This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft File: jXskLMdAYjU4IyQFjJHa_GOZACY.mft (raw, json) Hash identifier: A4LytSynWz343LILFmW7NE0J4Hs3L94dYM4cXxNrwOM= Subject key identifier: 0A:D5:6D:44:DA:12:28:23:01:60:63:83:7E:0D:49:22:CD:B9:06:F1 Authority key identifier: 8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26 Certificate issuer: /CN=8d7b242cc7406235382324058c91dafc63990026 Certificate serial: 019B239A5E818E5E77B0BA8EF46F4A2A130B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft Manifest number: 12 Signing time: Mon 15 Dec 2025 20:01:17 +0000 Manifest this update: Mon 15 Dec 2025 20:01:17 +0000 Manifest next update: Tue 16 Dec 2025 20:01:17 +0000 Files and hashes: 1: P0CumdZQgDSrrWlI0D1aYJJUcd0.asa (hash: BA2NFYuYvPxMigDBuhbLG4trF8mSaN77z6KytfnkVdg=) 2: jXskLMdAYjU4IyQFjJHa_GOZACY.crl (hash: oQ8GAxNKt9rIv4qI+E3ys4nDsaH79lauXr2ZJTUrOJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:5e:81:8e:5e:77:b0:ba:8e:f4:6f:4a:2a:13:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7b242cc7406235382324058c91dafc63990026 Validity Not Before: Dec 15 20:01:17 2025 GMT Not After : Dec 16 20:01:17 2025 GMT Subject: CN=0ad56d44da122823016063837e0d4922cdb906f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:75:d9:ec:e0:37:ce:7a:0d:c9:91:68:36: 3d:4c:02:9a:60:fe:30:b8:9f:e2:d4:28:9b:af:d5: 1f:fa:71:0c:94:8c:23:01:24:2d:0f:17:56:05:4a: 18:fb:b2:b3:f1:60:92:05:52:92:d7:33:bb:0c:49: 70:2b:54:ad:b1:ff:a4:53:8b:cf:82:c0:c1:ba:02: 46:f7:0a:b0:48:1d:a9:41:6d:de:e5:49:f1:7f:ba: cc:3f:a6:ff:8c:00:74:a9:37:fc:d2:8f:85:c2:8c: d7:51:ff:74:9e:2f:2e:5b:20:72:24:da:78:6e:55: 04:cd:81:26:b1:b1:9a:1b:30:e0:f9:75:92:13:58: 0b:de:4e:8a:3a:2d:b8:bd:fb:e8:2d:76:21:14:05: 8e:a5:f1:c4:a0:58:b9:56:b0:d0:79:72:e1:3a:e1: 1d:e3:ea:af:32:f0:45:5c:1c:0b:2d:f2:4e:1c:73: 43:41:cd:04:ff:f9:d6:ab:f1:4e:85:64:cf:58:ba: f2:e4:15:2e:a7:57:b6:dd:47:b2:db:77:d9:ab:4a: c7:70:a1:67:24:bc:ca:c3:5e:a8:ca:0f:a8:c4:20: 38:d9:ea:a9:da:a7:dd:e6:34:0b:05:3c:05:8e:61: 2c:f9:a8:c5:e0:7b:22:ab:d6:ce:c4:ad:1e:92:8e: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:6D:44:DA:12:28:23:01:60:63:83:7E:0D:49:22:CD:B9:06:F1 X509v3 Authority Key Identifier: keyid:8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3e:0b:6d:fa:62:d0:d6:6c:1b:c0:c8:2f:d4:86:09:d7:e8: fd:4f:9c:bb:94:cd:b4:2d:43:1f:75:ce:be:fb:29:24:a5:3f: 94:dc:19:28:15:a4:5c:42:c3:80:1d:a1:c4:03:f3:64:21:8e: f0:b6:42:40:fd:f7:a4:26:1b:0d:31:08:f1:82:61:0d:9b:30: 87:60:09:7e:e3:3c:0e:49:21:55:36:fc:2c:63:c9:b3:ef:b5: 14:da:a7:ad:e8:51:a9:fe:f8:61:08:a3:37:57:96:37:1a:1a: 25:24:75:c5:5e:34:47:e8:e4:c2:25:77:43:67:ee:1d:d8:68: da:33:d5:23:98:b3:24:75:de:c2:c6:d4:d0:66:f8:3a:a6:ea: 58:e4:95:30:53:ba:a6:8d:1b:99:11:3e:38:9a:18:bd:19:07: 89:9a:96:74:36:b9:37:ea:57:91:bc:6e:ec:bb:ab:3d:90:f0: 46:ec:68:dd:f0:26:1d:90:ee:aa:5a:9b:dd:52:2f:48:70:b2: 30:50:e1:f3:08:69:c5:1c:f8:ea:b2:4e:14:fb:56:4f:88:be: 75:4e:ef:35:78:44:f5:20:8d:2b:06:de:07:b3:75:88:5e:04: 26:4e:74:d6:54:45:46:68:1f:a0:aa:2c:a9:ae:1c:de:c3:51: 68:a2:40:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjml6Bjl53sLqO9G9KKhMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkN2IyNDJjYzc0MDYyMzUzODIzMjQwNThjOTFkYWZjNjM5 OTAwMjYwHhcNMjUxMjE1MjAwMTE3WhcNMjUxMjE2MjAwMTE3WjAzMTEwLwYDVQQD EygwYWQ1NmQ0NGRhMTIyODIzMDE2MDYzODM3ZTBkNDkyMmNkYjkwNmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzl12ezgN856DcmRaDY9TAKaYP4w uJ/i1Cibr9Uf+nEMlIwjASQtDxdWBUoY+7Kz8WCSBVKS1zO7DElwK1Stsf+kU4vP gsDBugJG9wqwSB2pQW3e5Unxf7rMP6b/jAB0qTf80o+FwozXUf90ni8uWyByJNp4 blUEzYEmsbGaGzDg+XWSE1gL3k6KOi24vfvoLXYhFAWOpfHEoFi5VrDQeXLhOuEd 4+qvMvBFXBwLLfJOHHNDQc0E//nWq/FOhWTPWLry5BUup1e23Uey23fZq0rHcKFn JLzKw16oyg+oxCA42eqp2qfd5jQLBTwFjmEs+ajF4Hsiq9bOxK0eko4aewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArVbUTaEigjAWBjg34NSSLNuQbxMB8GA1UdIwQY MBaAFI17JCzHQGI1OCMkBYyR2vxjmQAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xNzRiNDktNTBjYi00NzhmLThhNWMt NGMyMjAzNWI5MmYwLzEvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xNzRiNDktNTBjYi00NzhmLThhNWMtNGMyMjAzNWI5MmYw LzEvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej4Lbfpi 0NZsG8DIL9SGCdfo/U+cu5TNtC1DH3XOvvspJKU/lNwZKBWkXELDgB2hxAPzZCGO 8LZCQP33pCYbDTEI8YJhDZswh2AJfuM8DkkhVTb8LGPJs++1FNqnrehRqf74YQij N1eWNxoaJSR1xV40R+jkwiV3Q2fuHdho2jPVI5izJHXewsbU0Gb4OqbqWOSVMFO6 po0bmRE+OJoYvRkHiZqWdDa5N+pXkbxu7LurPZDwRuxo3fAmHZDuqlqb3VIvSHCy MFDh8whpxRz46rJOFPtWT4i+dU7vNXhE9SCNKwbeB7N1iF4EJk501lRFRmgfoKos qa4c3sNRaKJA+g== -----END CERTIFICATE-----Generated at Tue Dec 16 04:32:36 2025 by rpki-client