This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json) Hash identifier: spG0b/d32j4YpENqMxWu0fE8lcG1JJKMPrfAW+hjHtw= Subject key identifier: 3C:D2:E7:C6:31:B9:D4:8A:DA:37:B6:EE:52:89:53:A2:C8:25:F0:A6 Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f Certificate serial: 019B514EDC3771D216705F7240B4C820DC3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft Manifest number: 06E1 Signing time: Wed 24 Dec 2025 17:01:21 +0000 Manifest this update: Wed 24 Dec 2025 17:01:21 +0000 Manifest next update: Thu 25 Dec 2025 17:01:21 +0000 Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=) 2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: AWWh437j4SdmPYtLWeOfiqnQRDfB4by+uDITmjXES90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:dc:37:71:d2:16:70:5f:72:40:b4:c8:20:dc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f Validity Not Before: Dec 24 17:01:21 2025 GMT Not After : Dec 25 17:01:21 2025 GMT Subject: CN=3cd2e7c631b9d48ada37b6ee528953a2c825f0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:80:a9:85:45:02:dd:ce:d6:b6:aa:e7:f7:01: ac:de:e7:76:5f:18:7e:d0:e1:23:82:40:61:d1:7d: 30:a7:18:8e:62:64:b2:21:e9:ce:fc:04:84:fe:c9: a4:80:ec:ea:38:a5:73:d5:f4:f7:98:82:b3:03:21: 11:b1:04:a1:2e:f2:29:56:29:fd:a9:bb:83:f6:7f: 99:b8:0b:93:2a:c2:bb:6a:03:46:42:7d:86:91:69: 3b:6a:37:77:d8:be:83:64:81:f1:f9:74:fe:4b:6f: e3:23:36:0b:ab:cd:5f:b2:f7:41:54:75:6f:f0:e8: 87:34:0d:77:c5:71:a5:f2:a7:8c:b2:ef:d3:95:e7: 81:9c:b5:9f:50:68:8f:1b:30:fd:a3:4c:e2:29:eb: 45:34:a9:6b:b0:1b:8d:a6:b7:c4:d2:67:d8:71:0e: b2:4e:93:cd:b6:c3:a1:89:40:bf:eb:4c:a5:66:1f: c2:c6:17:78:0d:81:98:7a:8c:88:b4:4c:02:82:3f: e1:d6:0d:e0:9a:d9:81:f3:55:3f:70:cb:02:49:f2: 9a:91:f6:96:9a:03:2f:4c:9a:61:2b:43:7d:16:f4: ed:40:eb:00:26:4d:f7:a2:6d:ce:51:a3:2b:f0:22: 7e:94:e9:b7:e4:5a:c5:e3:8a:92:d1:81:1f:76:4d: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D2:E7:C6:31:B9:D4:8A:DA:37:B6:EE:52:89:53:A2:C8:25:F0:A6 X509v3 Authority Key Identifier: keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d8:27:7e:4e:dd:a5:27:a5:bf:a4:33:90:9d:91:93:f5:f7: f0:48:53:6a:22:49:71:9f:37:ac:b9:be:22:dc:79:8c:d4:8d: 05:cf:1b:f3:1c:9f:1d:58:bb:42:0e:aa:46:61:97:3c:b5:ed: 0e:35:61:a6:1d:a4:af:4d:9a:9d:96:a2:cf:b5:69:d0:c3:c5: 36:21:24:85:17:ff:e2:0e:5f:54:d9:39:f5:05:90:53:4e:d1: 5d:79:be:37:33:87:d9:97:d8:03:14:e5:a5:d6:a8:fd:51:df: e9:24:0d:f4:0f:87:24:44:cf:a5:d1:f1:54:66:08:2e:bc:a0: 02:e4:82:1e:ed:d3:65:0b:64:a5:d1:05:85:61:d9:e8:49:8a: 50:25:ef:87:2a:3c:45:4b:ba:71:83:21:e0:a0:9a:b5:ea:cf: 8f:b0:1b:83:e8:c4:76:98:0a:f3:59:c6:42:e6:ff:24:36:4f: 78:b0:b1:6a:76:ee:3f:4c:a4:40:9b:84:bb:b3:8d:70:b4:7b: 7b:68:c0:0b:5b:85:46:1b:42:a9:e2:1d:4e:c6:2c:57:2f:5f: 3b:c6:88:98:4f:6d:09:f1:09:a5:44:7e:d7:d0:f9:07:9d:8e: 6f:24:b3:02:fa:08:7b:55:e0:65:1c:31:e4:9c:b0:b3:b7:37: 9e:04:f6:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTtw3cdIWcF9yQLTIINw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGY2ODM4NjdlZjc2OWEwYTIyYWRlMTcxMThlZDA2ZmE1 N2I4MWYwHhcNMjUxMjI0MTcwMTIxWhcNMjUxMjI1MTcwMTIxWjAzMTEwLwYDVQQD EygzY2QyZTdjNjMxYjlkNDhhZGEzN2I2ZWU1Mjg5NTNhMmM4MjVmMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oCphUUC3c7Wtqrn9wGs3ud2Xxh+ 0OEjgkBh0X0wpxiOYmSyIenO/ASE/smkgOzqOKVz1fT3mIKzAyERsQShLvIpVin9 qbuD9n+ZuAuTKsK7agNGQn2GkWk7ajd32L6DZIHx+XT+S2/jIzYLq81fsvdBVHVv 8OiHNA13xXGl8qeMsu/TleeBnLWfUGiPGzD9o0ziKetFNKlrsBuNprfE0mfYcQ6y TpPNtsOhiUC/60ylZh/Cxhd4DYGYeoyItEwCgj/h1g3gmtmB81U/cMsCSfKakfaW mgMvTJphK0N9FvTtQOsAJk33om3OUaMr8CJ+lOm35FrF44qS0YEfdk1geQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzS58YxudSK2je27lKJU6LIJfCmMB8GA1UdIwQY MBaAFI4PaDhn73aaCiKt4XEY7Qb6V7gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NmMwMDItNzU4Yi00OTVhLWI5Y2Qt N2IwZGMwMGE4YzIwLzEvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84NmMwMDItNzU4Yi00OTVhLWI5Y2QtN2IwZGMwMGE4YzIw LzEvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9gnfk7d pSelv6QzkJ2Rk/X38EhTaiJJcZ83rLm+Itx5jNSNBc8b8xyfHVi7Qg6qRmGXPLXt DjVhph2kr02anZaiz7Vp0MPFNiEkhRf/4g5fVNk59QWQU07RXXm+NzOH2ZfYAxTl pdao/VHf6SQN9A+HJETPpdHxVGYILrygAuSCHu3TZQtkpdEFhWHZ6EmKUCXvhyo8 RUu6cYMh4KCaterPj7Abg+jEdpgK81nGQub/JDZPeLCxanbuP0ykQJuEu7ONcLR7 e2jAC1uFRhtCqeIdTsYsVy9fO8aImE9tCfEJpUR+19D5B52ObySzAvoIe1XgZRwx 5Jyws7c3ngT2MQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:57 2025 by rpki-client