This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json) Hash identifier: 42KiFxjpUXhCusRiMU7RsHZvTfZbgyc+eB3VUwpi+y4= Subject key identifier: 85:8F:37:C6:B6:7B:50:A0:DE:8A:EA:B8:14:70:75:5E:65:02:C0:72 Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Certificate serial: 019AF2AD6F3216CE2F8523AB2A678DC9F5DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft Manifest number: 14CF Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=) 2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=) 3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=) 4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: lHpVaogeNdXLTNZ0p8kxCTkOJxugjWTk9Oxulwf/h0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6f:32:16:ce:2f:85:23:ab:2a:67:8d:c9:f5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=858f37c6b67b50a0de8aeab81470755e6502c072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:ff:5c:d6:52:31:bf:f9:c2:87:79:26:ea: 54:06:cf:17:9e:10:4a:4a:9f:6e:74:86:1a:61:8e: 87:64:aa:32:24:77:20:ce:fa:7a:b0:69:ec:0f:39: 61:b7:04:c1:f7:7c:08:1e:3b:ca:64:cc:c4:2c:a7: f9:bb:01:12:88:22:30:7c:dd:c6:4c:d2:86:cc:3b: 7d:f2:3e:ff:6e:f6:72:17:1a:7a:05:1d:af:b3:4b: 04:5c:e3:22:a3:3e:5c:4e:0b:f7:0b:27:e1:f5:b5: dc:19:6b:b7:4c:74:9b:34:aa:16:62:91:9a:42:b9: d3:bc:14:b6:16:05:b2:7d:57:87:a8:8d:31:3d:8e: 11:f8:e6:a5:f5:08:6a:7d:46:56:16:1e:74:66:ec: 93:57:3f:a5:f0:82:f2:f6:66:da:9b:f6:ae:55:fa: 4a:f7:42:a5:a0:bb:70:fa:f3:6d:8d:7d:91:b1:55: 88:d1:2c:d8:b7:dc:11:0c:7d:ce:db:46:b2:e6:f7: ea:63:8f:2e:8b:12:42:dc:38:82:06:8d:37:21:bb: 57:b7:4f:9c:5c:ae:c0:80:47:7a:ff:e2:8c:e7:36: 49:8f:e1:4c:4e:f6:d4:d3:d2:00:31:80:4b:85:9e: ad:13:14:f1:47:de:4c:cf:99:2b:15:1d:41:c6:5a: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8F:37:C6:B6:7B:50:A0:DE:8A:EA:B8:14:70:75:5E:65:02:C0:72 X509v3 Authority Key Identifier: keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b6:18:7f:f0:9e:d2:7a:e0:b1:01:24:af:50:a0:03:08:b2: cd:69:01:59:04:8b:fe:e2:ec:d1:0c:3f:39:b0:cf:ec:e0:fd: 98:9a:09:2f:4c:bc:8b:cf:3c:9f:86:d9:d8:93:0d:b2:4c:e9: 91:79:6a:20:bb:97:dc:e8:18:9a:dd:5b:54:94:80:5c:23:8e: 09:23:ba:89:03:f8:2d:fd:1b:ba:c4:d9:dc:89:6c:87:8a:17: 03:87:4e:43:08:eb:a7:99:c1:c8:26:df:80:7c:85:1f:7a:16: 07:6e:45:5d:87:b4:e2:8d:45:c0:bb:a2:cb:fd:c5:f9:99:dd: 65:29:00:19:bc:28:a9:e3:f2:3d:82:8a:64:1a:e5:59:90:68: 6f:b2:0b:cb:40:73:c9:7a:8b:0e:95:82:ee:9e:00:b5:73:b7: 7d:0b:02:da:f9:c7:57:e7:8b:45:a1:fc:a7:c3:90:0f:20:19: 32:3b:bc:2c:5b:f6:f2:eb:90:4e:75:56:c3:2e:f9:f9:b7:da: cb:a8:41:3e:e0:d1:4e:90:ef:40:ed:86:08:ea:7c:0b:0d:6d: 18:df:55:4b:31:41:7e:13:4c:80:b4:b6:5f:e2:4d:a7:33:ef: d5:88:b6:26:8e:c6:ff:d4:ea:b1:ec:65:47:3e:d0:c9:43:d3: 1d:41:b1:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW8yFs4vhSOrKmeNyfXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjgxOTg5YzNiNmU1OGZkYzk1MzRlZTdlYjNlMjYwZDFk ODc3NDkwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD Eyg4NThmMzdjNmI2N2I1MGEwZGU4YWVhYjgxNDcwNzU1ZTY1MDJjMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs3/XNZSMb/5wod5JupUBs8XnhBK Sp9udIYaYY6HZKoyJHcgzvp6sGnsDzlhtwTB93wIHjvKZMzELKf5uwESiCIwfN3G TNKGzDt98j7/bvZyFxp6BR2vs0sEXOMioz5cTgv3Cyfh9bXcGWu3THSbNKoWYpGa QrnTvBS2FgWyfVeHqI0xPY4R+Oal9QhqfUZWFh50ZuyTVz+l8ILy9mbam/auVfpK 90KloLtw+vNtjX2RsVWI0SzYt9wRDH3O20ay5vfqY48uixJC3DiCBo03IbtXt0+c XK7AgEd6/+KM5zZJj+FMTvbU09IAMYBLhZ6tExTxR95Mz5krFR1BxloL9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWPN8a2e1Cg3orquBRwdV5lAsByMB8GA1UdIwQY MBaAFI0oGYnDtuWP3JU07n6z4mDR2HdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEt YmNhODBlNDdjNTczLzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEtYmNhODBlNDdjNTcz LzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbYYf/Ce 0nrgsQEkr1CgAwiyzWkBWQSL/uLs0Qw/ObDP7OD9mJoJL0y8i888n4bZ2JMNskzp kXlqILuX3OgYmt1bVJSAXCOOCSO6iQP4Lf0busTZ3Ilsh4oXA4dOQwjrp5nByCbf gHyFH3oWB25FXYe04o1FwLuiy/3F+ZndZSkAGbwoqePyPYKKZBrlWZBob7ILy0Bz yXqLDpWC7p4AtXO3fQsC2vnHV+eLRaH8p8OQDyAZMju8LFv28uuQTnVWwy75+bfa y6hBPuDRTpDvQO2GCOp8Cw1tGN9VSzFBfhNMgLS2X+JNpzPv1Yi2Jo7G/9Tqsexl Rz7QyUPTHUGxBg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:55:06 2025 by rpki-client