This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft File: jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json) Hash identifier: rJkVCmNgMKN3oREt/g87tpeFAXGjJmDRWbnJBhZXB7c= Subject key identifier: 3F:3C:46:02:BF:3B:28:31:91:C0:98:55:57:DD:25:E0:19:8E:47:B5 Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Certificate serial: 019B4211F0E900BBA43546554E435918BBF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft Manifest number: 16D0 Signing time: Sun 21 Dec 2025 18:00:30 +0000 Manifest this update: Sun 21 Dec 2025 18:00:30 +0000 Manifest next update: Mon 22 Dec 2025 18:00:30 +0000 Files and hashes: 1: DYRo5UxpUtRoBr5siZIGMHmDOmk.roa (hash: CNeg8TW20mVMGXVcVuZCa6OMSEOFftuPH5JmAwDqWJM=) 2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: KivXwL5o8ZO554u0IXyesjvH/MLzFWcsCmdmIqY8ZYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:11:f0:e9:00:bb:a4:35:46:55:4e:43:59:18:bb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Validity Not Before: Dec 21 18:00:30 2025 GMT Not After : Dec 22 18:00:30 2025 GMT Subject: CN=3f3c4602bf3b283191c0985557dd25e0198e47b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:c6:c8:da:16:8e:4a:de:2d:f1:37:e8:70: 33:8d:38:b4:26:b1:18:66:8c:e7:b3:93:39:6a:66: 1a:b2:34:3d:ef:7f:f9:69:b3:00:71:d0:1e:82:38: 6c:96:2d:af:f7:30:75:15:57:41:0d:a5:61:80:51: b0:1d:5d:64:92:2f:44:df:ad:90:62:08:26:dc:a8: 27:aa:3d:ee:74:02:ad:bd:d0:e6:61:54:d8:90:e7: 27:a1:cc:0d:ba:5c:47:ae:fd:36:2a:74:73:dd:a4: 1d:b7:93:c1:67:be:fc:e7:fc:9c:6b:d3:47:0c:ed: 53:a6:95:d4:d5:51:77:c0:ad:a4:2e:a0:0b:16:07: 32:ad:6d:b3:7d:2e:06:f2:df:99:89:16:bf:65:e0: 43:1f:60:21:f7:4e:e8:a7:cd:bd:59:26:04:6b:ca: 63:d5:f3:32:6d:6f:f9:88:7b:30:b2:6a:ff:25:66: 89:18:b5:29:a7:e4:45:d1:15:39:d9:ca:ac:82:b7: 10:2d:1c:fa:14:21:d3:7a:b2:f9:0a:73:80:82:a1: 00:91:5f:69:05:5d:8e:2d:41:d7:d0:38:e2:66:a3: d8:d7:93:cd:f5:3a:69:be:c4:af:68:80:09:0e:dd: ed:08:25:e2:3d:1d:e9:0f:21:f5:f0:fb:16:cf:0c: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3C:46:02:BF:3B:28:31:91:C0:98:55:57:DD:25:E0:19:8E:47:B5 X509v3 Authority Key Identifier: keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:18:4e:7c:22:ce:de:77:e4:9d:17:0e:80:4a:04:98:32:74: b5:0c:4e:45:c0:62:f0:ff:56:f6:13:b7:72:d7:84:75:4f:d2: c0:fd:ac:da:ec:fa:0d:d7:6f:6a:95:86:73:f5:c1:2e:7e:49: e4:ab:96:76:16:37:27:9a:e8:cc:48:dc:bf:bd:2a:ec:8d:7c: cd:e8:c0:03:03:81:a9:db:44:e1:87:a6:a5:02:fa:4a:66:b4: 8f:a5:4d:15:b6:aa:0e:7e:af:ee:bf:ef:4a:27:89:b3:8c:ff: 28:e2:1a:2c:53:31:91:a1:d9:f4:57:a2:78:8a:f3:ea:c4:f9: 1a:d6:3a:3c:76:33:bd:f1:4e:85:dd:bd:06:35:06:be:c8:ef: 07:ac:29:b0:e5:b3:a4:27:0c:11:0e:ba:cc:eb:4d:55:65:29: d0:dd:ec:a9:41:00:c2:2c:b9:4a:3c:af:20:23:77:42:95:43: 3b:f6:f6:55:7e:b8:0e:6e:80:e6:7e:8d:c7:a5:86:99:7f:f7: 38:78:95:e4:be:b5:34:ef:32:e9:53:8a:ec:5a:8a:e8:6d:33: 9f:5c:7c:a3:4b:b3:41:19:6f:b6:14:f9:e1:dc:27:39:31:e6: a1:ca:5d:58:6a:5b:85:37:d7:bb:98:3c:0c:28:85:f1:f7:d1: 82:84:5a:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEfDpALukNUZVTkNZGLvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGEzOTFhYWViOGZjN2M4MzNmODI1N2Q3YTllNzRhNTVi MzNhZmUwHhcNMjUxMjIxMTgwMDMwWhcNMjUxMjIyMTgwMDMwWjAzMTEwLwYDVQQD EygzZjNjNDYwMmJmM2IyODMxOTFjMDk4NTU1N2RkMjVlMDE5OGU0N2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUbGyNoWjkreLfE36HAzjTi0JrEY Zozns5M5amYasjQ973/5abMAcdAegjhsli2v9zB1FVdBDaVhgFGwHV1kki9E362Q Yggm3Kgnqj3udAKtvdDmYVTYkOcnocwNulxHrv02KnRz3aQdt5PBZ7785/yca9NH DO1TppXU1VF3wK2kLqALFgcyrW2zfS4G8t+ZiRa/ZeBDH2Ah907op829WSYEa8pj 1fMybW/5iHswsmr/JWaJGLUpp+RF0RU52cqsgrcQLRz6FCHTerL5CnOAgqEAkV9p BV2OLUHX0DjiZqPY15PN9TppvsSvaIAJDt3tCCXiPR3pDyH18PsWzwy/nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD88RgK/OygxkcCYVVfdJeAZjke1MB8GA1UdIwQY MBaAFI4KORquuPx8gz+CV9ep50pVszr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYt ZWRiNDNlMWQ0ZWUwLzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYtZWRiNDNlMWQ0ZWUw LzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxhOfCLO 3nfknRcOgEoEmDJ0tQxORcBi8P9W9hO3cteEdU/SwP2s2uz6DddvapWGc/XBLn5J 5KuWdhY3J5rozEjcv70q7I18zejAAwOBqdtE4YempQL6Sma0j6VNFbaqDn6v7r/v SieJs4z/KOIaLFMxkaHZ9FeieIrz6sT5GtY6PHYzvfFOhd29BjUGvsjvB6wpsOWz pCcMEQ66zOtNVWUp0N3sqUEAwiy5SjyvICN3QpVDO/b2VX64Dm6A5n6Nx6WGmX/3 OHiV5L61NO8y6VOK7FqK6G0zn1x8o0uzQRlvthT54dwnOTHmocpdWGpbhTfXu5g8 DCiF8ffRgoRaoQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:49:59 2025 by rpki-client