This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json) Hash identifier: o4UNcULhWZtUo6I6ewD1LAQKHC04PJswlLPoocXPdao= Subject key identifier: 3C:EF:57:21:ED:6A:13:D2:DE:09:BD:DF:F7:BB:14:F4:9F:50:B9:F2 Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Certificate serial: 019B378F1D3B064FD4DD6EC01BEFC296E499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 17:01:24 +0000 Manifest this update: Fri 19 Dec 2025 17:01:24 +0000 Manifest next update: Sat 20 Dec 2025 17:01:24 +0000 Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=) 2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: YUb29VZ21RKkT1OLtLEKUocyYxvpS7CuTYnY75uOZMo=) 3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:1d:3b:06:4f:d4:dd:6e:c0:1b:ef:c2:96:e4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Validity Not Before: Dec 19 17:01:24 2025 GMT Not After : Dec 20 17:01:24 2025 GMT Subject: CN=3cef5721ed6a13d2de09bddff7bb14f49f50b9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:32:4c:bc:05:d9:da:04:b1:c6:0d:fb:ba: ec:3c:fc:a6:33:36:13:bc:78:ba:7e:0d:35:3b:d1: e9:a3:68:72:3a:9c:c4:ec:e3:9d:28:02:6c:b8:b8: 22:25:3d:20:12:46:2c:18:8c:98:cb:7a:cd:0a:c4: 08:aa:2c:98:87:58:cd:74:46:9f:0e:07:46:ac:39: 76:7f:ad:73:71:12:87:6e:4f:23:9d:0f:68:3f:55: da:cb:1c:1f:d6:bb:99:15:9a:64:dc:28:eb:95:12: 1b:5d:2a:c6:a3:a9:b9:5a:e1:da:e5:a5:11:4c:ea: fd:3a:66:6a:4b:69:df:72:28:dc:b5:78:1a:6b:4c: 1e:30:9f:cb:0d:77:b2:3d:33:9e:28:8c:1c:a6:41: 34:87:a8:a1:4c:f6:26:e6:a0:f5:30:73:ad:6c:8a: fb:ae:d0:ff:92:1f:a5:5f:aa:a3:eb:d2:91:8e:1a: f8:91:a4:56:06:4a:bf:39:04:b6:8c:95:80:e6:6e: 06:38:8b:99:2a:52:c0:d0:2d:cd:7a:3f:66:91:7f: 21:b8:34:43:ed:60:18:c6:aa:f3:eb:76:32:5b:6e: aa:84:be:04:1d:43:2c:4e:f6:e3:67:15:37:8e:86: 8a:15:f4:a5:ba:1c:cf:eb:87:b3:bb:5f:06:57:e6: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:57:21:ED:6A:13:D2:DE:09:BD:DF:F7:BB:14:F4:9F:50:B9:F2 X509v3 Authority Key Identifier: keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:76:3c:f9:c3:5f:8f:7e:39:c8:7b:32:a9:bf:4b:84:c4:79: 68:30:47:e9:64:d9:93:96:e3:83:70:03:67:41:be:42:51:0f: 07:24:08:46:b3:6c:fd:9a:2c:2e:c4:6c:49:73:35:72:73:17: e8:b3:3c:71:37:b6:e2:dc:e4:55:e1:82:19:21:f7:08:73:d8: 02:83:5c:d2:a8:2d:4c:7b:c9:10:83:1c:be:b8:14:d8:f2:9f: b5:f2:b3:b7:59:d8:f5:5f:b1:87:4b:7e:9e:10:c6:31:4a:15: f0:6b:4d:4a:aa:76:28:2d:2e:af:68:16:84:e5:27:aa:8e:7a: 1b:6f:bc:1d:09:9a:36:8c:bb:f0:99:26:1b:e0:d8:31:6a:0e: 40:25:95:ea:31:95:74:f6:55:bf:1f:8f:70:09:da:7a:7d:c1: 27:ed:4b:91:59:76:09:34:8d:a6:a6:dd:2f:0e:9a:ef:f3:17: 8f:54:da:a6:ed:ca:84:cd:eb:91:c7:dc:46:b8:7d:36:55:3c: c1:92:a7:f1:57:45:bb:ee:50:25:17:30:80:a2:18:96:0f:6b: 28:ca:5c:de:5a:2f:9d:73:f7:51:a0:9f:2c:43:ce:44:10:f2: f6:aa:5a:8f:ae:fc:fa:50:82:22:5b:95:10:dd:e1:12:80:85: 6e:3e:f6:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jx07Bk/U3W7AG+/CluSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODFiN2I0YWUzZTc1ZGM0YjM2Y2ZmMjkzNzkyM2VjZGZm NzI1OWIwHhcNMjUxMjE5MTcwMTI0WhcNMjUxMjIwMTcwMTI0WjAzMTEwLwYDVQQD EygzY2VmNTcyMWVkNmExM2QyZGUwOWJkZGZmN2JiMTRmNDlmNTBiOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqkyTLwF2doEscYN+7rsPPymMzYT vHi6fg01O9Hpo2hyOpzE7OOdKAJsuLgiJT0gEkYsGIyYy3rNCsQIqiyYh1jNdEaf DgdGrDl2f61zcRKHbk8jnQ9oP1Xayxwf1ruZFZpk3CjrlRIbXSrGo6m5WuHa5aUR TOr9OmZqS2nfcijctXgaa0weMJ/LDXeyPTOeKIwcpkE0h6ihTPYm5qD1MHOtbIr7 rtD/kh+lX6qj69KRjhr4kaRWBkq/OQS2jJWA5m4GOIuZKlLA0C3Nej9mkX8huDRD 7WAYxqrz63YyW26qhL4EHUMsTvbjZxU3joaKFfSluhzP64ezu18GV+bGEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzvVyHtahPS3gm93/e7FPSfULnyMB8GA1UdIwQY MBaAFCaBt7SuPnXcSzbP8pN5I+zf9yWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEt ZmM4MzliYjZkMTczLzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEtZmM4MzliYjZkMTcz LzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHY8+cNf j345yHsyqb9LhMR5aDBH6WTZk5bjg3ADZ0G+QlEPByQIRrNs/ZosLsRsSXM1cnMX 6LM8cTe24tzkVeGCGSH3CHPYAoNc0qgtTHvJEIMcvrgU2PKftfKzt1nY9V+xh0t+ nhDGMUoV8GtNSqp2KC0ur2gWhOUnqo56G2+8HQmaNoy78JkmG+DYMWoOQCWV6jGV dPZVvx+PcAnaen3BJ+1LkVl2CTSNpqbdLw6a7/MXj1Tapu3KhM3rkcfcRrh9NlU8 wZKn8VdFu+5QJRcwgKIYlg9rKMpc3lovnXP3UaCfLEPORBDy9qpaj678+lCCIluV EN3hEoCFbj72Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:45 2025 by rpki-client