This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json) Hash identifier: i96wyWkLcyn0uNUCA/BtLufQcBymE5tpAPuq9CboS7U= Subject key identifier: A1:7D:2E:7D:60:42:CB:21:CA:5B:97:3C:8F:04:45:BA:C9:5A:2B:91 Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Certificate serial: 019AF2772E379618B16C83EC2F4C1F1B82AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: 7IomEO57DDrl4ZBLVKDC6qP3KEE.roa (hash: AwCfU2h4jJPaAJIb84vSAgUR4ElWsWxd3ZUQNOuBkOc=) 2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: CgSKkDrKRh1SdJ4iqoACFFnWfOtS4JZ83suLqCrfvks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2e:37:96:18:b1:6c:83:ec:2f:4c:1f:1b:82:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=a17d2e7d6042cb21ca5b973c8f0445bac95a2b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:a3:ef:76:0a:5e:1f:42:2d:77:9e:7d:e4: 79:e4:58:9f:43:d6:2e:44:7e:9e:41:d5:81:97:74: 8c:5d:04:72:13:ac:12:6b:45:30:d8:47:b3:4f:ed: 39:3e:73:81:7a:ba:fa:ba:47:7e:f0:ff:e1:82:2f: 3a:e8:74:91:ca:07:f4:fb:eb:4e:b2:53:6b:4f:44: db:3a:00:62:12:d1:1f:fd:11:2a:70:7b:3a:f6:e4: 46:7d:19:76:49:cb:a5:83:05:51:f4:64:00:ea:a0: 2e:a1:22:49:02:78:96:c5:ea:ef:2f:a4:e8:60:aa: ec:3e:85:6d:b2:da:ba:01:ef:32:6f:a2:f7:cc:0b: 5e:c5:91:76:5e:5f:8c:38:44:24:d2:25:e8:11:4b: 83:37:bf:e8:cb:d4:dc:0e:f2:d0:c0:f1:88:22:25: 94:6a:9d:5f:0b:df:1d:fa:f6:ad:ef:49:19:78:9d: 35:71:79:a7:e7:fd:a4:c8:d4:27:f7:13:45:35:e3: 97:82:fa:60:bd:4a:47:c0:d3:32:b2:9a:f8:05:4c: 55:f8:18:89:0f:8c:94:8d:30:31:cb:89:4a:4c:fd: c6:65:65:02:d8:ca:d6:0e:6a:89:73:7f:43:d6:0d: b4:7a:49:14:b7:6d:1d:f4:77:80:ee:d7:c3:56:df: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7D:2E:7D:60:42:CB:21:CA:5B:97:3C:8F:04:45:BA:C9:5A:2B:91 X509v3 Authority Key Identifier: keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d6:24:67:d5:a0:c8:e1:c5:4f:3d:36:6b:c3:44:d5:a4:f6: 9e:36:8a:b9:b1:24:78:d5:bb:8d:54:d9:97:45:87:80:1c:08: 5b:0e:47:7e:e6:e7:6f:0b:82:c4:b5:29:d2:02:a4:91:a4:02: c4:30:0f:84:de:46:bf:d0:8f:f0:3e:09:c1:a2:83:e9:88:6c: 8d:34:0c:6f:00:46:f1:e6:da:d1:95:20:3b:35:e2:6f:16:61: db:a5:19:49:ca:0c:eb:f1:48:78:71:07:10:2d:a6:86:a5:db: 00:78:eb:f4:6b:3e:7d:35:77:85:b1:bc:b3:13:37:3b:0d:20: f7:93:35:e9:5c:a1:7c:9f:68:fa:b6:c2:a2:b4:f5:6a:52:46: d0:0b:dd:a4:e8:bf:bd:74:c1:25:7c:26:de:8e:ab:77:0c:3a: 37:f0:bc:df:75:94:b4:38:94:ea:cc:e2:f4:7c:4f:b6:f7:a2: 8e:90:b0:f1:28:60:25:4c:32:2f:45:c1:b5:14:91:e5:2f:8a: 40:26:3c:a5:99:49:1e:07:c8:1b:72:24:e2:11:3d:d2:b4:84: e1:31:ff:05:17:e0:60:00:55:3d:c3:88:32:db:12:2b:1b:b3: 31:28:55:88:57:47:1d:4b:58:be:50:1a:8f:62:ee:68:07:60: 57:58:2e:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy43lhixbIPsL0wfG4KrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNjkyZDI5YWMzMTJkMmFiNjA2MWU0NGE5ZGUwZWQzNzUx YWVhN2UwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD EyhhMTdkMmU3ZDYwNDJjYjIxY2E1Yjk3M2M4ZjA0NDViYWM5NWEyYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ej73YKXh9CLXeefeR55FifQ9Yu RH6eQdWBl3SMXQRyE6wSa0Uw2EezT+05PnOBerr6ukd+8P/hgi866HSRygf0++tO slNrT0TbOgBiEtEf/REqcHs69uRGfRl2SculgwVR9GQA6qAuoSJJAniWxervL6To YKrsPoVtstq6Ae8yb6L3zAtexZF2Xl+MOEQk0iXoEUuDN7/oy9TcDvLQwPGIIiWU ap1fC98d+vat70kZeJ01cXmn5/2kyNQn9xNFNeOXgvpgvUpHwNMyspr4BUxV+BiJ D4yUjTAxy4lKTP3GZWUC2MrWDmqJc39D1g20ekkUt20d9HeA7tfDVt/3nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKF9Ln1gQsshyluXPI8ERbrJWiuRMB8GA1UdIwQY MBaAFIxpLSmsMS0qtgYeRKneDtN1Gup+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEt OTI2MmU1M2UxZDEwLzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEtOTI2MmU1M2UxZDEw LzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9YkZ9Wg yOHFTz02a8NE1aT2njaKubEkeNW7jVTZl0WHgBwIWw5HfubnbwuCxLUp0gKkkaQC xDAPhN5Gv9CP8D4JwaKD6YhsjTQMbwBG8eba0ZUgOzXibxZh26UZScoM6/FIeHEH EC2mhqXbAHjr9Gs+fTV3hbG8sxM3Ow0g95M16VyhfJ9o+rbCorT1alJG0AvdpOi/ vXTBJXwm3o6rdww6N/C833WUtDiU6szi9HxPtveijpCw8ShgJUwyL0XBtRSR5S+K QCY8pZlJHgfIG3Ik4hE90rSE4TH/BRfgYABVPcOIMtsSKxuzMShViFdHHUtYvlAa j2LuaAdgV1guDg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:53 2025 by rpki-client