This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft File: jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json) Hash identifier: iGUgFQuY2GZaJ8OgJr3qOoc+4FMagDooXTD9SSNKjS0= Subject key identifier: 1A:E1:0C:BE:1A:4F:8A:C3:B0:81:6F:14:A1:43:59:9F:40:0B:21:61 Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Certificate serial: 019AF4D2B5B1CFEDE3C23B079490169D279E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft Manifest number: 16A8 Signing time: Sat 06 Dec 2025 18:00:41 +0000 Manifest this update: Sat 06 Dec 2025 18:00:41 +0000 Manifest next update: Sun 07 Dec 2025 18:00:41 +0000 Files and hashes: 1: DYRo5UxpUtRoBr5siZIGMHmDOmk.roa (hash: CNeg8TW20mVMGXVcVuZCa6OMSEOFftuPH5JmAwDqWJM=) 2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: TmJrGRyN5a3t5QmgNbMk/PqjrXI6yboPrfRJfql3MW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:b5:b1:cf:ed:e3:c2:3b:07:94:90:16:9d:27:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Validity Not Before: Dec 6 18:00:41 2025 GMT Not After : Dec 7 18:00:41 2025 GMT Subject: CN=1ae10cbe1a4f8ac3b0816f14a143599f400b2161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:91:93:e3:37:e9:ac:bc:77:43:cd:75:27: 4c:68:ce:ae:8e:96:0f:9d:24:04:73:c0:5c:33:d8: 61:c5:2c:03:19:92:6b:1d:c2:81:d9:db:6b:d0:54: e0:ed:87:71:6f:01:31:ab:36:fd:a1:30:fd:f1:13: e5:e3:14:b5:25:50:57:ff:ff:e6:98:06:7f:8b:d9: fc:a8:e4:bf:ae:b8:a5:fd:f9:e6:90:39:d9:6a:5d: 92:41:d4:64:c4:13:22:e3:76:d1:38:bc:c8:55:66: dd:65:69:84:86:60:c4:36:1f:94:c8:6b:7e:a1:ca: cd:c1:76:c5:e7:32:04:60:c7:6f:01:53:f2:f6:fd: 5a:25:d3:dd:6c:58:a4:5f:65:95:c1:c6:61:2e:4b: a3:67:0b:84:3a:5d:31:a6:ea:cb:af:70:71:8e:97: ea:f6:53:03:10:78:91:f2:c9:7d:73:c6:56:da:63: 4d:ec:ee:e5:7c:58:66:0c:30:b9:2d:7b:8f:a3:8d: 6a:ec:35:90:69:59:85:df:db:86:da:1a:bd:cf:e2: 67:59:22:10:ff:e6:1c:7c:02:0c:d6:a9:e4:2d:f1: 7f:55:cd:f7:ae:57:d4:d6:53:e6:66:a8:88:45:ea: bf:63:ae:01:c5:c1:5d:14:d9:4c:19:20:7f:44:03: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E1:0C:BE:1A:4F:8A:C3:B0:81:6F:14:A1:43:59:9F:40:0B:21:61 X509v3 Authority Key Identifier: keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8b:88:cc:17:5a:34:e2:b0:1d:79:0e:cc:38:4c:98:7e:80: 24:99:ab:a1:b1:f3:32:34:48:aa:f6:2c:ef:58:16:50:bd:ed: 45:f2:d3:d7:1f:ed:67:45:df:a7:87:62:8b:e8:06:a5:c3:33: 87:c0:59:60:04:67:4e:8e:11:74:54:c3:c5:18:ce:08:af:36: 07:b1:bf:b9:e2:1d:d7:f3:c3:55:fd:69:28:c8:de:eb:50:ad: c6:24:16:6c:e1:c3:f2:2f:38:34:fb:b7:63:20:81:79:e2:60: 6a:0f:f8:f8:52:24:a4:ac:2b:aa:44:92:4b:69:eb:83:07:05: f1:fb:9d:d4:fa:53:d3:45:dd:fd:90:1c:ce:85:0a:e5:c7:03: 87:16:70:28:a8:80:49:d8:c0:8d:b6:9a:0e:35:4c:d4:41:0d: 2f:ed:ef:91:b6:3e:4b:42:ea:b9:05:49:e3:3a:3a:f1:d0:49: 07:ca:5f:47:1e:db:6c:95:10:88:fd:cc:5f:cc:1a:9e:cd:4a: 47:4b:89:a7:87:bf:35:7c:67:ea:1c:35:1f:4c:37:f5:32:85: ec:35:6c:94:d4:c4:82:bf:ad:5e:03:84:88:be:e9:d7:76:5f: e4:a2:66:18:14:22:95:7a:2c:25:7b:00:0b:cd:59:ed:24:db: 5c:47:48:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00rWxz+3jwjsHlJAWnSeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGEzOTFhYWViOGZjN2M4MzNmODI1N2Q3YTllNzRhNTVi MzNhZmUwHhcNMjUxMjA2MTgwMDQxWhcNMjUxMjA3MTgwMDQxWjAzMTEwLwYDVQQD EygxYWUxMGNiZTFhNGY4YWMzYjA4MTZmMTRhMTQzNTk5ZjQwMGIyMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc+Rk+M36ay8d0PNdSdMaM6ujpYP nSQEc8BcM9hhxSwDGZJrHcKB2dtr0FTg7YdxbwExqzb9oTD98RPl4xS1JVBX///m mAZ/i9n8qOS/rril/fnmkDnZal2SQdRkxBMi43bROLzIVWbdZWmEhmDENh+UyGt+ ocrNwXbF5zIEYMdvAVPy9v1aJdPdbFikX2WVwcZhLkujZwuEOl0xpurLr3Bxjpfq 9lMDEHiR8sl9c8ZW2mNN7O7lfFhmDDC5LXuPo41q7DWQaVmF39uG2hq9z+JnWSIQ /+YcfAIM1qnkLfF/Vc33rlfU1lPmZqiIReq/Y64BxcFdFNlMGSB/RANzHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrhDL4aT4rDsIFvFKFDWZ9ACyFhMB8GA1UdIwQY MBaAFI4KORquuPx8gz+CV9ep50pVszr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYt ZWRiNDNlMWQ0ZWUwLzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYtZWRiNDNlMWQ0ZWUw LzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcouIzBda NOKwHXkOzDhMmH6AJJmrobHzMjRIqvYs71gWUL3tRfLT1x/tZ0Xfp4dii+gGpcMz h8BZYARnTo4RdFTDxRjOCK82B7G/ueId1/PDVf1pKMje61CtxiQWbOHD8i84NPu3 YyCBeeJgag/4+FIkpKwrqkSSS2nrgwcF8fud1PpT00Xd/ZAczoUK5ccDhxZwKKiA SdjAjbaaDjVM1EENL+3vkbY+S0LquQVJ4zo68dBJB8pfRx7bbJUQiP3MX8wans1K R0uJp4e/NXxn6hw1H0w39TKF7DVslNTEgr+tXgOEiL7p13Zf5KJmGBQilXosJXsA C81Z7STbXEdI+A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:30 2025 by rpki-client