This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft File: jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json) Hash identifier: 9gxMZUnqHxQ3QPHsr3rFYbVGbUL3q4WpogcWsqdUlsI= Subject key identifier: 48:E5:8E:2C:A9:38:52:CF:8F:BF:02:A1:1E:B2:7F:FA:17:0F:72:E7 Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Certificate serial: 019B3E357C21316A5B7247FC264768516B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft Manifest number: 16CE Signing time: Sun 21 Dec 2025 00:00:51 +0000 Manifest this update: Sun 21 Dec 2025 00:00:51 +0000 Manifest next update: Mon 22 Dec 2025 00:00:51 +0000 Files and hashes: 1: DYRo5UxpUtRoBr5siZIGMHmDOmk.roa (hash: CNeg8TW20mVMGXVcVuZCa6OMSEOFftuPH5JmAwDqWJM=) 2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: oevkYwBJ43W4k5DtRUWm6QwxBrcX2M5s0fLDuZ1isTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:7c:21:31:6a:5b:72:47:fc:26:47:68:51:6b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Validity Not Before: Dec 21 00:00:51 2025 GMT Not After : Dec 22 00:00:51 2025 GMT Subject: CN=48e58e2ca93852cf8fbf02a11eb27ffa170f72e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:a4:cc:cb:2e:8d:92:76:74:dd:89:11:63: 85:8a:ab:15:11:6e:5c:0f:59:b3:f8:f5:08:49:87: d7:6a:6c:7f:e9:c6:be:1e:ca:73:d3:9c:8d:53:49: 78:d4:3d:bf:ec:ef:a7:8b:5a:65:33:43:a4:23:6b: ea:d3:90:a0:a0:bb:7b:48:7a:08:a0:37:b7:7d:6d: 6b:39:f4:03:4e:cd:e8:f0:27:ce:cd:0e:93:47:9a: bc:98:01:eb:5f:c5:92:65:e6:47:d4:83:6b:e3:02: ae:66:53:b8:aa:08:10:f2:38:4e:ee:14:6d:65:5d: e9:0f:52:a8:df:44:2a:7d:c0:17:33:70:f2:f0:33: 8d:87:33:73:7e:a4:0a:e5:f1:cf:52:eb:00:a0:42: 0d:f9:99:f4:e4:b9:c4:f3:6a:43:44:71:86:c6:01: f9:60:be:94:82:ee:2d:86:9d:5f:83:16:28:15:ae: c8:09:2e:35:8b:ad:bc:ae:dc:17:c2:a1:24:43:47: 3e:24:9c:3e:d9:ad:cc:0a:55:60:2c:a7:c5:e7:d2: 48:9d:4d:b2:5b:12:d9:f2:78:50:9e:1c:4d:29:af: df:1a:c4:cc:f0:5b:be:7b:b9:d2:98:36:c5:fe:a6: c7:44:d0:bd:38:55:a4:68:91:cb:60:9d:64:c9:40: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E5:8E:2C:A9:38:52:CF:8F:BF:02:A1:1E:B2:7F:FA:17:0F:72:E7 X509v3 Authority Key Identifier: keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9f:8d:90:1d:f5:fe:64:1b:ac:94:26:28:f7:11:d3:69:23: 6f:6c:a8:02:c4:8b:4b:4b:88:d3:d7:f2:bf:59:22:a9:07:15: dd:c9:7c:1d:48:a1:47:fc:8a:31:68:85:2b:cd:b8:c9:de:45: c7:ba:e9:a5:4f:63:ed:e6:70:76:04:fb:3c:aa:a2:14:a2:e3: 65:10:13:8e:18:a6:48:76:b1:10:91:9e:08:36:37:4f:21:b0: bd:a8:6c:7d:39:03:0f:3b:98:96:42:45:8b:4a:5e:e5:14:de: 96:f7:96:b3:4a:17:5c:31:1e:4d:ce:b4:c4:0c:de:4b:77:72: 2f:88:af:61:74:2a:cc:c2:8b:67:98:90:f5:18:45:42:cf:e0: e6:72:2b:9c:62:f8:59:07:35:04:ee:8d:83:b0:be:81:a1:87: 9a:e1:59:98:35:bf:2d:b3:50:5b:10:5c:71:a6:f2:2c:59:91: 97:c7:db:cc:03:5a:ce:51:f9:c1:fc:60:ff:71:4b:83:f8:28: 61:f7:e2:ac:66:de:58:bb:d6:a0:af:b0:1f:b3:bc:95:55:af: a3:e3:38:5c:46:36:7e:95:b4:25:14:66:b0:01:1c:77:56:d3: 96:65:4f:f0:3b:6c:b8:60:02:12:81:d0:c5:26:79:ce:9f:94: 61:92:43:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXwhMWpbckf8JkdoUWt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGEzOTFhYWViOGZjN2M4MzNmODI1N2Q3YTllNzRhNTVi MzNhZmUwHhcNMjUxMjIxMDAwMDUxWhcNMjUxMjIyMDAwMDUxWjAzMTEwLwYDVQQD Eyg0OGU1OGUyY2E5Mzg1MmNmOGZiZjAyYTExZWIyN2ZmYTE3MGY3MmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFKkzMsujZJ2dN2JEWOFiqsVEW5c D1mz+PUISYfXamx/6ca+Hspz05yNU0l41D2/7O+ni1plM0OkI2vq05CgoLt7SHoI oDe3fW1rOfQDTs3o8CfOzQ6TR5q8mAHrX8WSZeZH1INr4wKuZlO4qggQ8jhO7hRt ZV3pD1Ko30QqfcAXM3Dy8DONhzNzfqQK5fHPUusAoEIN+Zn05LnE82pDRHGGxgH5 YL6Ugu4thp1fgxYoFa7ICS41i628rtwXwqEkQ0c+JJw+2a3MClVgLKfF59JInU2y WxLZ8nhQnhxNKa/fGsTM8Fu+e7nSmDbF/qbHRNC9OFWkaJHLYJ1kyUBOXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjljiypOFLPj78CoR6yf/oXD3LnMB8GA1UdIwQY MBaAFI4KORquuPx8gz+CV9ep50pVszr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYt ZWRiNDNlMWQ0ZWUwLzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYtZWRiNDNlMWQ0ZWUw LzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5+NkB31 /mQbrJQmKPcR02kjb2yoAsSLS0uI09fyv1kiqQcV3cl8HUihR/yKMWiFK824yd5F x7rppU9j7eZwdgT7PKqiFKLjZRATjhimSHaxEJGeCDY3TyGwvahsfTkDDzuYlkJF i0pe5RTelveWs0oXXDEeTc60xAzeS3dyL4ivYXQqzMKLZ5iQ9RhFQs/g5nIrnGL4 WQc1BO6Ng7C+gaGHmuFZmDW/LbNQWxBccabyLFmRl8fbzANazlH5wfxg/3FLg/go YffirGbeWLvWoK+wH7O8lVWvo+M4XEY2fpW0JRRmsAEcd1bTlmVP8DtsuGACEoHQ xSZ5zp+UYZJDtg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:59 2025 by rpki-client