This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json) Hash identifier: 4abmmOzOBBlG9x85bcTIS1cCbR44ItLN9s+YckRdIcg= Subject key identifier: 7F:B5:DC:4A:C5:3F:BC:D8:BF:39:0C:BB:41:1F:E5:26:F0:89:31:21 Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd Certificate serial: 019AF208A578F2A8494344F8A93C14366D2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft Manifest number: 0C12 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: ByXM_Ln1i6sp51H3UoiAVLtk9H4.roa (hash: WkKv5GmFkjNS11QcfAX/i3RvuDqUCdANkXDcqukdiOw=) 2: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: fhWrZGN1grtBnRVkMTROCNiPActxZYN4exCdrXEkhwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a5:78:f2:a8:49:43:44:f8:a9:3c:14:36:6d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=7fb5dc4ac53fbcd8bf390cbb411fe526f0893121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:0c:f9:40:2e:8d:67:4d:66:6a:d8:2c:b4: 16:2f:51:e8:8b:e3:fa:ee:50:3a:f9:75:3e:7e:12: df:88:09:a9:7d:6e:c3:23:d0:52:d2:6e:26:fa:fe: 6f:70:dd:dc:b7:eb:b1:87:ca:56:0c:22:0a:09:32: 9a:60:ee:d7:54:bd:39:d0:95:ab:a7:ca:3d:7d:7c: 38:bc:8e:88:50:b3:7b:e9:44:b1:52:f1:67:c3:c3: 62:5f:68:1b:64:be:c4:e2:bd:36:9f:c5:71:96:d0: 3a:ff:35:7f:86:20:f8:a3:f2:28:f9:49:7c:93:dc: 25:cc:58:96:93:b5:f6:88:13:a7:29:8f:9a:7e:05: ff:32:c3:ce:11:81:63:67:8a:df:74:a5:05:56:36: 68:4c:4b:28:f2:18:05:2a:a9:8e:b6:f0:df:13:d0: 8a:d7:a4:86:dc:8d:4a:80:df:7f:7f:5f:e4:c0:d4: 2d:4b:fc:c9:60:4b:f3:a2:f7:11:33:af:6c:84:09: 34:2e:4a:ce:68:49:77:75:6d:5e:d2:10:bd:4e:4d: 0f:c3:41:00:0e:e4:33:c7:6a:0a:1f:e7:a7:d4:10: 01:e8:53:5b:69:64:5f:87:53:53:8f:52:12:a1:b8: 5a:bc:83:9b:5d:51:fb:1d:ae:e1:a9:87:6d:02:25: 6f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B5:DC:4A:C5:3F:BC:D8:BF:39:0C:BB:41:1F:E5:26:F0:89:31:21 X509v3 Authority Key Identifier: keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:91:d2:09:bf:2b:e7:f8:31:c6:b9:13:8d:09:b8:be:ae:23: 5b:c0:c9:b8:39:21:ad:da:2a:29:6e:36:0c:3b:db:81:d1:16: 1b:88:29:03:ff:57:db:c6:30:44:72:5c:99:4c:6f:30:93:39: 79:2a:2f:94:e5:b8:7c:d1:4b:15:29:ad:5b:f2:01:9e:ae:43: 98:ca:91:da:04:0c:5b:9b:d0:b9:79:a5:42:0a:54:8f:f9:ae: b3:33:e9:7f:1f:3a:88:b7:03:2c:ff:35:a5:ff:53:ea:05:7b: 52:86:46:4c:95:6b:71:01:2a:a0:30:a9:0d:d9:ba:f4:c0:f6: 23:ed:d7:6d:ee:02:e2:2d:65:37:78:b2:a3:f0:e5:ce:21:98: d7:ad:23:8f:8e:ff:c5:9c:8d:09:c7:b3:97:38:e7:7d:80:48: 3e:e3:c6:23:30:ed:b7:3f:cd:ab:e3:f2:3e:e3:c2:01:14:3a: df:28:b7:59:4e:1f:0b:1d:e5:f8:d1:10:a4:60:4c:7f:ce:40: 3e:97:d9:f3:99:d6:55:f8:42:56:2a:ef:d2:34:0d:a8:0c:6a: 4c:62:d1:96:d3:59:90:36:b5:21:6e:c9:08:07:29:c4:e8:1b: 36:f5:13:e4:c3:2d:d3:8c:2a:01:68:93:73:94:3c:9f:af:62: 57:47:10:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKV48qhJQ0T4qTwUNm0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDkwOWQ3M2EyNzk4ODNlMjU3MTExZTQ4NGU3ZjA3OGI1 ZWM4ZmQwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD Eyg3ZmI1ZGM0YWM1M2ZiY2Q4YmYzOTBjYmI0MTFmZTUyNmYwODkzMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVEM+UAujWdNZmrYLLQWL1Hoi+P6 7lA6+XU+fhLfiAmpfW7DI9BS0m4m+v5vcN3ct+uxh8pWDCIKCTKaYO7XVL050JWr p8o9fXw4vI6IULN76USxUvFnw8NiX2gbZL7E4r02n8VxltA6/zV/hiD4o/Io+Ul8 k9wlzFiWk7X2iBOnKY+afgX/MsPOEYFjZ4rfdKUFVjZoTEso8hgFKqmOtvDfE9CK 16SG3I1KgN9/f1/kwNQtS/zJYEvzovcRM69shAk0LkrOaEl3dW1e0hC9Tk0Pw0EA DuQzx2oKH+en1BAB6FNbaWRfh1NTj1ISobhavIObXVH7Ha7hqYdtAiVvtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+13ErFP7zYvzkMu0Ef5SbwiTEhMB8GA1UdIwQY MBaAFCYJCdc6J5iD4lcRHkhOfweLXsj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWIt NjU2MTMxN2NmMjYzLzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWItNjU2MTMxN2NmMjYz LzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZHSCb8r 5/gxxrkTjQm4vq4jW8DJuDkhrdoqKW42DDvbgdEWG4gpA/9X28YwRHJcmUxvMJM5 eSovlOW4fNFLFSmtW/IBnq5DmMqR2gQMW5vQuXmlQgpUj/muszPpfx86iLcDLP81 pf9T6gV7UoZGTJVrcQEqoDCpDdm69MD2I+3Xbe4C4i1lN3iyo/DlziGY160jj47/ xZyNCcezlzjnfYBIPuPGIzDttz/Nq+PyPuPCARQ63yi3WU4fCx3l+NEQpGBMf85A PpfZ85nWVfhCVirv0jQNqAxqTGLRltNZkDa1IW7JCAcpxOgbNvUT5MMt04wqAWiT c5Q8n69iV0cQyg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:15 2025 by rpki-client