This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json) Hash identifier: K+jihuOfeuEVR4rMWaE//tdZB2BfQ6lf5uMhIAOelGs= Subject key identifier: 63:09:DA:18:A2:E3:3E:47:EC:25:C4:12:15:60:B8:B7:81:22:08:FD Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Certificate serial: 019AF3F7641AC85DA589FAA722738604610D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 14:01:07 +0000 Manifest this update: Sat 06 Dec 2025 14:01:07 +0000 Manifest next update: Sun 07 Dec 2025 14:01:07 +0000 Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=) 2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: qH+mNI+nmSfFKInFQMPxrypiiepdo9E/qeNgoNo36Kg=) 3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:64:1a:c8:5d:a5:89:fa:a7:22:73:86:04:61:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Validity Not Before: Dec 6 14:01:07 2025 GMT Not After : Dec 7 14:01:07 2025 GMT Subject: CN=6309da18a2e33e47ec25c4121560b8b7812208fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:e0:90:70:98:cb:15:d3:4f:61:77:4a:ab: 93:14:1f:9a:5b:01:d9:fb:ed:e6:be:a5:2e:0a:49: 5e:47:3c:2b:94:60:c8:64:a9:40:5a:98:e9:e7:90: b9:c3:5b:f5:3c:63:07:86:e6:92:32:ca:f7:5a:8b: b6:51:a9:db:d9:31:d6:8a:31:c2:53:7c:45:6d:78: 86:bc:c9:62:92:c0:0c:5c:4a:f9:12:3b:4f:44:d4: 85:66:e6:0c:50:b4:93:3a:32:3d:8b:74:d6:a9:cf: 26:8b:94:9e:c8:b1:84:30:84:a7:27:2c:46:f3:d6: 19:e1:93:7e:4b:a7:04:87:0a:f5:39:f6:45:e7:65: d8:fb:69:27:fb:33:95:a7:fc:db:97:43:8d:79:3f: 23:1c:46:6f:86:89:44:f8:1d:70:91:f5:e8:05:d6: 39:a4:6f:5c:be:79:13:a5:c6:91:07:13:9d:61:a2: c2:17:c2:84:fb:39:35:99:07:82:da:14:44:74:e4: b1:f1:46:38:9c:52:04:67:a1:a7:c1:a2:99:40:2a: b0:8b:f5:a0:2c:fa:01:a2:5b:09:5e:d9:76:ac:fc: 67:34:32:2f:d9:e8:d4:5c:78:b9:cc:77:b5:23:c2: 3d:e2:50:b5:c1:eb:55:c5:c5:b4:ac:e3:3d:92:2a: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:09:DA:18:A2:E3:3E:47:EC:25:C4:12:15:60:B8:B7:81:22:08:FD X509v3 Authority Key Identifier: keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c9:d7:6f:a1:de:7d:45:78:c9:f1:d6:76:52:4b:c2:f0:a9: e2:20:12:fc:0f:0e:c4:c2:ca:27:5d:56:7e:5a:72:2f:2b:d8: 7e:69:0e:94:c6:86:24:8f:bf:8d:da:ec:91:db:9c:9c:da:84: 3e:41:75:86:04:d6:b3:8e:78:4b:1c:77:5b:ca:a5:04:54:40: 69:7f:f7:3c:b2:19:a4:15:e8:a7:72:93:39:f1:bf:7a:1d:7c: 8c:73:df:4a:fd:03:da:71:45:51:fd:1b:2e:2c:ac:12:5c:77: 56:94:5b:cf:0e:4d:e1:35:ed:b9:bb:e4:3a:3e:7a:fc:67:8a: 5e:3f:8b:9c:35:18:e7:ab:3d:a4:8b:ea:3d:ba:97:52:11:04: 5e:d2:a8:23:91:70:4a:47:36:c4:15:f3:aa:69:00:91:99:22: 18:1b:1e:02:03:dc:24:0f:72:42:36:c0:68:27:28:6d:d0:80: a1:90:c8:4a:2d:6b:26:b6:f0:4f:8c:b6:15:18:76:ad:b5:9e: 10:46:17:7e:57:e2:ca:2d:fb:31:38:1a:62:ab:87:5d:39:44: f5:b4:25:4f:bd:0d:ee:b1:45:2a:b2:b8:6b:d0:bb:56:5f:9e: 4a:11:1d:a8:ef:40:f0:0c:cd:00:4b:3d:9a:1d:07:66:3b:f0: 54:d0:4a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92QayF2lifqnInOGBGENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODFiN2I0YWUzZTc1ZGM0YjM2Y2ZmMjkzNzkyM2VjZGZm NzI1OWIwHhcNMjUxMjA2MTQwMTA3WhcNMjUxMjA3MTQwMTA3WjAzMTEwLwYDVQQD Eyg2MzA5ZGExOGEyZTMzZTQ3ZWMyNWM0MTIxNTYwYjhiNzgxMjIwOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyjgkHCYyxXTT2F3SquTFB+aWwHZ ++3mvqUuCkleRzwrlGDIZKlAWpjp55C5w1v1PGMHhuaSMsr3Wou2Uanb2THWijHC U3xFbXiGvMliksAMXEr5EjtPRNSFZuYMULSTOjI9i3TWqc8mi5SeyLGEMISnJyxG 89YZ4ZN+S6cEhwr1OfZF52XY+2kn+zOVp/zbl0ONeT8jHEZvholE+B1wkfXoBdY5 pG9cvnkTpcaRBxOdYaLCF8KE+zk1mQeC2hREdOSx8UY4nFIEZ6GnwaKZQCqwi/Wg LPoBolsJXtl2rPxnNDIv2ejUXHi5zHe1I8I94lC1wetVxcW0rOM9kiojdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMJ2hii4z5H7CXEEhVguLeBIgj9MB8GA1UdIwQY MBaAFCaBt7SuPnXcSzbP8pN5I+zf9yWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEt ZmM4MzliYjZkMTczLzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEtZmM4MzliYjZkMTcz LzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcnXb6He fUV4yfHWdlJLwvCp4iAS/A8OxMLKJ11WflpyLyvYfmkOlMaGJI+/jdrskducnNqE PkF1hgTWs454Sxx3W8qlBFRAaX/3PLIZpBXop3KTOfG/eh18jHPfSv0D2nFFUf0b LiysElx3VpRbzw5N4TXtubvkOj56/GeKXj+LnDUY56s9pIvqPbqXUhEEXtKoI5Fw Skc2xBXzqmkAkZkiGBseAgPcJA9yQjbAaCcobdCAoZDISi1rJrbwT4y2FRh2rbWe EEYXflfiyi37MTgaYquHXTlE9bQlT70N7rFFKrK4a9C7Vl+eShEdqO9A8AzNAEs9 mh0HZjvwVNBKPg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:47:29 2025 by rpki-client