This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json) Hash identifier: TOe/UzCF0gTA4koPQz0fbepzur5t5T9yMdduFo18G3I= Subject key identifier: 8F:18:72:5B:ED:BE:1A:C0:7E:3E:09:64:89:D3:0D:D9:A8:00:F0:A4 Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Certificate serial: 019AF31BD94754CD368D2840C03DDB1ADD98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft Manifest number: 01D9 Signing time: Sat 06 Dec 2025 10:01:19 +0000 Manifest this update: Sat 06 Dec 2025 10:01:19 +0000 Manifest next update: Sun 07 Dec 2025 10:01:19 +0000 Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: VbqbFOitYvLYpa7VRlcSwWNdxIu9fZM+yl5tb8evnR8=) 2: METktZ2idAiZeDz9hpktU55-5Jw.roa (hash: nKbFLY3xUJE/BDnG472RqLje6LdE93p8++xFwpMJxhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d9:47:54:cd:36:8d:28:40:c0:3d:db:1a:dd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Validity Not Before: Dec 6 10:01:19 2025 GMT Not After : Dec 7 10:01:19 2025 GMT Subject: CN=8f18725bedbe1ac07e3e096489d30dd9a800f0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:7c:a2:cb:b8:cb:53:32:fe:d9:5d:19:23: a6:94:2b:59:f7:20:f2:f5:d1:9b:b3:d2:0a:46:9d: 85:03:40:03:9e:8b:4c:c4:f4:ee:0e:14:c7:86:84: b5:76:93:62:e3:a8:69:c9:29:49:4f:bb:5d:fb:6a: 76:91:22:67:7f:b2:6c:17:69:00:19:e0:30:35:fd: 73:65:4f:39:fe:d9:55:79:dd:df:d6:6c:2c:5d:ac: a9:8e:35:f8:91:24:59:5a:cf:ee:74:04:42:b8:df: d0:f1:07:da:02:01:1a:ed:5d:21:e9:fa:a0:b7:a3: d7:6b:b7:df:b9:0c:97:c0:90:b9:5c:7d:34:fe:5e: 63:5f:b4:3d:ab:7c:f8:1d:36:77:50:18:0b:08:4a: 34:1d:2f:8c:0d:54:d8:ba:23:65:5c:32:72:38:23: da:aa:94:b3:b5:3b:37:21:52:82:41:ff:fa:9f:4d: 32:19:ec:21:9b:f1:28:8a:d8:35:93:35:e0:f6:20: 05:1e:a3:fa:17:13:96:17:fa:b3:ee:9f:09:32:76: dc:32:1e:64:78:7e:58:6f:51:fe:05:67:a8:65:19: d3:d7:b2:c8:7f:6b:79:7a:c1:04:ed:13:b7:90:6c: 74:10:80:ae:94:0c:58:f8:56:ea:53:6b:28:65:d7: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:18:72:5B:ED:BE:1A:C0:7E:3E:09:64:89:D3:0D:D9:A8:00:F0:A4 X509v3 Authority Key Identifier: keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:60:e1:32:49:51:9c:86:81:48:6e:dd:6c:ea:37:0a:0a:69: 2a:29:05:a5:c4:23:ea:f6:48:30:0b:10:ee:d7:78:a9:22:eb: 71:f5:60:c2:e0:47:9f:9c:59:95:a2:1f:a3:6c:c7:cd:1c:f7: 09:19:e6:9b:28:53:66:57:39:dd:a6:a9:53:09:18:f8:dc:f3: 6a:59:2c:e3:e2:73:3c:95:c5:7f:0b:ba:00:d5:48:72:c1:36: 1a:80:99:32:83:fe:b0:fb:69:97:40:c2:17:ee:dc:02:70:cf: f2:7e:bd:60:2c:13:66:ef:8d:fe:b7:8a:74:8b:ef:a9:00:fb: 3d:93:31:61:44:81:c5:1a:df:04:29:99:da:81:0c:bd:a9:f2: 74:cc:18:b4:47:90:42:b1:a3:38:6f:a0:2d:1e:fe:aa:e1:6d: a6:c8:30:52:9c:35:22:72:cd:78:6a:ed:5e:7a:f7:d2:53:3c: 2e:99:98:2c:32:e3:19:b7:f3:25:fd:f7:aa:2b:4e:39:95:2d: bb:a6:11:1a:28:20:4b:3d:a9:33:e8:03:68:f0:87:0b:5a:d9: 6c:15:46:30:b4:6e:96:b5:21:a8:75:91:e3:03:19:62:28:05: f8:f2:c1:3d:94:70:59:87:03:e6:b1:18:4a:bc:eb:bf:75:bd: 84:b6:29:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9lHVM02jShAwD3bGt2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz Y2U1ZDIwHhcNMjUxMjA2MTAwMTE5WhcNMjUxMjA3MTAwMTE5WjAzMTEwLwYDVQQD Eyg4ZjE4NzI1YmVkYmUxYWMwN2UzZTA5NjQ4OWQzMGRkOWE4MDBmMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWx8osu4y1My/tldGSOmlCtZ9yDy 9dGbs9IKRp2FA0ADnotMxPTuDhTHhoS1dpNi46hpySlJT7td+2p2kSJnf7JsF2kA GeAwNf1zZU85/tlVed3f1mwsXaypjjX4kSRZWs/udARCuN/Q8QfaAgEa7V0h6fqg t6PXa7ffuQyXwJC5XH00/l5jX7Q9q3z4HTZ3UBgLCEo0HS+MDVTYuiNlXDJyOCPa qpSztTs3IVKCQf/6n00yGewhm/Eoitg1kzXg9iAFHqP6FxOWF/qz7p8JMnbcMh5k eH5Yb1H+BWeoZRnT17LIf2t5esEE7RO3kGx0EICulAxY+FbqU2soZdeVNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8YclvtvhrAfj4JZInTDdmoAPCkMB8GA1UdIwQY MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt MTliMTJhOTU1MDY1LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1 LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmDhMklR nIaBSG7dbOo3CgppKikFpcQj6vZIMAsQ7td4qSLrcfVgwuBHn5xZlaIfo2zHzRz3 CRnmmyhTZlc53aapUwkY+Nzzalks4+JzPJXFfwu6ANVIcsE2GoCZMoP+sPtpl0DC F+7cAnDP8n69YCwTZu+N/reKdIvvqQD7PZMxYUSBxRrfBCmZ2oEMvanydMwYtEeQ QrGjOG+gLR7+quFtpsgwUpw1InLNeGrtXnr30lM8LpmYLDLjGbfzJf33qitOOZUt u6YRGiggSz2pM+gDaPCHC1rZbBVGMLRulrUhqHWR4wMZYigF+PLBPZRwWYcD5rEY Srzrv3W9hLYpDA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:33 2025 by rpki-client