This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json) Hash identifier: utS6H4W8JrcXnzDGd8AkbWfHaViKACXih4HrqtivOuY= Subject key identifier: C2:CC:BF:12:B0:3E:DD:FB:C7:47:93:8F:F7:5B:B8:77:56:33:92:19 Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Certificate serial: 019B24ACDDF1274DD15631D755520D0E38C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft Manifest number: 1176 Signing time: Tue 16 Dec 2025 01:01:07 +0000 Manifest this update: Tue 16 Dec 2025 01:01:07 +0000 Manifest next update: Wed 17 Dec 2025 01:01:07 +0000 Files and hashes: 1: 7IomEO57DDrl4ZBLVKDC6qP3KEE.roa (hash: AwCfU2h4jJPaAJIb84vSAgUR4ElWsWxd3ZUQNOuBkOc=) 2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: dNzmp6fOehYXxEFYA+88olZNQ560FDz3bAaiJ4M3kVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:dd:f1:27:4d:d1:56:31:d7:55:52:0d:0e:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Validity Not Before: Dec 16 01:01:07 2025 GMT Not After : Dec 17 01:01:07 2025 GMT Subject: CN=c2ccbf12b03eddfbc747938ff75bb87756339219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:e1:8e:c4:64:ea:fb:83:60:c1:8d:02:14: d8:73:a9:b7:ab:cc:4d:52:c2:c6:e4:6d:b4:8c:c0: ab:f6:aa:c4:87:c6:f2:8f:a1:85:90:80:2d:9d:99: cc:6b:48:1d:dd:37:ac:4e:47:10:84:78:bb:c1:fa: b8:e2:df:02:5f:83:38:52:7c:cc:7f:e0:ab:14:85: 1d:1b:53:5d:63:e5:42:ea:9e:e0:a8:cd:70:f2:35: 8e:b1:27:c6:29:34:bc:99:f2:0b:59:8e:e0:86:e9: ff:fe:c8:4b:78:b5:b4:b5:07:c6:76:ba:68:c7:24: 7d:58:8c:ae:22:03:fe:5f:2c:9e:69:d0:ea:3f:fc: 82:8e:f7:b7:1b:9c:17:d7:a2:c2:2d:46:a8:b1:ce: da:32:03:2f:20:75:78:5a:7b:08:b6:ef:d9:ad:ad: bc:ab:09:3a:65:0d:e9:b7:05:60:c0:80:34:45:ba: 9c:ea:3d:43:af:76:34:24:42:9e:35:9d:44:0e:d4: bb:82:09:76:ad:1c:bf:89:28:21:1a:5e:5c:15:5e: 15:a2:be:fb:5d:0f:51:ea:42:e5:c1:de:fa:4a:11: 04:d9:9d:99:cd:6a:69:99:79:f6:9e:f9:00:f1:58: 39:9c:23:00:8d:5f:1d:dc:19:f7:18:22:74:2a:32: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CC:BF:12:B0:3E:DD:FB:C7:47:93:8F:F7:5B:B8:77:56:33:92:19 X509v3 Authority Key Identifier: keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:82:86:5d:86:e4:0c:f7:39:21:a9:0b:6e:8d:83:b5:bb:7a: 87:e7:bc:d9:3a:79:af:d6:4a:33:fe:80:f2:4a:d7:dc:0f:0c: d3:ed:06:e9:08:81:dd:45:e8:7a:19:d0:02:f2:bd:41:05:f5: 39:9e:f1:64:55:33:71:9f:82:33:06:35:bc:66:70:5c:24:cf: 7f:ed:3f:bf:0b:11:e7:89:c4:44:e6:b9:38:68:fa:d0:40:a2: c9:17:d4:a0:ff:78:97:a6:59:e9:0a:62:70:6f:dd:92:a3:6c: 7d:94:bd:c8:70:5b:a8:24:19:b6:05:51:62:b9:02:b9:62:21: a2:7a:8e:b6:8b:4d:f8:62:54:c3:96:05:1b:8d:1d:4d:d6:4d: c9:ec:a9:ab:6c:54:a3:34:64:18:e2:ef:ee:05:5f:a4:14:97: 2b:c1:6f:d1:47:bb:8c:07:d2:d9:7c:2e:f4:b5:a0:11:a2:6d: 5e:61:4e:3d:d5:47:41:c2:a0:3c:1c:d8:a8:71:05:0e:95:40: 0b:f8:45:55:47:2d:a7:52:a5:0f:b2:2b:75:bc:e9:88:7f:2b: 3c:f9:a7:8c:4e:60:e2:ed:ec:01:c2:d9:06:2a:9c:c1:c3:7e: 9d:bd:fe:14:ff:4b:64:ba:bd:34:00:69:09:8d:da:62:1a:d7: d6:85:b2:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrN3xJ03RVjHXVVINDjjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNjkyZDI5YWMzMTJkMmFiNjA2MWU0NGE5ZGUwZWQzNzUx YWVhN2UwHhcNMjUxMjE2MDEwMTA3WhcNMjUxMjE3MDEwMTA3WjAzMTEwLwYDVQQD EyhjMmNjYmYxMmIwM2VkZGZiYzc0NzkzOGZmNzViYjg3NzU2MzM5MjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWDhjsRk6vuDYMGNAhTYc6m3q8xN UsLG5G20jMCr9qrEh8byj6GFkIAtnZnMa0gd3TesTkcQhHi7wfq44t8CX4M4UnzM f+CrFIUdG1NdY+VC6p7gqM1w8jWOsSfGKTS8mfILWY7ghun//shLeLW0tQfGdrpo xyR9WIyuIgP+XyyeadDqP/yCjve3G5wX16LCLUaosc7aMgMvIHV4WnsItu/Zra28 qwk6ZQ3ptwVgwIA0Rbqc6j1Dr3Y0JEKeNZ1EDtS7ggl2rRy/iSghGl5cFV4Vor77 XQ9R6kLlwd76ShEE2Z2ZzWppmXn2nvkA8Vg5nCMAjV8d3Bn3GCJ0KjKaZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLMvxKwPt37x0eTj/dbuHdWM5IZMB8GA1UdIwQY MBaAFIxpLSmsMS0qtgYeRKneDtN1Gup+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEt OTI2MmU1M2UxZDEwLzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEtOTI2MmU1M2UxZDEw LzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4KGXYbk DPc5IakLbo2Dtbt6h+e82Tp5r9ZKM/6A8krX3A8M0+0G6QiB3UXoehnQAvK9QQX1 OZ7xZFUzcZ+CMwY1vGZwXCTPf+0/vwsR54nEROa5OGj60ECiyRfUoP94l6ZZ6Qpi cG/dkqNsfZS9yHBbqCQZtgVRYrkCuWIhonqOtotN+GJUw5YFG40dTdZNyeypq2xU ozRkGOLv7gVfpBSXK8Fv0Ue7jAfS2Xwu9LWgEaJtXmFOPdVHQcKgPBzYqHEFDpVA C/hFVUctp1KlD7IrdbzpiH8rPPmnjE5g4u3sAcLZBiqcwcN+nb3+FP9LZLq9NABp CY3aYhrX1oWy1g== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:09 2025 by rpki-client