This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json) Hash identifier: TDlW5N7+qBcilGuQIfoLPCjNOvIvHEPZD50hlwUvBqg= Subject key identifier: 16:3D:A5:0B:BD:BC:41:8A:63:FC:05:8A:F5:19:78:30:23:76:48:A0 Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f Certificate serial: 019B4F6062604DD857BCF6E1D976D266F242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft Manifest number: 06E0 Signing time: Wed 24 Dec 2025 08:01:15 +0000 Manifest this update: Wed 24 Dec 2025 08:01:15 +0000 Manifest next update: Thu 25 Dec 2025 08:01:15 +0000 Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=) 2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: V/tvyVO8XqSBfkjVhvvLjzHiKQUx/PQf6Vz6/NTRgKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:62:60:4d:d8:57:bc:f6:e1:d9:76:d2:66:f2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f Validity Not Before: Dec 24 08:01:15 2025 GMT Not After : Dec 25 08:01:15 2025 GMT Subject: CN=163da50bbdbc418a63fc058af5197830237648a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:af:d2:7d:92:2f:da:6c:1f:96:42:ba:47: 7d:db:91:eb:8b:9b:97:d5:48:ea:3a:7e:fa:bb:05: 43:9d:ab:a1:bf:ac:b2:54:50:05:fe:96:8f:fb:f4: e3:e8:30:1e:70:09:5e:9e:c0:6b:32:90:48:4f:26: 1b:38:7a:2c:12:cd:03:37:76:4f:ad:4e:ac:89:8c: aa:92:ad:0e:35:22:88:32:21:ae:c7:8d:c9:d6:3a: e5:d4:88:6a:e9:16:b8:d1:6c:95:5c:f5:96:5f:34: df:30:eb:ea:3a:81:bd:39:16:c4:07:db:bb:a0:08: da:a1:ba:d6:db:25:c9:a2:36:9d:01:2c:25:e3:91: 16:32:e8:07:ac:ad:e1:a5:e6:88:ba:0c:e7:20:89: fe:e8:f5:e7:05:4e:3d:d3:e3:c8:72:47:7e:fd:65: 57:cb:1e:81:34:83:1f:81:11:3d:b7:78:36:9c:52: bc:1a:74:5b:ce:08:66:9b:20:35:5b:c8:c3:7e:e3: 2a:27:f8:90:97:b4:9a:bb:6d:02:34:6b:4a:72:44: 23:22:e3:54:32:14:3d:73:67:6f:64:fe:d6:5e:22: 0c:e0:af:81:15:3e:93:ee:66:02:20:a4:96:66:92: b3:5f:45:2f:66:22:8d:b9:20:51:05:1b:bc:83:0d: 76:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:A5:0B:BD:BC:41:8A:63:FC:05:8A:F5:19:78:30:23:76:48:A0 X509v3 Authority Key Identifier: keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8f:52:99:42:1e:90:0e:6e:c0:bf:c2:0e:ee:25:ab:6e:37: 3b:d1:3c:a4:9b:42:9a:f6:bb:fa:4d:00:08:4f:3d:8b:a3:a8: 4d:de:54:36:df:dd:6e:a0:7e:65:a6:1b:0c:6d:33:eb:55:d0: 01:3c:2e:ce:f8:36:de:ff:48:82:d9:16:f6:13:e8:38:c5:5a: c9:97:eb:82:9a:e2:82:ed:87:b0:84:de:66:af:6a:31:57:8c: 3b:f3:be:19:04:f2:f7:fc:3a:49:8f:a0:4d:fd:3e:1d:4e:ca: 67:0e:54:21:70:a6:59:ae:5a:8b:6d:a4:f7:20:f4:1e:0f:8d: 53:c9:e1:03:79:cd:df:37:9d:4e:17:de:5c:7d:4d:97:cb:78: e5:5e:97:2c:40:59:c1:8b:af:64:37:86:86:97:78:f3:e1:67: 5d:a0:71:78:e6:98:42:d8:ab:ba:3c:90:07:07:48:da:e2:ae: 22:5b:9a:88:44:43:3d:80:89:86:ce:88:66:11:9d:fe:be:93: b9:3a:1d:55:98:0f:d9:7b:1a:c7:de:18:ae:ed:dc:88:b4:8e: 8a:6b:6c:25:f1:66:b3:bf:c9:88:4b:ac:d7:f7:62:9d:73:c9: ef:9b:f6:c9:41:4c:c0:30:2a:08:df:ea:54:7a:cf:cb:36:6c: e4:4a:fc:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYGJgTdhXvPbh2XbSZvJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGY2ODM4NjdlZjc2OWEwYTIyYWRlMTcxMThlZDA2ZmE1 N2I4MWYwHhcNMjUxMjI0MDgwMTE1WhcNMjUxMjI1MDgwMTE1WjAzMTEwLwYDVQQD EygxNjNkYTUwYmJkYmM0MThhNjNmYzA1OGFmNTE5NzgzMDIzNzY0OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufKv0n2SL9psH5ZCukd925Hri5uX 1UjqOn76uwVDnauhv6yyVFAF/paP+/Tj6DAecAlensBrMpBITyYbOHosEs0DN3ZP rU6siYyqkq0ONSKIMiGux43J1jrl1Ihq6Ra40WyVXPWWXzTfMOvqOoG9ORbEB9u7 oAjaobrW2yXJojadASwl45EWMugHrK3hpeaIugznIIn+6PXnBU490+PIckd+/WVX yx6BNIMfgRE9t3g2nFK8GnRbzghmmyA1W8jDfuMqJ/iQl7Sau20CNGtKckQjIuNU MhQ9c2dvZP7WXiIM4K+BFT6T7mYCIKSWZpKzX0UvZiKNuSBRBRu8gw12GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY9pQu9vEGKY/wFivUZeDAjdkigMB8GA1UdIwQY MBaAFI4PaDhn73aaCiKt4XEY7Qb6V7gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NmMwMDItNzU4Yi00OTVhLWI5Y2Qt N2IwZGMwMGE4YzIwLzEvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84NmMwMDItNzU4Yi00OTVhLWI5Y2QtN2IwZGMwMGE4YzIw LzEvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY9SmUIe kA5uwL/CDu4lq243O9E8pJtCmva7+k0ACE89i6OoTd5UNt/dbqB+ZaYbDG0z61XQ ATwuzvg23v9IgtkW9hPoOMVayZfrgprigu2HsITeZq9qMVeMO/O+GQTy9/w6SY+g Tf0+HU7KZw5UIXCmWa5ai22k9yD0Hg+NU8nhA3nN3zedThfeXH1Nl8t45V6XLEBZ wYuvZDeGhpd48+FnXaBxeOaYQtirujyQBwdI2uKuIluaiERDPYCJhs6IZhGd/r6T uTodVZgP2Xsax94Yru3ciLSOimtsJfFms7/JiEus1/dinXPJ75v2yUFMwDAqCN/q VHrPyzZs5Er8Gg== -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:35 2025 by rpki-client