This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json) Hash identifier: neW5U9vScSVQjgwEkkMkmANOfwWwZ4GwXk+4dIiTO38= Subject key identifier: D7:4D:4B:63:1F:BE:0B:B0:C3:C5:B5:60:D2:B3:65:2D:22:C2:07:42 Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada Certificate serial: 019B3268F0AA476472072C5FB0CB75CFBEEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft Manifest number: 1365 Signing time: Thu 18 Dec 2025 17:01:36 +0000 Manifest this update: Thu 18 Dec 2025 17:01:36 +0000 Manifest next update: Fri 19 Dec 2025 17:01:36 +0000 Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=) 2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: r7gWMWsrgh8xCkxDGfwJVbadu2719Xoho4x3OhbehRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:f0:aa:47:64:72:07:2c:5f:b0:cb:75:cf:be:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada Validity Not Before: Dec 18 17:01:36 2025 GMT Not After : Dec 19 17:01:36 2025 GMT Subject: CN=d74d4b631fbe0bb0c3c5b560d2b3652d22c20742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:54:a8:45:f7:62:df:55:cb:4c:aa:a2:30: 30:d7:92:00:f2:22:d5:86:03:69:c5:5a:b0:ac:d7: 86:eb:6b:8b:10:f8:cf:9d:6c:2c:f3:22:a7:0f:0f: 6f:ff:b8:13:02:38:9f:8e:9f:d1:8a:70:19:4d:e2: 4d:46:a7:26:33:60:ba:38:56:0a:79:7b:01:bd:de: 90:f4:02:97:b0:83:5e:e2:2b:2c:ac:2b:4b:a4:f4: 0d:54:0e:56:52:4b:ab:dd:ed:89:4a:2e:e3:8e:d4: 3a:e3:48:d9:2e:38:1a:2c:7f:02:46:12:39:80:68: 46:72:a2:5d:39:d2:e3:9f:65:91:00:0c:0b:41:00: d8:55:bd:29:db:8a:63:58:43:94:f8:c4:44:fb:84: c5:ea:e3:94:81:b0:19:e0:be:e2:9b:cc:b8:21:fc: 13:08:99:e5:d2:0f:cd:a7:af:61:20:7e:82:91:ca: 0a:19:4c:02:80:f9:3f:a8:0a:04:58:dd:5f:5d:17: 34:8f:4f:4f:21:41:0f:72:e3:a3:bf:18:0c:05:0c: 96:86:87:d4:97:af:33:b9:fa:22:4d:ca:d1:67:e0: 1a:54:13:15:b2:24:af:fd:c8:9d:4b:7b:67:de:4f: da:43:4b:2c:93:42:db:99:83:66:72:51:ab:e0:87: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4D:4B:63:1F:BE:0B:B0:C3:C5:B5:60:D2:B3:65:2D:22:C2:07:42 X509v3 Authority Key Identifier: keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6b:0d:5b:d4:ff:45:3f:6f:05:fc:6c:c3:7c:01:36:b2:c0: 8b:f1:21:ce:42:2d:36:ea:75:68:45:78:b1:6d:ae:b3:45:f6: c2:60:03:e1:ef:ad:45:3a:b4:ee:e4:b9:d2:3d:41:2b:84:5a: 29:b7:81:bd:da:56:6f:db:27:53:66:b1:a4:a5:88:09:82:99: e2:fb:eb:50:fc:22:db:a9:9f:cc:55:9f:60:f6:fc:e6:4f:6b: 71:2b:60:c7:bd:ad:c7:26:d9:f5:82:4f:8d:2e:19:e1:3c:0f: e8:8d:22:11:35:1e:0b:77:f6:03:ab:27:ae:48:9c:c2:84:28: 22:8e:ff:3c:cd:0f:92:a9:51:e5:60:49:c5:88:b1:eb:5a:c0: cc:0e:9d:7b:1c:4d:5c:0b:cc:de:6a:4b:16:09:9a:f6:67:0f: c0:59:c1:dd:3f:1b:94:a6:3c:ef:e1:4d:70:dd:fc:4e:05:65: 72:cb:0e:a5:8c:af:dc:03:eb:62:25:c2:e4:77:38:65:bb:2b: a1:57:ca:aa:12:18:ee:52:d4:74:ce:6f:94:3c:46:7d:dc:50: 7a:b1:31:8f:42:3b:54:2d:42:61:54:f0:aa:bb:5a:82:cc:a4: bb:f6:a1:8f:53:0c:e4:37:89:ec:de:90:0d:38:ea:d0:54:96: 60:fd:af:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaPCqR2RyByxfsMt1z77vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmIyOTgyYmJiZDQzOGI3YWIxYWMwNGUzNmMxODgwZjM4 YzZhZGEwHhcNMjUxMjE4MTcwMTM2WhcNMjUxMjE5MTcwMTM2WjAzMTEwLwYDVQQD EyhkNzRkNGI2MzFmYmUwYmIwYzNjNWI1NjBkMmIzNjUyZDIyYzIwNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYVUqEX3Yt9Vy0yqojAw15IA8iLV hgNpxVqwrNeG62uLEPjPnWws8yKnDw9v/7gTAjifjp/RinAZTeJNRqcmM2C6OFYK eXsBvd6Q9AKXsINe4issrCtLpPQNVA5WUkur3e2JSi7jjtQ640jZLjgaLH8CRhI5 gGhGcqJdOdLjn2WRAAwLQQDYVb0p24pjWEOU+MRE+4TF6uOUgbAZ4L7im8y4IfwT CJnl0g/Np69hIH6CkcoKGUwCgPk/qAoEWN1fXRc0j09PIUEPcuOjvxgMBQyWhofU l68zufoiTcrRZ+AaVBMVsiSv/cidS3tn3k/aQ0ssk0LbmYNmclGr4IfSOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdNS2Mfvguww8W1YNKzZS0iwgdCMB8GA1UdIwQY MBaAFI4rKYK7vUOLerGsBONsGIDzjGraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83MDNkZjItYjhiNC00OGY3LTkzMDEt ZGU4MWM3YzFlNzU0LzEvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83MDNkZjItYjhiNC00OGY3LTkzMDEtZGU4MWM3YzFlNzU0 LzEvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGsNW9T/ RT9vBfxsw3wBNrLAi/EhzkItNup1aEV4sW2us0X2wmAD4e+tRTq07uS50j1BK4Ra KbeBvdpWb9snU2axpKWICYKZ4vvrUPwi26mfzFWfYPb85k9rcStgx72txybZ9YJP jS4Z4TwP6I0iETUeC3f2A6snrkicwoQoIo7/PM0PkqlR5WBJxYix61rAzA6dexxN XAvM3mpLFgma9mcPwFnB3T8blKY87+FNcN38TgVlcssOpYyv3APrYiXC5Hc4Zbsr oVfKqhIY7lLUdM5vlDxGfdxQerExj0I7VC1CYVTwqrtagsyku/ahj1MM5DeJ7N6Q DTjq0FSWYP2vvg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:10:53 2025 by rpki-client