This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json) Hash identifier: +BgpsDXGe2VcTBEbTkJtMVoB1Q+ASCFy1gYk3CAUIXM= Subject key identifier: 11:E6:20:2E:89:A9:AC:38:82:BE:F1:D6:50:E9:55:1E:37:54:A7:E6 Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35 Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135 Certificate serial: 019B2B53B30B501412905F139CB80FBF24A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft Manifest number: 16A6 Signing time: Wed 17 Dec 2025 08:01:04 +0000 Manifest this update: Wed 17 Dec 2025 08:01:04 +0000 Manifest next update: Thu 18 Dec 2025 08:01:04 +0000 Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=) 2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: xI4CwQYB4dqcvPHZktxmwDtU6RTU+bq5+XWyuAhM1bM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:b3:0b:50:14:12:90:5f:13:9c:b8:0f:bf:24:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135 Validity Not Before: Dec 17 08:01:04 2025 GMT Not After : Dec 18 08:01:04 2025 GMT Subject: CN=11e6202e89a9ac3882bef1d650e9551e3754a7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:b7:9f:df:fe:65:b2:c5:ae:45:6a:2a:bf: 20:89:46:18:3f:c3:b4:88:2a:ea:ed:7f:9f:d8:07: ce:03:14:4e:29:f5:65:14:1f:8d:4d:54:17:cd:40: df:cd:5a:1a:d3:15:94:8a:33:c2:e3:a6:f3:01:8b: ae:b7:05:9d:1b:9e:2f:8e:a7:0b:eb:6e:a6:72:17: 6e:39:e6:69:a5:89:c1:a2:9f:c9:93:0b:8f:b1:40: 6c:36:9c:3b:b4:92:70:96:ee:1c:ea:3a:19:61:f1: a9:c2:2c:17:da:09:d2:85:6a:55:24:5c:d7:c3:37: b2:22:01:b2:c1:54:09:83:23:67:c9:d3:02:60:db: cb:0b:5c:eb:50:60:44:57:a5:2f:37:f6:75:5a:de: e8:d8:09:89:f1:33:24:c0:75:95:09:0e:be:f9:8e: 5c:33:93:50:d1:bf:6f:b4:8e:0c:b1:89:24:5a:e4: e4:4b:32:f2:0c:16:c2:5d:af:1b:44:70:10:a5:2e: ea:fb:44:0e:33:a2:67:78:db:9b:f1:c9:6f:d5:00: 48:72:6f:8b:16:64:9f:ff:35:73:96:ba:2b:33:69: 85:1f:ea:af:2c:1c:fe:9d:f2:3a:f2:0c:2b:ed:ff: b4:bc:0f:c5:e8:4b:02:2a:e0:94:0f:74:24:0d:8e: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:20:2E:89:A9:AC:38:82:BE:F1:D6:50:E9:55:1E:37:54:A7:E6 X509v3 Authority Key Identifier: keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:78:29:9b:0c:65:ea:e6:7d:52:93:2c:f4:a9:8d:4e:95:5a: a2:4d:c6:5b:40:51:48:d8:09:9d:d4:3a:17:be:1d:57:25:8a: ee:dd:ed:91:a4:96:d0:7c:a5:60:a8:a3:6e:d6:45:06:78:24: f6:b2:bf:d1:4f:a9:58:be:6c:48:a0:6b:c5:60:56:29:fd:dc: da:aa:ea:5e:6d:c3:f2:a9:0d:7b:52:38:18:90:04:c6:d2:62: dd:98:42:7b:9f:92:62:09:3f:8d:a4:ec:37:86:f7:5e:91:f3: 9d:7f:51:b7:e6:1e:2e:b9:f4:2a:34:77:b7:0d:a4:34:be:59: f5:42:8f:e3:d5:a0:64:ed:d0:76:12:a6:0d:81:cf:82:be:29: b6:12:47:4e:00:9b:da:2d:4e:24:5a:b9:4e:72:af:f9:ee:a4: 61:3a:dd:e0:6c:69:bf:98:77:6a:25:cc:92:0a:ad:54:33:e3: 3b:ee:3d:df:e1:ce:a7:f7:a5:36:9d:a3:aa:64:af:92:a7:3c: c8:a3:78:a8:91:91:71:12:a8:9b:e9:9e:44:83:95:ee:77:c3: 88:30:1f:75:15:7e:11:cf:88:00:d6:95:6b:c1:2d:b3:e2:07: 76:a0:8f:5c:7f:6d:50:1e:d8:f3:80:62:9f:d3:66:de:9e:f2: af:bf:4c:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU7MLUBQSkF8TnLgPvySjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGY1MDFiYmY5ZTEzY2RkMmViODk5ZDk3MTIxZjY2OWFh MjkxMzUwHhcNMjUxMjE3MDgwMTA0WhcNMjUxMjE4MDgwMTA0WjAzMTEwLwYDVQQD EygxMWU2MjAyZTg5YTlhYzM4ODJiZWYxZDY1MGU5NTUxZTM3NTRhN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaO3n9/+ZbLFrkVqKr8giUYYP8O0 iCrq7X+f2AfOAxROKfVlFB+NTVQXzUDfzVoa0xWUijPC46bzAYuutwWdG54vjqcL 626mchduOeZppYnBop/JkwuPsUBsNpw7tJJwlu4c6joZYfGpwiwX2gnShWpVJFzX wzeyIgGywVQJgyNnydMCYNvLC1zrUGBEV6UvN/Z1Wt7o2AmJ8TMkwHWVCQ6++Y5c M5NQ0b9vtI4MsYkkWuTkSzLyDBbCXa8bRHAQpS7q+0QOM6JneNub8clv1QBIcm+L FmSf/zVzlrorM2mFH+qvLBz+nfI68gwr7f+0vA/F6EsCKuCUD3QkDY6QqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHmIC6Jqaw4gr7x1lDpVR43VKfmMB8GA1UdIwQY MBaAFCaPUBu/nhPN0uuJnZcSH2aaopE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGIt Y2EwYzc3MmI3MjlmLzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGItY2EwYzc3MmI3Mjlm LzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHgpmwxl 6uZ9UpMs9KmNTpVaok3GW0BRSNgJndQ6F74dVyWK7t3tkaSW0HylYKijbtZFBngk 9rK/0U+pWL5sSKBrxWBWKf3c2qrqXm3D8qkNe1I4GJAExtJi3ZhCe5+SYgk/jaTs N4b3XpHznX9Rt+YeLrn0KjR3tw2kNL5Z9UKP49WgZO3QdhKmDYHPgr4pthJHTgCb 2i1OJFq5TnKv+e6kYTrd4Gxpv5h3aiXMkgqtVDPjO+493+HOp/elNp2jqmSvkqc8 yKN4qJGRcRKom+meRIOV7nfDiDAfdRV+Ec+IANaVa8Ets+IHdqCPXH9tUB7Y84Bi n9Nm3p7yr79MKg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:28:00 2025 by rpki-client