This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json) Hash identifier: 3KIrz/2kh55K/GjZFmIjFSBwUmJxCB2DQ5dpeD6hf6w= Subject key identifier: F0:4E:4B:6C:24:0F:EA:A9:BC:C7:ED:4E:0A:20:D6:82:A5:9D:7B:8A Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd Certificate serial: 019B2A0996B0F5C80EA2A0753222597A8170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft Manifest number: 0C2F Signing time: Wed 17 Dec 2025 02:00:29 +0000 Manifest this update: Wed 17 Dec 2025 02:00:29 +0000 Manifest next update: Thu 18 Dec 2025 02:00:29 +0000 Files and hashes: 1: ByXM_Ln1i6sp51H3UoiAVLtk9H4.roa (hash: WkKv5GmFkjNS11QcfAX/i3RvuDqUCdANkXDcqukdiOw=) 2: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: RMBrELmQ66uDUJ5MpA4XQVt6usb8DdppayBP2lSTwUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:09:96:b0:f5:c8:0e:a2:a0:75:32:22:59:7a:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd Validity Not Before: Dec 17 02:00:29 2025 GMT Not After : Dec 18 02:00:29 2025 GMT Subject: CN=f04e4b6c240feaa9bcc7ed4e0a20d682a59d7b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:2a:87:c5:24:36:79:ae:f8:fa:09:38:7b: 94:f5:80:25:af:ca:9a:0b:3c:6c:19:d8:86:c8:de: 3c:8e:f3:2c:11:70:fc:9a:38:e7:28:fc:67:04:a9: e6:0a:59:e1:29:d5:a8:44:09:80:2d:54:27:9d:4f: 42:aa:d5:ad:62:34:f5:0f:e7:88:4e:7b:fb:05:ce: 7f:3f:7c:bf:dd:b8:01:8e:a0:cf:f4:ed:65:94:d0: e3:8d:d7:97:13:c3:67:e3:e7:5b:0f:37:56:6f:60: c3:be:1c:7e:8c:24:fa:5c:58:3d:28:be:7d:99:25: b5:6c:14:a5:d1:84:09:d4:fb:0a:e6:20:14:a1:b9: 1d:3f:b6:02:30:58:56:4d:17:5e:39:0e:13:ea:5b: 9e:0a:a1:b1:f8:f2:72:f8:0c:e5:e5:c2:0e:39:54: e3:6c:a7:1a:db:1f:29:2f:90:1d:d3:77:93:6c:06: ae:6f:c1:ba:76:92:94:e7:d8:4f:f7:cf:bf:90:2b: 6b:89:b0:7c:93:c8:f9:52:9f:54:a3:0b:34:fe:48: 09:10:2c:cc:39:96:54:21:8f:04:5d:41:b7:6c:04: 26:46:47:02:34:b3:46:5d:a0:d9:23:9f:e0:63:67: 4e:07:9f:5d:62:72:6c:e9:2e:c5:ff:2a:89:d2:9a: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4E:4B:6C:24:0F:EA:A9:BC:C7:ED:4E:0A:20:D6:82:A5:9D:7B:8A X509v3 Authority Key Identifier: keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:a2:95:57:c2:f8:c6:7c:07:42:e8:0d:ae:e5:74:45:18:76: b6:36:be:eb:e8:df:5c:23:b8:db:71:54:48:01:1b:ad:89:1d: ea:f1:70:86:1d:4a:2f:ed:7e:a2:58:35:6c:48:65:4d:a6:12: 96:ad:23:b7:d6:51:f3:84:3b:f0:00:18:c9:d8:46:99:26:fe: 14:1b:78:c1:02:13:52:82:9f:26:08:15:cb:95:dc:40:cf:bc: cd:dc:e2:8d:98:c3:46:45:49:be:ef:b4:98:ea:f8:96:a5:f8: 7b:3f:75:f6:8c:65:d5:09:8c:95:f8:8b:68:55:67:3a:e8:06: 8d:c5:77:19:6c:42:a3:a8:76:7e:85:fc:51:b2:98:2f:57:95: 2d:b0:c3:c6:33:37:20:72:1d:8d:c9:ba:36:2b:fd:33:26:f3: ce:03:5e:6f:30:ca:36:21:d2:57:da:d9:94:78:3d:51:bd:b5: 9d:00:84:7f:c9:9a:73:9d:6e:ef:d7:fd:57:ad:ad:58:89:83: 88:5c:ee:40:78:63:e7:a2:8e:95:8f:d0:e7:a3:c6:f4:dd:a1: 52:dd:e1:63:be:02:21:bb:f3:d4:9f:cd:0f:e6:8e:79:8a:95: 6a:ca:60:83:76:d2:e7:63:52:2c:2e:be:f0:8a:df:35:de:8b: 26:9a:b8:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCZaw9cgOoqB1MiJZeoFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDkwOWQ3M2EyNzk4ODNlMjU3MTExZTQ4NGU3ZjA3OGI1 ZWM4ZmQwHhcNMjUxMjE3MDIwMDI5WhcNMjUxMjE4MDIwMDI5WjAzMTEwLwYDVQQD EyhmMDRlNGI2YzI0MGZlYWE5YmNjN2VkNGUwYTIwZDY4MmE1OWQ3YjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxQqh8UkNnmu+PoJOHuU9YAlr8qa CzxsGdiGyN48jvMsEXD8mjjnKPxnBKnmClnhKdWoRAmALVQnnU9CqtWtYjT1D+eI Tnv7Bc5/P3y/3bgBjqDP9O1llNDjjdeXE8Nn4+dbDzdWb2DDvhx+jCT6XFg9KL59 mSW1bBSl0YQJ1PsK5iAUobkdP7YCMFhWTRdeOQ4T6lueCqGx+PJy+Azl5cIOOVTj bKca2x8pL5Ad03eTbAaub8G6dpKU59hP98+/kCtribB8k8j5Up9Uows0/kgJECzM OZZUIY8EXUG3bAQmRkcCNLNGXaDZI5/gY2dOB59dYnJs6S7F/yqJ0poHCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBOS2wkD+qpvMftTgog1oKlnXuKMB8GA1UdIwQY MBaAFCYJCdc6J5iD4lcRHkhOfweLXsj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWIt NjU2MTMxN2NmMjYzLzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWItNjU2MTMxN2NmMjYz LzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKKVV8L4 xnwHQugNruV0RRh2tja+6+jfXCO423FUSAEbrYkd6vFwhh1KL+1+olg1bEhlTaYS lq0jt9ZR84Q78AAYydhGmSb+FBt4wQITUoKfJggVy5XcQM+8zdzijZjDRkVJvu+0 mOr4lqX4ez919oxl1QmMlfiLaFVnOugGjcV3GWxCo6h2foX8UbKYL1eVLbDDxjM3 IHIdjcm6Niv9MybzzgNebzDKNiHSV9rZlHg9Ub21nQCEf8mac51u79f9V62tWImD iFzuQHhj56KOlY/Q56PG9N2hUt3hY74CIbvz1J/ND+aOeYqVaspgg3bS52NSLC6+ 8IrfNd6LJpq4iw== -----END CERTIFICATE-----Generated at Wed Dec 17 12:54:31 2025 by rpki-client