This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json) Hash identifier: +4eaFv7IxC/Z4+7Zq6nU9EC4/emhsCwicGNgxKiTT5A= Subject key identifier: 19:BF:CC:9A:77:7D:03:47:5B:A1:A9:5B:98:13:08:58:7F:EC:12:44 Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a Certificate serial: 019AF31CEA6CB07E259F14A8172EEEB2B9D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: jB1Yn7SF3inA3VSBwgpn5M+tNP6khQzs9bOUi4KZY+8=) 2: MmjfxuCzy8RCD_bS0dXma_I3fbg.roa (hash: C27+2sBRov0IsR0wlMJBAiFwS3ECbaTJJ5d3/PH1Lj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ea:6c:b0:7e:25:9f:14:a8:17:2e:ee:b2:b9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=19bfcc9a777d03475ba1a95b981308587fec1244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:49:d4:8f:15:38:d8:1a:f8:63:24:4b:e5:ad: d9:13:8b:37:a8:e8:f8:c8:4c:fd:18:9f:ac:89:66: 29:55:5a:2e:9a:32:2e:22:7a:b2:75:dd:4d:8c:fa: c0:55:a4:14:4b:15:79:0f:ba:d9:aa:98:de:51:60: 7b:59:63:e4:a0:e7:f9:57:be:9e:92:98:d8:2c:9c: 21:29:b4:e1:6d:ea:ba:6d:07:13:4c:30:fb:0b:2e: 58:d4:44:b0:36:44:01:a3:f6:c4:d3:90:90:bf:7a: fd:47:53:8d:64:00:71:d8:02:38:14:c7:8a:6c:64: b2:38:5a:f1:ee:99:29:19:d9:d7:ba:31:87:aa:05: 61:9a:99:91:11:85:d9:1b:06:87:d1:9e:a0:33:ec: eb:94:0b:6d:1a:2e:94:7e:f3:8b:2f:9d:4c:7b:2d: ae:b2:4a:57:ca:06:de:39:87:86:ad:87:f1:cb:47: f1:10:f6:3f:e1:5c:ff:a5:17:80:be:2c:37:3a:fe: fe:8f:29:03:ad:da:2a:35:35:b7:b2:be:c4:c3:6e: 3e:9e:98:2f:1b:8c:e3:2a:5c:f7:a3:d3:f9:c6:29: 54:1e:09:2c:bd:87:8f:57:8d:90:54:c5:08:c3:01: a1:ce:11:ee:06:55:6f:2c:bc:e9:25:a1:eb:73:8d: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BF:CC:9A:77:7D:03:47:5B:A1:A9:5B:98:13:08:58:7F:EC:12:44 X509v3 Authority Key Identifier: keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3c:b9:ea:06:ab:b3:97:c1:24:19:88:05:9b:a4:13:a2:77: 8c:9a:be:94:dd:e0:08:13:ad:ba:86:82:2a:f9:07:5f:ea:e3: 9f:54:a7:5b:a2:e6:6b:41:d9:8c:de:66:24:ac:a7:74:20:8b: eb:1e:fa:97:53:fa:13:03:ad:18:05:df:61:5b:84:ee:fb:25: 69:90:ae:71:1b:d7:f1:81:e1:08:6e:7b:3a:17:19:a6:c6:42: 53:a5:d8:9a:d6:81:db:b1:a2:66:ef:aa:2c:2a:6a:2a:7f:83: 23:07:ec:57:bd:42:15:0e:03:db:71:bc:37:dc:ab:62:25:73: 91:4a:7d:6f:ed:c9:90:54:06:1b:95:ca:5b:df:6a:b6:1d:d6: 6e:5e:71:a5:46:2b:e1:ea:58:e8:29:8b:1b:be:7e:34:56:e9: 11:6c:3d:43:81:a4:c1:f1:58:65:27:77:fa:87:55:38:74:98: 22:a2:85:58:57:f4:0e:3f:74:a0:fc:db:21:80:ef:73:42:dd: 96:6b:c9:d5:8d:c4:1a:89:e1:d0:22:98:fc:f7:1f:6e:f4:07: df:09:04:b8:ed:b9:4e:2d:5c:e3:55:0f:a5:a7:07:cb:49:ef: 1f:43:2e:19:0d:d6:5b:5f:f1:ac:25:25:99:f1:fd:9d:60:75: 2f:b9:c2:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOpssH4lnxSoFy7usrnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTFiNjU5ODYyZDE1YTUxY2I1ZmYzNGRlNzIyM2M2OWU0 ODEyNmEwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD EygxOWJmY2M5YTc3N2QwMzQ3NWJhMWE5NWI5ODEzMDg1ODdmZWMxMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UnUjxU42Br4YyRL5a3ZE4s3qOj4 yEz9GJ+siWYpVVoumjIuInqydd1NjPrAVaQUSxV5D7rZqpjeUWB7WWPkoOf5V76e kpjYLJwhKbThbeq6bQcTTDD7Cy5Y1ESwNkQBo/bE05CQv3r9R1ONZABx2AI4FMeK bGSyOFrx7pkpGdnXujGHqgVhmpmREYXZGwaH0Z6gM+zrlAttGi6UfvOLL51Mey2u skpXygbeOYeGrYfxy0fxEPY/4Vz/pReAviw3Ov7+jykDrdoqNTW3sr7Ew24+npgv G4zjKlz3o9P5xilUHgksvYePV42QVMUIwwGhzhHuBlVvLLzpJaHrc42p0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm/zJp3fQNHW6GpW5gTCFh/7BJEMB8GA1UdIwQY MBaAFCXhtlmGLRWlHLX/NN5yI8aeSBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAt ZTNjN2Q0ZTY1OThmLzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAtZTNjN2Q0ZTY1OThm LzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzy56gar s5fBJBmIBZukE6J3jJq+lN3gCBOtuoaCKvkHX+rjn1SnW6Lma0HZjN5mJKyndCCL 6x76l1P6EwOtGAXfYVuE7vslaZCucRvX8YHhCG57OhcZpsZCU6XYmtaB27GiZu+q LCpqKn+DIwfsV71CFQ4D23G8N9yrYiVzkUp9b+3JkFQGG5XKW99qth3Wbl5xpUYr 4epY6CmLG75+NFbpEWw9Q4GkwfFYZSd3+odVOHSYIqKFWFf0Dj90oPzbIYDvc0Ld lmvJ1Y3EGonh0CKY/PcfbvQH3wkEuO25Ti1c41UPpacHy0nvH0MuGQ3WW1/xrCUl mfH9nWB1L7nCGw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:05 2025 by rpki-client