This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft File: jXskLMdAYjU4IyQFjJHa_GOZACY.mft (raw, json) Hash identifier: WNGAaegSJB4qvJz06hlRJ0itmDatDr+TQvCERvtSr2g= Subject key identifier: 01:85:6A:8E:1E:83:C3:3C:E9:BA:14:1D:A9:5D:EB:83:28:41:B4:02 Authority key identifier: 8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26 Certificate issuer: /CN=8d7b242cc7406235382324058c91dafc63990026 Certificate serial: 019B258851BF93F87926EAED22E2D81D59F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft Manifest number: 13 Signing time: Tue 16 Dec 2025 05:00:49 +0000 Manifest this update: Tue 16 Dec 2025 05:00:49 +0000 Manifest next update: Wed 17 Dec 2025 05:00:49 +0000 Files and hashes: 1: P0CumdZQgDSrrWlI0D1aYJJUcd0.asa (hash: BA2NFYuYvPxMigDBuhbLG4trF8mSaN77z6KytfnkVdg=) 2: jXskLMdAYjU4IyQFjJHa_GOZACY.crl (hash: uaGauK5XDmIvYY15UxKuKW+zZnq37wUQiVsqega76Gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:51:bf:93:f8:79:26:ea:ed:22:e2:d8:1d:59:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7b242cc7406235382324058c91dafc63990026 Validity Not Before: Dec 16 05:00:49 2025 GMT Not After : Dec 17 05:00:49 2025 GMT Subject: CN=01856a8e1e83c33ce9ba141da95deb832841b402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:aa:48:de:21:0b:3a:fa:de:ae:df:11:f6: 8e:1f:17:c0:e0:8f:58:4e:13:08:8c:09:54:ad:58: a3:04:07:ba:21:55:6c:af:b8:f9:22:9d:d2:07:c0: 4f:3c:77:68:b6:b0:e4:b0:bc:95:6b:7b:bd:fc:15: 29:c5:22:84:ec:e6:f3:86:a2:9a:a4:79:51:03:38: 1f:34:17:df:89:85:45:8d:81:dc:41:a9:6c:a5:88: 54:d9:d6:0d:85:04:6d:ec:3f:a0:89:63:96:93:32: 12:69:bf:68:dd:22:99:3e:fc:33:56:9e:5f:b6:05: 77:01:01:fc:cd:86:5b:01:22:13:52:ec:dd:34:5f: d3:40:6a:06:9e:7e:76:5a:b0:87:cc:fd:f0:6e:33: cd:f7:bd:83:e2:ec:af:e5:66:ad:c9:50:8e:df:a8: a1:07:43:e1:91:9d:ee:ec:95:27:67:77:7c:ae:5b: 31:f4:33:5f:60:2c:9c:82:3d:d5:56:dd:ab:3e:4d: bc:fe:e0:b4:f4:0a:e8:1b:8a:f7:5d:74:ae:0a:fe: 47:10:8c:10:04:20:eb:89:8a:2a:14:75:93:b7:12: bb:f3:81:3c:70:96:9f:a9:0c:7d:2e:1d:25:d2:d0: 0d:7e:d9:66:3b:a5:90:45:ca:ea:9e:69:eb:8b:26: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:6A:8E:1E:83:C3:3C:E9:BA:14:1D:A9:5D:EB:83:28:41:B4:02 X509v3 Authority Key Identifier: keyid:8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:d7:f2:c7:f9:61:b1:66:39:41:37:9a:99:a7:15:87:fd:a5: c5:61:7c:5b:d3:28:7c:9d:5e:b0:20:0d:77:b6:b2:2d:8b:54: d9:23:49:82:5e:1e:2f:ce:ef:ad:72:fd:78:61:72:1d:28:0d: c2:23:8f:0b:ca:90:ca:9c:26:e7:e8:59:35:0a:78:ac:89:a2: 0a:c1:ad:1d:89:7f:1b:52:a1:46:8c:37:11:75:88:26:69:79: 11:fc:9c:9a:d2:5f:37:6f:fd:96:fc:f3:01:c8:7d:34:21:64: 8b:44:9f:1a:8e:2e:f8:ad:95:97:4a:07:ca:1f:31:6c:69:96: bd:21:63:3d:64:48:19:9b:f2:73:a9:a2:a9:6f:a1:f7:b6:d0: c8:21:79:65:3c:1c:a9:cb:33:99:57:e1:fa:4d:bf:01:c9:ec: de:c3:51:e3:28:c1:ce:82:ee:c9:ed:ee:89:2b:1c:d4:59:05: b6:72:f5:42:76:7d:9b:eb:bc:55:0c:17:4f:f8:35:0c:d0:be: c3:59:ae:f3:cf:0d:34:d0:79:6f:e3:f1:3f:b2:09:5c:8f:66: c8:0b:87:d9:a1:a7:47:fb:59:01:3c:c1:fd:79:fe:d3:7e:df: bc:23:e3:7a:36:49:71:ad:41:48:bf:25:61:d8:2e:87:ed:29: e1:fd:41:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliFG/k/h5JurtIuLYHVnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkN2IyNDJjYzc0MDYyMzUzODIzMjQwNThjOTFkYWZjNjM5 OTAwMjYwHhcNMjUxMjE2MDUwMDQ5WhcNMjUxMjE3MDUwMDQ5WjAzMTEwLwYDVQQD EygwMTg1NmE4ZTFlODNjMzNjZTliYTE0MWRhOTVkZWI4MzI4NDFiNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsiqSN4hCzr63q7fEfaOHxfA4I9Y ThMIjAlUrVijBAe6IVVsr7j5Ip3SB8BPPHdotrDksLyVa3u9/BUpxSKE7ObzhqKa pHlRAzgfNBffiYVFjYHcQalspYhU2dYNhQRt7D+giWOWkzISab9o3SKZPvwzVp5f tgV3AQH8zYZbASITUuzdNF/TQGoGnn52WrCHzP3wbjPN972D4uyv5WatyVCO36ih B0PhkZ3u7JUnZ3d8rlsx9DNfYCycgj3VVt2rPk28/uC09AroG4r3XXSuCv5HEIwQ BCDriYoqFHWTtxK784E8cJafqQx9Lh0l0tANftlmO6WQRcrqnmnriybtQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGFao4eg8M86boUHald64MoQbQCMB8GA1UdIwQY MBaAFI17JCzHQGI1OCMkBYyR2vxjmQAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xNzRiNDktNTBjYi00NzhmLThhNWMt NGMyMjAzNWI5MmYwLzEvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xNzRiNDktNTBjYi00NzhmLThhNWMtNGMyMjAzNWI5MmYw LzEvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9fyx/lh sWY5QTeamacVh/2lxWF8W9MofJ1esCANd7ayLYtU2SNJgl4eL87vrXL9eGFyHSgN wiOPC8qQypwm5+hZNQp4rImiCsGtHYl/G1KhRow3EXWIJml5EfycmtJfN2/9lvzz Ach9NCFki0SfGo4u+K2Vl0oHyh8xbGmWvSFjPWRIGZvyc6miqW+h97bQyCF5ZTwc qcszmVfh+k2/Acns3sNR4yjBzoLuye3uiSsc1FkFtnL1QnZ9m+u8VQwXT/g1DNC+ w1mu888NNNB5b+PxP7IJXI9myAuH2aGnR/tZATzB/Xn+037fvCPjejZJca1BSL8l Ydguh+0p4f1BQQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:09 2025 by rpki-client