This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json) Hash identifier: umvkQWeeqqucPd0ggNa4MRsNnzm39uEBsJ1kixR2IEI= Subject key identifier: A9:BB:13:F6:5B:2E:2F:F0:87:7D:9F:B3:B0:10:2C:8C:3D:A5:23:1E Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Certificate serial: 019B3A905B88B80C4B0D33224A8041F0BE53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 07:01:37 +0000 Manifest this update: Sat 20 Dec 2025 07:01:37 +0000 Manifest next update: Sun 21 Dec 2025 07:01:37 +0000 Files and hashes: 1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=) 2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=) 3: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=) 4: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: y7k8xSQlGeWOrC6NgYWF4Be756muTigzEwFQ2ch5n2Y=) 5: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:5b:88:b8:0c:4b:0d:33:22:4a:80:41:f0:be:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Validity Not Before: Dec 20 07:01:37 2025 GMT Not After : Dec 21 07:01:37 2025 GMT Subject: CN=a9bb13f65b2e2ff0877d9fb3b0102c8c3da5231e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:66:d4:d5:f1:b6:40:3a:89:bc:e7:2c:c5: 99:1c:9b:a6:bb:81:02:f2:af:15:1f:19:f2:d9:ef: 67:f2:56:62:63:e5:17:0b:4f:77:09:82:aa:7a:04: 8d:15:45:ba:d0:bb:60:16:b9:a8:b8:3e:81:b0:62: b9:c0:b8:69:f5:9b:cb:76:3b:7f:34:5b:62:0c:0b: a3:7c:ec:6c:db:9b:62:5c:ce:c3:81:48:90:f0:86: 38:cb:9e:aa:26:a4:e2:00:3f:d5:f6:38:01:2c:fe: db:56:a3:f5:cd:7a:69:b8:41:2f:4a:35:7b:11:7a: 67:94:a1:43:58:4c:f1:45:92:c2:07:1d:1a:4b:7f: 4c:94:f4:6c:01:fd:63:25:2b:91:ad:67:57:86:4a: 11:f6:ee:e3:b3:e5:e8:48:12:2f:c0:f9:ad:62:ee: 61:06:1c:64:f1:20:37:ba:16:1a:4d:82:7e:58:1f: 90:ac:ce:f3:c8:98:34:e9:9b:3c:74:67:4b:21:a6: e9:d0:17:c1:a1:06:3a:28:fe:ed:ff:c1:31:91:93: 1c:7e:81:60:25:0c:a8:af:dc:3e:ba:fb:20:3c:58: 5a:e2:f5:83:4f:ca:f7:ef:90:89:38:17:89:e2:6c: 04:bd:ff:d6:e2:75:60:57:86:d1:15:5d:05:d6:0c: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BB:13:F6:5B:2E:2F:F0:87:7D:9F:B3:B0:10:2C:8C:3D:A5:23:1E X509v3 Authority Key Identifier: keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:95:12:3d:5b:4e:15:e4:17:da:43:e6:1f:42:32:bc:43:80: 9a:6d:6e:bd:a9:b3:ac:ad:ce:3c:8b:19:2a:a5:ea:30:23:e8: 73:9a:92:44:8b:e9:f0:5a:aa:ea:70:70:6e:8c:8f:d5:ff:16: 02:80:9c:51:25:fc:23:3d:62:64:11:b4:65:9c:39:0a:9a:55: 34:63:a9:81:19:88:e1:d9:e4:52:d8:35:f8:e0:6b:9d:66:6d: 6f:6c:84:e5:1e:05:c5:7a:82:1e:a8:83:a3:b6:d5:9a:73:76: 5e:78:31:e8:80:97:78:1e:61:aa:b0:16:87:a4:01:4d:6b:5c: b7:f4:36:0c:19:26:36:36:34:f5:bf:5c:bf:1e:2a:31:32:77: 8a:c0:dd:f6:24:cf:e6:f5:5c:fd:47:c7:56:d2:70:f8:48:35: bf:5b:0e:96:ae:98:01:04:b9:4f:55:b4:28:a5:c4:e8:53:27: 97:e4:25:a8:4b:cd:20:7a:25:6d:0d:d9:70:4d:6d:0f:3e:dc: dc:3d:b3:ea:6a:75:3d:64:47:e7:81:63:65:a1:cf:d2:e9:40: da:79:af:8e:58:3c:f5:cf:e7:24:9b:cd:b4:5a:2f:5f:ab:cc: dd:13:7a:61:87:52:9f:34:d2:be:4e:94:2a:0d:b2:c7:b7:e5: da:26:0b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kFuIuAxLDTMiSoBB8L5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx ZTI5YzQwHhcNMjUxMjIwMDcwMTM3WhcNMjUxMjIxMDcwMTM3WjAzMTEwLwYDVQQD EyhhOWJiMTNmNjViMmUyZmYwODc3ZDlmYjNiMDEwMmM4YzNkYTUyMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskRm1NXxtkA6ibznLMWZHJumu4EC 8q8VHxny2e9n8lZiY+UXC093CYKqegSNFUW60LtgFrmouD6BsGK5wLhp9ZvLdjt/ NFtiDAujfOxs25tiXM7DgUiQ8IY4y56qJqTiAD/V9jgBLP7bVqP1zXppuEEvSjV7 EXpnlKFDWEzxRZLCBx0aS39MlPRsAf1jJSuRrWdXhkoR9u7js+XoSBIvwPmtYu5h Bhxk8SA3uhYaTYJ+WB+QrM7zyJg06Zs8dGdLIabp0BfBoQY6KP7t/8ExkZMcfoFg JQyor9w+uvsgPFha4vWDT8r375CJOBeJ4mwEvf/W4nVgV4bRFV0F1gxQlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm7E/ZbLi/wh32fs7AQLIw9pSMeMB8GA1UdIwQY MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt Mzg2YzFmOGIwNjQwLzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpUSPVtO FeQX2kPmH0IyvEOAmm1uvamzrK3OPIsZKqXqMCPoc5qSRIvp8Fqq6nBwboyP1f8W AoCcUSX8Iz1iZBG0ZZw5CppVNGOpgRmI4dnkUtg1+OBrnWZtb2yE5R4FxXqCHqiD o7bVmnN2Xngx6ICXeB5hqrAWh6QBTWtct/Q2DBkmNjY09b9cvx4qMTJ3isDd9iTP 5vVc/UfHVtJw+Eg1v1sOlq6YAQS5T1W0KKXE6FMnl+QlqEvNIHolbQ3ZcE1tDz7c 3D2z6mp1PWRH54FjZaHP0ulA2nmvjlg89c/nJJvNtFovX6vM3RN6YYdSnzTSvk6U Kg2yx7fl2iYLXw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:25 2025 by rpki-client