This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json) Hash identifier: NbCrXU85OxBL1k0J1/srz/Srsr9bq0qhWBzglZa8Lig= Subject key identifier: 07:EE:34:0C:C1:69:EE:B1:B8:57:2B:D2:BD:86:D7:64:79:E1:E7:FB Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Certificate serial: 019B6166059F573BFE1A1856A2EBB13D15E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft Manifest number: 1670 Signing time: Sat 27 Dec 2025 20:00:34 +0000 Manifest this update: Sat 27 Dec 2025 20:00:34 +0000 Manifest next update: Sun 28 Dec 2025 20:00:34 +0000 Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: NUeUQWNnN2Rl1Ws2Fwml8vT4RV+WDSzS4puLed1xyb4=) 2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:05:9f:57:3b:fe:1a:18:56:a2:eb:b1:3d:15:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Validity Not Before: Dec 27 20:00:34 2025 GMT Not After : Dec 28 20:00:34 2025 GMT Subject: CN=07ee340cc169eeb1b8572bd2bd86d76479e1e7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:4e:61:9a:c3:2b:a6:e0:d4:c8:fa:7f:5b: e1:f3:6f:39:0e:32:d2:dd:d3:23:76:70:0d:cb:1a: fa:b5:ff:e9:e7:2e:e9:60:99:77:2c:b3:b1:6b:c6: e1:c9:cc:96:11:11:c8:b7:e7:87:d0:29:27:05:7f: ef:6f:fb:e8:c0:6a:02:39:86:bb:16:86:22:a5:b6: 44:81:3a:37:b9:cc:e4:6c:ce:7c:e6:62:b8:95:3e: 72:09:34:ac:1d:3b:57:7b:54:1f:aa:e8:ab:a8:b7: 5b:3d:85:49:c4:3d:5a:8f:cc:0e:bf:a2:52:54:ed: 3b:3d:1d:02:c7:4c:71:38:af:83:cd:0d:a1:a7:a7: c8:f9:2a:00:ec:fb:87:1c:0f:f4:54:f5:61:98:c0: 5f:d5:17:74:40:3f:a0:d8:dc:2d:b4:63:27:7f:c8: c8:57:a6:3c:09:bd:e6:81:a2:e1:0e:e6:8e:71:29: 8b:1a:3d:6f:44:cd:e2:a6:ac:15:9a:e5:c8:dc:c9: 6d:00:64:e4:35:3b:b8:08:ee:b2:a0:81:b7:ff:26: 33:a3:75:b6:55:32:7f:8b:0d:ca:96:58:34:20:ae: ad:f9:31:4d:55:a3:0a:50:97:2c:77:c6:6b:92:2c: 8a:f6:da:54:ef:3d:78:cb:0d:d0:cb:2b:6f:3c:0e: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EE:34:0C:C1:69:EE:B1:B8:57:2B:D2:BD:86:D7:64:79:E1:E7:FB X509v3 Authority Key Identifier: keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:07:67:c8:93:48:26:73:23:db:7f:08:14:de:b2:21:61:c3: 25:6e:00:71:b9:9e:2d:de:3e:c2:be:a6:0a:81:2b:f5:7d:22: 58:68:85:9e:43:8f:c5:07:a0:e9:23:20:34:42:94:81:75:f8: fa:c3:43:84:8e:6f:e3:4e:b6:0d:2f:fe:b1:66:36:d9:81:68: 2d:c9:86:b4:ae:c7:75:9a:17:f3:4f:9f:33:2e:26:78:29:de: eb:d7:1d:38:de:be:a4:87:8c:72:d4:41:ea:f1:83:10:a6:d0: d8:7e:c5:06:53:f7:7a:d5:42:b7:e9:d7:ca:9d:e0:e6:a6:e3: ba:7b:cf:22:c9:b7:ee:69:9d:ef:7b:6f:32:db:16:a9:fa:62: f6:ed:fa:2f:fa:0d:4f:4e:33:94:17:50:3e:32:0d:b8:7b:01: d2:e7:4b:9a:ad:a0:57:1f:f1:04:db:12:0c:aa:bb:e4:cf:5e: e1:0d:7c:e6:3d:bd:4f:35:9f:5f:d1:c0:eb:ec:81:28:f4:61: d7:79:04:a3:43:c0:b4:b4:7a:57:16:46:08:d2:0d:61:74:20: 24:c0:a1:8a:e4:fa:00:3f:c6:75:10:24:19:8d:28:24:e7:64: 09:65:9c:c8:05:78:e0:5e:1b:06:35:24:a8:8c:c1:50:a4:e9: b2:84:b0:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZgWfVzv+GhhWouuxPRXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Njc2MDM2MjMxNDNiZDFiYzdhOGZjOWQ4ZTc5ZDk1NTk2 MTE4NjAwHhcNMjUxMjI3MjAwMDM0WhcNMjUxMjI4MjAwMDM0WjAzMTEwLwYDVQQD EygwN2VlMzQwY2MxNjllZWIxYjg1NzJiZDJiZDg2ZDc2NDc5ZTFlN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYlOYZrDK6bg1Mj6f1vh8285DjLS 3dMjdnANyxr6tf/p5y7pYJl3LLOxa8bhycyWERHIt+eH0CknBX/vb/vowGoCOYa7 FoYipbZEgTo3uczkbM585mK4lT5yCTSsHTtXe1QfquirqLdbPYVJxD1aj8wOv6JS VO07PR0Cx0xxOK+DzQ2hp6fI+SoA7PuHHA/0VPVhmMBf1Rd0QD+g2NwttGMnf8jI V6Y8Cb3mgaLhDuaOcSmLGj1vRM3ipqwVmuXI3MltAGTkNTu4CO6yoIG3/yYzo3W2 VTJ/iw3Kllg0IK6t+TFNVaMKUJcsd8ZrkiyK9tpU7z14yw3QyytvPA5GjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfuNAzBae6xuFcr0r2G12R54ef7MB8GA1UdIwQY MBaAFCRnYDYjFDvRvHqPydjnnZVZYRhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEt ZmI0NjQyZDJkOWE2LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEtZmI0NjQyZDJkOWE2 LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgdnyJNI JnMj238IFN6yIWHDJW4AcbmeLd4+wr6mCoEr9X0iWGiFnkOPxQeg6SMgNEKUgXX4 +sNDhI5v4062DS/+sWY22YFoLcmGtK7HdZoX80+fMy4meCne69cdON6+pIeMctRB 6vGDEKbQ2H7FBlP3etVCt+nXyp3g5qbjunvPIsm37mmd73tvMtsWqfpi9u36L/oN T04zlBdQPjINuHsB0udLmq2gVx/xBNsSDKq75M9e4Q185j29TzWfX9HA6+yBKPRh 13kEo0PAtLR6VxZGCNINYXQgJMChiuT6AD/GdRAkGY0oJOdkCWWcyAV44F4bBjUk qIzBUKTpsoSwhQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:26:02 2025 by rpki-client