This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json) Hash identifier: 6vSXhcNiRLzFKJyZDshdGVYOvtnVsu6DUfrT0OswEu8= Subject key identifier: 36:F2:50:CB:70:4B:A2:F4:39:82:42:20:76:12:2F:4E:26:B0:E2:A3 Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Certificate serial: 019AF54078B657F3431E126074E0838E3A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft Manifest number: 1638 Signing time: Sat 06 Dec 2025 20:00:34 +0000 Manifest this update: Sat 06 Dec 2025 20:00:34 +0000 Manifest next update: Sun 07 Dec 2025 20:00:34 +0000 Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: duCyBt6lghLTYyCDEOVsk6nWQlh2mXUO8J4hlJaVzwc=) 2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:78:b6:57:f3:43:1e:12:60:74:e0:83:8e:3a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Validity Not Before: Dec 6 20:00:34 2025 GMT Not After : Dec 7 20:00:34 2025 GMT Subject: CN=36f250cb704ba2f43982422076122f4e26b0e2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:82:b6:85:7b:09:a8:ec:4b:ef:de:57:77: 68:cc:bd:f9:ea:0e:40:f5:a9:aa:4b:25:0e:47:93: 40:eb:5e:98:2b:aa:a0:3a:11:f7:b1:65:c6:2d:b0: d7:e0:08:3b:b8:6b:98:05:3a:f6:92:97:fb:9d:12: 3d:59:56:f8:57:ba:e2:5a:b5:a0:f5:3d:32:b5:1b: 52:30:5d:e5:97:bd:e2:c2:27:03:12:59:4b:e8:69: 4e:7f:b3:cc:c0:72:9b:71:d0:fc:57:1d:82:ce:f4: f5:d9:de:25:ba:b9:eb:76:91:9b:3d:6d:ed:a8:23: 0c:08:1e:37:49:76:f3:bd:be:06:47:8e:00:54:4f: c7:9e:08:33:bb:dc:63:59:ee:8e:ad:d6:67:12:58: fb:87:59:09:8a:c1:f4:60:81:d2:8a:e2:0f:67:a2: ca:c7:8a:c1:af:c8:fb:47:c9:85:99:74:c4:b0:82: d9:24:da:a7:96:88:7a:b1:b1:e8:b4:4f:fa:8a:af: d3:46:26:46:36:29:43:a8:11:9b:ce:6d:03:02:90: 5a:67:78:f4:59:80:44:57:8f:28:30:36:41:58:a8: 78:8b:32:4a:90:3e:e1:22:4d:ac:ba:fd:1e:ce:df: 39:73:d6:58:88:bc:55:f8:d6:3c:db:59:a6:11:1f: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F2:50:CB:70:4B:A2:F4:39:82:42:20:76:12:2F:4E:26:B0:E2:A3 X509v3 Authority Key Identifier: keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0c:ca:4f:f2:73:46:d2:00:d4:fb:ea:07:1d:e7:17:44:02: ce:f7:35:26:4c:a6:ff:e7:82:0b:ab:36:53:4a:1a:1a:d3:b8: d2:ac:4d:f0:ff:b7:59:49:58:3f:0f:cc:d8:ad:70:e1:de:72: 13:6a:6c:07:9f:d4:51:c4:8e:7d:a6:7b:97:68:18:6f:26:ad: 58:54:4b:79:d3:a9:8c:c0:84:39:8d:8c:b7:12:56:92:57:33: b6:3f:67:e3:18:02:a0:33:04:d3:ad:98:c9:98:e2:9c:ea:13: 5e:b5:1a:ec:40:12:a0:98:54:38:2b:71:26:54:71:fd:fd:a3: aa:81:68:9c:20:03:19:2c:da:42:aa:e4:03:bd:16:81:ab:55: 8c:9c:6a:58:ee:f1:8f:42:a2:8f:41:d1:78:6a:cf:21:fa:18: 97:96:f9:50:69:f2:91:bf:f4:de:e4:20:f2:4f:b2:dc:b7:d6: ef:74:c4:7f:04:7e:8b:63:eb:ba:f0:95:8e:ab:7e:cb:61:06: a0:5d:15:86:36:92:3b:b6:c3:81:e2:73:34:b7:9d:00:fb:2d: ac:ab:73:24:c1:e8:1b:02:3c:8f:6b:d5:d4:2d:c3:91:64:b2: 4f:40:1d:3a:8b:ab:80:62:66:d3:36:d0:95:b7:d6:0a:42:db: 3a:8a:2c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QHi2V/NDHhJgdOCDjjonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Njc2MDM2MjMxNDNiZDFiYzdhOGZjOWQ4ZTc5ZDk1NTk2 MTE4NjAwHhcNMjUxMjA2MjAwMDM0WhcNMjUxMjA3MjAwMDM0WjAzMTEwLwYDVQQD EygzNmYyNTBjYjcwNGJhMmY0Mzk4MjQyMjA3NjEyMmY0ZTI2YjBlMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1KCtoV7CajsS+/eV3dozL356g5A 9amqSyUOR5NA616YK6qgOhH3sWXGLbDX4Ag7uGuYBTr2kpf7nRI9WVb4V7riWrWg 9T0ytRtSMF3ll73iwicDEllL6GlOf7PMwHKbcdD8Vx2CzvT12d4lurnrdpGbPW3t qCMMCB43SXbzvb4GR44AVE/Hnggzu9xjWe6OrdZnElj7h1kJisH0YIHSiuIPZ6LK x4rBr8j7R8mFmXTEsILZJNqnloh6sbHotE/6iq/TRiZGNilDqBGbzm0DApBaZ3j0 WYBEV48oMDZBWKh4izJKkD7hIk2suv0ezt85c9ZYiLxV+NY821mmER9W6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbyUMtwS6L0OYJCIHYSL04msOKjMB8GA1UdIwQY MBaAFCRnYDYjFDvRvHqPydjnnZVZYRhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEt ZmI0NjQyZDJkOWE2LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEtZmI0NjQyZDJkOWE2 LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAzKT/Jz RtIA1PvqBx3nF0QCzvc1Jkym/+eCC6s2U0oaGtO40qxN8P+3WUlYPw/M2K1w4d5y E2psB5/UUcSOfaZ7l2gYbyatWFRLedOpjMCEOY2MtxJWklcztj9n4xgCoDME062Y yZjinOoTXrUa7EASoJhUOCtxJlRx/f2jqoFonCADGSzaQqrkA70WgatVjJxqWO7x j0Kij0HReGrPIfoYl5b5UGnykb/03uQg8k+y3LfW73TEfwR+i2PruvCVjqt+y2EG oF0VhjaSO7bDgeJzNLedAPstrKtzJMHoGwI8j2vV1C3DkWSyT0AdOourgGJm0zbQ lbfWCkLbOoosMg== -----END CERTIFICATE-----Generated at Sun Dec 7 05:52:20 2025 by rpki-client