This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json) Hash identifier: CvWFPyfzswpcRy5oy/3kaNBAz1an2G+Nt1eUnLMPNkA= Subject key identifier: 90:27:E6:A8:FB:A0:12:CD:86:CF:E9:01:EF:21:28:82:5B:35:82:83 Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Certificate serial: 019B405B49275D0CF87102FCC302D84C2851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft Manifest number: 0201 Signing time: Sun 21 Dec 2025 10:01:22 +0000 Manifest this update: Sun 21 Dec 2025 10:01:22 +0000 Manifest next update: Mon 22 Dec 2025 10:01:22 +0000 Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: Llzg47qkBFbdPl8riHHYyyepmckveR9CHOK1oAqp+n8=) 2: METktZ2idAiZeDz9hpktU55-5Jw.roa (hash: nKbFLY3xUJE/BDnG472RqLje6LdE93p8++xFwpMJxhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:49:27:5d:0c:f8:71:02:fc:c3:02:d8:4c:28:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Validity Not Before: Dec 21 10:01:22 2025 GMT Not After : Dec 22 10:01:22 2025 GMT Subject: CN=9027e6a8fba012cd86cfe901ef2128825b358283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:77:cc:d9:18:b9:7d:7f:5f:1d:14:96:5e: cf:72:07:e9:5a:ec:c0:53:9f:21:17:93:f1:bc:9c: c9:12:d8:be:19:da:e6:80:86:3f:e1:57:56:fa:3e: ba:e1:bb:4a:d9:5a:d0:ac:97:88:58:3c:25:28:cc: ee:54:c0:a0:19:fd:4b:bc:84:8e:27:2c:c7:3d:14: 34:5e:c8:6b:19:f4:be:78:31:ac:57:5d:d4:76:d7: a5:db:cb:d2:da:12:ba:48:8c:f4:7f:70:33:e4:04: b9:8f:67:70:75:df:99:62:9d:91:b2:84:52:72:6e: d6:3c:62:88:6e:91:89:77:2c:d8:ca:00:aa:32:13: 59:68:74:a9:56:ae:79:4e:4e:e6:4c:7a:2a:b5:f1: c6:9d:12:1c:2d:1f:03:29:1e:f1:bf:2e:c0:fa:79: 0b:c3:4a:8c:cd:eb:c0:b4:e8:01:d4:7c:a5:f5:02: 15:cc:1b:23:60:0e:9a:42:ca:f3:e6:04:47:1b:f4: 04:04:b1:98:a3:66:cf:08:2d:05:4f:76:58:dd:a7: 98:71:8b:5e:7b:e3:f1:41:cd:e3:2c:a6:2c:d1:7b: d8:13:84:42:0f:9f:4a:3e:61:62:50:83:7e:c2:44: 4f:0c:a9:80:cf:04:26:65:12:5f:aa:35:61:4f:2e: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:27:E6:A8:FB:A0:12:CD:86:CF:E9:01:EF:21:28:82:5B:35:82:83 X509v3 Authority Key Identifier: keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c5:6d:ce:5e:35:85:54:71:72:04:95:92:ec:e3:2e:a0:95: 84:11:e3:9b:51:a7:d0:e5:11:a2:d6:ec:40:ec:63:d2:2a:c4: ef:a6:b4:43:d8:48:d3:81:6c:46:66:79:c3:e1:0d:ae:fe:00: 7f:c7:0e:39:fa:2d:30:14:97:15:9e:7f:08:2d:88:75:99:f6: 4d:00:fd:05:ea:04:99:5b:59:fe:d2:50:4d:1e:e5:67:2b:6a: 1f:62:f6:c9:bf:2e:82:2a:92:dc:6c:8c:15:b3:31:1e:51:db: 84:e5:82:ba:b6:cb:15:ee:7a:7a:76:12:e6:51:8f:04:e9:a5: d1:ec:69:b1:48:e4:85:67:28:89:da:68:da:cc:fd:cc:8c:aa: ea:de:fc:47:f0:71:3b:4c:5c:45:c6:8b:c4:e5:85:7c:77:5c: 84:54:88:a0:66:53:8f:ec:03:c5:9e:f2:22:25:2c:d8:1b:24: d2:e3:9f:92:ae:e3:63:76:dd:3d:be:a4:d1:56:bf:ba:59:b5: 79:ae:40:a3:ad:e6:1c:61:d1:c2:eb:bb:09:5f:14:2a:c1:b2: 7f:13:a9:f4:cb:17:23:5e:9d:e0:ed:89:0b:50:fe:75:14:ec: 39:99:dd:9c:1e:4c:97:0b:04:b2:00:02:da:76:30:8a:e6:1b: 6d:91:53:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW0knXQz4cQL8wwLYTChRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz Y2U1ZDIwHhcNMjUxMjIxMTAwMTIyWhcNMjUxMjIyMTAwMTIyWjAzMTEwLwYDVQQD Eyg5MDI3ZTZhOGZiYTAxMmNkODZjZmU5MDFlZjIxMjg4MjViMzU4MjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bp3zNkYuX1/Xx0Ull7PcgfpWuzA U58hF5PxvJzJEti+GdrmgIY/4VdW+j664btK2VrQrJeIWDwlKMzuVMCgGf1LvISO JyzHPRQ0XshrGfS+eDGsV13Udtel28vS2hK6SIz0f3Az5AS5j2dwdd+ZYp2RsoRS cm7WPGKIbpGJdyzYygCqMhNZaHSpVq55Tk7mTHoqtfHGnRIcLR8DKR7xvy7A+nkL w0qMzevAtOgB1Hyl9QIVzBsjYA6aQsrz5gRHG/QEBLGYo2bPCC0FT3ZY3aeYcYte e+PxQc3jLKYs0XvYE4RCD59KPmFiUIN+wkRPDKmAzwQmZRJfqjVhTy5a7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAn5qj7oBLNhs/pAe8hKIJbNYKDMB8GA1UdIwQY MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt MTliMTJhOTU1MDY1LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1 LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcVtzl41 hVRxcgSVkuzjLqCVhBHjm1Gn0OURotbsQOxj0irE76a0Q9hI04FsRmZ5w+ENrv4A f8cOOfotMBSXFZ5/CC2IdZn2TQD9BeoEmVtZ/tJQTR7lZytqH2L2yb8ugiqS3GyM FbMxHlHbhOWCurbLFe56enYS5lGPBOml0expsUjkhWcoidpo2sz9zIyq6t78R/Bx O0xcRcaLxOWFfHdchFSIoGZTj+wDxZ7yIiUs2Bsk0uOfkq7jY3bdPb6k0Va/ulm1 ea5Ao63mHGHRwuu7CV8UKsGyfxOp9MsXI16d4O2JC1D+dRTsOZndnB5MlwsEsgAC 2nYwiuYbbZFTmw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:32:07 2025 by rpki-client