This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json) Hash identifier: Nd0ZExG3GGXwuA2BMkJbx0ounnIc1akyWnYVnoXi8c4= Subject key identifier: 09:97:67:B7:02:81:5E:8F:07:F9:A5:FB:B2:70:9F:FB:E3:2E:0F:41 Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2 Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2 Certificate serial: 019AF540D022DE77889909D13043554A76CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft Manifest number: 1749 Signing time: Sat 06 Dec 2025 20:00:56 +0000 Manifest this update: Sat 06 Dec 2025 20:00:56 +0000 Manifest next update: Sun 07 Dec 2025 20:00:56 +0000 Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=) 2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: GiqO/pXxEbK+yTbYSfxTxcayvvxeM8fzz7WQ+UNgtL4=) 3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d0:22:de:77:88:99:09:d1:30:43:55:4a:76:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2 Validity Not Before: Dec 6 20:00:56 2025 GMT Not After : Dec 7 20:00:56 2025 GMT Subject: CN=099767b702815e8f07f9a5fbb2709ffbe32e0f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:5e:3a:24:4e:dc:a4:0e:14:74:d2:0a:bc: 4c:2d:8d:72:42:73:0e:02:ff:1d:4c:21:f1:2d:ac: c9:d4:12:74:84:2d:6c:80:22:61:82:dd:40:9e:ae: cd:3b:06:73:c5:54:d5:5b:29:2a:de:f8:f5:8f:b4: 79:5d:20:e6:4b:cd:46:bc:3b:f4:d0:5e:d9:cf:68: 78:3a:b0:59:4e:47:73:1d:29:7e:b6:26:8d:aa:2b: 1f:76:2c:71:6d:c3:d8:7a:0e:da:a5:b5:53:b3:e2: d4:23:d4:1e:62:b8:44:18:73:e7:ba:57:b0:55:b4: 88:4f:37:8b:cc:69:3d:45:97:0c:50:e2:87:d4:a6: 59:ed:66:79:ff:a7:d5:1b:ea:55:95:b8:5d:e7:67: 18:17:ed:e8:ec:35:fc:07:37:cd:d5:5f:4b:a5:11: 61:14:b9:5d:b9:71:13:b9:e7:fb:55:91:cc:b2:f3: fc:3f:50:25:8c:a2:c6:4b:cd:11:40:24:7a:bd:82: 7f:61:10:c9:10:02:0c:22:e8:2d:9e:3f:25:fa:9d: 84:80:db:f4:6d:7a:61:fa:5e:8a:c7:c5:f6:87:f1: 47:86:78:f0:a9:8e:14:f9:ee:e9:b0:58:2a:74:ce: 84:97:8c:4d:65:47:bb:e7:20:fb:ab:a0:e1:48:1b: 83:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:97:67:B7:02:81:5E:8F:07:F9:A5:FB:B2:70:9F:FB:E3:2E:0F:41 X509v3 Authority Key Identifier: keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ee:26:bb:5d:7d:8c:d7:7e:5a:14:dd:43:51:0b:12:eb:fc: e5:35:b5:f6:ff:10:3c:67:49:de:10:7e:e4:38:c4:78:08:f6: 43:f0:6c:36:56:88:64:37:81:7c:0d:c1:dc:ad:17:da:62:ef: 8b:93:b0:b2:cb:28:8e:39:61:19:67:9c:d9:16:d4:90:c4:c5: 38:fd:34:65:73:78:2e:f6:26:3d:4d:d6:6c:26:21:a3:b9:66: f6:8f:9d:5f:15:44:43:3b:22:d5:14:9f:b7:bc:a8:15:7f:47: ff:63:1d:08:e0:91:8c:d0:90:b2:35:2d:c7:0c:73:d6:3c:b2: d1:ef:c3:54:d1:bf:8c:09:68:ab:ed:05:a0:0a:de:e6:59:6d: 38:59:fd:25:4c:1c:56:f1:ba:b4:dd:44:e7:01:49:c5:20:a6: 70:e8:e1:ef:c0:3f:58:37:f9:c4:38:ad:82:75:cf:85:be:e9: 7f:6e:2c:dc:aa:f5:2f:59:b5:9d:d7:58:17:97:82:e6:ce:4d: eb:ac:9f:b1:ef:20:41:e2:fa:c2:be:ce:da:c7:70:20:e9:1a: e2:b0:22:c6:44:08:dd:58:48:ad:f2:07:b5:1d:f4:81:2f:78: 54:77:ec:8f:5e:a2:11:d1:e4:93:4a:48:33:4b:69:49:11:25: 1d:8b:de:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNAi3neImQnRMENVSnbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjOTZjNjZhZjMzMWM5ODViODU5ZDQwM2IzNjk3NGMwNjMy ZTFlZjIwHhcNMjUxMjA2MjAwMDU2WhcNMjUxMjA3MjAwMDU2WjAzMTEwLwYDVQQD EygwOTk3NjdiNzAyODE1ZThmMDdmOWE1ZmJiMjcwOWZmYmUzMmUwZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx1eOiRO3KQOFHTSCrxMLY1yQnMO Av8dTCHxLazJ1BJ0hC1sgCJhgt1Anq7NOwZzxVTVWykq3vj1j7R5XSDmS81GvDv0 0F7Zz2h4OrBZTkdzHSl+tiaNqisfdixxbcPYeg7apbVTs+LUI9QeYrhEGHPnulew VbSITzeLzGk9RZcMUOKH1KZZ7WZ5/6fVG+pVlbhd52cYF+3o7DX8BzfN1V9LpRFh FLlduXETuef7VZHMsvP8P1AljKLGS80RQCR6vYJ/YRDJEAIMIugtnj8l+p2EgNv0 bXph+l6Kx8X2h/FHhnjwqY4U+e7psFgqdM6El4xNZUe75yD7q6DhSBuDBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmXZ7cCgV6PB/ml+7Jwn/vjLg9BMB8GA1UdIwQY MBaAFIyWxmrzMcmFuFnUA7NpdMBjLh7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgt ODNhNDQzMTBhOTY0LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgtODNhNDQzMTBhOTY0 LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe4mu119 jNd+WhTdQ1ELEuv85TW19v8QPGdJ3hB+5DjEeAj2Q/BsNlaIZDeBfA3B3K0X2mLv i5OwsssojjlhGWec2RbUkMTFOP00ZXN4LvYmPU3WbCYho7lm9o+dXxVEQzsi1RSf t7yoFX9H/2MdCOCRjNCQsjUtxwxz1jyy0e/DVNG/jAloq+0FoAre5lltOFn9JUwc VvG6tN1E5wFJxSCmcOjh78A/WDf5xDitgnXPhb7pf24s3Kr1L1m1nddYF5eC5s5N 66yfse8gQeL6wr7O2sdwIOka4rAixkQI3VhIrfIHtR30gS94VHfsj16iEdHkk0pI M0tpSRElHYvegw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:53 2025 by rpki-client