This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json) Hash identifier: vqKsAuO2yy6K/AFm3Mi/lTLvXtI/oLhhoWrQRvC5ylo= Subject key identifier: BD:FC:26:8B:BC:D4:90:70:9D:66:0B:14:FC:22:E2:99:5C:E0:17:D7 Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Certificate serial: 019B0E25916DC6745C77773EC5877D2BE240 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft Manifest number: 01E7 Signing time: Thu 11 Dec 2025 16:01:41 +0000 Manifest this update: Thu 11 Dec 2025 16:01:41 +0000 Manifest next update: Fri 12 Dec 2025 16:01:41 +0000 Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: NzpkHMBiZaI1OGuQjmzvJ2Jem8wKrC7yQUe/K9lbemI=) 2: METktZ2idAiZeDz9hpktU55-5Jw.roa (hash: nKbFLY3xUJE/BDnG472RqLje6LdE93p8++xFwpMJxhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:91:6d:c6:74:5c:77:77:3e:c5:87:7d:2b:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Validity Not Before: Dec 11 16:01:41 2025 GMT Not After : Dec 12 16:01:41 2025 GMT Subject: CN=bdfc268bbcd490709d660b14fc22e2995ce017d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:12:40:d6:72:c0:f6:22:b5:f8:48:3c:16: 49:30:24:37:88:42:bb:7a:11:d4:34:21:1b:41:d1: c7:f1:5f:29:3b:49:50:e8:da:a4:42:7a:f6:ac:77: f7:ce:d4:d9:d1:81:fd:b1:59:23:92:a4:33:e9:11: 61:a6:4c:d3:ab:4c:cb:4d:99:25:4b:6a:2b:f9:b5: 78:95:0a:1c:c5:1f:f0:df:bc:72:5a:11:91:75:dd: d3:2d:70:9a:cc:ea:2c:63:26:cf:b3:6f:fc:31:d3: f9:67:5f:4a:3d:29:9a:69:48:ba:db:0d:ad:0e:ab: 03:1e:09:d3:9e:06:38:06:87:69:ee:18:b2:4f:36: e4:7a:75:d0:75:59:42:ff:dd:b8:08:49:bb:44:2b: 51:5f:fd:1e:4b:b6:52:4d:92:f9:d5:d1:b1:2d:d7: 39:a2:82:73:48:15:17:c9:ab:1b:6f:50:d1:5c:40: b8:40:60:6d:ba:b6:84:82:a1:e4:92:41:22:84:fe: 6b:af:ee:9d:eb:f1:c4:78:35:03:cd:0d:65:9b:e1: d5:fa:f6:ff:0d:73:1f:83:65:59:d3:68:b1:bb:ab: 3d:af:05:49:29:0a:0a:fb:ea:98:38:a6:67:1c:ce: 9c:c9:6d:e4:6c:80:e3:88:d9:60:4f:c5:f5:17:68: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FC:26:8B:BC:D4:90:70:9D:66:0B:14:FC:22:E2:99:5C:E0:17:D7 X509v3 Authority Key Identifier: keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2b:94:17:43:29:a4:76:bc:75:d0:67:e6:72:ad:b5:00:ec: 3c:32:e9:12:bf:24:88:ce:9b:6f:e3:b6:b9:e7:c7:ba:b5:df: 8d:19:88:6c:da:bc:3e:1b:78:10:4f:f9:54:d5:6f:c9:9a:9a: b0:7b:b3:76:91:42:69:c9:81:1b:f5:5c:6d:7d:c9:a9:80:b4: c9:f8:06:95:45:63:1e:7e:05:40:75:b2:42:8f:fb:55:69:00: fd:0d:2f:39:43:3c:18:1b:74:d2:ab:5b:24:1f:ea:c8:f7:f7: 13:bc:4d:e6:c1:50:79:9e:6f:de:99:c2:0b:25:fc:6e:5f:3d: b5:e8:b8:d5:9f:ca:69:e9:08:65:b2:bc:31:04:bd:3f:5c:42: dd:c9:00:a2:90:e6:41:c0:e7:3b:df:11:0a:cd:ed:08:b8:d8: 4e:af:df:00:26:a3:ed:40:21:f9:40:33:a2:9c:14:b1:c8:ea: 61:a3:32:9e:ce:1e:ed:60:99:f2:ee:a1:bb:a7:91:7f:e8:83: 78:18:56:2e:06:2c:08:ee:60:08:ca:b8:a9:5e:c7:45:c2:1a: 69:9b:f1:a5:71:ae:a1:8d:cc:6a:92:5d:17:ff:cb:e1:95:42: 2a:0a:ae:fe:b2:13:63:0b:e1:29:ac:ae:61:01:20:40:0b:c8: 7f:d0:9b:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJZFtxnRcd3c+xYd9K+JAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz Y2U1ZDIwHhcNMjUxMjExMTYwMTQxWhcNMjUxMjEyMTYwMTQxWjAzMTEwLwYDVQQD EyhiZGZjMjY4YmJjZDQ5MDcwOWQ2NjBiMTRmYzIyZTI5OTVjZTAxN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg0SQNZywPYitfhIPBZJMCQ3iEK7 ehHUNCEbQdHH8V8pO0lQ6NqkQnr2rHf3ztTZ0YH9sVkjkqQz6RFhpkzTq0zLTZkl S2or+bV4lQocxR/w37xyWhGRdd3TLXCazOosYybPs2/8MdP5Z19KPSmaaUi62w2t DqsDHgnTngY4Bodp7hiyTzbkenXQdVlC/924CEm7RCtRX/0eS7ZSTZL51dGxLdc5 ooJzSBUXyasbb1DRXEC4QGBturaEgqHkkkEihP5rr+6d6/HEeDUDzQ1lm+HV+vb/ DXMfg2VZ02ixu6s9rwVJKQoK++qYOKZnHM6cyW3kbIDjiNlgT8X1F2jvqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL38Jou81JBwnWYLFPwi4plc4BfXMB8GA1UdIwQY MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt MTliMTJhOTU1MDY1LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1 LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSuUF0Mp pHa8ddBn5nKttQDsPDLpEr8kiM6bb+O2uefHurXfjRmIbNq8Pht4EE/5VNVvyZqa sHuzdpFCacmBG/VcbX3JqYC0yfgGlUVjHn4FQHWyQo/7VWkA/Q0vOUM8GBt00qtb JB/qyPf3E7xN5sFQeZ5v3pnCCyX8bl89tei41Z/KaekIZbK8MQS9P1xC3ckAopDm QcDnO98RCs3tCLjYTq/fACaj7UAh+UAzopwUscjqYaMyns4e7WCZ8u6hu6eRf+iD eBhWLgYsCO5gCMq4qV7HRcIaaZvxpXGuoY3MapJdF//L4ZVCKgqu/rITYwvhKayu YQEgQAvIf9Cbxw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:52 2025 by rpki-client