This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft File: _JgxNwQvyMSSFwfU622l9sSnmls.mft (raw, json) Hash identifier: BGp14CiJFpMBNauyZNwq6W9TeARaNmee2ppFhJye7qQ= Subject key identifier: 8A:B9:4F:C1:CA:96:1F:3A:92:E4:F3:9E:D7:5D:0E:52:17:9B:70:AF Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b Certificate serial: 019B3DC77A94E4252B6E6E243DE3115A1328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 22:00:41 +0000 Manifest this update: Sat 20 Dec 2025 22:00:41 +0000 Manifest next update: Sun 21 Dec 2025 22:00:41 +0000 Files and hashes: 1: TSzzT-wDXDGDMx-4wmmQgF1l3HA.roa (hash: yUpCizyCuVdygvZFqIzlfSb6NuJnZoyRJzdQ53d5l/A=) 2: _JgxNwQvyMSSFwfU622l9sSnmls.crl (hash: SOt9gfsl9m9tgsmEJ8D1A0bY0B06DApj5ys95o+Mibw=) 3: _L_G56aRVg6nD-NomNA5jLK-OFc.roa (hash: pqPipm6sSmIrz6wz+oGLMWSdr2XRQ9UIYUQfzfKl1sc=) 4: gBVXncZpX6dJXVFqEp6midsazlI.roa (hash: Ru3Jn14vwmud6LNKKX7IA9Gb2z/pNd90VBCQpUm5b1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:7a:94:e4:25:2b:6e:6e:24:3d:e3:11:5a:13:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b Validity Not Before: Dec 20 22:00:41 2025 GMT Not After : Dec 21 22:00:41 2025 GMT Subject: CN=8ab94fc1ca961f3a92e4f39ed75d0e52179b70af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d4:59:c8:b4:c0:fb:ac:38:c5:e6:a1:9a:e9: d9:2c:de:22:0a:5b:8b:25:90:43:ec:f3:f7:ea:e4: 77:ea:9a:da:df:15:07:f8:ab:57:c9:b9:17:3e:fe: 22:fa:3e:be:cc:dc:7e:e3:6c:db:67:0f:28:08:c4: 2d:48:3e:53:c1:31:da:da:bf:13:3a:a7:a7:27:1e: cf:9e:b4:96:50:b0:0a:fb:05:4b:d0:93:b7:54:2d: 48:b0:28:02:08:cb:48:f8:8b:4c:f3:2b:cb:ff:66: f6:47:12:d3:21:34:2a:40:70:9c:22:50:40:94:1b: 7b:f4:a9:22:e8:d5:95:5b:dc:a2:1c:77:ca:35:36: ed:a2:62:e9:cc:3c:bd:f8:d3:44:c6:ec:58:dd:0e: f1:70:f0:f1:e7:d0:eb:b8:d4:b4:12:d0:d0:07:6f: c7:5a:79:61:07:11:29:01:86:22:d9:8d:e4:e9:dc: d2:3e:fc:f1:d4:5a:16:0a:bd:95:1e:8e:38:2b:ef: bf:2a:dd:d0:63:82:66:e5:05:ce:54:08:e0:fa:f6: 82:ce:35:81:5d:b7:72:65:1f:5c:64:53:d5:44:aa: 1c:c1:b4:86:2b:fe:2f:b0:5c:7c:cd:fc:83:67:8d: 03:cc:e5:88:f7:a6:4e:4e:73:d8:93:3b:90:c7:8e: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:4F:C1:CA:96:1F:3A:92:E4:F3:9E:D7:5D:0E:52:17:9B:70:AF X509v3 Authority Key Identifier: keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:24:ac:7b:23:b4:4e:b2:6e:af:5b:c4:6c:93:d0:73:0f:4a: 98:c6:34:07:7d:16:85:92:a0:da:32:3a:6a:66:60:c6:88:d8: 8c:46:10:0b:48:e5:cf:ab:61:da:40:67:44:7b:16:eb:e9:73: 58:6d:51:de:da:30:6b:be:e2:04:88:26:cb:94:8c:64:2f:94: 16:a8:be:e3:ae:2d:3c:df:e5:c3:af:1e:a9:22:71:ec:0d:a5: cb:9e:71:5b:79:5a:a8:8f:88:a9:e2:53:fe:67:f9:27:7b:0d: 79:1f:6d:65:89:5f:55:7b:42:34:b6:92:e4:f9:71:72:3a:e6: 0d:01:3f:a4:30:8c:92:69:ce:9a:b3:fb:a5:a7:d8:14:08:c1: 58:f3:e1:23:21:84:94:00:94:df:69:3d:18:96:b8:93:a9:ba: f4:d4:c0:31:0f:1d:dd:3b:95:74:75:c2:88:6a:fa:e5:84:eb: c0:1b:fb:56:f1:9a:85:2b:51:7b:7d:e6:e5:40:32:17:c7:e9: 1c:ff:d5:e3:36:5f:e8:71:11:f5:0f:29:fb:12:c8:41:d1:9f: 1d:04:63:c0:fa:84:dd:c9:99:72:b8:96:b6:73:a9:4a:61:c3: d1:78:25:6e:d3:05:f4:5d:21:4b:b5:4c:f9:8a:5a:5d:dd:8a: f7:d3:75:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3qU5CUrbm4kPeMRWhMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh NzlhNWIwHhcNMjUxMjIwMjIwMDQxWhcNMjUxMjIxMjIwMDQxWjAzMTEwLwYDVQQD Eyg4YWI5NGZjMWNhOTYxZjNhOTJlNGYzOWVkNzVkMGU1MjE3OWI3MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39RZyLTA+6w4xeahmunZLN4iCluL JZBD7PP36uR36pra3xUH+KtXybkXPv4i+j6+zNx+42zbZw8oCMQtSD5TwTHa2r8T OqenJx7PnrSWULAK+wVL0JO3VC1IsCgCCMtI+ItM8yvL/2b2RxLTITQqQHCcIlBA lBt79Kki6NWVW9yiHHfKNTbtomLpzDy9+NNExuxY3Q7xcPDx59DruNS0EtDQB2/H WnlhBxEpAYYi2Y3k6dzSPvzx1FoWCr2VHo44K++/Kt3QY4Jm5QXOVAjg+vaCzjWB XbdyZR9cZFPVRKocwbSGK/4vsFx8zfyDZ40DzOWI96ZOTnPYkzuQx45gPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq5T8HKlh86kuTzntddDlIXm3CvMB8GA1UdIwQY MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt MjI0ZjEwYTk4MWZlLzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiSseyO0 TrJur1vEbJPQcw9KmMY0B30WhZKg2jI6amZgxojYjEYQC0jlz6th2kBnRHsW6+lz WG1R3towa77iBIgmy5SMZC+UFqi+464tPN/lw68eqSJx7A2ly55xW3laqI+IqeJT /mf5J3sNeR9tZYlfVXtCNLaS5PlxcjrmDQE/pDCMkmnOmrP7pafYFAjBWPPhIyGE lACU32k9GJa4k6m69NTAMQ8d3TuVdHXCiGr65YTrwBv7VvGahStRe33m5UAyF8fp HP/V4zZf6HER9Q8p+xLIQdGfHQRjwPqE3cmZcriWtnOpSmHD0XglbtMF9F0hS7VM +YpaXd2K99N18w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:41:09 2025 by rpki-client