This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json) Hash identifier: FWV2BCb4e/FHnfeKN1GqliT771NuKbO8lYvPYnhlZts= Subject key identifier: 0F:90:33:66:71:45:80:A7:E6:87:66:BD:17:95:D9:C8:0F:05:59:49 Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f Certificate serial: 019B5F783D33AF036AA23E4381FDC41222BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft Manifest number: 0B30 Signing time: Sat 27 Dec 2025 11:01:13 +0000 Manifest this update: Sat 27 Dec 2025 11:01:13 +0000 Manifest next update: Sun 28 Dec 2025 11:01:13 +0000 Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=) 2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: YwvvwyKfdu+w10oEx+Wgj37pKPjO3YiaJ9I+x1RptxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:78:3d:33:af:03:6a:a2:3e:43:81:fd:c4:12:22:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f Validity Not Before: Dec 27 11:01:13 2025 GMT Not After : Dec 28 11:01:13 2025 GMT Subject: CN=0f903366714580a7e68766bd1795d9c80f055949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:64:92:82:fc:71:22:69:47:e7:f2:b9:15: bc:0f:2a:20:1f:3b:b6:25:40:a5:97:d9:b1:5d:be: a7:7f:d4:28:5f:7b:0c:91:93:80:dc:6b:b1:94:c6: 72:7a:04:b5:a9:35:13:10:cd:d2:ed:e8:47:2c:90: bb:bc:71:69:e4:ae:9c:80:77:d8:bb:32:27:96:ff: 2f:90:05:ab:1e:46:4b:97:e7:ff:bf:bb:1a:b2:7a: d1:ec:53:b7:73:bd:78:cd:a0:0e:fc:e8:09:3c:f8: d4:12:29:6c:9b:4f:60:e9:ab:c8:34:4b:24:c5:ef: 8b:07:8c:85:41:35:49:32:9c:80:4f:b5:fb:c7:02: 04:ad:87:06:c5:cb:e7:4e:b6:b7:2e:ba:b4:06:25: cf:e6:8e:d1:a8:44:b9:14:c1:84:ff:58:71:3e:7e: 21:2a:a8:37:f2:fe:f7:8c:11:be:66:28:39:84:ca: 02:87:73:c0:cd:6a:8a:59:51:3f:bd:fc:2b:51:1d: 15:8a:de:08:82:4f:98:fb:d2:5e:fc:a4:39:57:c9: 67:a3:17:a1:3a:19:c0:61:2b:9b:a0:33:45:5d:9b: 6c:14:56:d2:e2:57:75:6b:54:48:6d:07:ee:96:25: 54:fa:85:85:e7:63:b2:d0:8b:c0:6d:be:37:5f:99: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:90:33:66:71:45:80:A7:E6:87:66:BD:17:95:D9:C8:0F:05:59:49 X509v3 Authority Key Identifier: keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d5:72:5e:83:d3:75:f6:bd:b7:f9:06:62:53:55:30:b7:61: a8:db:a1:86:58:2a:d3:36:69:ac:e1:06:8b:8a:13:51:27:fb: 16:91:79:5f:c4:15:e2:23:98:13:a9:0b:17:31:53:4e:56:ec: 1d:b6:a5:5e:9e:c2:a2:14:e8:a6:7e:6a:2e:f8:ed:d0:f6:4d: 18:40:15:c5:6a:66:0f:11:65:8a:dc:63:86:5e:c7:97:47:f5: 02:f0:c9:bd:b7:80:0d:62:21:a8:22:d3:55:57:7a:2b:86:c9: ae:76:03:1b:29:cb:91:2a:be:85:55:d6:96:1a:cf:c9:c7:6e: 05:45:36:c6:ef:39:00:33:f2:25:e4:0e:a1:ce:2d:16:91:2e: 87:10:3c:c2:8d:58:f2:fd:1f:0a:bc:3d:a5:ab:64:38:36:45: 2f:ff:e9:d7:c8:32:11:ee:75:2e:90:5b:6d:15:ba:5e:08:ed: 5c:05:1f:3a:22:96:7e:3f:3a:8d:5c:7f:22:e9:d4:91:f8:ed: 34:e1:34:c4:ba:f7:e1:91:bb:b5:ce:95:27:fa:fd:3c:b1:c7: d3:1b:78:5c:8d:2c:18:a9:86:5f:f3:f3:dc:65:db:94:79:26: 6d:2b:f4:11:7f:4c:d3:57:0f:c3:0e:4a:2b:6b:89:d5:14:ad: 41:14:05:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfeD0zrwNqoj5Dgf3EEiK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMjBmNzBmMTdkOGI3MmMzZTQyYWVlMDMyOTEyOThiNTRh NGZmMmYwHhcNMjUxMjI3MTEwMTEzWhcNMjUxMjI4MTEwMTEzWjAzMTEwLwYDVQQD EygwZjkwMzM2NjcxNDU4MGE3ZTY4NzY2YmQxNzk1ZDljODBmMDU1OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU9kkoL8cSJpR+fyuRW8DyogHzu2 JUCll9mxXb6nf9QoX3sMkZOA3GuxlMZyegS1qTUTEM3S7ehHLJC7vHFp5K6cgHfY uzInlv8vkAWrHkZLl+f/v7sasnrR7FO3c714zaAO/OgJPPjUEilsm09g6avINEsk xe+LB4yFQTVJMpyAT7X7xwIErYcGxcvnTra3Lrq0BiXP5o7RqES5FMGE/1hxPn4h Kqg38v73jBG+Zig5hMoCh3PAzWqKWVE/vfwrUR0Vit4Igk+Y+9Je/KQ5V8lnoxeh OhnAYSuboDNFXZtsFFbS4ld1a1RIbQfuliVU+oWF52Oy0IvAbb43X5nPOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+QM2ZxRYCn5odmvReV2cgPBVlJMB8GA1UdIwQY MBaAFI8g9w8X2LcsPkKu4DKRKYtUpP8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAt Yzk2YThkYTJjNTg5LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAtYzk2YThkYTJjNTg5 LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedVyXoPT dfa9t/kGYlNVMLdhqNuhhlgq0zZprOEGi4oTUSf7FpF5X8QV4iOYE6kLFzFTTlbs HbalXp7CohTopn5qLvjt0PZNGEAVxWpmDxFlitxjhl7Hl0f1AvDJvbeADWIhqCLT VVd6K4bJrnYDGynLkSq+hVXWlhrPycduBUU2xu85ADPyJeQOoc4tFpEuhxA8wo1Y 8v0fCrw9patkODZFL//p18gyEe51LpBbbRW6XgjtXAUfOiKWfj86jVx/IunUkfjt NOE0xLr34ZG7tc6VJ/r9PLHH0xt4XI0sGKmGX/Pz3GXblHkmbSv0EX9M01cPww5K K2uJ1RStQRQFEQ== -----END CERTIFICATE-----Generated at Sat Dec 27 19:26:56 2025 by rpki-client