This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft File: jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json) Hash identifier: wy4mH23VE1MNA5pX4I1homNoH006000xTqu7+huCqMY= Subject key identifier: F5:A0:5E:6B:1D:9C:EE:7B:B6:93:94:79:0E:C5:85:97:89:1B:2C:BF Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c Certificate serial: 019B2DB036E44A8DE24399DDCA2B87F27C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft Manifest number: 1436 Signing time: Wed 17 Dec 2025 19:01:21 +0000 Manifest this update: Wed 17 Dec 2025 19:01:21 +0000 Manifest next update: Thu 18 Dec 2025 19:01:21 +0000 Files and hashes: 1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=) 2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: WJ4HMWCOnifqKpEmUHJoZnSiRQXIIWRpu1exiGrEBkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:36:e4:4a:8d:e2:43:99:dd:ca:2b:87:f2:7c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c Validity Not Before: Dec 17 19:01:21 2025 GMT Not After : Dec 18 19:01:21 2025 GMT Subject: CN=f5a05e6b1d9cee7bb69394790ec58597891b2cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:cc:13:c9:15:1b:28:c4:c4:4b:da:49:67: ed:63:6f:12:f5:8b:1f:09:6e:ae:83:0d:bd:41:1a: 97:e2:f6:19:1c:ab:05:58:cc:62:71:b7:fb:97:7d: 68:ae:17:84:52:ad:50:ee:1e:8d:0a:06:11:82:b6: d0:0d:0c:e8:a2:a6:25:18:da:bd:fe:4a:5d:d7:e7: f6:f7:eb:09:ff:12:3c:03:c3:dc:d2:a7:ab:3d:16: 0b:98:cc:b2:39:02:8a:0c:80:51:ad:5f:14:a9:32: a6:d0:f3:1c:e6:e6:7e:41:4b:a4:74:74:be:8a:ea: 28:97:9e:4e:3f:93:ae:29:a3:2c:71:f2:2c:51:ea: 0c:0e:b6:09:3e:63:56:16:a4:fb:20:d5:a5:25:6e: 77:ab:a8:17:07:62:1f:a6:97:27:05:c8:03:1a:0b: 31:ce:56:02:69:dc:e3:92:af:ab:20:8f:db:48:46: e5:90:2a:75:ed:e7:a5:1a:a9:ef:1b:ca:06:2e:89: 17:42:38:47:d9:a5:cd:e1:21:7f:86:4c:6e:10:ff: 48:64:6f:63:6e:be:23:01:44:ec:b9:23:c5:ad:94: 25:ed:95:49:42:2b:86:d5:2d:32:14:31:bf:5c:ed: 60:83:6d:73:27:ec:44:c8:a3:ed:5b:c6:e6:58:ab: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:5E:6B:1D:9C:EE:7B:B6:93:94:79:0E:C5:85:97:89:1B:2C:BF X509v3 Authority Key Identifier: keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ff:6a:1d:8d:35:eb:d1:10:fa:cc:c7:a0:bb:d7:e8:fa:e8: 9a:7d:d4:d4:d2:d9:5b:0f:fa:b8:6d:8c:4e:2e:0e:c2:cf:d7: de:11:4f:d3:13:e3:57:36:dd:38:a5:a2:20:6f:eb:13:d5:82: 49:64:b2:bf:44:65:fc:e5:ac:25:98:ac:1f:f3:4f:1c:12:73: e6:7b:00:5f:00:84:c5:c7:45:31:6a:6d:4d:fd:27:72:d7:56: b5:c5:0f:ac:ef:0d:b9:60:80:a3:76:f8:b5:bf:d1:17:2d:af: 58:23:c7:bd:8a:da:be:0e:7f:d0:7c:28:55:aa:b3:55:a0:dc: 65:17:01:e6:4d:3a:79:3b:5b:69:85:c4:f4:c0:10:7b:e1:4e: 31:35:5a:70:7a:13:9d:58:e7:55:52:74:30:79:79:bb:b7:8c: 07:e0:83:51:87:8e:67:83:b2:cc:b4:26:76:a6:0b:bb:e8:90: af:ae:a3:10:9d:53:9d:5d:29:43:b9:fc:00:0b:01:89:c4:1e: 74:ba:6c:13:51:71:09:9b:78:62:01:21:f3:12:26:7b:ed:e2: 06:ab:f6:96:19:d5:50:2f:e5:9f:93:2f:95:f7:04:bf:80:90: 81:d8:9f:00:d3:14:d1:07:3c:92:15:57:b7:88:c1:3a:38:d4: 93:ee:96:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsDbkSo3iQ5ndyiuH8nwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMDQ1YmZlY2QyYmJlMjRkMzNmNTMwOWRiNDdjOGFhNzdh M2IxMGMwHhcNMjUxMjE3MTkwMTIxWhcNMjUxMjE4MTkwMTIxWjAzMTEwLwYDVQQD EyhmNWEwNWU2YjFkOWNlZTdiYjY5Mzk0NzkwZWM1ODU5Nzg5MWIyY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnnME8kVGyjExEvaSWftY28S9Ysf CW6ugw29QRqX4vYZHKsFWMxicbf7l31orheEUq1Q7h6NCgYRgrbQDQzooqYlGNq9 /kpd1+f29+sJ/xI8A8Pc0qerPRYLmMyyOQKKDIBRrV8UqTKm0PMc5uZ+QUukdHS+ iuool55OP5OuKaMscfIsUeoMDrYJPmNWFqT7INWlJW53q6gXB2IfppcnBcgDGgsx zlYCadzjkq+rII/bSEblkCp17eelGqnvG8oGLokXQjhH2aXN4SF/hkxuEP9IZG9j br4jAUTsuSPFrZQl7ZVJQiuG1S0yFDG/XO1gg21zJ+xEyKPtW8bmWKsHcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWgXmsdnO57tpOUeQ7FhZeJGyy/MB8GA1UdIwQY MBaAFI4EW/7NK74k0z9TCdtHyKp3o7EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0Yzct ZDgwYjNjMWY5ZDczLzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0YzctZDgwYjNjMWY5ZDcz LzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf9qHY01 69EQ+szHoLvX6Promn3U1NLZWw/6uG2MTi4Ows/X3hFP0xPjVzbdOKWiIG/rE9WC SWSyv0Rl/OWsJZisH/NPHBJz5nsAXwCExcdFMWptTf0nctdWtcUPrO8NuWCAo3b4 tb/RFy2vWCPHvYravg5/0HwoVaqzVaDcZRcB5k06eTtbaYXE9MAQe+FOMTVacHoT nVjnVVJ0MHl5u7eMB+CDUYeOZ4OyzLQmdqYLu+iQr66jEJ1TnV0pQ7n8AAsBicQe dLpsE1FxCZt4YgEh8xIme+3iBqv2lhnVUC/ln5MvlfcEv4CQgdifANMU0Qc8khVX t4jBOjjUk+6WqA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:01:59 2025 by rpki-client