This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft File: jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json) Hash identifier: hhVE3YD6vBAkJUwX4vEXeh+9J6YH1MpoTq29tGqgwYs= Subject key identifier: 90:1C:94:BD:3A:A8:43:BD:D7:74:68:DB:D8:65:0D:46:E4:0F:AC:D9 Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c Certificate serial: 019B3D23092E3E98FB0E5DA382FC794C3B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft Manifest number: 143E Signing time: Sat 20 Dec 2025 19:01:04 +0000 Manifest this update: Sat 20 Dec 2025 19:01:04 +0000 Manifest next update: Sun 21 Dec 2025 19:01:04 +0000 Files and hashes: 1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=) 2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: PNqlKYm4sFNFJaKRMlX+PZ0bLC4uqv6C7VR7uG98qf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:09:2e:3e:98:fb:0e:5d:a3:82:fc:79:4c:3b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c Validity Not Before: Dec 20 19:01:04 2025 GMT Not After : Dec 21 19:01:04 2025 GMT Subject: CN=901c94bd3aa843bdd77468dbd8650d46e40facd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:04:7d:64:99:6e:ae:e8:c6:57:b2:75:27: fa:fc:e7:69:47:f6:ac:f5:0d:c4:4a:6f:f3:65:ee: b1:23:a7:15:c4:98:b1:92:c5:d9:cb:70:92:7a:dc: af:ab:b4:38:0a:92:5c:2d:9e:9f:f6:ef:a4:e5:58: 91:dc:ec:01:ed:43:93:0a:43:64:a6:e8:8c:73:37: 45:dc:f2:d5:d7:20:54:de:f3:c1:f6:92:a3:d9:19: 19:56:da:fb:ea:56:03:b8:3a:fa:c5:26:d5:64:39: f8:d2:22:0e:33:6e:e4:da:15:ab:fc:a2:a8:87:20: 26:54:39:73:0f:b2:12:be:13:85:4a:6a:65:cc:41: ad:b9:0a:d6:b5:73:56:5b:95:a4:23:f5:ff:78:45: 9a:2d:fd:a2:72:2c:7e:95:82:17:0d:05:83:b0:88: 52:4b:dd:90:3f:68:25:8c:8f:86:85:55:90:6b:b2: 42:2e:8c:27:b9:aa:82:2a:57:a1:59:cc:59:fc:4c: b9:12:4d:49:9e:fa:30:58:6c:67:f3:5f:fd:89:80: 7c:31:a1:b1:52:cd:ed:2b:36:8f:76:45:1c:d3:43: 09:6e:4d:78:af:c7:28:a0:1a:67:3c:7d:c1:13:91: d3:bf:0e:2b:db:ec:b2:45:58:c7:10:89:97:f4:4a: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1C:94:BD:3A:A8:43:BD:D7:74:68:DB:D8:65:0D:46:E4:0F:AC:D9 X509v3 Authority Key Identifier: keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0a:db:45:06:36:e9:ea:34:60:b0:e2:62:a3:4a:29:8e:e7: e8:bb:5a:e2:ec:6f:f6:71:50:d0:fe:c3:62:f9:bd:0c:af:ab: 6a:22:b6:65:68:fb:5d:6c:f1:f1:f6:b9:e8:93:c5:37:df:81: 23:66:d9:be:aa:72:87:8e:8b:91:b0:c2:8f:17:fa:f7:9f:48: 5b:0b:26:c9:eb:28:4d:91:ad:93:a2:b5:82:c9:89:fa:44:09: 70:63:2f:ed:8c:bd:58:4d:a9:24:fe:7e:00:e9:6f:4b:b0:e1: a3:57:93:4a:04:f1:b1:1b:c0:3e:ed:a8:1e:38:22:13:f8:d5: 29:2e:d5:43:fb:7b:3f:8b:3d:74:13:63:89:e1:34:ba:99:2a: d3:17:95:3c:72:92:f1:db:f5:48:6b:3f:44:d6:6b:c1:ee:7e: 65:b1:cf:9a:33:a9:47:a4:55:56:5f:13:57:41:46:51:6e:4e: 7e:42:22:2c:42:c6:f9:a6:1b:49:2b:5e:27:9c:8c:ea:31:9f: c5:ea:57:7e:04:48:72:c4:4b:a5:89:c4:f9:87:af:f1:31:f9: 80:9f:52:da:17:39:c3:f9:d5:31:13:21:fb:c5:60:58:d7:15: a6:f8:90:3c:94:bb:e1:4d:71:22:b0:93:b5:9d:f0:5c:4f:7b: f7:e2:eb:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwkuPpj7Dl2jgvx5TDtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMDQ1YmZlY2QyYmJlMjRkMzNmNTMwOWRiNDdjOGFhNzdh M2IxMGMwHhcNMjUxMjIwMTkwMTA0WhcNMjUxMjIxMTkwMTA0WjAzMTEwLwYDVQQD Eyg5MDFjOTRiZDNhYTg0M2JkZDc3NDY4ZGJkODY1MGQ0NmU0MGZhY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzEEfWSZbq7oxleydSf6/OdpR/as 9Q3ESm/zZe6xI6cVxJixksXZy3CSetyvq7Q4CpJcLZ6f9u+k5ViR3OwB7UOTCkNk puiMczdF3PLV1yBU3vPB9pKj2RkZVtr76lYDuDr6xSbVZDn40iIOM27k2hWr/KKo hyAmVDlzD7ISvhOFSmplzEGtuQrWtXNWW5WkI/X/eEWaLf2icix+lYIXDQWDsIhS S92QP2gljI+GhVWQa7JCLownuaqCKlehWcxZ/Ey5Ek1JnvowWGxn81/9iYB8MaGx Us3tKzaPdkUc00MJbk14r8cooBpnPH3BE5HTvw4r2+yyRVjHEImX9Er2dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAclL06qEO913Ro29hlDUbkD6zZMB8GA1UdIwQY MBaAFI4EW/7NK74k0z9TCdtHyKp3o7EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0Yzct ZDgwYjNjMWY5ZDczLzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0YzctZDgwYjNjMWY5ZDcz LzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgrbRQY2 6eo0YLDiYqNKKY7n6Lta4uxv9nFQ0P7DYvm9DK+raiK2ZWj7XWzx8fa56JPFN9+B I2bZvqpyh46LkbDCjxf6959IWwsmyesoTZGtk6K1gsmJ+kQJcGMv7Yy9WE2pJP5+ AOlvS7Dho1eTSgTxsRvAPu2oHjgiE/jVKS7VQ/t7P4s9dBNjieE0upkq0xeVPHKS 8dv1SGs/RNZrwe5+ZbHPmjOpR6RVVl8TV0FGUW5OfkIiLELG+aYbSSteJ5yM6jGf xepXfgRIcsRLpYnE+Yev8TH5gJ9S2hc5w/nVMRMh+8VgWNcVpviQPJS74U1xIrCT tZ3wXE979+LrBA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:19:31 2025 by rpki-client