This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft File: jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json) Hash identifier: /xJt9FmjF6h8WmBn/wCtoQ3MI/+rzH9GTIN7FYfifws= Subject key identifier: F9:66:96:90:B9:E3:43:83:8F:BA:A5:AD:21:2F:BA:C0:AC:8E:E2:44 Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18 Certificate issuer: /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518 Certificate serial: 019B2B1CE93896ACAAA7262EC7824EFDD851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft Manifest number: 0F21 Signing time: Wed 17 Dec 2025 07:01:13 +0000 Manifest this update: Wed 17 Dec 2025 07:01:13 +0000 Manifest next update: Thu 18 Dec 2025 07:01:13 +0000 Files and hashes: 1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: uRZlTWzR+5qFngB8AgAKsHSXSJ4Gv0Y3X0IE842hftw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:e9:38:96:ac:aa:a7:26:2e:c7:82:4e:fd:d8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518 Validity Not Before: Dec 17 07:01:13 2025 GMT Not After : Dec 18 07:01:13 2025 GMT Subject: CN=f9669690b9e343838fbaa5ad212fbac0ac8ee244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:4f:23:04:2f:b0:e0:63:c6:52:45:1f:46: 5e:e3:63:a5:58:a9:d1:0f:a5:7f:81:49:e4:6f:0f: c0:d3:3c:1d:3a:90:83:bd:13:6f:72:fe:c2:9b:79: 59:2c:d4:76:78:ee:cb:42:90:db:1e:15:1f:c4:41: bf:2d:ad:dd:9d:14:8e:ce:49:cc:ce:df:c7:32:30: 6a:64:1b:0a:e0:3c:46:09:dd:e5:fc:16:ef:d9:5b: 7e:25:c9:87:86:d7:dc:f5:fa:5c:c5:bf:92:db:74: 94:a7:d4:7e:54:56:03:0d:80:40:d5:5e:ed:de:8c: f7:55:b5:79:2d:38:ea:c8:9d:94:cf:68:d2:62:cf: ba:b1:dd:33:23:dd:1d:c2:06:0f:f9:81:7f:0e:2c: 80:52:37:a2:af:ed:eb:f7:e8:3a:d2:7c:ad:3f:a3: 90:88:c6:0f:69:20:c3:b6:8a:e8:44:c6:98:0f:7f: 89:68:f1:f9:e3:89:0f:e1:92:ab:aa:dc:a1:2b:7a: 9e:a6:e2:ff:08:4d:a7:07:cc:2f:55:8a:8d:cf:75: 3e:00:8c:10:9f:21:45:b6:ee:c2:dc:64:c8:f7:72: 8e:2b:6d:36:78:5a:e2:12:b4:57:4c:a7:77:56:f7: 0d:8c:7f:69:09:be:0a:8a:5f:4a:16:ca:b1:8f:cd: 7d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:66:96:90:B9:E3:43:83:8F:BA:A5:AD:21:2F:BA:C0:AC:8E:E2:44 X509v3 Authority Key Identifier: keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:85:df:4c:72:18:f9:1c:d5:c4:f7:22:10:6a:b2:fb:b1:29: 50:ea:06:1e:59:44:ad:f8:38:5e:64:bd:9d:a8:4c:43:e9:c1: 0b:bc:e6:46:25:08:81:40:06:bc:b4:28:11:c1:73:32:cc:d5: 2e:22:e7:a7:99:64:b4:53:df:10:ee:1b:ec:47:37:40:03:55: 8a:44:88:79:80:ea:cc:e9:38:54:30:a6:48:13:96:c5:a4:cf: 84:47:fc:b0:4b:6d:9d:a0:40:66:6c:90:3f:d9:73:a3:bb:c4: 31:96:fa:e7:c4:fa:02:ad:a6:4f:cc:5b:1a:18:c2:17:2f:33: e2:b5:c3:42:f7:bb:48:a4:a0:51:eb:fd:f8:40:fc:77:56:c8: b8:7e:db:5b:b9:72:b0:f3:21:6d:79:0e:b3:c5:7a:ca:09:5d: d3:db:5c:db:33:79:17:46:9a:3a:ca:2b:ff:f9:3f:ca:f5:a6: 2a:bb:f1:48:f1:93:91:d0:bd:8d:6b:0c:99:d3:49:d1:44:b9: 52:e7:b8:83:3c:69:4c:55:3d:02:89:bd:09:bc:93:8c:e9:f0: c1:27:88:fe:1e:84:80:cd:eb:a8:38:5b:ca:51:e7:f7:1d:cd: 73:07:67:ce:02:eb:24:2b:94:b6:01:d5:0c:2e:8e:14:31:88: 03:8e:55:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHOk4lqyqpyYux4JO/dhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNmFjM2ZhYzQ1ZjA1ZDkwMjY4ODIzNzVmZTAyYjE1N2Q0 Yjc1MTgwHhcNMjUxMjE3MDcwMTEzWhcNMjUxMjE4MDcwMTEzWjAzMTEwLwYDVQQD EyhmOTY2OTY5MGI5ZTM0MzgzOGZiYWE1YWQyMTJmYmFjMGFjOGVlMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso5PIwQvsOBjxlJFH0Ze42OlWKnR D6V/gUnkbw/A0zwdOpCDvRNvcv7Cm3lZLNR2eO7LQpDbHhUfxEG/La3dnRSOzknM zt/HMjBqZBsK4DxGCd3l/Bbv2Vt+JcmHhtfc9fpcxb+S23SUp9R+VFYDDYBA1V7t 3oz3VbV5LTjqyJ2Uz2jSYs+6sd0zI90dwgYP+YF/DiyAUjeir+3r9+g60nytP6OQ iMYPaSDDtoroRMaYD3+JaPH544kP4ZKrqtyhK3qepuL/CE2nB8wvVYqNz3U+AIwQ nyFFtu7C3GTI93KOK202eFriErRXTKd3VvcNjH9pCb4Kil9KFsqxj819mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlmlpC540ODj7qlrSEvusCsjuJEMB8GA1UdIwQY MBaAFIxqw/rEXwXZAmiCN1/gKxV9S3UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgt ODIyMTBjYmY4NDQ4LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgtODIyMTBjYmY4NDQ4 LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIXfTHIY +RzVxPciEGqy+7EpUOoGHllErfg4XmS9nahMQ+nBC7zmRiUIgUAGvLQoEcFzMszV LiLnp5lktFPfEO4b7Ec3QANVikSIeYDqzOk4VDCmSBOWxaTPhEf8sEttnaBAZmyQ P9lzo7vEMZb658T6Aq2mT8xbGhjCFy8z4rXDQve7SKSgUev9+ED8d1bIuH7bW7ly sPMhbXkOs8V6ygld09tc2zN5F0aaOsor//k/yvWmKrvxSPGTkdC9jWsMmdNJ0US5 Uue4gzxpTFU9Aom9CbyTjOnwwSeI/h6EgM3rqDhbylHn9x3NcwdnzgLrJCuUtgHV DC6OFDGIA45VYA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:41 2025 by rpki-client