This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json) Hash identifier: BMxeQhL+JpFHyKu3Cu9KelefhAUGYmRi6JkFeE0sMaw= Subject key identifier: D2:C6:9E:17:BC:D2:57:28:57:4F:45:55:1F:AE:92:31:2A:1F:8F:8B Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd Certificate serial: 019B646811C95DF9B5FE2DC91B504AC684E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft Manifest number: 0BEF Signing time: Sun 28 Dec 2025 10:01:40 +0000 Manifest this update: Sun 28 Dec 2025 10:01:40 +0000 Manifest next update: Mon 29 Dec 2025 10:01:40 +0000 Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: /qpTMLaOT8rfONQfXhSfMjFRv1OeD27CMwSdyBV2CJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:68:11:c9:5d:f9:b5:fe:2d:c9:1b:50:4a:c6:84:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd Validity Not Before: Dec 28 10:01:40 2025 GMT Not After : Dec 29 10:01:40 2025 GMT Subject: CN=d2c69e17bcd25728574f45551fae92312a1f8f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:df:5e:cb:8e:b0:01:16:7a:e7:03:fe:5f: a4:f7:01:a6:5e:58:88:8f:59:bf:b9:94:d7:7f:14: d3:98:3f:9e:81:a8:5d:e8:70:ed:95:db:75:d8:eb: a5:36:22:d0:21:58:c7:ba:2d:ce:33:2b:0e:25:e4: 94:c6:ea:08:44:c1:77:53:3a:96:4f:9a:47:a8:32: 83:17:44:2b:57:91:7a:87:a3:18:51:44:5e:50:6a: f7:cf:4a:92:2d:01:27:f6:3f:10:f7:e4:a6:2b:17: c5:2f:47:93:0d:3a:ae:eb:2f:84:59:eb:92:17:a2: 89:30:16:61:6f:e7:f7:a2:25:23:1e:92:86:40:40: 9f:90:11:20:79:dd:6b:da:68:c4:fb:0f:dd:22:95: 5f:b3:10:6f:04:dd:8c:5f:87:1a:1a:3e:af:1d:b9: 9b:2e:1c:e3:55:ab:3d:97:f7:0e:31:56:9b:de:a4: b9:c2:7a:6b:92:08:05:b0:e2:1e:31:2d:f3:da:1a: 80:5e:b1:3e:98:1e:00:41:52:95:8a:15:f0:14:79: a8:19:e9:09:0f:17:b8:c2:43:d8:6d:57:05:78:45: 78:af:81:d4:38:38:b9:da:1e:dc:19:bd:df:21:b3: ce:23:2f:1d:2f:5d:ba:f5:2b:66:51:86:ae:98:d4: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C6:9E:17:BC:D2:57:28:57:4F:45:55:1F:AE:92:31:2A:1F:8F:8B X509v3 Authority Key Identifier: keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0e:c3:e2:ff:06:24:35:eb:5e:42:e6:2d:7a:82:98:62:0f: 37:fb:31:5e:58:56:91:a2:f2:9a:79:f9:cb:ed:32:87:a6:b7: 75:81:86:4e:e9:37:65:f3:a6:7d:24:0b:8b:d4:d9:fb:fd:60: 5d:45:c2:66:e8:41:f7:dd:75:f3:ca:5c:b1:1f:3a:5f:da:83: 36:f1:5b:c4:d2:01:14:1a:4d:a9:88:ce:5b:5b:5d:d5:f8:46: af:b1:d5:dc:4a:f7:1e:50:1a:73:4b:03:79:e2:41:f2:9f:72: 82:15:64:3e:bf:8b:58:58:f2:51:a7:a3:49:9e:df:1e:32:1c: 38:82:3d:de:73:f1:ed:18:a5:77:da:57:36:83:a6:4e:17:03: 09:ec:41:23:6a:e9:0f:cc:8c:98:84:3d:61:e0:7e:4c:53:3b: 7e:33:57:48:61:de:12:18:f2:6c:8b:9e:2a:96:e5:0f:62:11: 53:27:c5:53:fb:41:e7:6b:c9:72:a9:90:70:0e:55:c0:9c:22: 6d:85:da:c1:c9:18:3a:87:2c:1a:e7:bd:16:d4:60:74:95:8e: bc:b0:2f:b2:43:70:d8:da:7b:26:61:da:9f:36:91:ad:84:09: 51:a1:3c:e4:1f:73:f3:b4:18:f4:f7:12:cf:d2:d6:01:04:2a: d3:b2:54:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtkaBHJXfm1/i3JG1BKxoTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDY2YjZiNmMxMzYwMzUwMWFhMjU2ZmNkYzM3NDBkZjc3 ODAxZGQwHhcNMjUxMjI4MTAwMTQwWhcNMjUxMjI5MTAwMTQwWjAzMTEwLwYDVQQD EyhkMmM2OWUxN2JjZDI1NzI4NTc0ZjQ1NTUxZmFlOTIzMTJhMWY4ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEnfXsuOsAEWeucD/l+k9wGmXliI j1m/uZTXfxTTmD+egahd6HDtldt12OulNiLQIVjHui3OMysOJeSUxuoIRMF3UzqW T5pHqDKDF0QrV5F6h6MYUUReUGr3z0qSLQEn9j8Q9+SmKxfFL0eTDTqu6y+EWeuS F6KJMBZhb+f3oiUjHpKGQECfkBEged1r2mjE+w/dIpVfsxBvBN2MX4caGj6vHbmb LhzjVas9l/cOMVab3qS5wnprkggFsOIeMS3z2hqAXrE+mB4AQVKVihXwFHmoGekJ Dxe4wkPYbVcFeEV4r4HUODi52h7cGb3fIbPOIy8dL1269StmUYaumNQblQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLGnhe80lcoV09FVR+ukjEqH4+LMB8GA1UdIwQY MBaAFCYGa2tsE2A1Aaolb83DdA33eAHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yMjc3MWUtYTM4My00NTBmLTg1YmIt MTRiNDdmNTkxMWQ3LzEvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yMjc3MWUtYTM4My00NTBmLTg1YmItMTRiNDdmNTkxMWQ3 LzEvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA7D4v8G JDXrXkLmLXqCmGIPN/sxXlhWkaLymnn5y+0yh6a3dYGGTuk3ZfOmfSQLi9TZ+/1g XUXCZuhB991188pcsR86X9qDNvFbxNIBFBpNqYjOW1td1fhGr7HV3Er3HlAac0sD eeJB8p9yghVkPr+LWFjyUaejSZ7fHjIcOII93nPx7Rild9pXNoOmThcDCexBI2rp D8yMmIQ9YeB+TFM7fjNXSGHeEhjybIueKpblD2IRUyfFU/tB52vJcqmQcA5VwJwi bYXawckYOocsGue9FtRgdJWOvLAvskNw2Np7JmHanzaRrYQJUaE85B9z87QY9PcS z9LWAQQq07JUXw== -----END CERTIFICATE-----Generated at Sun Dec 28 11:23:44 2025 by rpki-client