This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json) Hash identifier: f/HYDVrrRjrlbZ0sAYL5ZwzWc5fy0HbefurPAW1b5JY= Subject key identifier: 71:88:4B:8E:E4:52:99:09:AC:D2:3B:85:AA:C1:11:5F:CD:ED:35:E5 Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c Certificate serial: 019B533C905B164EE21BB7849DB6C3E1B29E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft Manifest number: 02F2 Signing time: Thu 25 Dec 2025 02:00:36 +0000 Manifest this update: Thu 25 Dec 2025 02:00:36 +0000 Manifest next update: Fri 26 Dec 2025 02:00:36 +0000 Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: 1upOPjls+zefIW054sgN3Yt3XHfvR2gns5M4t/ZwHD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:90:5b:16:4e:e2:1b:b7:84:9d:b6:c3:e1:b2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c Validity Not Before: Dec 25 02:00:36 2025 GMT Not After : Dec 26 02:00:36 2025 GMT Subject: CN=71884b8ee4529909acd23b85aac1115fcded35e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:ad:b2:55:97:15:4b:c0:1d:ab:7a:b7:cd: 09:59:cd:7c:85:f6:60:ea:52:6d:25:16:b9:ae:09: 4a:37:51:43:7f:a7:26:0b:35:0e:97:59:72:64:24: 2c:07:62:b7:9a:d4:26:4a:9b:14:ab:82:a0:71:bf: 56:94:68:87:bc:e4:52:81:db:90:c3:ae:08:b2:a8: 2b:00:3a:43:98:97:15:c8:76:a8:bb:63:1f:9a:7a: f7:82:dd:60:91:00:62:57:c3:4a:95:88:fc:9d:90: 89:56:12:de:b2:21:6e:c1:9a:72:7b:c9:a6:4a:c9: 8f:13:a7:87:f2:e0:0b:f0:42:54:e0:64:47:5b:54: f7:5e:72:37:f4:b9:07:3d:80:17:46:9a:21:83:7c: 1c:05:f3:ab:b3:d4:48:1e:dc:3e:40:c2:48:f3:1a: c7:68:47:e6:d2:eb:9a:7f:f7:89:27:38:4a:4f:72: 3c:69:06:0a:e5:c2:e4:a6:ba:c0:5d:90:18:1d:6f: b9:ca:41:76:26:d8:8e:27:17:70:ca:71:18:48:6e: fe:98:e8:b5:f6:a7:53:e5:40:54:fd:ba:82:3b:a1: e8:79:39:13:43:1f:7f:2d:7b:a1:21:2e:bd:51:c6: ff:ac:42:33:e6:4f:cf:dd:40:d3:f1:eb:b1:d5:d4: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:88:4B:8E:E4:52:99:09:AC:D2:3B:85:AA:C1:11:5F:CD:ED:35:E5 X509v3 Authority Key Identifier: keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c6:8b:24:e6:77:f3:93:c0:18:90:74:02:db:cc:f0:c8:2c: 6e:af:4b:c2:37:cd:79:cb:94:57:8f:b3:b1:17:a8:a2:f8:82: cd:6f:b6:18:e9:e3:f3:d6:82:21:33:bc:26:3a:2b:df:2c:b3: 96:52:57:b6:33:5a:93:e3:0e:09:36:8b:73:26:1d:d7:f4:12: 83:ae:e5:f8:30:23:4b:25:9a:07:2e:f9:28:09:6b:a4:9a:bc: e2:16:c3:c4:ae:17:89:c2:e3:8c:d2:ac:5e:3b:21:85:5d:bc: 16:11:73:98:9a:5f:00:34:60:68:d0:10:92:bc:49:4e:dd:be: d4:19:74:fa:2b:f4:72:c1:e5:c1:9e:33:6f:d4:78:32:f1:06: 03:e1:50:05:26:9b:d1:c1:14:61:94:ad:97:fb:8d:52:c1:a3: 37:1c:5b:c7:c7:fe:28:ea:0d:a2:8b:c1:75:6b:61:5f:13:a8: 57:46:9a:84:4c:51:c3:4b:3b:bd:6a:7c:ad:e2:71:75:c7:1b: 2f:55:57:ff:12:1c:33:df:e3:d7:68:5d:df:5c:a6:ca:82:eb: 12:18:1d:f3:f6:95:21:1c:89:a0:7d:10:8a:b5:4d:8b:20:c7: 74:db:24:55:4e:ee:22:38:60:70:00:27:8c:b8:10:4a:de:11: 31:c6:68:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPJBbFk7iG7eEnbbD4bKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NmJmNDY5ODczMmRhNWZiYzdjMjAwMmY2Mzk2N2M2OGY1 NmRiNmMwHhcNMjUxMjI1MDIwMDM2WhcNMjUxMjI2MDIwMDM2WjAzMTEwLwYDVQQD Eyg3MTg4NGI4ZWU0NTI5OTA5YWNkMjNiODVhYWMxMTE1ZmNkZWQzNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wStslWXFUvAHat6t80JWc18hfZg 6lJtJRa5rglKN1FDf6cmCzUOl1lyZCQsB2K3mtQmSpsUq4Kgcb9WlGiHvORSgduQ w64IsqgrADpDmJcVyHaou2Mfmnr3gt1gkQBiV8NKlYj8nZCJVhLesiFuwZpye8mm SsmPE6eH8uAL8EJU4GRHW1T3XnI39LkHPYAXRpohg3wcBfOrs9RIHtw+QMJI8xrH aEfm0uuaf/eJJzhKT3I8aQYK5cLkprrAXZAYHW+5ykF2JtiOJxdwynEYSG7+mOi1 9qdT5UBU/bqCO6HoeTkTQx9/LXuhIS69Ucb/rEIz5k/P3UDT8eux1dTeYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGIS47kUpkJrNI7harBEV/N7TXlMB8GA1UdIwQY MBaAFCRr9GmHMtpfvHwgAvY5Z8aPVttsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZjk2NjYtOTA0YS00NjIyLTkwNjYt ZjUxMjJiYWMxNGFhLzEvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yZjk2NjYtOTA0YS00NjIyLTkwNjYtZjUxMjJiYWMxNGFh LzEvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8aLJOZ3 85PAGJB0AtvM8Mgsbq9LwjfNecuUV4+zsReooviCzW+2GOnj89aCITO8Jjor3yyz llJXtjNak+MOCTaLcyYd1/QSg67l+DAjSyWaBy75KAlrpJq84hbDxK4XicLjjNKs XjshhV28FhFzmJpfADRgaNAQkrxJTt2+1Bl0+iv0csHlwZ4zb9R4MvEGA+FQBSab 0cEUYZStl/uNUsGjNxxbx8f+KOoNoovBdWthXxOoV0aahExRw0s7vWp8reJxdccb L1VX/xIcM9/j12hd31ymyoLrEhgd8/aVIRyJoH0QirVNiyDHdNskVU7uIjhgcAAn jLgQSt4RMcZoEQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:38:39 2025 by rpki-client