This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json) Hash identifier: 4cgm8oJpreD9sTdDQnVwiLJuBF6vO8drrjVvENxa6xA= Subject key identifier: 61:20:0A:36:92:FC:1D:C2:E7:9D:13:AF:EC:22:61:F6:C5:68:19:4E Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36 Certificate serial: 019B51F3031D33B9788F4C665D370C5B0F00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft Manifest number: 1658 Signing time: Wed 24 Dec 2025 20:00:39 +0000 Manifest this update: Wed 24 Dec 2025 20:00:39 +0000 Manifest next update: Thu 25 Dec 2025 20:00:39 +0000 Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=) 2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=) 3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: qUB8DgQpY+BXWgQs9kcgvIenzGeUDDfEPoqJSZZ0f8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:03:1d:33:b9:78:8f:4c:66:5d:37:0c:5b:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36 Validity Not Before: Dec 24 20:00:39 2025 GMT Not After : Dec 25 20:00:39 2025 GMT Subject: CN=61200a3692fc1dc2e79d13afec2261f6c568194e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:62:be:a2:fa:86:62:3a:10:9d:35:17:39: 48:b4:8f:dd:83:45:dd:c9:25:66:83:87:63:2e:92: 4d:8e:54:20:98:bc:94:0b:38:69:e7:63:a4:86:5a: 1d:79:7f:f8:59:39:f6:84:26:c1:6e:90:ad:0c:6d: a4:09:a0:b4:e9:37:a0:3a:0c:d6:ba:49:3d:d3:d6: 69:7a:68:aa:71:d5:f5:db:8a:59:04:db:14:f9:43: fd:a7:f7:30:73:de:9d:0e:1d:84:93:d6:10:3c:de: 31:de:55:bb:50:c7:d1:b4:c0:77:c6:13:0f:f5:0b: a6:84:f1:2c:cd:8d:aa:b0:f8:44:a2:02:47:26:55: 24:2a:75:ee:f1:a6:56:cd:62:56:6e:b3:fb:90:0e: 2d:7c:3d:7d:b2:16:45:1c:a2:82:cb:fe:58:ae:b7: 3a:c9:cb:0e:9d:95:f2:ea:d5:31:1c:ec:48:74:b7: d2:59:11:6f:71:88:2c:49:3c:08:96:73:7e:21:52: 09:68:40:e6:df:e8:ab:14:f5:83:c6:3f:3d:bf:43: ae:2b:55:a9:19:0d:78:d8:e5:8e:ba:9d:2f:28:3e: 0a:d4:49:f1:34:f7:bb:52:f9:53:45:5d:27:ce:7c: ac:c2:bd:a6:b8:4f:72:e6:83:aa:97:5d:32:da:1f: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:20:0A:36:92:FC:1D:C2:E7:9D:13:AF:EC:22:61:F6:C5:68:19:4E X509v3 Authority Key Identifier: keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:58:8d:4e:b7:73:56:c8:7b:8d:c4:ad:8c:fd:a7:1f:f8: 0f:b7:79:d1:a5:7f:98:b7:9a:a8:48:36:76:69:86:6d:c9:a0: ca:60:8a:56:7d:e9:3a:26:8f:17:22:8c:13:6e:04:34:2b:bb: 5e:e0:01:7b:63:c2:55:25:f1:b8:68:b9:2b:04:20:37:2c:c0: f9:46:c2:8e:02:ef:78:d8:c4:46:d7:91:a2:4c:d5:3f:3d:a4: 96:3b:cf:0a:12:0a:1d:6c:e7:f5:06:5c:9c:ff:f0:bc:33:f1: ca:83:fd:7f:b8:90:fd:25:93:38:9a:c8:75:4d:6d:35:46:03: df:5c:14:4f:48:87:92:ac:8a:d4:57:8b:b7:43:60:2c:51:0c: f3:b0:ca:87:37:da:a3:c9:2f:36:c3:16:29:77:b2:a5:1b:3a: 64:27:e7:b8:43:cc:07:51:fa:61:ea:04:87:c1:ad:1e:6c:2e: fd:9b:05:8a:ce:65:35:83:e0:ad:25:61:6c:88:10:c0:f3:ca: 2a:ba:2c:30:96:70:e2:f7:a7:e4:bd:bf:26:34:0e:47:b0:0b: 14:91:48:f8:58:94:32:19:7f:f6:83:1f:5c:33:82:dd:04:fb: 83:91:83:ea:cd:2a:56:84:15:3e:e1:ce:e9:05:5e:02:11:b1: a9:fd:a8:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8wMdM7l4j0xmXTcMWw8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNmVhZGI4NjU5YmM3MzRkY2NiMjlmNjM4NDIxMDM2YmI5 MjJlMzYwHhcNMjUxMjI0MjAwMDM5WhcNMjUxMjI1MjAwMDM5WjAzMTEwLwYDVQQD Eyg2MTIwMGEzNjkyZmMxZGMyZTc5ZDEzYWZlYzIyNjFmNmM1NjgxOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbpivqL6hmI6EJ01FzlItI/dg0Xd ySVmg4djLpJNjlQgmLyUCzhp52OkhlodeX/4WTn2hCbBbpCtDG2kCaC06TegOgzW ukk909ZpemiqcdX124pZBNsU+UP9p/cwc96dDh2Ek9YQPN4x3lW7UMfRtMB3xhMP 9QumhPEszY2qsPhEogJHJlUkKnXu8aZWzWJWbrP7kA4tfD19shZFHKKCy/5Yrrc6 ycsOnZXy6tUxHOxIdLfSWRFvcYgsSTwIlnN+IVIJaEDm3+irFPWDxj89v0OuK1Wp GQ142OWOup0vKD4K1EnxNPe7UvlTRV0nznyswr2muE9y5oOql10y2h9lUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEgCjaS/B3C550Tr+wiYfbFaBlOMB8GA1UdIwQY MBaAFIxurbhlm8c03Msp9jhCEDa7ki42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQt NjY0NWRkM2Q2MjRiLzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQtNjY0NWRkM2Q2MjRi LzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj1YjU63 c1bIe43ErYz9px/4D7d50aV/mLeaqEg2dmmGbcmgymCKVn3pOiaPFyKME24ENCu7 XuABe2PCVSXxuGi5KwQgNyzA+UbCjgLveNjERteRokzVPz2kljvPChIKHWzn9QZc nP/wvDPxyoP9f7iQ/SWTOJrIdU1tNUYD31wUT0iHkqyK1FeLt0NgLFEM87DKhzfa o8kvNsMWKXeypRs6ZCfnuEPMB1H6YeoEh8GtHmwu/ZsFis5lNYPgrSVhbIgQwPPK KrosMJZw4ven5L2/JjQOR7ALFJFI+FiUMhl/9oMfXDOC3QT7g5GD6s0qVoQVPuHO 6QVeAhGxqf2oVw== -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:37 2025 by rpki-client