This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft File: jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json) Hash identifier: ALhF2Ru8XorFvMpKaikoHaXi8RvAFeXAPVxMJ51MU9E= Subject key identifier: 03:B4:B7:C4:A0:47:7C:40:A3:77:65:6A:00:F1:A0:38:22:52:7C:4C Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c Certificate serial: 019AF1D19B1CC5554A77061B15BFCEE89D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft Manifest number: 1417 Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=) 2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: asYPgbEQEQQ/gs2uR8ZiWeZhwis/r56Co4Y8gOD8nvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9b:1c:c5:55:4a:77:06:1b:15:bf:ce:e8:9d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=03b4b7c4a0477c40a377656a00f1a03822527c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:4d:09:78:de:2d:5f:84:c7:c2:c0:65:1a: 03:75:8a:52:25:53:90:c6:0f:7e:94:65:0b:3f:b6: 48:de:b2:19:93:92:68:b1:23:56:ba:ec:d8:3d:54: 89:85:60:ee:7a:af:64:c5:7e:c1:10:64:0b:c0:9f: 2b:2b:a1:cf:68:dd:97:50:b0:62:d6:4a:b2:51:6e: 8c:57:4e:47:be:05:54:03:98:06:e2:da:bc:0c:57: 28:0b:81:08:b7:c8:bf:e5:84:a5:ac:5d:18:bf:76: bc:89:36:dd:0f:b5:0c:29:2d:93:3e:34:00:87:6c: 17:85:34:68:c3:86:fd:c8:0b:3e:38:39:a5:5d:a5: 45:9a:b8:dc:ff:fa:d9:37:17:c6:87:ee:83:e0:c8: 75:b8:b4:90:e0:89:e2:8a:fc:d3:fc:ad:d9:5e:03: 8a:66:8f:67:21:b9:df:e4:c0:3a:c4:8b:dc:b5:5e: fc:81:01:a1:a8:23:f8:f7:94:69:69:34:dd:8b:96: 5c:1d:39:32:26:82:5b:a3:5d:f9:01:ee:5b:0c:2e: e7:8e:18:cc:31:46:e5:41:ce:a3:bc:01:39:cd:6f: 58:b9:7a:9e:89:f9:4a:95:bd:d4:87:1f:b4:3d:59: 09:87:5d:47:a9:72:d2:95:04:3f:a0:1e:e3:bd:45: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B4:B7:C4:A0:47:7C:40:A3:77:65:6A:00:F1:A0:38:22:52:7C:4C X509v3 Authority Key Identifier: keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3e:8d:e0:06:e9:19:3b:6b:90:75:5f:df:92:a9:87:44:bc: 57:34:34:12:e9:b3:e8:33:56:f1:09:43:bf:4d:bc:bc:cb:50: fe:cb:d1:e7:a8:7f:2d:ff:a1:0d:15:01:b3:9b:a6:f5:51:32: 2e:29:15:d9:3f:1f:78:e9:ec:46:c4:73:eb:a7:f4:fd:bf:27: df:7e:5b:0d:1a:2e:79:93:48:7b:aa:3e:8c:10:61:48:30:07: 0a:88:08:6c:9c:61:1c:71:e9:60:b6:8a:3d:c6:fa:e4:5d:84: 58:99:de:75:80:07:10:09:79:8f:91:ab:5e:16:25:07:76:e4: 7c:75:48:e4:47:bd:07:5f:90:94:96:50:d7:8e:72:30:a6:5a: 5d:e4:9e:93:78:c9:6a:84:4d:3c:31:e0:d4:e8:61:b2:25:bb: 0a:ff:29:1c:60:c6:4f:ed:c7:98:39:88:1a:33:7f:37:9f:b6: 93:07:dc:53:57:e9:b6:c0:cc:71:94:b8:7b:de:ea:b4:2d:9e: e3:b1:5a:84:fd:de:af:e5:ca:8e:a3:97:03:a0:69:10:c2:83: 4c:21:f5:52:c9:95:ec:00:eb:42:70:4a:fa:9d:7b:ab:7f:24: b4:50:3e:54:cf:d2:1f:49:d4:a7:d0:ad:24:04:d4:16:b4:c1: af:c8:4b:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZscxVVKdwYbFb/O6J02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMDQ1YmZlY2QyYmJlMjRkMzNmNTMwOWRiNDdjOGFhNzdh M2IxMGMwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EygwM2I0YjdjNGEwNDc3YzQwYTM3NzY1NmEwMGYxYTAzODIyNTI3YzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9RNCXjeLV+Ex8LAZRoDdYpSJVOQ xg9+lGULP7ZI3rIZk5JosSNWuuzYPVSJhWDueq9kxX7BEGQLwJ8rK6HPaN2XULBi 1kqyUW6MV05HvgVUA5gG4tq8DFcoC4EIt8i/5YSlrF0Yv3a8iTbdD7UMKS2TPjQA h2wXhTRow4b9yAs+ODmlXaVFmrjc//rZNxfGh+6D4Mh1uLSQ4IniivzT/K3ZXgOK Zo9nIbnf5MA6xIvctV78gQGhqCP495RpaTTdi5ZcHTkyJoJbo135Ae5bDC7njhjM MUblQc6jvAE5zW9YuXqeiflKlb3Uhx+0PVkJh11HqXLSlQQ/oB7jvUWybQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO0t8SgR3xAo3dlagDxoDgiUnxMMB8GA1UdIwQY MBaAFI4EW/7NK74k0z9TCdtHyKp3o7EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0Yzct ZDgwYjNjMWY5ZDczLzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0YzctZDgwYjNjMWY5ZDcz LzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz6N4Abp GTtrkHVf35Kph0S8VzQ0Eumz6DNW8QlDv028vMtQ/svR56h/Lf+hDRUBs5um9VEy LikV2T8feOnsRsRz66f0/b8n335bDRoueZNIe6o+jBBhSDAHCogIbJxhHHHpYLaK Pcb65F2EWJnedYAHEAl5j5GrXhYlB3bkfHVI5Ee9B1+QlJZQ145yMKZaXeSek3jJ aoRNPDHg1OhhsiW7Cv8pHGDGT+3HmDmIGjN/N5+2kwfcU1fptsDMcZS4e97qtC2e 47FahP3er+XKjqOXA6BpEMKDTCH1UsmV7ADrQnBK+p17q38ktFA+VM/SH0nUp9Ct JATUFrTBr8hLZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:08 2025 by rpki-client