This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json) Hash identifier: Y0nUynxEtCbIFRtHd6zgPUTsWkZB9PgwnnG4lVSeA1Q= Subject key identifier: 46:30:20:9B:10:12:4C:09:7F:4D:D3:77:7D:27:B0:0A:9B:F1:B1:22 Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Certificate serial: 019AF31C2AB2913707F2F60D0F57D877D98F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=) 2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=) 3: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=) 4: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: 8eFkK5hJjtffeyw0fscxmAOpPXDqLnVyLi51zlm8RJ0=) 5: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2a:b2:91:37:07:f2:f6:0d:0f:57:d8:77:d9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=4630209b10124c097f4dd3777d27b00a9bf1b122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:d8:4d:4d:ef:8c:fd:ff:b0:1d:3a:6e:31: 23:85:76:7d:a0:ab:97:59:4e:ae:da:6a:98:57:71: 39:6f:d4:45:f9:29:2d:f4:80:79:3d:1d:97:12:83: c2:2a:f6:8b:c7:70:61:a8:12:18:3d:38:53:96:0c: 57:19:8e:da:0b:2d:44:8b:83:db:af:f5:be:9d:a5: 80:d3:31:36:ac:ca:7c:58:d9:b2:5e:c7:bf:6f:03: d5:f4:7b:ad:f3:73:de:a8:71:0d:c6:f7:0f:d5:23: e1:8b:aa:01:ca:cc:40:b8:c7:f1:36:3a:2b:49:45: 7e:0c:e9:c5:d7:65:a0:a2:b0:e5:4f:c4:c8:45:b7: c7:7a:8c:a0:64:d7:02:8d:87:60:28:44:87:a2:50: cb:33:c5:e2:f3:bb:71:d1:16:e1:05:44:a2:6a:b4: a6:1b:be:59:05:3d:d8:a7:cb:6b:6e:c7:1f:e0:c9: ac:c3:ce:03:75:23:dd:aa:e2:b4:10:44:05:33:dc: 40:0c:3c:7d:c3:63:21:0c:cd:4e:3a:62:27:69:96: 19:2e:85:37:cc:02:8d:ca:d3:97:45:1f:04:16:0d: c9:9f:dd:fb:29:f3:fc:d5:d7:62:d4:ce:0f:53:8b: eb:db:ba:7d:ff:8a:31:f7:fe:92:22:a3:88:2a:f5: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:30:20:9B:10:12:4C:09:7F:4D:D3:77:7D:27:B0:0A:9B:F1:B1:22 X509v3 Authority Key Identifier: keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:dc:6d:7b:7a:c2:ac:05:6e:d7:54:d2:80:f7:cc:b1:e7:e2: 00:46:8d:92:15:06:64:21:f5:59:55:50:26:70:31:96:99:d9: d4:86:c3:0a:08:87:ad:b7:88:8d:9b:71:29:1e:05:c9:9b:63: 7c:f5:38:14:26:b9:82:1e:e2:43:89:a4:c4:d3:3b:4b:3a:01: 50:f8:f4:d8:d4:0f:a8:f8:de:21:90:e0:64:5a:e0:e5:cc:39: 59:43:2d:0c:f1:27:26:3c:a4:d2:df:2f:d7:ff:d0:4e:08:2a: 09:d2:48:59:13:79:df:40:58:5d:e4:83:d5:18:6d:ce:85:b7: 54:06:06:03:5d:c2:9b:9d:cc:95:c3:89:d0:46:e4:13:ba:3c: a6:4e:33:b0:64:19:47:2b:a0:d3:55:69:91:4f:4f:ab:2e:07: 55:be:83:c1:88:f9:e5:2a:14:92:53:07:76:72:b2:c9:41:67: ac:8a:d7:a6:6b:70:4e:f1:ee:3c:3a:07:88:c7:08:3e:69:f8: cc:95:54:7d:e4:a8:bd:54:8f:d6:9f:54:4f:76:88:03:9f:e9: f2:a4:7a:7b:30:f3:99:49:4a:8b:85:91:66:80:6d:e3:0a:84: 4b:34:8a:11:c8:8e:12:76:05:59:56:ec:36:e7:65:71:b7:d9: a9:8d:f0:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCqykTcH8vYND1fYd9mPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx ZTI5YzQwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD Eyg0NjMwMjA5YjEwMTI0YzA5N2Y0ZGQzNzc3ZDI3YjAwYTliZjFiMTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbTYTU3vjP3/sB06bjEjhXZ9oKuX WU6u2mqYV3E5b9RF+Skt9IB5PR2XEoPCKvaLx3BhqBIYPThTlgxXGY7aCy1Ei4Pb r/W+naWA0zE2rMp8WNmyXse/bwPV9Hut83PeqHENxvcP1SPhi6oBysxAuMfxNjor SUV+DOnF12WgorDlT8TIRbfHeoygZNcCjYdgKESHolDLM8Xi87tx0RbhBUSiarSm G75ZBT3Yp8trbscf4Mmsw84DdSPdquK0EEQFM9xADDx9w2MhDM1OOmInaZYZLoU3 zAKNytOXRR8EFg3Jn937KfP81ddi1M4PU4vr27p9/4ox9/6SIqOIKvU4HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYwIJsQEkwJf03Td30nsAqb8bEiMB8GA1UdIwQY MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt Mzg2YzFmOGIwNjQwLzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9xte3rC rAVu11TSgPfMsefiAEaNkhUGZCH1WVVQJnAxlpnZ1IbDCgiHrbeIjZtxKR4FyZtj fPU4FCa5gh7iQ4mkxNM7SzoBUPj02NQPqPjeIZDgZFrg5cw5WUMtDPEnJjyk0t8v 1//QTggqCdJIWRN530BYXeSD1RhtzoW3VAYGA13Cm53MlcOJ0EbkE7o8pk4zsGQZ Ryug01VpkU9Pqy4HVb6DwYj55SoUklMHdnKyyUFnrIrXpmtwTvHuPDoHiMcIPmn4 zJVUfeSovVSP1p9UT3aIA5/p8qR6ezDzmUlKi4WRZoBt4wqESzSKEciOEnYFWVbs NudlcbfZqY3wzA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:56:24 2025 by rpki-client