This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json) Hash identifier: emW8alMe5EVdBb6AmNeSSsZMaNeQIoc53BM8UUiFioc= Subject key identifier: F4:8D:45:12:58:95:A0:CE:3B:90:EC:C2:58:CC:FB:B4:DC:D5:31:6C Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Certificate serial: 019B2A781B506ED6C020CBEF73FAAF31E6FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft Manifest number: 1179 Signing time: Wed 17 Dec 2025 04:01:12 +0000 Manifest this update: Wed 17 Dec 2025 04:01:12 +0000 Manifest next update: Thu 18 Dec 2025 04:01:12 +0000 Files and hashes: 1: 7IomEO57DDrl4ZBLVKDC6qP3KEE.roa (hash: AwCfU2h4jJPaAJIb84vSAgUR4ElWsWxd3ZUQNOuBkOc=) 2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: yvrp5yzpJR6tTu7OaMI9PVRrqXfKkM/zN6pRz4qZcZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:1b:50:6e:d6:c0:20:cb:ef:73:fa:af:31:e6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Validity Not Before: Dec 17 04:01:12 2025 GMT Not After : Dec 18 04:01:12 2025 GMT Subject: CN=f48d45125895a0ce3b90ecc258ccfbb4dcd5316c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:47:d2:5f:de:f0:f1:43:89:67:de:12:b1: 36:97:ab:1c:94:e8:58:f0:98:27:ae:64:2d:41:fc: 39:45:e7:c6:b6:02:1a:8a:11:f0:30:fd:53:b6:f1: 21:87:81:31:0e:78:dc:09:d3:2f:a6:83:5a:64:c8: b3:4d:04:57:76:e9:1a:f5:b3:13:0d:ec:cc:bf:fa: 10:d8:89:e1:12:8d:67:ca:ec:a8:5e:b8:26:5f:5d: c5:95:64:7f:48:41:b1:c4:bb:c0:7e:d8:46:cd:47: ab:61:69:29:92:11:23:2f:35:43:d5:a3:dd:76:3f: 94:5b:74:ba:c1:f8:c6:cc:ab:d3:be:55:93:86:c2: 61:23:28:9d:4a:e6:09:53:0f:a6:43:33:ba:ea:66: 53:fb:41:3e:49:0d:50:74:a1:9b:e2:69:67:47:fe: d6:a9:fa:d2:be:a7:d1:86:98:84:79:10:44:7e:fd: 17:c1:f6:3f:4e:dd:ef:d1:4a:86:b5:0d:76:4e:02: dc:d7:f6:06:6e:ec:db:97:2c:e3:47:21:f2:d6:a4: de:39:9a:5c:43:c1:cd:f9:97:0b:77:4a:2d:c0:4d: cd:81:b1:40:f8:ce:1e:a9:aa:b2:f7:d2:dc:1b:91: bb:d6:3d:92:b3:0f:9f:a1:2b:22:3a:f4:9f:2e:83: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8D:45:12:58:95:A0:CE:3B:90:EC:C2:58:CC:FB:B4:DC:D5:31:6C X509v3 Authority Key Identifier: keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:51:41:d2:33:a8:c0:5c:2b:7d:4b:a6:57:4a:f3:7c:cc:69: 48:ce:d6:7b:ac:f7:d3:6b:02:4e:e9:66:1a:9d:c5:7b:3a:7a: 5e:81:63:98:53:63:3e:89:db:d2:de:52:f5:21:1c:b5:6d:64: ab:8f:21:9d:17:65:08:09:43:3c:4a:eb:37:5e:0f:ff:95:be: b2:69:fa:2b:bf:9a:2e:9b:d5:00:46:9e:f9:8d:2f:ae:17:98: 83:8d:49:44:36:4b:35:81:98:06:11:86:f3:5c:6b:e3:11:5b: 0d:d2:0f:c9:72:d6:6a:fb:10:95:42:87:e9:88:2b:00:02:bd: 07:3c:10:dc:c1:f6:4d:6e:f0:44:94:d4:e7:85:cd:df:56:03: df:2e:8c:93:99:f8:f8:b5:f7:3e:ea:38:eb:da:93:6f:bf:4a: cd:85:b9:10:71:b9:cc:90:88:2e:15:c3:cd:9a:3b:d3:cb:31: d0:0e:a4:38:d3:e9:8f:b1:40:31:6c:94:26:49:57:ec:d6:da: 17:41:b3:fa:49:da:c3:07:00:c7:38:41:ef:8d:0c:8e:95:a7: fc:54:3b:38:91:27:f7:ef:53:37:5f:c9:fe:a5:70:d5:d2:2e: 0e:03:1f:2a:d5:0d:1c:16:e4:36:8b:38:43:b1:77:82:46:2c: 71:41:0f:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeBtQbtbAIMvvc/qvMeb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNjkyZDI5YWMzMTJkMmFiNjA2MWU0NGE5ZGUwZWQzNzUx YWVhN2UwHhcNMjUxMjE3MDQwMTEyWhcNMjUxMjE4MDQwMTEyWjAzMTEwLwYDVQQD EyhmNDhkNDUxMjU4OTVhMGNlM2I5MGVjYzI1OGNjZmJiNGRjZDUzMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoZH0l/e8PFDiWfeErE2l6sclOhY 8JgnrmQtQfw5RefGtgIaihHwMP1TtvEhh4ExDnjcCdMvpoNaZMizTQRXduka9bMT DezMv/oQ2InhEo1nyuyoXrgmX13FlWR/SEGxxLvAfthGzUerYWkpkhEjLzVD1aPd dj+UW3S6wfjGzKvTvlWThsJhIyidSuYJUw+mQzO66mZT+0E+SQ1QdKGb4mlnR/7W qfrSvqfRhpiEeRBEfv0XwfY/Tt3v0UqGtQ12TgLc1/YGbuzblyzjRyHy1qTeOZpc Q8HN+ZcLd0otwE3NgbFA+M4eqaqy99LcG5G71j2Ssw+foSsiOvSfLoOApQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSNRRJYlaDOO5DswljM+7Tc1TFsMB8GA1UdIwQY MBaAFIxpLSmsMS0qtgYeRKneDtN1Gup+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEt OTI2MmU1M2UxZDEwLzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEtOTI2MmU1M2UxZDEw LzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVFB0jOo wFwrfUumV0rzfMxpSM7We6z302sCTulmGp3Fezp6XoFjmFNjPonb0t5S9SEctW1k q48hnRdlCAlDPErrN14P/5W+smn6K7+aLpvVAEae+Y0vrheYg41JRDZLNYGYBhGG 81xr4xFbDdIPyXLWavsQlUKH6YgrAAK9BzwQ3MH2TW7wRJTU54XN31YD3y6Mk5n4 +LX3Puo469qTb79KzYW5EHG5zJCILhXDzZo708sx0A6kONPpj7FAMWyUJklX7Nba F0Gz+knawwcAxzhB740MjpWn/FQ7OJEn9+9TN1/J/qVw1dIuDgMfKtUNHBbkNos4 Q7F3gkYscUEPjg== -----END CERTIFICATE-----Generated at Wed Dec 17 11:22:28 2025 by rpki-client