This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json) Hash identifier: NWVuVE/DTL9Lpsc5SvH0X1erCxc0jtKpbFNxDbvP1GE= Subject key identifier: DA:FD:C6:14:D3:FD:D8:D7:4E:53:77:6C:76:3B:FC:46:73:46:03:55 Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f Certificate serial: 019B7C3912C3FAFF6F845B0C514D7E701ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft Manifest number: 17A8 Signing time: Fri 02 Jan 2026 01:01:13 +0000 Manifest this update: Fri 02 Jan 2026 01:01:13 +0000 Manifest next update: Sat 03 Jan 2026 01:01:13 +0000 Files and hashes: 1: Qx0ddBKlSvnACpzjugQJrfWkEs4.roa (hash: aJD4jYhJCqk7+8Q4F//sAqddVJklJ5JHNsKetWjBmH4=) 2: dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa (hash: pKoUZvmEW4liSwgxySiejWpEorumEVEvbMzgYr8Wr84=) 3: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: xl+l0dYsgAjHbNJSdmHSKANwWS5rwlUJVUPMrOHL6+E=) 4: lKM1gHFyylwdRUKMaY5fLo9cQo4.roa (hash: s0i27z26ycWaj2Sw/lN75r12wdUfV6zW3S6uMy4zqRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:39:12:c3:fa:ff:6f:84:5b:0c:51:4d:7e:70:1e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f Validity Not Before: Jan 2 01:01:13 2026 GMT Not After : Jan 3 01:01:13 2026 GMT Subject: CN=dafdc614d3fdd8d74e53776c763bfc4673460355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ac:4f:dc:78:a5:c9:e2:58:c5:a6:08:3b:03: 38:cc:bf:9b:68:54:35:ba:97:a7:47:5e:59:4b:61: ca:e5:cb:7a:e1:7d:de:5e:c4:b4:dc:57:6f:a5:ae: 76:b3:14:65:92:fc:ac:6a:7a:a5:f4:97:50:f1:f4: 7d:31:04:35:63:6b:56:67:f8:c3:84:fb:dd:86:e4: a4:64:9d:e2:3f:75:58:c9:71:03:45:4c:25:6a:40: 44:85:7f:d5:b9:f7:b8:5b:7e:96:c8:79:9c:95:56: 81:79:c8:2a:a4:8a:6c:02:d6:f4:c6:e5:29:e7:95: 5f:61:27:d8:e1:b4:39:56:2e:69:77:8a:5a:02:f9: 10:a4:8f:97:0c:8d:cf:e4:58:da:f3:9c:2c:e3:ae: e7:dc:fa:9f:52:1e:d0:dd:e9:25:8f:55:c2:a6:ae: c2:5d:d8:21:9e:8c:49:9f:18:03:fc:84:29:69:30: 15:5d:05:fe:39:7d:8d:71:7f:30:70:31:74:df:b9: 5c:85:70:3e:f7:12:63:c9:93:36:0e:3c:63:8f:1e: 86:9c:0f:a2:4f:cf:be:de:75:cc:39:58:0c:86:75: ea:df:5c:61:e3:0f:5a:25:a4:46:4f:e2:50:21:7e: 49:ad:81:62:16:e5:14:f2:48:af:00:12:06:17:05: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FD:C6:14:D3:FD:D8:D7:4E:53:77:6C:76:3B:FC:46:73:46:03:55 X509v3 Authority Key Identifier: keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:77:37:35:9d:18:1b:29:1e:2e:8e:1f:04:cc:03:7b:79:8d: 1e:75:29:11:03:7c:8b:d7:1e:f2:b5:ff:bc:b3:29:f9:f0:3d: f4:4e:f9:c7:72:a8:f2:ab:cd:fc:43:84:be:31:88:08:2c:1b: 37:8d:03:4d:cd:62:53:ef:51:33:7d:2c:f4:37:91:df:fa:b9: 82:87:6a:49:66:d2:0b:30:02:b2:78:a4:b2:b9:d8:48:03:48: 63:b3:58:c0:84:ec:93:c6:30:c8:74:9a:ef:1d:03:84:4b:54: 2d:d7:e3:09:47:0b:d7:9f:29:1e:7a:2f:31:aa:56:cc:87:d5: 1f:78:fc:3e:19:7f:35:7f:bc:a7:a1:1d:0c:e4:72:02:69:36: 25:b5:97:1d:35:c0:eb:a1:61:ff:43:11:81:3a:12:ae:da:95: 69:39:67:d6:63:8d:d1:ca:05:dd:33:05:fd:2c:a5:1e:b8:4b: dc:6a:fd:bf:43:bc:2d:c4:ab:42:dc:5f:a7:00:84:34:44:82: 6f:1b:be:0b:c2:4a:27:21:4b:67:da:cb:c3:8b:29:e9:56:a3: ec:88:8c:df:11:6a:bd:e9:6f:53:a9:5b:ed:e0:43:fa:3f:14: 63:24:9a:7d:31:88:2e:42:6d:1f:1f:a6:2b:ed:07:4f:b3:25: 54:d6:23:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8ORLD+v9vhFsMUU1+cB7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODc0MDc5OWM5MWMyNjMwYTgwOTIxNzhkYjgyNGYzYTg4 OWE3NWYwHhcNMjYwMTAyMDEwMTEzWhcNMjYwMTAzMDEwMTEzWjAzMTEwLwYDVQQD EyhkYWZkYzYxNGQzZmRkOGQ3NGU1Mzc3NmM3NjNiZmM0NjczNDYwMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46xP3HilyeJYxaYIOwM4zL+baFQ1 upenR15ZS2HK5ct64X3eXsS03Fdvpa52sxRlkvysanql9JdQ8fR9MQQ1Y2tWZ/jD hPvdhuSkZJ3iP3VYyXEDRUwlakBEhX/Vufe4W36WyHmclVaBecgqpIpsAtb0xuUp 55VfYSfY4bQ5Vi5pd4paAvkQpI+XDI3P5Fja85ws467n3PqfUh7Q3eklj1XCpq7C XdghnoxJnxgD/IQpaTAVXQX+OX2NcX8wcDF037lchXA+9xJjyZM2Djxjjx6GnA+i T8++3nXMOVgMhnXq31xh4w9aJaRGT+JQIX5JrYFiFuUU8kivABIGFwW+EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNr9xhTT/djXTlN3bHY7/EZzRgNVMB8GA1UdIwQY MBaAFI2HQHmckcJjCoCSF424JPOoiadfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4Mjkt NTJiODE2NjgyOWQ3LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4MjktNTJiODE2NjgyOWQ3 LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3c3NZ0Y GykeLo4fBMwDe3mNHnUpEQN8i9ce8rX/vLMp+fA99E75x3Ko8qvN/EOEvjGICCwb N40DTc1iU+9RM30s9DeR3/q5godqSWbSCzACsniksrnYSANIY7NYwITsk8YwyHSa 7x0DhEtULdfjCUcL158pHnovMapWzIfVH3j8Phl/NX+8p6EdDORyAmk2JbWXHTXA 66Fh/0MRgToSrtqVaTln1mON0coF3TMF/SylHrhL3Gr9v0O8LcSrQtxfpwCENESC bxu+C8JKJyFLZ9rLw4sp6Vaj7IiM3xFqvelvU6lb7eBD+j8UYySafTGILkJtHx+m K+0HT7MlVNYj1w== -----END CERTIFICATE-----Generated at Fri Jan 2 09:54:03 2026 by rpki-client