This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json) Hash identifier: 0Hwoy7L3jKOlfJEmybFNZFj1M0727Er7KGe8VcydmWM= Subject key identifier: 07:EE:D5:3F:A6:27:38:6B:95:5B:31:36:19:2B:AD:53:BF:E7:18:64 Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Certificate serial: 019B0DB6CF31BE2A602160B38FD84DFFB680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft Manifest number: 14DD Signing time: Thu 11 Dec 2025 14:00:42 +0000 Manifest this update: Thu 11 Dec 2025 14:00:42 +0000 Manifest next update: Fri 12 Dec 2025 14:00:42 +0000 Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=) 2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=) 3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=) 4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: KdACE7uCxU1q7coiZCO+HTP2YFtRfA8oAespKWFWpb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:cf:31:be:2a:60:21:60:b3:8f:d8:4d:ff:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Validity Not Before: Dec 11 14:00:42 2025 GMT Not After : Dec 12 14:00:42 2025 GMT Subject: CN=07eed53fa627386b955b3136192bad53bfe71864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:0b:57:14:82:1c:58:53:20:bd:36:14:cd: e1:48:2c:b6:20:6e:80:f8:1d:e6:64:af:1a:20:a9: 31:01:d9:12:e2:75:49:db:74:0c:12:1b:3e:6e:40: 63:34:32:38:1f:13:a7:43:0f:37:e5:67:cb:00:43: 5d:8b:5d:a1:b6:35:79:5d:34:f1:52:a1:96:be:cd: de:73:76:9c:75:f4:4c:a3:07:e9:2d:47:5f:2e:ce: 59:f3:d3:b8:23:6d:b5:d9:4b:2c:35:c7:e5:8a:56: 56:be:e7:64:44:8f:8a:7f:e1:00:67:44:e2:fe:b6: 6c:e5:49:8e:0b:c2:a2:61:90:b8:ef:5b:6a:61:8f: 98:bf:03:f3:48:e8:44:20:a0:71:20:e0:6a:f9:19: c2:54:8b:e5:31:3a:02:c2:3a:aa:6b:e8:b6:bb:db: 50:6d:a5:aa:25:e6:b1:c0:78:ca:3f:a4:96:44:b1: 27:52:8c:9e:cf:dd:e1:a8:07:8a:80:74:68:36:e0: 21:ee:27:fc:08:1c:b9:f1:e1:2e:4f:1e:cf:57:82: 41:c6:c9:5a:02:03:c6:1b:93:92:db:e0:b8:89:6a: ac:53:6d:1b:43:c1:c2:d7:c0:90:24:fa:35:b3:cb: 74:c1:5c:97:c5:11:03:52:61:0f:26:e8:e0:31:a1: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EE:D5:3F:A6:27:38:6B:95:5B:31:36:19:2B:AD:53:BF:E7:18:64 X509v3 Authority Key Identifier: keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cf:ba:ac:85:3b:70:34:f3:55:8f:c6:32:31:b2:95:6a:01: e4:04:b7:8b:f9:b3:0e:f9:14:c7:a8:6a:7e:47:86:58:99:57: 12:56:de:c4:29:56:1b:e4:62:21:b4:fe:5d:a6:f8:ff:00:be: 00:07:38:dc:e8:08:c4:d2:bd:32:f7:a7:58:0a:ef:32:08:cd: 9c:8a:74:e3:f3:4d:ed:bf:fe:a4:a7:5c:bd:77:3a:9d:aa:4b: 27:ce:b5:74:90:48:58:1f:8f:0d:3d:0d:a3:e9:50:1c:c5:6e: 65:27:b1:05:66:4f:d3:1d:18:fc:53:96:f8:ee:75:d8:ff:d1: d7:18:04:ae:82:2b:d7:64:4b:5c:27:bd:01:69:17:82:9e:3b: c1:52:ee:5e:ec:4b:fa:6b:14:69:d3:b8:91:86:d9:0f:40:f5: 2b:06:3d:cd:00:da:bc:e6:89:5c:1e:2a:9c:dd:71:d4:85:65: 14:43:b0:8f:bc:0b:c7:a8:72:58:b7:36:25:27:90:be:87:7d: ce:42:52:49:63:a2:a5:f2:51:c6:aa:7e:f4:bc:30:3a:94:ef: 81:af:0a:89:41:32:e9:7a:8a:93:6f:ea:ef:05:63:e8:76:3c: 77:55:ef:00:f3:86:c6:99:04:63:e5:6a:80:53:f2:56:51:7d: 66:50:ce:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNts8xvipgIWCzj9hN/7aAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjgxOTg5YzNiNmU1OGZkYzk1MzRlZTdlYjNlMjYwZDFk ODc3NDkwHhcNMjUxMjExMTQwMDQyWhcNMjUxMjEyMTQwMDQyWjAzMTEwLwYDVQQD EygwN2VlZDUzZmE2MjczODZiOTU1YjMxMzYxOTJiYWQ1M2JmZTcxODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3ALVxSCHFhTIL02FM3hSCy2IG6A +B3mZK8aIKkxAdkS4nVJ23QMEhs+bkBjNDI4HxOnQw835WfLAENdi12htjV5XTTx UqGWvs3ec3acdfRMowfpLUdfLs5Z89O4I2212UssNcflilZWvudkRI+Kf+EAZ0Ti /rZs5UmOC8KiYZC471tqYY+YvwPzSOhEIKBxIOBq+RnCVIvlMToCwjqqa+i2u9tQ baWqJeaxwHjKP6SWRLEnUoyez93hqAeKgHRoNuAh7if8CBy58eEuTx7PV4JBxsla AgPGG5OS2+C4iWqsU20bQ8HC18CQJPo1s8t0wVyXxREDUmEPJujgMaGxWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfu1T+mJzhrlVsxNhkrrVO/5xhkMB8GA1UdIwQY MBaAFI0oGYnDtuWP3JU07n6z4mDR2HdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEt YmNhODBlNDdjNTczLzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEtYmNhODBlNDdjNTcz LzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABc+6rIU7 cDTzVY/GMjGylWoB5AS3i/mzDvkUx6hqfkeGWJlXElbexClWG+RiIbT+Xab4/wC+ AAc43OgIxNK9MvenWArvMgjNnIp04/NN7b/+pKdcvXc6napLJ861dJBIWB+PDT0N o+lQHMVuZSexBWZP0x0Y/FOW+O512P/R1xgEroIr12RLXCe9AWkXgp47wVLuXuxL +msUadO4kYbZD0D1KwY9zQDavOaJXB4qnN1x1IVlFEOwj7wLx6hyWLc2JSeQvod9 zkJSSWOipfJRxqp+9LwwOpTvga8KiUEy6XqKk2/q7wVj6HY8d1XvAPOGxpkEY+Vq gFPyVlF9ZlDOQg== -----END CERTIFICATE-----Generated at Thu Dec 11 19:41:52 2025 by rpki-client