This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json) Hash identifier: zCrdFyEIL+3bIWZeDbvCM4VQgsIfbMZT4ZaAAhnDhSw= Subject key identifier: 80:C8:A8:CB:FC:B8:ED:C0:02:37:49:E1:F4:8F:D9:DA:3A:3A:DD:9C Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36 Certificate serial: 019B38D88A698060A56A95BDA9BEE1C71EC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft Manifest number: 164B Signing time: Fri 19 Dec 2025 23:01:13 +0000 Manifest this update: Fri 19 Dec 2025 23:01:13 +0000 Manifest next update: Sat 20 Dec 2025 23:01:13 +0000 Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=) 2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=) 3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: lFwVwbhYpCXPkpOLbJ5H73RsS2MiP55ICueRfNueiUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:8a:69:80:60:a5:6a:95:bd:a9:be:e1:c7:1e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36 Validity Not Before: Dec 19 23:01:13 2025 GMT Not After : Dec 20 23:01:13 2025 GMT Subject: CN=80c8a8cbfcb8edc0023749e1f48fd9da3a3add9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:3e:57:f0:fd:7d:89:f6:d0:df:2c:64:fb: 21:9c:6c:c1:b2:15:9f:19:9b:55:d1:75:9d:5b:66: b9:56:1a:34:f5:32:de:28:bd:5e:25:3f:25:2e:91: 18:53:ba:26:f7:ff:f7:f9:86:e3:5e:c5:56:ab:c3: b2:20:fe:3c:43:eb:ad:7e:95:9a:e9:9e:79:47:ef: e7:b6:dc:62:35:c9:2e:f0:ec:c5:82:58:8c:66:17: 11:ef:f9:35:e6:54:e8:66:58:f8:82:92:7e:a9:fa: 9c:aa:6a:c9:05:21:01:39:41:68:5b:c0:24:12:f0: e2:88:74:c6:e9:af:17:31:2a:c6:6f:78:da:8f:ae: 3c:0e:33:50:3c:e3:a5:fb:09:21:b4:f9:da:91:e6: d2:4f:55:1d:47:0a:9f:88:7c:f6:5a:58:6e:b8:38: 56:f3:b9:44:74:8a:a6:61:90:02:eb:c4:50:86:c3: fa:9e:c2:ed:ac:48:05:0a:91:f7:61:ab:60:84:85: 02:78:be:15:d9:3f:b2:a2:f2:8d:d6:d4:6f:aa:69: ed:3f:96:8e:51:8e:26:e7:31:b1:52:0b:7b:38:47: a0:27:19:9a:0c:b8:fb:b5:0d:37:c3:73:25:96:fa: 36:90:25:34:55:be:f7:be:b0:54:aa:08:26:9e:c9: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C8:A8:CB:FC:B8:ED:C0:02:37:49:E1:F4:8F:D9:DA:3A:3A:DD:9C X509v3 Authority Key Identifier: keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:34:27:f2:6c:e2:f9:c3:40:9e:53:90:78:37:f6:11:94:36: 0c:e8:41:a1:ad:8c:eb:04:8e:50:ed:49:06:0e:8e:0c:fe:d5: e2:36:57:86:54:fa:96:be:e4:c7:e1:5e:35:67:c1:37:c6:1b: b3:d3:d9:82:ea:23:c5:06:f4:d5:b3:3a:f0:3d:26:e0:50:75: 88:45:a5:c5:58:e9:79:48:1a:c4:e9:83:31:f5:dc:cb:df:1f: ec:5d:ac:d2:95:ed:8a:97:49:7b:da:b7:d5:59:7a:28:6e:c3: 9d:c3:60:87:16:13:eb:12:9a:8d:f4:44:8b:e1:d7:1e:61:37: 04:7e:d0:35:fc:b6:f3:e7:6a:0d:1d:c2:18:30:e7:cd:a7:3b: f2:ad:a7:71:ef:ad:7e:31:77:49:79:7d:f8:e7:d5:27:b5:f6: 74:e4:cf:aa:0e:b1:ea:2a:f4:b5:28:e4:c8:b4:de:35:b0:5d: 52:ad:de:0c:e1:7b:54:55:82:2b:cb:cb:9c:d2:b9:3c:36:9a: 17:b1:99:35:e5:51:4f:2a:11:17:1b:79:0d:16:69:cf:94:0b: 80:78:0c:63:21:a7:3a:4b:30:c8:0e:47:ed:88:d8:2e:0b:d2: dd:20:bb:56:89:29:0b:6a:2f:51:d9:3c:a3:8a:93:67:d0:79: a9:51:ed:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42IppgGClapW9qb7hxx7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNmVhZGI4NjU5YmM3MzRkY2NiMjlmNjM4NDIxMDM2YmI5 MjJlMzYwHhcNMjUxMjE5MjMwMTEzWhcNMjUxMjIwMjMwMTEzWjAzMTEwLwYDVQQD Eyg4MGM4YThjYmZjYjhlZGMwMDIzNzQ5ZTFmNDhmZDlkYTNhM2FkZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a4+V/D9fYn20N8sZPshnGzBshWf GZtV0XWdW2a5Vho09TLeKL1eJT8lLpEYU7om9//3+YbjXsVWq8OyIP48Q+utfpWa 6Z55R+/nttxiNcku8OzFgliMZhcR7/k15lToZlj4gpJ+qfqcqmrJBSEBOUFoW8Ak EvDiiHTG6a8XMSrGb3jaj648DjNQPOOl+wkhtPnakebST1UdRwqfiHz2WlhuuDhW 87lEdIqmYZAC68RQhsP6nsLtrEgFCpH3YatghIUCeL4V2T+yovKN1tRvqmntP5aO UY4m5zGxUgt7OEegJxmaDLj7tQ03w3Mllvo2kCU0Vb73vrBUqggmnslMxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDIqMv8uO3AAjdJ4fSP2do6Ot2cMB8GA1UdIwQY MBaAFIxurbhlm8c03Msp9jhCEDa7ki42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQt NjY0NWRkM2Q2MjRiLzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQtNjY0NWRkM2Q2MjRi LzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDQn8mzi +cNAnlOQeDf2EZQ2DOhBoa2M6wSOUO1JBg6ODP7V4jZXhlT6lr7kx+FeNWfBN8Yb s9PZguojxQb01bM68D0m4FB1iEWlxVjpeUgaxOmDMfXcy98f7F2s0pXtipdJe9q3 1Vl6KG7DncNghxYT6xKajfREi+HXHmE3BH7QNfy28+dqDR3CGDDnzac78q2nce+t fjF3SXl9+OfVJ7X2dOTPqg6x6ir0tSjkyLTeNbBdUq3eDOF7VFWCK8vLnNK5PDaa F7GZNeVRTyoRFxt5DRZpz5QLgHgMYyGnOkswyA5H7YjYLgvS3SC7VokpC2ovUdk8 o4qTZ9B5qVHt1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:54 2025 by rpki-client