This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json) Hash identifier: TtZV8yxI1aeWRm6zXvFKwlTpl7xdM127DadYRxyOkqc= Subject key identifier: F0:CC:00:E1:19:59:66:E9:52:4F:05:BB:F8:1E:2A:E5:93:3C:AA:FC Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c Certificate serial: 019AF49BB2E9AB5F28FF3B1BCC4F0AFD3793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft Manifest number: 02C1 Signing time: Sat 06 Dec 2025 17:00:35 +0000 Manifest this update: Sat 06 Dec 2025 17:00:35 +0000 Manifest next update: Sun 07 Dec 2025 17:00:35 +0000 Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: pX4mKsOqqpZEp2kztv0ACLQ10B7LGOXLlk9h/RFfwNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b2:e9:ab:5f:28:ff:3b:1b:cc:4f:0a:fd:37:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c Validity Not Before: Dec 6 17:00:35 2025 GMT Not After : Dec 7 17:00:35 2025 GMT Subject: CN=f0cc00e1195966e9524f05bbf81e2ae5933caafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:35:e4:49:9b:ec:5b:ba:14:5e:9d:41:88: 48:55:b8:7c:58:a6:42:fc:dd:b4:0c:f1:8a:72:5c: 95:a7:01:f1:34:cf:49:75:7f:04:a1:98:00:42:dd: 2d:91:a3:6f:b5:34:ee:2e:45:c6:b9:2c:6b:30:88: 53:fb:11:ce:77:f4:d6:84:b1:bf:0a:3d:1a:a1:c2: 64:61:f2:c9:52:ce:98:e5:34:0f:b3:c6:11:c0:ba: c8:6e:cd:a2:ae:98:bd:ac:40:46:d8:5b:c2:dd:27: 1e:e1:11:0e:61:7a:ec:a0:1d:b0:13:ca:dc:14:c9: d0:fc:17:f3:a5:18:9b:72:c7:48:53:68:8a:f7:c2: e6:60:b7:c4:de:5e:c4:08:1c:7e:95:3f:2e:9e:fb: 03:27:3e:83:e4:75:82:4b:59:4d:20:b2:a7:23:39: 5b:37:30:05:1b:6f:db:aa:b0:39:10:f1:6b:ca:f1: d6:22:f9:05:07:36:94:8f:1d:14:83:dc:30:6f:53: f6:98:8d:9e:37:58:9e:fe:1c:7f:fb:ca:5d:6f:dc: b4:d0:06:3f:7f:ee:b5:76:6e:a4:2f:77:bb:58:11: 0e:a4:9e:67:50:27:f8:8a:f3:bd:e7:8d:6f:1e:5a: b5:28:97:f3:c0:b6:63:97:2a:b8:3c:e4:3b:62:5e: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CC:00:E1:19:59:66:E9:52:4F:05:BB:F8:1E:2A:E5:93:3C:AA:FC X509v3 Authority Key Identifier: keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4c:49:04:3d:74:37:4a:5e:a7:3e:e2:78:5f:4f:13:2b:68: 7e:3a:1e:bf:17:04:ce:23:7f:73:fd:5d:21:33:eb:3a:81:41: 9f:6c:2e:7c:77:cc:6d:57:75:16:65:2a:b4:ab:93:18:7f:dc: 2f:bf:2b:fd:cd:80:5d:69:97:a0:c0:e9:da:cf:3b:58:d1:3e: ec:df:5b:eb:cd:60:9e:7a:82:9a:50:1c:e6:b3:56:b4:86:fe: e5:2e:ca:a3:2b:3c:34:e4:38:d7:d0:4b:cf:57:4a:69:88:4d: 5b:64:bf:77:47:75:9b:bc:e3:19:1d:c6:72:d8:ec:be:4a:c8: f1:36:99:c9:33:26:d6:7b:36:2d:17:b8:d5:5c:0b:97:26:3a: 2e:95:47:0c:e6:f7:fe:8b:45:48:b8:49:82:4f:b3:2d:85:06: ce:d3:fe:de:38:02:21:60:25:8b:05:a6:cb:60:34:2c:ab:52: ff:6a:c4:51:aa:95:8b:82:15:c9:3f:a2:ef:c4:2a:9c:f6:2b: e6:e4:22:11:dc:e6:90:83:a8:08:62:a9:5b:6c:ce:c8:91:89: 80:d7:b8:95:aa:bb:a7:61:af:16:e4:6d:33:49:e6:18:bf:e8: f0:cb:ca:97:a0:79:96:c3:c2:f1:83:ef:f6:07:a7:89:d7:8f: 96:65:fb:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7Lpq18o/zsbzE8K/TeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NmJmNDY5ODczMmRhNWZiYzdjMjAwMmY2Mzk2N2M2OGY1 NmRiNmMwHhcNMjUxMjA2MTcwMDM1WhcNMjUxMjA3MTcwMDM1WjAzMTEwLwYDVQQD EyhmMGNjMDBlMTE5NTk2NmU5NTI0ZjA1YmJmODFlMmFlNTkzM2NhYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KU15Emb7Fu6FF6dQYhIVbh8WKZC /N20DPGKclyVpwHxNM9JdX8EoZgAQt0tkaNvtTTuLkXGuSxrMIhT+xHOd/TWhLG/ Cj0aocJkYfLJUs6Y5TQPs8YRwLrIbs2irpi9rEBG2FvC3Sce4REOYXrsoB2wE8rc FMnQ/BfzpRibcsdIU2iK98LmYLfE3l7ECBx+lT8unvsDJz6D5HWCS1lNILKnIzlb NzAFG2/bqrA5EPFryvHWIvkFBzaUjx0Ug9wwb1P2mI2eN1ie/hx/+8pdb9y00AY/ f+61dm6kL3e7WBEOpJ5nUCf4ivO9541vHlq1KJfzwLZjlyq4POQ7Yl7egQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDMAOEZWWbpUk8Fu/geKuWTPKr8MB8GA1UdIwQY MBaAFCRr9GmHMtpfvHwgAvY5Z8aPVttsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZjk2NjYtOTA0YS00NjIyLTkwNjYt ZjUxMjJiYWMxNGFhLzEvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yZjk2NjYtOTA0YS00NjIyLTkwNjYtZjUxMjJiYWMxNGFh LzEvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0xJBD10 N0pepz7ieF9PEytofjoevxcEziN/c/1dITPrOoFBn2wufHfMbVd1FmUqtKuTGH/c L78r/c2AXWmXoMDp2s87WNE+7N9b681gnnqCmlAc5rNWtIb+5S7Koys8NOQ419BL z1dKaYhNW2S/d0d1m7zjGR3GctjsvkrI8TaZyTMm1ns2LRe41VwLlyY6LpVHDOb3 /otFSLhJgk+zLYUGztP+3jgCIWAliwWmy2A0LKtS/2rEUaqVi4IVyT+i78QqnPYr 5uQiEdzmkIOoCGKpW2zOyJGJgNe4laq7p2GvFuRtM0nmGL/o8MvKl6B5lsPC8YPv 9genidePlmX7/A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:17 2025 by rpki-client