This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json) Hash identifier: wxzTj8i413NIPPYBfjFt1OVHtUi0EhTsAaaGGJ8OhZM= Subject key identifier: 06:C5:39:7E:B0:5B:2E:B7:E2:37:64:EA:1C:56:9D:88:E6:DE:67:19 Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Certificate serial: 019AF01B1B99C51FB946B26A16B0F38E233E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 20:01:39 +0000 Manifest this update: Fri 05 Dec 2025 20:01:39 +0000 Manifest next update: Sat 06 Dec 2025 20:01:39 +0000 Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=) 2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: spzigYHnGgZ0AervHWDmRDGg/VaRhWTNmHPiLUKizHI=) 3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1b:1b:99:c5:1f:b9:46:b2:6a:16:b0:f3:8e:23:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Validity Not Before: Dec 5 20:01:39 2025 GMT Not After : Dec 6 20:01:39 2025 GMT Subject: CN=06c5397eb05b2eb7e23764ea1c569d88e6de6719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:13:1c:c4:e8:48:f0:45:de:8e:57:5e:6b:e4: 0b:85:b9:ea:e3:71:7e:20:f3:ec:15:7b:6b:70:e0: c1:46:8d:f7:a8:d6:c5:08:59:c6:83:71:ee:42:6a: 1b:bd:c6:de:59:1d:da:bf:23:7a:4f:4f:f8:0a:b6: d0:9d:37:d6:97:14:d5:d3:4c:21:7e:24:6b:eb:8f: b5:10:9b:15:3a:c3:6b:0c:a9:7c:a1:ce:93:29:ab: d5:1e:7a:e9:5e:26:d5:6c:14:46:17:69:44:dd:18: 64:d8:41:50:36:92:ee:71:c3:5d:f3:e3:71:27:de: bb:bd:1c:81:89:79:c8:d2:b0:99:32:6d:14:cb:12: 84:f1:08:47:cd:6b:e0:93:89:07:1f:55:63:0b:4d: 83:ab:f8:e9:74:92:dc:f9:6e:4b:f1:e2:5e:e0:bb: b0:8f:76:f1:0c:a8:0b:a1:e7:f3:0c:e9:56:7e:87: b1:55:01:f4:a7:74:22:59:31:7f:42:a2:00:ca:d8: b9:8f:db:9b:58:98:d1:cd:40:45:64:5b:c0:14:86: ad:f2:60:b4:b0:f9:c7:58:eb:fb:a7:a5:50:40:2a: 9b:0e:87:35:1b:1d:cd:ad:f5:ad:91:85:3f:9b:d1: 9f:84:6e:04:be:23:79:54:f4:4b:44:ea:a1:44:c0: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C5:39:7E:B0:5B:2E:B7:E2:37:64:EA:1C:56:9D:88:E6:DE:67:19 X509v3 Authority Key Identifier: keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f6:88:ba:d1:fd:85:72:cf:69:0c:a0:31:38:27:ab:ff:60: 69:8a:85:ff:d7:74:c4:69:62:1d:9f:57:f8:e4:49:2d:d4:0e: f7:e4:30:5d:7a:d9:3d:3a:6d:c3:6b:a8:a8:d9:5b:0a:99:26: a8:f1:7a:1a:84:16:d1:e2:91:0b:86:9c:99:75:65:69:af:c3: f0:e9:8d:1b:d2:5c:fb:10:3c:d2:50:9e:3a:37:41:ac:e6:b4: a2:ad:76:c6:62:83:99:62:ee:7b:f7:1a:01:6e:7c:09:d5:86: 31:d8:8a:65:1e:87:58:2b:72:e9:33:0c:76:9e:3a:fc:b1:dc: a1:21:56:64:ad:e8:01:2b:d9:e0:e8:41:45:a4:17:dc:ea:24: ca:45:3f:92:67:a4:a7:b2:b1:0c:30:97:66:5c:9f:cf:c6:6a: 4a:f9:02:7e:ab:3f:4d:2d:08:fe:83:47:7f:d2:a2:d4:88:23: e6:5f:33:c8:e5:f6:b7:51:23:1a:29:32:f1:c5:56:85:e9:47: 3f:9f:43:26:59:87:d4:6e:dc:d9:fa:d5:e1:86:cf:10:cd:02: db:33:85:4b:0f:56:46:62:55:74:a2:41:09:47:d4:cb:19:dc: 1a:4e:45:a0:c3:ae:85:8a:0f:6c:ab:c0:d8:5c:99:8c:69:76: 2b:60:1d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGxuZxR+5RrJqFrDzjiM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODFiN2I0YWUzZTc1ZGM0YjM2Y2ZmMjkzNzkyM2VjZGZm NzI1OWIwHhcNMjUxMjA1MjAwMTM5WhcNMjUxMjA2MjAwMTM5WjAzMTEwLwYDVQQD EygwNmM1Mzk3ZWIwNWIyZWI3ZTIzNzY0ZWExYzU2OWQ4OGU2ZGU2NzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghMcxOhI8EXejldea+QLhbnq43F+ IPPsFXtrcODBRo33qNbFCFnGg3HuQmobvcbeWR3avyN6T0/4CrbQnTfWlxTV00wh fiRr64+1EJsVOsNrDKl8oc6TKavVHnrpXibVbBRGF2lE3Rhk2EFQNpLuccNd8+Nx J967vRyBiXnI0rCZMm0UyxKE8QhHzWvgk4kHH1VjC02Dq/jpdJLc+W5L8eJe4Luw j3bxDKgLoefzDOlWfoexVQH0p3QiWTF/QqIAyti5j9ubWJjRzUBFZFvAFIat8mC0 sPnHWOv7p6VQQCqbDoc1Gx3NrfWtkYU/m9GfhG4EviN5VPRLROqhRMB87wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbFOX6wWy634jdk6hxWnYjm3mcZMB8GA1UdIwQY MBaAFCaBt7SuPnXcSzbP8pN5I+zf9yWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEt ZmM4MzliYjZkMTczLzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEtZmM4MzliYjZkMTcz LzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovaIutH9 hXLPaQygMTgnq/9gaYqF/9d0xGliHZ9X+ORJLdQO9+QwXXrZPTptw2uoqNlbCpkm qPF6GoQW0eKRC4acmXVlaa/D8OmNG9Jc+xA80lCeOjdBrOa0oq12xmKDmWLue/ca AW58CdWGMdiKZR6HWCty6TMMdp46/LHcoSFWZK3oASvZ4OhBRaQX3OokykU/kmek p7KxDDCXZlyfz8ZqSvkCfqs/TS0I/oNHf9Ki1Igj5l8zyOX2t1EjGiky8cVWhelH P59DJlmH1G7c2frV4YbPEM0C2zOFSw9WRmJVdKJBCUfUyxncGk5FoMOuhYoPbKvA 2FyZjGl2K2Ad4g== -----END CERTIFICATE-----Generated at Fri Dec 5 23:08:00 2025 by rpki-client