This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json) Hash identifier: 4qZZn57cklAMvOoKam9OTQLTvThXj7VzfUQ8cDiwA5o= Subject key identifier: 3E:08:6E:97:AA:23:97:D3:70:75:ED:11:89:C2:3C:C5:49:8F:C9:CB Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Certificate serial: 019B5260E36FA5554318374FCB3D780C16B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft Manifest number: 02EB Signing time: Wed 24 Dec 2025 22:00:39 +0000 Manifest this update: Wed 24 Dec 2025 22:00:39 +0000 Manifest next update: Thu 25 Dec 2025 22:00:39 +0000 Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=) 2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: ZcCInDtQidYEhOtSJfx4TA3XP11c/EUXSpY3RTydung=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:e3:6f:a5:55:43:18:37:4f:cb:3d:78:0c:16:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Validity Not Before: Dec 24 22:00:39 2025 GMT Not After : Dec 25 22:00:39 2025 GMT Subject: CN=3e086e97aa2397d37075ed1189c23cc5498fc9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:b0:a8:28:de:76:02:71:f0:42:72:2e:0c: 89:e5:90:0d:e4:67:f9:9a:1a:6d:55:db:ab:6e:aa: f5:fe:cf:20:d9:dd:86:1d:ce:d8:98:dd:ac:dc:f6: 81:2d:bd:59:13:be:d8:67:96:1b:76:ca:0e:7f:84: a6:73:40:46:87:34:f9:d2:40:a1:fd:36:91:99:a9: e8:ca:cb:9a:c8:e6:04:4d:a8:4d:17:3b:e2:7a:93: c2:df:16:60:57:f4:2f:9e:01:9f:a2:00:88:09:50: 60:fe:dd:d9:98:8d:60:41:79:5e:7e:95:e5:ac:75: 5b:5b:da:9e:6a:4c:ca:14:3b:1d:75:62:4f:1a:b6: 8f:ce:d4:f1:ba:0a:11:41:bd:ec:cc:41:18:64:54: 32:ca:5c:c3:34:eb:21:6a:50:61:21:ce:e9:be:7c: fb:f3:79:21:a9:67:64:68:e1:e1:1f:b1:bc:d2:be: ac:1c:b4:51:e5:b3:b5:e0:80:5c:c9:5c:3e:00:ee: 76:17:c2:71:e5:c2:76:38:4b:e8:99:e6:6f:a8:71: bc:3c:74:bb:9e:f4:31:2d:80:71:ce:1c:9b:f9:be: 15:54:80:34:cf:88:ee:90:4e:32:99:73:11:93:60: 13:a0:d9:65:87:7d:0f:05:8c:fb:e2:31:32:51:03: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:08:6E:97:AA:23:97:D3:70:75:ED:11:89:C2:3C:C5:49:8F:C9:CB X509v3 Authority Key Identifier: keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:48:a8:50:ff:9e:f7:2b:6d:4b:fd:8b:9b:f8:2c:8a:8d:9a: 3e:38:51:78:e0:ce:66:29:60:e0:ca:f9:e7:49:31:0b:c1:78: de:0d:be:12:eb:e9:59:37:f7:70:7a:cb:07:3c:4e:4e:14:79: 2f:da:6f:66:b2:63:6b:fa:a4:54:ea:3d:71:99:11:14:2f:2a: 64:6d:4d:27:77:d5:0d:c7:20:70:07:9d:5f:ef:e0:db:3a:34: 17:19:ff:4e:3f:18:09:05:93:5c:8c:c9:81:7d:60:05:80:18: 31:49:0c:fe:84:75:00:6f:12:7c:5f:a3:ce:62:9a:8d:78:14: d0:86:31:d5:5b:d8:4c:f6:0b:40:35:aa:08:8b:ee:a6:47:01: a2:24:6e:b9:9c:e9:42:fb:dc:fe:57:1e:81:a7:9e:3e:38:a7: 85:cc:28:8c:b7:51:5e:41:ca:cf:28:3e:db:28:51:80:18:5d: a3:fa:ee:6d:63:00:cb:7e:1d:ea:7f:81:49:9f:ae:85:97:ac: 38:fc:35:ec:48:86:66:de:18:5e:09:02:ca:80:65:85:e3:b0: f3:b8:cb:6b:55:2f:d0:77:12:2f:33:de:cf:4b:59:0c:a6:55: ca:9d:6e:25:37:5b:ff:80:a1:3e:66:49:4e:5c:9d:13:0c:ff: 87:11:06:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYONvpVVDGDdPyz14DBa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjgyZmYzZWM3Y2I4MWI3OGU2MjhhNzM1MTc2NDhkNjIy OWNhYjcwHhcNMjUxMjI0MjIwMDM5WhcNMjUxMjI1MjIwMDM5WjAzMTEwLwYDVQQD EygzZTA4NmU5N2FhMjM5N2QzNzA3NWVkMTE4OWMyM2NjNTQ5OGZjOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZWwqCjedgJx8EJyLgyJ5ZAN5Gf5 mhptVdurbqr1/s8g2d2GHc7YmN2s3PaBLb1ZE77YZ5YbdsoOf4Smc0BGhzT50kCh /TaRmanoysuayOYETahNFzviepPC3xZgV/QvngGfogCICVBg/t3ZmI1gQXlefpXl rHVbW9qeakzKFDsddWJPGraPztTxugoRQb3szEEYZFQyylzDNOshalBhIc7pvnz7 83khqWdkaOHhH7G80r6sHLRR5bO14IBcyVw+AO52F8Jx5cJ2OEvomeZvqHG8PHS7 nvQxLYBxzhyb+b4VVIA0z4jukE4ymXMRk2AToNllh30PBYz74jEyUQPb6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4IbpeqI5fTcHXtEYnCPMVJj8nLMB8GA1UdIwQY MBaAFIwoL/PsfLgbeOYopzUXZI1iKcq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUt NmNhM2U5ZDNlNzhkLzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUtNmNhM2U5ZDNlNzhk LzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0ioUP+e 9yttS/2Lm/gsio2aPjhReODOZilg4Mr550kxC8F43g2+EuvpWTf3cHrLBzxOThR5 L9pvZrJja/qkVOo9cZkRFC8qZG1NJ3fVDccgcAedX+/g2zo0Fxn/Tj8YCQWTXIzJ gX1gBYAYMUkM/oR1AG8SfF+jzmKajXgU0IYx1VvYTPYLQDWqCIvupkcBoiRuuZzp Qvvc/lcegaeePjinhcwojLdRXkHKzyg+2yhRgBhdo/rubWMAy34d6n+BSZ+uhZes OPw17EiGZt4YXgkCyoBlheOw87jLa1Uv0HcSLzPez0tZDKZVyp1uJTdb/4ChPmZJ TlydEwz/hxEGug== -----END CERTIFICATE-----Generated at Wed Dec 24 23:28:09 2025 by rpki-client