This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json) Hash identifier: 1wetRNLwatfkYd+w8L71u1O/eIL/iudmzOAmubMJ8zg= Subject key identifier: 43:EC:48:68:A9:E1:68:80:BD:5A:1D:C8:3B:DE:20:9D:41:D8:5F:46 Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f Certificate serial: 019AF49C0F70D27D2D8455C3D8E4F3F9C720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft Manifest number: 06B1 Signing time: Sat 06 Dec 2025 17:00:59 +0000 Manifest this update: Sat 06 Dec 2025 17:00:59 +0000 Manifest next update: Sun 07 Dec 2025 17:00:59 +0000 Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=) 2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: IjirKGrU/RYkNl0BYY+8Lzq7CqNu2oVmdbozKtEnv1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:0f:70:d2:7d:2d:84:55:c3:d8:e4:f3:f9:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f Validity Not Before: Dec 6 17:00:59 2025 GMT Not After : Dec 7 17:00:59 2025 GMT Subject: CN=43ec4868a9e16880bd5a1dc83bde209d41d85f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:21:ce:a8:c9:c9:b3:4d:1f:45:29:f7:e0: 41:21:3a:05:29:f9:ac:ee:a0:fd:91:a3:11:b8:a8: 5f:6e:8e:58:81:97:35:a2:8d:7b:cd:bb:7c:54:fa: f1:2b:58:d2:19:ff:c0:fb:ee:0c:dc:31:45:b0:a6: 5d:23:cf:f2:c8:ae:e0:f3:09:2e:46:2f:5e:d5:29: 5f:52:3a:e3:59:41:6f:d8:b7:ed:f7:58:50:66:b7: de:3f:e8:4c:68:23:3d:93:68:07:50:42:94:b1:fb: 5d:90:12:38:38:77:64:c3:48:1d:52:37:6a:9c:ea: 8f:57:12:86:c9:71:a6:3b:52:f2:58:ca:e0:e8:4f: dd:a8:a0:3e:49:d1:c3:4b:0c:00:02:fd:dc:22:6f: 43:1e:73:fd:44:11:0a:35:cc:0c:21:f8:0f:48:81: ac:c0:39:24:ba:e2:89:13:fa:5b:8e:46:32:4c:f2: 11:bf:eb:1f:80:70:e8:bc:27:f2:21:0e:cc:5d:16: 56:91:7a:f8:22:e9:66:48:40:68:34:5b:93:60:76: 4c:34:1a:a1:53:c1:a1:02:a0:f4:9f:dd:94:03:27: 58:6a:5a:fb:01:e8:43:60:ef:6f:dc:b3:bb:a0:c4: 84:7b:c8:24:7f:63:be:f1:a2:28:b9:04:b9:cc:1a: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:48:68:A9:E1:68:80:BD:5A:1D:C8:3B:DE:20:9D:41:D8:5F:46 X509v3 Authority Key Identifier: keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7a:97:98:c5:6e:95:43:6c:b8:20:45:42:1d:e8:a6:a4:b7: f0:c0:58:82:4c:28:f2:4f:96:13:85:14:cd:44:70:e8:ed:a7: 8c:5c:6d:7d:87:7c:4e:d6:46:cf:09:75:20:5a:94:dc:6f:eb: 50:57:84:4b:8b:bd:d7:ae:ca:64:3e:76:6b:7c:9f:11:0c:fb: 4c:4d:62:9c:07:f0:0c:73:ee:93:5f:6b:e7:8c:b8:e2:cc:59: d9:37:d0:1a:dd:d1:b0:cd:59:f0:b8:bd:c9:00:1d:22:c4:aa: a6:07:76:5b:ea:ae:92:4c:89:d5:49:d0:f8:1b:29:3e:63:a1: 64:cf:5c:70:50:aa:cd:ae:a5:c0:85:8d:a8:a2:0e:e0:92:22: bc:a4:f2:fd:5f:7e:6c:cb:ff:fb:f6:d3:40:66:22:5d:8c:9e: 1a:82:65:7d:09:e9:f1:c9:3f:2c:4f:a9:a9:30:25:60:d0:d7: a7:d6:f9:1b:2e:94:bb:fc:3c:69:00:d9:e6:07:96:c2:bf:39: b7:85:6f:e7:ad:15:5e:6b:59:07:78:cb:e6:ac:f2:fe:b2:84: b5:e1:13:5a:54:83:f6:46:57:78:b0:bd:e4:d8:5c:62:07:2b: 5e:52:0c:4d:61:4c:ef:08:b3:20:b6:29:fb:22:f9:d7:a8:13: c3:2a:65:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nA9w0n0thFXD2OTz+ccgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGY2ODM4NjdlZjc2OWEwYTIyYWRlMTcxMThlZDA2ZmE1 N2I4MWYwHhcNMjUxMjA2MTcwMDU5WhcNMjUxMjA3MTcwMDU5WjAzMTEwLwYDVQQD Eyg0M2VjNDg2OGE5ZTE2ODgwYmQ1YTFkYzgzYmRlMjA5ZDQxZDg1ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9IhzqjJybNNH0Up9+BBIToFKfms 7qD9kaMRuKhfbo5YgZc1oo17zbt8VPrxK1jSGf/A++4M3DFFsKZdI8/yyK7g8wku Ri9e1SlfUjrjWUFv2Lft91hQZrfeP+hMaCM9k2gHUEKUsftdkBI4OHdkw0gdUjdq nOqPVxKGyXGmO1LyWMrg6E/dqKA+SdHDSwwAAv3cIm9DHnP9RBEKNcwMIfgPSIGs wDkkuuKJE/pbjkYyTPIRv+sfgHDovCfyIQ7MXRZWkXr4IulmSEBoNFuTYHZMNBqh U8GhAqD0n92UAydYalr7AehDYO9v3LO7oMSEe8gkf2O+8aIouQS5zBq8UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPsSGip4WiAvVodyDveIJ1B2F9GMB8GA1UdIwQY MBaAFI4PaDhn73aaCiKt4XEY7Qb6V7gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NmMwMDItNzU4Yi00OTVhLWI5Y2Qt N2IwZGMwMGE4YzIwLzEvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84NmMwMDItNzU4Yi00OTVhLWI5Y2QtN2IwZGMwMGE4YzIw LzEvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXqXmMVu lUNsuCBFQh3opqS38MBYgkwo8k+WE4UUzURw6O2njFxtfYd8TtZGzwl1IFqU3G/r UFeES4u9167KZD52a3yfEQz7TE1inAfwDHPuk19r54y44sxZ2TfQGt3RsM1Z8Li9 yQAdIsSqpgd2W+qukkyJ1UnQ+BspPmOhZM9ccFCqza6lwIWNqKIO4JIivKTy/V9+ bMv/+/bTQGYiXYyeGoJlfQnp8ck/LE+pqTAlYNDXp9b5Gy6Uu/w8aQDZ5geWwr85 t4Vv560VXmtZB3jL5qzy/rKEteETWlSD9kZXeLC95NhcYgcrXlIMTWFM7wizILYp +yL516gTwyplcA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:16:28 2025 by rpki-client