This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json) Hash identifier: 1oD9xuJifEcLSG8+em9u/AqETNwgZ361oSV9m8HYi2I= Subject key identifier: F3:6E:21:FC:2A:D8:15:74:B7:78:94:06:30:F6:A4:FB:87:0D:E8:75 Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Certificate serial: 019B2AAE9BE067EF89C6AE6B3F4D24935BB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft Manifest number: 14EC Signing time: Wed 17 Dec 2025 05:00:44 +0000 Manifest this update: Wed 17 Dec 2025 05:00:44 +0000 Manifest next update: Thu 18 Dec 2025 05:00:44 +0000 Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=) 2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=) 3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=) 4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: Kbe7pikuw7NIkO/xHY26e4hWSehcGPpH61DPiwQeORQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:9b:e0:67:ef:89:c6:ae:6b:3f:4d:24:93:5b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Validity Not Before: Dec 17 05:00:44 2025 GMT Not After : Dec 18 05:00:44 2025 GMT Subject: CN=f36e21fc2ad81574b778940630f6a4fb870de875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:f0:79:ee:dd:6a:63:b8:ba:a8:5c:06:36: f8:f1:fd:b4:92:ee:7f:1c:77:0f:a5:92:16:49:b5: f6:70:cf:52:2c:09:b4:f1:53:d1:bd:4d:09:6d:aa: cd:04:25:9d:94:76:45:ab:62:77:3b:a4:8c:a3:4d: a2:7b:e6:e4:bc:14:f5:ec:55:72:91:9a:c9:11:29: fa:d6:e0:aa:db:94:39:8d:6d:8c:fb:76:83:d5:0e: 32:bf:bc:c7:5f:97:3f:1a:bd:b5:a9:f5:ad:81:45: e2:ff:d8:e0:16:6c:0a:12:ac:72:0f:70:bf:15:07: 2b:aa:01:c4:79:e6:a3:af:99:e5:5a:1a:43:e9:3f: b3:8c:06:3f:46:69:eb:d0:7d:e1:bd:bf:97:53:0d: c1:1f:3e:ac:c1:88:05:6a:f1:8f:12:df:c1:6c:72: 28:ad:e5:a4:63:e3:fc:81:e4:fa:65:1a:9e:93:90: 71:2b:57:35:78:e5:79:e4:6f:83:07:1e:80:c3:3b: 88:a4:8b:b2:81:b9:4a:2e:5a:fc:09:75:6f:cb:41: a8:09:dd:8b:57:f7:6a:df:33:1a:5c:a6:72:65:32: 5e:80:24:b5:07:29:40:b8:18:08:07:7a:44:d8:32: 8c:64:21:01:a9:d5:22:3b:4f:17:4c:24:a7:ed:44: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6E:21:FC:2A:D8:15:74:B7:78:94:06:30:F6:A4:FB:87:0D:E8:75 X509v3 Authority Key Identifier: keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fc:a4:55:65:8a:5e:26:7f:06:90:2d:9e:d4:ce:eb:df:2a: 62:9d:24:80:cf:be:97:a2:58:be:ba:f7:c2:8a:fa:35:9f:e0: 00:d8:c7:83:06:61:3a:27:69:7e:3d:fb:4c:f1:5d:24:2f:67: 27:0b:d5:1a:23:d1:14:97:be:52:55:35:9e:38:26:15:f8:bc: e9:f6:d5:88:ae:ff:ba:1e:63:6b:81:f5:dc:69:aa:bb:2f:87: e9:bb:14:9f:df:9d:5d:2b:b7:74:52:8a:b0:2f:4a:d3:cf:9b: c6:ad:b0:19:04:4f:ba:1a:56:fb:4e:93:2e:05:6c:a4:0e:f8: 8b:e8:42:4c:3f:d1:01:da:79:11:20:8d:70:9c:db:96:99:05: 0f:bd:72:b2:a5:9b:19:3c:97:2b:f7:e6:03:52:6e:dd:08:57: 32:ee:ce:46:77:38:53:52:bd:f0:7d:02:41:1c:c2:39:7d:ad: 31:36:da:81:a3:41:b5:e7:68:79:55:3b:d0:e8:dc:7a:6e:bc: e5:cc:d6:b3:42:ba:1f:e1:41:a7:9d:74:0c:99:bb:d1:78:ef: 1e:40:6e:b6:3e:a3:3e:87:f1:ad:e8:af:61:8d:ff:11:ba:d3: b3:a3:07:93:1c:e2:6a:8b:ad:e2:28:ce:bc:4a:34:f8:65:3f: 81:e9:84:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrpvgZ++Jxq5rP00kk1u0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjgxOTg5YzNiNmU1OGZkYzk1MzRlZTdlYjNlMjYwZDFk ODc3NDkwHhcNMjUxMjE3MDUwMDQ0WhcNMjUxMjE4MDUwMDQ0WjAzMTEwLwYDVQQD EyhmMzZlMjFmYzJhZDgxNTc0Yjc3ODk0MDYzMGY2YTRmYjg3MGRlODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Pwee7damO4uqhcBjb48f20ku5/ HHcPpZIWSbX2cM9SLAm08VPRvU0JbarNBCWdlHZFq2J3O6SMo02ie+bkvBT17FVy kZrJESn61uCq25Q5jW2M+3aD1Q4yv7zHX5c/Gr21qfWtgUXi/9jgFmwKEqxyD3C/ FQcrqgHEeeajr5nlWhpD6T+zjAY/Rmnr0H3hvb+XUw3BHz6swYgFavGPEt/BbHIo reWkY+P8geT6ZRqek5BxK1c1eOV55G+DBx6AwzuIpIuygblKLlr8CXVvy0GoCd2L V/dq3zMaXKZyZTJegCS1BylAuBgIB3pE2DKMZCEBqdUiO08XTCSn7UTbowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNuIfwq2BV0t3iUBjD2pPuHDeh1MB8GA1UdIwQY MBaAFI0oGYnDtuWP3JU07n6z4mDR2HdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEt YmNhODBlNDdjNTczLzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEtYmNhODBlNDdjNTcz LzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/ykVWWK XiZ/BpAtntTO698qYp0kgM++l6JYvrr3wor6NZ/gANjHgwZhOidpfj37TPFdJC9n JwvVGiPRFJe+UlU1njgmFfi86fbViK7/uh5ja4H13Gmquy+H6bsUn9+dXSu3dFKK sC9K08+bxq2wGQRPuhpW+06TLgVspA74i+hCTD/RAdp5ESCNcJzblpkFD71ysqWb GTyXK/fmA1Ju3QhXMu7ORnc4U1K98H0CQRzCOX2tMTbagaNBtedoeVU70Ojcem68 5czWs0K6H+FBp510DJm70XjvHkButj6jPofxreivYY3/EbrTs6MHkxziaout4ijO vEo0+GU/gemE+Q== -----END CERTIFICATE-----Generated at Wed Dec 17 09:44:04 2025 by rpki-client