This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json) Hash identifier: ZIQTE4KxzREYUCCHSMMgLeWW2yfwZgGMmbAUqBAQrZE= Subject key identifier: DC:71:04:CF:4A:1B:F0:AB:2E:8D:4D:B9:8C:3D:AB:AA:7B:E9:21:F2 Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Certificate serial: 019B38D7F2DFAEEE70F53E86469805C0836A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft Manifest number: 165B Signing time: Fri 19 Dec 2025 23:00:34 +0000 Manifest this update: Fri 19 Dec 2025 23:00:34 +0000 Manifest next update: Sat 20 Dec 2025 23:00:34 +0000 Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: /I+EYGKSXjLn18UVd/8+/vFHeqnG0wUQw7a91fUoQWQ=) 2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:f2:df:ae:ee:70:f5:3e:86:46:98:05:c0:83:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Validity Not Before: Dec 19 23:00:34 2025 GMT Not After : Dec 20 23:00:34 2025 GMT Subject: CN=dc7104cf4a1bf0ab2e8d4db98c3dabaa7be921f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:7c:b5:d8:05:a2:de:70:4e:ab:47:4b:70: 31:15:18:0b:6c:2e:9f:5e:71:c1:8c:67:e0:6e:77: a3:b9:ef:e6:6b:07:4f:85:25:c0:5d:9c:52:89:b3: 2d:ea:a0:31:36:21:44:79:fb:eb:0d:b4:b1:10:d8: d8:2c:80:12:14:a5:9e:d7:86:48:77:92:e9:b2:70: f2:8d:7b:ed:d0:ea:fc:5a:c9:5e:9e:e3:1d:20:e9: 33:ab:4c:95:57:ff:9b:fb:77:d4:b9:a8:9e:54:56: 6f:a7:06:39:7a:79:ab:9c:86:ed:12:a8:ee:e6:be: 67:8e:71:b6:28:5a:ea:51:fa:9d:f1:ef:3c:fe:47: 3e:94:53:0b:03:71:27:dc:ab:f3:f6:f1:08:b9:0f: c6:70:26:d0:74:ec:7a:43:6a:67:6f:ea:3d:a4:23: 88:7c:d3:b6:7a:67:8d:d0:1d:21:2e:e8:49:c5:98: 1e:68:6e:59:c5:f7:c7:0c:23:49:42:ec:f9:cb:f2: e5:e9:de:22:03:21:66:e5:f2:2d:1a:8a:da:d7:54: 28:df:1f:ba:51:14:2d:b2:17:17:41:2c:89:7f:af: fa:91:e0:e2:e9:43:5a:6b:9a:c2:37:2c:b3:89:28: 61:c9:71:23:43:cb:29:06:f7:d2:b2:d1:d0:11:f2: 85:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:71:04:CF:4A:1B:F0:AB:2E:8D:4D:B9:8C:3D:AB:AA:7B:E9:21:F2 X509v3 Authority Key Identifier: keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5a:75:fd:4a:8c:8c:3e:78:18:a5:31:74:1f:d0:77:4a:6c: 76:80:c0:2b:00:fd:b7:71:eb:13:96:b9:d5:ec:d9:36:bb:e6: 21:fd:a3:f1:79:aa:e0:43:ac:69:2d:51:61:29:11:b6:b6:56: a2:e8:36:b4:13:8b:61:1c:41:4f:45:a4:88:ed:da:14:64:74: fc:fd:00:4f:ea:8e:af:fc:9f:30:1a:66:2d:17:d8:ec:e2:b8: a9:c9:b7:6f:a9:23:84:33:5e:6f:69:98:60:5b:9d:98:2d:a0: a6:02:69:5a:97:a2:d4:d0:a1:ef:f0:db:c0:9f:d8:5e:39:05: 99:51:e8:76:45:0a:c6:89:a0:10:b6:f1:64:11:f0:ad:62:aa: 36:e8:f4:b1:97:9b:e0:cd:6a:40:5e:d4:a4:69:c7:64:db:28: bc:92:e7:a9:8c:36:39:5d:05:db:10:b5:61:db:6d:80:e8:37: 6a:10:0f:6b:64:56:cd:c1:19:21:9d:f8:7b:00:26:86:4a:d6: 13:87:38:53:31:8c:ac:67:4e:7b:fd:49:0a:62:91:61:b1:12: b9:85:02:4d:ad:60:ed:8d:7d:92:cf:50:3b:25:60:a0:e4:48: 8c:6d:e7:d1:bd:2b:98:bc:29:aa:13:a9:ac:fb:38:78:41:8f: 21:ca:12:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/Lfru5w9T6GRpgFwINqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Njc2MDM2MjMxNDNiZDFiYzdhOGZjOWQ4ZTc5ZDk1NTk2 MTE4NjAwHhcNMjUxMjE5MjMwMDM0WhcNMjUxMjIwMjMwMDM0WjAzMTEwLwYDVQQD EyhkYzcxMDRjZjRhMWJmMGFiMmU4ZDRkYjk4YzNkYWJhYTdiZTkyMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRx8tdgFot5wTqtHS3AxFRgLbC6f XnHBjGfgbnejue/mawdPhSXAXZxSibMt6qAxNiFEefvrDbSxENjYLIASFKWe14ZI d5LpsnDyjXvt0Or8WslenuMdIOkzq0yVV/+b+3fUuaieVFZvpwY5enmrnIbtEqju 5r5njnG2KFrqUfqd8e88/kc+lFMLA3En3Kvz9vEIuQ/GcCbQdOx6Q2pnb+o9pCOI fNO2emeN0B0hLuhJxZgeaG5ZxffHDCNJQuz5y/Ll6d4iAyFm5fItGora11Qo3x+6 URQtshcXQSyJf6/6keDi6UNaa5rCNyyziShhyXEjQ8spBvfSstHQEfKFQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxxBM9KG/CrLo1NuYw9q6p76SHyMB8GA1UdIwQY MBaAFCRnYDYjFDvRvHqPydjnnZVZYRhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEt ZmI0NjQyZDJkOWE2LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEtZmI0NjQyZDJkOWE2 LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVp1/UqM jD54GKUxdB/Qd0psdoDAKwD9t3HrE5a51ezZNrvmIf2j8Xmq4EOsaS1RYSkRtrZW oug2tBOLYRxBT0WkiO3aFGR0/P0AT+qOr/yfMBpmLRfY7OK4qcm3b6kjhDNeb2mY YFudmC2gpgJpWpei1NCh7/DbwJ/YXjkFmVHodkUKxomgELbxZBHwrWKqNuj0sZeb 4M1qQF7UpGnHZNsovJLnqYw2OV0F2xC1YdttgOg3ahAPa2RWzcEZIZ34ewAmhkrW E4c4UzGMrGdOe/1JCmKRYbESuYUCTa1g7Y19ks9QOyVgoORIjG3n0b0rmLwpqhOp rPs4eEGPIcoS7w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:00 2025 by rpki-client