This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json) Hash identifier: Hutxm17yxT/HGCOWFpx+i3tXumdQCWr7HC2jpqL+qzk= Subject key identifier: 50:79:50:86:4E:71:ED:A8:15:40:43:07:B4:34:79:6B:13:ED:72:E5 Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Certificate serial: 019AF1D1FC88533FA7B08C0F1EA782E1E990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft Manifest number: 02B9 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=) 2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: i4cfSj4h5+Yu0n0SqGAXONI1jgz9ahe2e4bdBNfKQLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fc:88:53:3f:a7:b0:8c:0f:1e:a7:82:e1:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=507950864e71eda815404307b434796b13ed72e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:c7:b6:ba:4f:a4:52:e2:40:fd:92:7a:3f: 3e:70:f0:26:de:ef:30:67:63:94:57:6d:c7:5d:27: 1f:b1:58:01:fc:e4:70:a1:5d:50:7b:6f:c2:01:e7: 28:74:1c:d2:19:e2:87:1a:b9:37:05:71:da:f0:dd: 60:14:6b:d7:fb:1c:de:93:86:79:63:1e:ed:22:dc: 9f:04:3c:c3:63:a8:54:1f:8e:14:4c:ab:b9:35:29: 83:fa:e6:31:39:e9:37:04:d9:e3:0c:d9:e9:90:f7: 68:cd:bd:85:3e:1a:b2:58:2b:89:28:47:de:f0:eb: cf:e3:c4:04:ed:d0:14:7e:fc:e2:95:75:c5:ac:ad: af:0b:93:40:dc:81:83:ab:fa:6d:e1:69:4e:d8:59: d2:ae:95:1e:99:ae:3f:7c:17:02:aa:4c:31:3a:d7: a8:43:d2:b3:5a:e0:32:cf:0c:9a:72:3d:c9:fa:4d: cb:a9:c8:5b:c3:d6:cb:67:2b:d0:2a:15:6b:e1:ce: 95:3d:59:3d:26:22:d4:7f:1a:bd:7a:19:17:6c:7f: 37:59:85:78:9e:a8:b7:e8:f9:ad:4f:d1:ba:25:0d: 59:58:93:ab:ff:87:07:e9:06:16:d9:be:bd:02:dc: 31:8d:db:2c:1e:ca:4c:9c:1c:db:ff:f4:66:c8:89: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:79:50:86:4E:71:ED:A8:15:40:43:07:B4:34:79:6B:13:ED:72:E5 X509v3 Authority Key Identifier: keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3f:f9:06:68:be:89:5f:68:30:31:d1:79:4d:5c:d5:36:83: 2a:99:3b:c5:90:98:49:0b:7a:7e:11:80:d4:78:3f:13:b3:07: 83:24:31:08:6b:94:0a:0d:7b:ee:45:da:b5:2a:93:f0:21:99: 49:41:19:86:89:19:a9:ff:0a:7a:88:f8:66:14:bf:9d:f2:c9: 5c:ce:ad:f8:83:41:b7:4d:86:2c:9e:15:4f:02:91:84:be:b7: c3:97:e2:f3:42:45:85:01:02:d5:4c:94:a2:cb:bd:7a:7d:be: 0c:98:42:64:f8:fd:81:56:40:12:f6:46:eb:06:0d:74:5c:87: c0:bb:88:a7:f2:83:1a:76:14:58:da:e1:42:47:24:ea:26:66: 28:b9:db:cd:64:b1:61:e9:60:70:4c:48:02:6e:3c:08:1d:85: 82:e4:52:85:fa:38:2a:2f:a6:9b:c8:81:4a:5e:2b:4b:30:18: ec:49:cd:5f:a2:1a:a8:d9:e9:54:b3:18:86:7f:af:ec:7b:58: 30:9b:c1:cf:2e:6a:4b:3d:ea:95:3d:b1:61:ba:28:fa:3d:4b: 13:72:1e:a5:53:03:12:a5:97:c6:6a:a9:75:41:a3:db:c6:6f: 75:e7:a9:b5:5c:bf:46:98:9e:83:dd:fb:f6:e2:d5:7d:9e:7a: 5c:f9:00:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fyIUz+nsIwPHqeC4emQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjgyZmYzZWM3Y2I4MWI3OGU2MjhhNzM1MTc2NDhkNjIy OWNhYjcwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD Eyg1MDc5NTA4NjRlNzFlZGE4MTU0MDQzMDdiNDM0Nzk2YjEzZWQ3MmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08zHtrpPpFLiQP2Sej8+cPAm3u8w Z2OUV23HXScfsVgB/ORwoV1Qe2/CAecodBzSGeKHGrk3BXHa8N1gFGvX+xzek4Z5 Yx7tItyfBDzDY6hUH44UTKu5NSmD+uYxOek3BNnjDNnpkPdozb2FPhqyWCuJKEfe 8OvP48QE7dAUfvzilXXFrK2vC5NA3IGDq/pt4WlO2FnSrpUema4/fBcCqkwxOteo Q9KzWuAyzwyacj3J+k3Lqchbw9bLZyvQKhVr4c6VPVk9JiLUfxq9ehkXbH83WYV4 nqi36PmtT9G6JQ1ZWJOr/4cH6QYW2b69AtwxjdssHspMnBzb//RmyIl9cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFB5UIZOce2oFUBDB7Q0eWsT7XLlMB8GA1UdIwQY MBaAFIwoL/PsfLgbeOYopzUXZI1iKcq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUt NmNhM2U5ZDNlNzhkLzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUtNmNhM2U5ZDNlNzhk LzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez/5Bmi+ iV9oMDHReU1c1TaDKpk7xZCYSQt6fhGA1Hg/E7MHgyQxCGuUCg177kXatSqT8CGZ SUEZhokZqf8Keoj4ZhS/nfLJXM6t+INBt02GLJ4VTwKRhL63w5fi80JFhQEC1UyU osu9en2+DJhCZPj9gVZAEvZG6wYNdFyHwLuIp/KDGnYUWNrhQkck6iZmKLnbzWSx YelgcExIAm48CB2FguRShfo4Ki+mm8iBSl4rSzAY7EnNX6IaqNnpVLMYhn+v7HtY MJvBzy5qSz3qlT2xYboo+j1LE3IepVMDEqWXxmqpdUGj28ZvdeeptVy/Rpieg937 9uLVfZ56XPkAYw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:01 2025 by rpki-client