This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json) Hash identifier: LIkTf2xcJlSAWpnEUNWGiIXhxUzAybaF3s/w43x/sp4= Subject key identifier: 05:B9:B6:26:1A:54:93:0C:8F:82:70:5C:31:30:3D:9E:6C:22:0A:41 Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Certificate serial: 019B51F2EDDC94228AE9BA32F43463827067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft Manifest number: 1668 Signing time: Wed 24 Dec 2025 20:00:33 +0000 Manifest this update: Wed 24 Dec 2025 20:00:33 +0000 Manifest next update: Thu 25 Dec 2025 20:00:33 +0000 Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: LklzLzz6mWtuQaE2Tgd/Sc8x/3omLuLw9jaSiqh2XhE=) 2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f2:ed:dc:94:22:8a:e9:ba:32:f4:34:63:82:70:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Validity Not Before: Dec 24 20:00:33 2025 GMT Not After : Dec 25 20:00:33 2025 GMT Subject: CN=05b9b6261a54930c8f82705c31303d9e6c220a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:ed:82:2a:2b:03:05:86:79:30:bf:1a:2c: 88:f6:1f:a5:88:c3:59:a5:00:e3:2f:15:42:ec:16: 17:3c:b3:9c:ef:69:79:4d:3d:b7:e1:c5:92:b2:49: 7a:03:43:a6:81:33:c1:7c:71:0b:7e:7a:6d:14:7e: d4:e3:4f:af:e0:35:f4:03:15:53:ac:3b:a1:35:f8: d3:0d:66:94:18:f5:39:2c:b7:ea:dc:3a:f0:3c:f3: 4b:fd:af:d7:84:52:a4:70:81:69:31:bd:ea:17:c5: 64:24:73:9c:59:66:fc:c7:90:9a:00:f9:88:1d:df: 4f:33:e4:2b:82:46:72:a2:3c:f9:90:22:3d:f1:47: 99:2a:35:aa:bb:4b:cd:33:eb:ca:6c:23:14:60:7e: f3:64:21:c0:92:f5:86:67:c9:e2:6e:85:6f:6f:50: 94:90:76:c2:4c:39:83:df:7b:3c:6f:bd:1c:98:28: d2:39:fb:33:88:eb:8d:3f:67:02:72:ca:26:94:70: 07:90:1f:af:f1:b8:04:45:b8:bf:6f:35:46:ee:96: 44:a9:7e:90:09:ba:33:79:4f:af:6d:c6:0b:95:8d: b0:98:77:71:17:90:ad:c8:43:76:68:c7:80:ce:54: 72:53:80:23:58:e2:a3:2a:0d:c3:ee:1e:c6:64:ac: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B9:B6:26:1A:54:93:0C:8F:82:70:5C:31:30:3D:9E:6C:22:0A:41 X509v3 Authority Key Identifier: keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e0:c2:c3:54:b0:64:c4:59:8f:76:da:4a:2c:10:a3:6e:4c: 30:54:42:fe:ef:d5:fd:9a:22:79:fc:b5:4f:5c:f3:d1:d3:53: 07:60:82:9c:38:80:50:9b:ba:bb:6f:44:af:60:e9:67:96:e8: 4b:d7:1a:16:f2:ca:32:0b:4a:94:48:0d:84:38:71:3b:d8:f9: 65:ef:42:19:8a:41:ec:f5:2e:15:7b:78:52:a9:d2:2e:87:a9: 03:c6:89:8e:f5:4e:64:76:e9:92:5c:b8:cd:2d:04:13:a0:3b: 78:8c:7b:15:43:f5:38:17:5b:de:8d:8c:ca:8e:ca:f1:f6:1e: 53:96:2c:b2:f2:25:96:7d:bb:ee:d7:89:85:3b:9e:ee:ae:88: d4:9b:19:ea:d3:6f:ce:bc:e0:d5:84:97:f8:5d:fa:37:9f:68: 76:1f:7b:63:ab:9c:78:d5:5c:9e:76:fc:59:9f:04:f3:37:aa: 01:fe:83:ba:59:9c:bf:ad:f8:c6:35:08:ec:b8:ee:e0:35:ff: 2e:28:d2:2a:ef:c1:4d:89:94:6a:06:3b:3b:6b:68:71:e6:ad: 05:e4:31:c5:af:e8:cc:72:ba:a0:c9:e5:80:4d:7d:82:4e:43: a5:5f:cd:cb:19:5d:53:4e:5a:1c:f1:e6:13:ad:b7:9d:77:8c: f3:c3:39:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8u3clCKK6boy9DRjgnBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Njc2MDM2MjMxNDNiZDFiYzdhOGZjOWQ4ZTc5ZDk1NTk2 MTE4NjAwHhcNMjUxMjI0MjAwMDMzWhcNMjUxMjI1MjAwMDMzWjAzMTEwLwYDVQQD EygwNWI5YjYyNjFhNTQ5MzBjOGY4MjcwNWMzMTMwM2Q5ZTZjMjIwYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/ftgiorAwWGeTC/GiyI9h+liMNZ pQDjLxVC7BYXPLOc72l5TT234cWSskl6A0OmgTPBfHELfnptFH7U40+v4DX0AxVT rDuhNfjTDWaUGPU5LLfq3DrwPPNL/a/XhFKkcIFpMb3qF8VkJHOcWWb8x5CaAPmI Hd9PM+QrgkZyojz5kCI98UeZKjWqu0vNM+vKbCMUYH7zZCHAkvWGZ8niboVvb1CU kHbCTDmD33s8b70cmCjSOfsziOuNP2cCcsomlHAHkB+v8bgERbi/bzVG7pZEqX6Q CbozeU+vbcYLlY2wmHdxF5CtyEN2aMeAzlRyU4AjWOKjKg3D7h7GZKxVZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW5tiYaVJMMj4JwXDEwPZ5sIgpBMB8GA1UdIwQY MBaAFCRnYDYjFDvRvHqPydjnnZVZYRhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEt ZmI0NjQyZDJkOWE2LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEtZmI0NjQyZDJkOWE2 LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+DCw1Sw ZMRZj3baSiwQo25MMFRC/u/V/Zoiefy1T1zz0dNTB2CCnDiAUJu6u29Er2DpZ5bo S9caFvLKMgtKlEgNhDhxO9j5Ze9CGYpB7PUuFXt4UqnSLoepA8aJjvVOZHbpkly4 zS0EE6A7eIx7FUP1OBdb3o2Myo7K8fYeU5YssvIlln277teJhTue7q6I1JsZ6tNv zrzg1YSX+F36N59odh97Y6uceNVcnnb8WZ8E8zeqAf6Dulmcv634xjUI7Lju4DX/ LijSKu/BTYmUagY7O2toceatBeQxxa/ozHK6oMnlgE19gk5DpV/NyxldU05aHPHm E623nXeM88M5VQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:49:20 2025 by rpki-client