This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json) Hash identifier: Fvris1yqV4AZbASA71rR2WzGi+74dsL18Nu/fUaMTB8= Subject key identifier: 41:3D:23:1A:24:FB:1D:5F:A3:6A:F9:23:F7:B1:4E:14:81:58:A7:F8 Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e Certificate serial: 019AF5AEC443B4E04F0785FC6E471FDB96D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft Manifest number: 07D2 Signing time: Sat 06 Dec 2025 22:01:02 +0000 Manifest this update: Sat 06 Dec 2025 22:01:02 +0000 Manifest next update: Sun 07 Dec 2025 22:01:02 +0000 Files and hashes: 1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: vpGcq1hr60sKsmkckfK2zC7R8DE/aA28b0bmYUsHcWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c4:43:b4:e0:4f:07:85:fc:6e:47:1f:db:96:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e Validity Not Before: Dec 6 22:01:02 2025 GMT Not After : Dec 7 22:01:02 2025 GMT Subject: CN=413d231a24fb1d5fa36af923f7b14e148158a7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:38:e7:da:a7:28:a4:7d:c0:df:0b:e7:9b: 41:c1:16:ea:5c:09:e8:b1:b4:43:cb:77:39:8e:a6: 87:48:a6:b4:10:c8:71:18:3c:40:0d:81:d4:a7:61: 37:61:86:56:40:d2:38:8c:28:03:30:83:fd:60:01: 1d:fb:85:de:fb:3c:d0:8b:55:33:ee:34:61:d4:f1: 4c:d8:62:7e:0c:95:29:00:eb:bd:81:3a:4e:63:16: 31:f0:60:5e:52:0b:a3:0a:1f:3d:c0:f3:5e:48:d8: d6:60:d5:2c:d1:fc:df:4e:64:b1:55:fc:bb:d2:a6: 16:0d:23:51:c8:9c:a8:46:56:ba:b3:28:cb:3c:2e: ef:79:70:6e:41:c5:cf:fc:f6:fb:41:f0:7b:22:8b: 47:37:f3:5a:54:f0:a6:ad:f4:63:d4:cf:33:0c:17: e5:4a:c9:f7:21:0e:cf:73:e2:de:a3:b3:ec:d2:91: b0:fc:bc:dc:e3:94:e1:04:5f:20:9c:c9:3c:85:9e: 2d:2f:79:a1:a6:aa:32:9f:01:b4:00:a1:64:0a:40: b0:dc:83:b0:95:6a:c8:2b:c6:a5:a2:a6:ed:89:1a: 9c:cc:fe:93:ce:e6:14:1e:13:dc:32:48:e8:9e:c6: f6:95:1b:fd:4a:c2:cb:b2:17:70:21:11:9b:a9:e2: e5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3D:23:1A:24:FB:1D:5F:A3:6A:F9:23:F7:B1:4E:14:81:58:A7:F8 X509v3 Authority Key Identifier: keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:cf:f8:14:96:00:b0:63:30:9e:19:e1:c3:a7:e8:f0:23:f0: 54:0b:fe:91:b4:c6:82:d0:b2:e6:af:61:9d:45:32:20:a8:ee: 0f:c6:9e:67:69:ff:3d:58:e3:d8:7a:10:ba:ae:5f:a3:52:39: 27:4c:4f:b2:f3:da:5b:e3:e9:32:93:df:4b:90:f1:20:6b:ee: 02:a5:5d:01:44:6f:7c:03:76:2e:97:5a:8a:77:f1:be:43:c8: ae:e4:cc:a6:6b:cc:a5:a1:fc:db:da:a1:0e:60:84:3e:45:68: 5a:f6:aa:5f:a0:f5:96:cb:3d:81:17:f2:42:c7:a3:c2:e1:62: 21:b8:62:76:6d:b4:42:e7:16:53:1b:6d:a5:97:bf:8d:0c:1c: d6:bf:1a:8d:e2:41:b8:d2:f0:4d:9e:69:d8:13:62:32:00:c0: a7:ac:54:18:b0:97:0b:b0:66:45:f3:df:d0:b0:a1:3f:c6:d1: a4:48:50:a3:37:58:e8:a3:be:a2:18:a2:a8:d8:4c:f9:71:94: d3:0c:76:50:19:24:9a:dc:b2:ae:0b:97:ab:0c:2a:33:a6:4a: af:9f:84:7f:e2:61:9b:e4:6b:8e:4a:19:6a:52:22:e0:50:d1: ad:eb:fc:df:d0:88:2b:65:50:48:eb:0e:c0:9f:1f:d5:b6:10: b7:63:5b:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rsRDtOBPB4X8bkcf25bWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDFhZGI1OGU4M2NhZWU2NzVkY2Y3ODk1NGJhMDhhYTkz MDFhMGUwHhcNMjUxMjA2MjIwMTAyWhcNMjUxMjA3MjIwMTAyWjAzMTEwLwYDVQQD Eyg0MTNkMjMxYTI0ZmIxZDVmYTM2YWY5MjNmN2IxNGUxNDgxNThhN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Y459qnKKR9wN8L55tBwRbqXAno sbRDy3c5jqaHSKa0EMhxGDxADYHUp2E3YYZWQNI4jCgDMIP9YAEd+4Xe+zzQi1Uz 7jRh1PFM2GJ+DJUpAOu9gTpOYxYx8GBeUgujCh89wPNeSNjWYNUs0fzfTmSxVfy7 0qYWDSNRyJyoRla6syjLPC7veXBuQcXP/Pb7QfB7IotHN/NaVPCmrfRj1M8zDBfl Ssn3IQ7Pc+Leo7Ps0pGw/Lzc45ThBF8gnMk8hZ4tL3mhpqoynwG0AKFkCkCw3IOw lWrIK8aloqbtiRqczP6TzuYUHhPcMkjonsb2lRv9SsLLshdwIRGbqeLlaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE9Ixok+x1fo2r5I/exThSBWKf4MB8GA1UdIwQY MBaAFCYBrbWOg8ruZ13PeJVLoIqpMBoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQt MTUyOWFkYjBjOWQ3LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQtMTUyOWFkYjBjOWQ3 LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFs/4FJYA sGMwnhnhw6fo8CPwVAv+kbTGgtCy5q9hnUUyIKjuD8aeZ2n/PVjj2HoQuq5fo1I5 J0xPsvPaW+PpMpPfS5DxIGvuAqVdAURvfAN2LpdainfxvkPIruTMpmvMpaH829qh DmCEPkVoWvaqX6D1lss9gRfyQsejwuFiIbhidm20QucWUxttpZe/jQwc1r8ajeJB uNLwTZ5p2BNiMgDAp6xUGLCXC7BmRfPf0LChP8bRpEhQozdY6KO+ohiiqNhM+XGU 0wx2UBkkmtyyrguXqwwqM6ZKr5+Ef+Jhm+RrjkoZalIi4FDRrev839CIK2VQSOsO wJ8f1bYQt2Nbsw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:48 2025 by rpki-client