This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json) Hash identifier: 2+viGeKY7LL0IkamJaNBJ/i1gqXNMOxARB4lAwkdxto= Subject key identifier: 7A:E2:98:1F:E3:EB:CE:9C:52:8D:45:D6:F0:50:DF:02:CD:F9:D5:8B Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Certificate serial: 019B48F08D2E520105EF7386351B702F00AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 02:01:22 +0000 Manifest this update: Tue 23 Dec 2025 02:01:22 +0000 Manifest next update: Wed 24 Dec 2025 02:01:22 +0000 Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=) 2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: KKflHsZkoZ2+Cu21HKUDsHcqPUsEon5bMU74UYta/4k=) 3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:8d:2e:52:01:05:ef:73:86:35:1b:70:2f:00:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Validity Not Before: Dec 23 02:01:22 2025 GMT Not After : Dec 24 02:01:22 2025 GMT Subject: CN=7ae2981fe3ebce9c528d45d6f050df02cdf9d58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:a0:33:99:7a:97:14:6a:7c:9d:72:d4:88: 2a:2d:db:f6:0b:0f:79:53:b7:2f:b2:25:b8:c6:cd: 32:68:9e:38:dd:36:b2:1f:56:ff:8b:5e:34:fe:7f: e0:03:ea:9a:65:f8:da:14:0a:b7:ba:9e:59:c6:e6: ff:b1:07:fa:50:04:b6:59:6f:b9:44:2a:d1:4d:2c: 42:39:af:8f:80:3c:97:1a:79:e9:fa:a7:04:eb:e0: ad:69:76:14:fe:6b:c7:fd:45:f6:8a:22:4a:26:ed: 36:85:d5:d7:c0:7e:1f:5e:6b:69:6d:a3:25:ce:7b: 41:c5:87:1f:39:f0:4b:10:1f:32:6e:c3:49:06:be: b7:9d:a6:e1:b9:d5:64:e0:6e:13:fb:1c:08:07:73: 98:d7:45:c8:20:bd:c2:7b:b8:38:fd:2a:f7:c3:1b: 18:74:5e:a7:97:d6:5c:ca:38:b5:44:6b:66:eb:7d: 69:d1:dd:bd:a0:aa:b6:94:4a:88:85:d4:8e:55:ed: 47:76:7a:c0:0b:8b:e1:e8:89:fd:65:39:05:e1:01: 2e:e2:52:b0:59:e8:b2:dc:ae:43:da:34:f4:a6:cf: 9d:3d:59:3e:a3:9b:ce:21:d3:68:c8:00:14:a4:29: 71:dc:d3:39:3a:31:c9:21:cb:72:a0:be:38:0b:81: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E2:98:1F:E3:EB:CE:9C:52:8D:45:D6:F0:50:DF:02:CD:F9:D5:8B X509v3 Authority Key Identifier: keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a4:df:ac:be:b5:a9:60:55:9f:ed:a1:d1:d2:49:a1:55:eb: 86:b8:f1:65:c5:20:1f:1b:76:4b:23:80:f1:fc:10:a7:d5:67: 86:a4:65:59:1a:d0:c6:44:bd:d5:82:c2:e8:fb:18:f1:eb:85: 75:86:53:57:10:91:28:80:9b:f7:fb:43:ee:77:6f:3b:75:3a: 0d:59:99:b2:04:50:05:46:49:dd:a8:8e:aa:14:72:a4:13:63: 1f:95:ed:cd:57:16:5d:e5:cc:d9:aa:41:e1:71:f8:ae:55:69: 70:2c:f7:2a:24:5e:d5:60:b8:d2:60:93:0b:36:9a:89:7a:a8: 67:be:50:f1:bf:34:5d:a2:50:ea:cb:a7:ae:3b:0a:d0:cc:29: 05:8e:1d:9c:b2:17:de:c6:a6:66:ce:c7:34:65:81:ea:5d:61: 0d:d7:e1:41:54:36:d2:fe:d1:a8:aa:93:6b:c0:9d:3a:b3:33: 86:43:8a:c1:64:20:b7:65:81:ed:6b:09:9e:68:48:8f:70:46: 15:af:2a:c7:98:29:58:c4:18:3a:44:19:16:15:87:d4:83:12: b9:11:5a:a7:3c:d9:11:36:fb:f2:4a:4d:79:a1:9f:07:44:0a: 3d:a4:84:5f:c0:0a:cc:4d:77:2e:b8:5f:f6:22:1d:65:f7:78: 8b:df:0f:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8I0uUgEF73OGNRtwLwCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODFiN2I0YWUzZTc1ZGM0YjM2Y2ZmMjkzNzkyM2VjZGZm NzI1OWIwHhcNMjUxMjIzMDIwMTIyWhcNMjUxMjI0MDIwMTIyWjAzMTEwLwYDVQQD Eyg3YWUyOTgxZmUzZWJjZTljNTI4ZDQ1ZDZmMDUwZGYwMmNkZjlkNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JWgM5l6lxRqfJ1y1IgqLdv2Cw95 U7cvsiW4xs0yaJ443TayH1b/i140/n/gA+qaZfjaFAq3up5Zxub/sQf6UAS2WW+5 RCrRTSxCOa+PgDyXGnnp+qcE6+CtaXYU/mvH/UX2iiJKJu02hdXXwH4fXmtpbaMl zntBxYcfOfBLEB8ybsNJBr63nabhudVk4G4T+xwIB3OY10XIIL3Ce7g4/Sr3wxsY dF6nl9Zcyji1RGtm631p0d29oKq2lEqIhdSOVe1HdnrAC4vh6In9ZTkF4QEu4lKw Weiy3K5D2jT0ps+dPVk+o5vOIdNoyAAUpClx3NM5OjHJIctyoL44C4EjkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrimB/j686cUo1F1vBQ3wLN+dWLMB8GA1UdIwQY MBaAFCaBt7SuPnXcSzbP8pN5I+zf9yWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEt ZmM4MzliYjZkMTczLzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEtZmM4MzliYjZkMTcz LzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqTfrL61 qWBVn+2h0dJJoVXrhrjxZcUgHxt2SyOA8fwQp9VnhqRlWRrQxkS91YLC6PsY8euF dYZTVxCRKICb9/tD7ndvO3U6DVmZsgRQBUZJ3aiOqhRypBNjH5XtzVcWXeXM2apB 4XH4rlVpcCz3KiRe1WC40mCTCzaaiXqoZ75Q8b80XaJQ6sunrjsK0MwpBY4dnLIX 3samZs7HNGWB6l1hDdfhQVQ20v7RqKqTa8CdOrMzhkOKwWQgt2WB7WsJnmhIj3BG Fa8qx5gpWMQYOkQZFhWH1IMSuRFapzzZETb78kpNeaGfB0QKPaSEX8AKzE13Lrhf 9iIdZfd4i98PHQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:54:39 2025 by rpki-client