This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json) Hash identifier: gjxsmSO8VN4Q0QuwVv8j7aCH+0o95emQqoA9e9W9ng8= Subject key identifier: D6:C3:EE:F9:85:1D:CD:6B:26:78:A5:80:15:77:60:7D:58:D8:73:F2 Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c Certificate serial: 019B3C0FD8F4DDFF53CF7D1A0BD62B19E2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft Manifest number: 02E6 Signing time: Sat 20 Dec 2025 14:00:29 +0000 Manifest this update: Sat 20 Dec 2025 14:00:29 +0000 Manifest next update: Sun 21 Dec 2025 14:00:29 +0000 Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: v7z6WMfWm38O+lEpFmoe1/kmt/F1zPZr7tCXdaCrSJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:d8:f4:dd:ff:53:cf:7d:1a:0b:d6:2b:19:e2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c Validity Not Before: Dec 20 14:00:29 2025 GMT Not After : Dec 21 14:00:29 2025 GMT Subject: CN=d6c3eef9851dcd6b2678a5801577607d58d873f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:42:5e:59:c2:6a:6d:0e:ac:03:58:56:dc: 0c:13:8f:8d:cc:99:6e:e5:43:37:d0:14:b5:c2:db: 5b:6a:36:85:40:42:e1:3a:63:1a:3f:a1:9e:61:f2: 61:d7:73:4f:96:54:4d:97:fb:36:1c:39:a5:b3:49: 48:92:c9:25:ed:6b:45:e5:bc:07:a0:1b:32:16:55: 0c:08:e2:f8:62:a3:c9:ae:00:2d:3d:e5:b0:c0:cf: d6:4f:f3:d3:ce:53:ed:b5:84:85:24:64:ea:42:4a: 36:a0:35:e1:24:06:1d:65:aa:3e:a6:8e:22:66:36: 5f:04:e9:42:6a:2b:0d:31:ac:52:04:4e:da:27:b0: 35:05:e2:40:90:bd:e9:d6:25:13:22:d9:02:8c:25: 67:94:3d:4c:44:16:1c:98:19:73:6c:97:1a:4b:44: 68:d4:dc:91:01:f3:a1:df:95:13:37:60:24:df:e4: 95:df:37:e2:db:46:1a:c0:0e:c8:0d:f1:6a:34:aa: d6:4f:6a:c7:cb:09:fe:40:de:cc:63:41:77:f1:10: 54:73:71:96:2e:19:67:2b:5c:f5:00:82:3f:da:6b: ad:89:ae:4c:1b:84:6a:72:da:dd:70:ad:d5:7e:6f: 8c:de:21:f8:b7:ce:e2:68:46:90:9f:f2:01:16:64: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C3:EE:F9:85:1D:CD:6B:26:78:A5:80:15:77:60:7D:58:D8:73:F2 X509v3 Authority Key Identifier: keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2a:b3:f8:12:c6:4e:b7:21:a0:75:54:c6:dd:0b:f4:1f:af: 7d:5f:d8:04:d1:c1:f6:7d:bd:23:97:3c:d3:76:e5:cb:27:0e: 05:b2:8e:3a:6d:a5:4d:c7:06:c4:a8:5f:66:20:ef:90:54:61: ea:6d:ac:b6:cf:11:2a:ef:cd:c5:e5:a1:93:46:1b:84:7d:ca: 1c:9a:f1:dc:7f:b2:b9:69:67:34:9e:9c:92:c1:44:9f:c6:80: 01:90:1c:8d:ac:fc:af:1b:fe:54:2e:f4:d8:b9:0e:61:27:0c: 9e:0d:e9:e4:30:48:2d:a2:34:41:73:8d:be:e3:d0:10:bd:70: 55:98:4f:06:58:1f:66:63:b8:42:58:b5:6b:4d:33:6c:7b:87: 96:51:4e:e1:12:8f:7c:87:f3:b6:b4:35:8c:7c:87:5c:48:05: 5a:c9:60:07:ca:55:41:b5:66:a6:3d:30:2e:03:18:77:9f:f5: a1:31:d7:49:0c:f5:67:94:57:1b:88:b9:4a:60:cf:d9:77:12: ea:e8:1f:b4:be:e2:65:b4:ac:93:c1:19:74:da:a3:db:4c:e9: cc:ff:29:7a:27:ee:f7:98:52:8a:71:bf:97:90:80:25:01:36: de:b1:47:18:4e:d0:a4:56:58:98:ca:d5:da:db:ab:2a:cd:e3: b0:d7:e4:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9j03f9Tz30aC9YrGeL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NmJmNDY5ODczMmRhNWZiYzdjMjAwMmY2Mzk2N2M2OGY1 NmRiNmMwHhcNMjUxMjIwMTQwMDI5WhcNMjUxMjIxMTQwMDI5WjAzMTEwLwYDVQQD EyhkNmMzZWVmOTg1MWRjZDZiMjY3OGE1ODAxNTc3NjA3ZDU4ZDg3M2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxdCXlnCam0OrANYVtwME4+NzJlu 5UM30BS1wttbajaFQELhOmMaP6GeYfJh13NPllRNl/s2HDmls0lIkskl7WtF5bwH oBsyFlUMCOL4YqPJrgAtPeWwwM/WT/PTzlPttYSFJGTqQko2oDXhJAYdZao+po4i ZjZfBOlCaisNMaxSBE7aJ7A1BeJAkL3p1iUTItkCjCVnlD1MRBYcmBlzbJcaS0Ro 1NyRAfOh35UTN2Ak3+SV3zfi20YawA7IDfFqNKrWT2rHywn+QN7MY0F38RBUc3GW LhlnK1z1AII/2mutia5MG4RqctrdcK3Vfm+M3iH4t87iaEaQn/IBFmRNSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbD7vmFHc1rJnilgBV3YH1Y2HPyMB8GA1UdIwQY MBaAFCRr9GmHMtpfvHwgAvY5Z8aPVttsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZjk2NjYtOTA0YS00NjIyLTkwNjYt ZjUxMjJiYWMxNGFhLzEvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yZjk2NjYtOTA0YS00NjIyLTkwNjYtZjUxMjJiYWMxNGFh LzEvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyqz+BLG TrchoHVUxt0L9B+vfV/YBNHB9n29I5c803blyycOBbKOOm2lTccGxKhfZiDvkFRh 6m2sts8RKu/NxeWhk0YbhH3KHJrx3H+yuWlnNJ6cksFEn8aAAZAcjaz8rxv+VC70 2LkOYScMng3p5DBILaI0QXONvuPQEL1wVZhPBlgfZmO4Qli1a00zbHuHllFO4RKP fIfztrQ1jHyHXEgFWslgB8pVQbVmpj0wLgMYd5/1oTHXSQz1Z5RXG4i5SmDP2XcS 6ugftL7iZbSsk8EZdNqj20zpzP8peifu95hSinG/l5CAJQE23rFHGE7QpFZYmMrV 2turKs3jsNfkdg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:56:09 2025 by rpki-client