This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft File: jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json) Hash identifier: +RO4nDgQ6oVrmejHF33kQ+1FFmCTanZwfXdN+Vyo96Q= Subject key identifier: 02:AC:82:DB:4C:0F:89:43:94:F4:23:EC:96:4C:6F:23:CF:35:AB:96 Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c Certificate serial: 019B2219B0E7FE6527C74A3C5E2C041A562A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft Manifest number: 1430 Signing time: Mon 15 Dec 2025 13:01:07 +0000 Manifest this update: Mon 15 Dec 2025 13:01:07 +0000 Manifest next update: Tue 16 Dec 2025 13:01:07 +0000 Files and hashes: 1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=) 2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: KIIf5sbpERe7vrLvPBy3VCHysYEpHIJJ2EpFwDJR+d4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:b0:e7:fe:65:27:c7:4a:3c:5e:2c:04:1a:56:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c Validity Not Before: Dec 15 13:01:07 2025 GMT Not After : Dec 16 13:01:07 2025 GMT Subject: CN=02ac82db4c0f894394f423ec964c6f23cf35ab96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:d8:44:4d:22:06:25:d3:4e:b5:64:e7:27: 55:92:00:3f:74:68:9f:2c:88:2b:fb:61:6b:82:85: cf:46:93:53:00:52:e3:b0:6f:94:4d:5b:2e:dd:63: 17:e9:ef:15:67:03:32:db:06:b3:52:a1:1a:16:35: b1:80:04:ac:fd:fe:57:0e:c5:72:4f:69:f6:96:3c: 51:ba:61:cc:66:f9:0d:18:8c:48:dc:a0:ae:96:d1: a7:02:f5:58:e7:38:38:f7:9f:bc:ce:b0:ae:2a:4f: 36:5c:35:85:67:ce:ff:34:af:ee:5a:4e:ac:db:f9: d4:4b:0c:e4:bb:94:7b:e3:d9:25:09:c7:71:01:80: 9c:ce:75:74:3b:10:0b:2c:70:c9:9e:75:f7:7b:4c: d3:b1:d0:6b:25:7f:90:8d:15:c3:d6:ea:6e:e0:1c: 88:53:f9:9c:77:08:6c:30:5e:77:41:25:fd:b5:b4: 1e:76:77:fb:35:9c:cf:9c:46:02:15:67:e9:a9:91: f1:72:27:6e:1e:2b:b1:2f:aa:22:a5:4a:fa:13:c4: 5f:71:2e:01:ac:b4:5e:dd:9e:94:db:45:2b:30:35: ad:2d:7e:ed:06:d6:28:c2:62:4e:b5:6e:16:80:bd: 4f:02:c5:3e:51:b7:fb:c1:3f:f8:6c:91:67:73:34: 9d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AC:82:DB:4C:0F:89:43:94:F4:23:EC:96:4C:6F:23:CF:35:AB:96 X509v3 Authority Key Identifier: keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:80:69:ff:dd:41:78:92:ad:9e:32:19:2c:15:8f:c2:e8:89: 7f:06:d3:b9:7e:af:61:4c:20:31:37:20:6d:2a:c9:21:c0:0e: 2a:64:95:11:5b:d7:a0:09:df:9b:6c:fb:21:0e:b3:fd:09:a0: ca:b5:41:aa:96:9d:2b:54:d7:19:28:93:ad:60:b4:62:10:04: 9c:e1:cf:d6:df:32:87:c9:4d:e3:12:bc:2f:1a:fe:11:02:f0: 59:33:94:ce:1f:c2:1f:1b:cb:29:95:1f:61:25:fe:a2:9e:27: 3b:33:53:e9:0b:84:4e:b8:f6:d1:98:4d:e1:a2:84:0d:bb:f7: 8c:5d:ee:14:9a:3b:ba:51:93:97:42:11:f0:2f:70:01:15:7c: 17:c0:99:5e:56:b9:f0:f4:1c:da:69:55:1c:4c:c5:c3:70:58: 78:55:85:95:a4:fc:c6:00:8f:80:b6:b7:d5:de:b9:ff:f5:0f: 11:c7:e8:99:92:44:ed:09:c6:92:15:f5:d5:c5:fd:fa:8d:4c: 9f:21:be:e6:66:e6:2a:bd:b9:b3:13:fb:16:60:7c:a3:30:ed: 1c:38:90:b5:f7:8d:8b:02:53:02:50:ce:50:2d:3e:d5:b9:bb: 5f:65:54:07:e5:39:4c:0e:20:bf:51:84:38:6b:a4:45:d5:ae: d3:e7:cd:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGbDn/mUnx0o8XiwEGlYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMDQ1YmZlY2QyYmJlMjRkMzNmNTMwOWRiNDdjOGFhNzdh M2IxMGMwHhcNMjUxMjE1MTMwMTA3WhcNMjUxMjE2MTMwMTA3WjAzMTEwLwYDVQQD EygwMmFjODJkYjRjMGY4OTQzOTRmNDIzZWM5NjRjNmYyM2NmMzVhYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQfYRE0iBiXTTrVk5ydVkgA/dGif LIgr+2FrgoXPRpNTAFLjsG+UTVsu3WMX6e8VZwMy2wazUqEaFjWxgASs/f5XDsVy T2n2ljxRumHMZvkNGIxI3KCultGnAvVY5zg495+8zrCuKk82XDWFZ87/NK/uWk6s 2/nUSwzku5R749klCcdxAYCcznV0OxALLHDJnnX3e0zTsdBrJX+QjRXD1upu4ByI U/mcdwhsMF53QSX9tbQednf7NZzPnEYCFWfpqZHxciduHiuxL6oipUr6E8RfcS4B rLRe3Z6U20UrMDWtLX7tBtYowmJOtW4WgL1PAsU+Ubf7wT/4bJFnczSdywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKsgttMD4lDlPQj7JZMbyPPNauWMB8GA1UdIwQY MBaAFI4EW/7NK74k0z9TCdtHyKp3o7EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0Yzct ZDgwYjNjMWY5ZDczLzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0YzctZDgwYjNjMWY5ZDcz LzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoBp/91B eJKtnjIZLBWPwuiJfwbTuX6vYUwgMTcgbSrJIcAOKmSVEVvXoAnfm2z7IQ6z/Qmg yrVBqpadK1TXGSiTrWC0YhAEnOHP1t8yh8lN4xK8Lxr+EQLwWTOUzh/CHxvLKZUf YSX+op4nOzNT6QuETrj20ZhN4aKEDbv3jF3uFJo7ulGTl0IR8C9wARV8F8CZXla5 8PQc2mlVHEzFw3BYeFWFlaT8xgCPgLa31d65//UPEcfomZJE7QnGkhX11cX9+o1M nyG+5mbmKr25sxP7FmB8ozDtHDiQtfeNiwJTAlDOUC0+1bm7X2VUB+U5TA4gv1GE OGukRdWu0+fNlg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:40:59 2025 by rpki-client