18:74:b0:dc:cc:e1: a4:17:4e:68:bc:de:b7:3d:5a:b7:37:38:fe:01:0d: b8:18:ab:82:5b:0d:14:ac:e2:4f:31:a5:b5:de:59: 24:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:22:59:27:26:92:C5:F8:8B:C0:C7:5D:F8:07:66:66:B3:7E:14:FB X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:25:db:d7:58:72:ab:8d:ac:64:8a:21:bd:d6:bf:f3:50:a0: 65:d9:84:ec:07:de:c8:ec:10:f6:3d:78:37:f5:67:d2:c3:57: bc:7d:16:23:20:79:3e:1e:60:3d:b3:ad:2d:aa:ca:11:be:ad: c6:81:99:ff:5e:e8:db:fb:bb:b9:e7:1a:9d:3d:9d:ff:18:5a: 23:ce:27:78:f0:52:c6:2e:10:4c:37:f9:59:d8:df:b9:ae:31: 5a:45:4a:d9:e8:e5:d3:8f:2d:68:4d:bb:56:c3:da:5f:8a:d5: ea:29:86:9a:ea:57:1f:e0:36:9f:d3:9c:43:35:cd:60:c7:e8: e5:ca:ae:68:01:9e:34:48:33:69:7f:c6:52:ee:ee:24:25:a2: c6:f4:84:f5:ec:be:2a:1b:f8:aa:f0:74:26:db:8e:62:26:fd: 1d:c2:22:e6:1f:04:8a:63:dc:31:ab:89:f2:d8:11:f8:11:67: 1d:ee:ee:8c:08:56:d5:73:5a:b1:84:45:c3:45:62:6a:00:bd: 0d:1b:28:df:d0:7a:12:db:45:18:ae:f8:85:7d:0b:78:5a:3b: c6:90:e2:97:65:60:3e:ae:18:3e:cb:84:7b:18:2d:76:31:fc: 36:5a:34:cb:6a:d2:20:cd:9e:b3:7e:07:1a:38:3f:b2:e3:a2: 77:8d:d8:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RuhLDPf1KdQ+Jq3Oqh4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjUxMjIwMTUwMDM4WhcNMjUxMjIxMTUwMDM4WjAzMTEwLwYDVQQD EyhhOTIyNTkyNzI2OTJjNWY4OGJjMGM3NWRmODA3NjY2NmIzN2UxNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8C60Df7STJt0xQVToxVn5tr8q/n FnnZZGHzahQEfg48EBRxnji66Z5Al9FQY87d0vzh0bPcFu8EjujeQMoFVFseGy7o djP1DtZk5aSYkneHlFzK7y06XIY/Z52f6MU/m6jfnR+9Hc/XWO+fOUZO1Vwxczzm kuT7bmLDis3r8tsADyZEzttBlQSl7jcgesOiY7m0Z0phF0HLdr1XXWIOvRBi1XsI hYb1VeJKNyadLOyuoXUHHRqLYawndBcny2MUFTB0pIk4zxwztUNQVwr5fzOGjpLx 5jkB7GEYdLDczOGkF05ovN63PVq3Nzj+AQ24GKuCWw0UrOJPMaW13lkkqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkiWScmksX4i8DHXfgHZmazfhT7MB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiXb11hy q42sZIohvda/81CgZdmE7AfeyOwQ9j14N/Vn0sNXvH0WIyB5Ph5gPbOtLarKEb6t xoGZ/17o2/u7uecanT2d/xhaI84nePBSxi4QTDf5Wdjfua4xWkVK2ejl048taE27 VsPaX4rV6imGmupXH+A2n9OcQzXNYMfo5cquaAGeNEgzaX/GUu7uJCWixvSE9ey+ Khv4qvB0JtuOYib9HcIi5h8EimPcMauJ8tgR+BFnHe7ujAhW1XNasYRFw0ViagC9 DRso39B6EttFGK74hX0LeFo7xpDil2VgPq4YPsuEexgtdjH8Nlo0y2rSIM2es34H Gjg/suOid43Ypw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:25 2025 by rpki-client