This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json) Hash identifier: vYoMVmFNJ3awl9hSXxNkzNcfxZekhAkN2h7yINQJVBI= Subject key identifier: D3:8F:AF:FE:3E:82:D6:36:59:6C:67:21:DF:9F:2A:C5:A4:E7:DD:A9 Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd Certificate serial: 019B281B34CB756FC9C33936F7528EE4B8C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft Manifest number: 0C2E Signing time: Tue 16 Dec 2025 17:00:30 +0000 Manifest this update: Tue 16 Dec 2025 17:00:30 +0000 Manifest next update: Wed 17 Dec 2025 17:00:30 +0000 Files and hashes: 1: ByXM_Ln1i6sp51H3UoiAVLtk9H4.roa (hash: WkKv5GmFkjNS11QcfAX/i3RvuDqUCdANkXDcqukdiOw=) 2: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: tB4K/fVYkhwh6Gv4u3Yo6QEa2o+p1P8X+r77eHwFeK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:34:cb:75:6f:c9:c3:39:36:f7:52:8e:e4:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd Validity Not Before: Dec 16 17:00:30 2025 GMT Not After : Dec 17 17:00:30 2025 GMT Subject: CN=d38faffe3e82d636596c6721df9f2ac5a4e7dda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:ad:27:20:c8:d7:a1:49:08:78:76:98:63: b7:e5:99:63:bb:2c:ba:ba:fe:8e:78:41:46:6f:56: 1f:21:0e:98:66:04:63:80:db:65:ee:9f:26:e1:dd: 45:86:6c:29:af:8a:0c:34:93:a0:2d:66:ca:ce:09: de:5f:9f:3e:1e:b7:28:c0:4b:0c:59:ef:60:39:44: 1d:2c:0e:1d:18:34:6f:a1:ec:45:1d:d1:f0:8c:13: 60:aa:28:f4:c1:0a:c4:61:71:0d:c2:61:28:c2:45: 7c:48:c2:62:94:d1:7d:0c:86:f1:d2:99:ef:62:f7: 64:9d:8c:3d:dc:61:30:b5:74:ce:b4:b5:4f:29:ef: 30:ab:d2:01:87:cb:6e:69:3c:23:85:29:3c:ed:06: 0a:f4:94:f3:09:76:09:c1:dc:91:c7:59:da:1b:2e: a2:ed:ba:1d:93:f0:77:62:32:dd:c0:3b:58:8e:b1: 8e:d1:5c:41:9b:cf:2d:8e:aa:4f:95:16:d3:67:7b: 62:f9:b2:4e:26:df:9b:7f:81:b1:39:40:24:aa:29: 53:ff:b6:37:7a:91:20:32:57:22:e3:3f:9e:26:8e: 0b:db:c4:14:dc:1c:9d:f9:ba:d5:61:99:40:0f:1d: aa:42:00:60:58:10:9e:a0:3b:c4:75:8f:92:f9:02: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8F:AF:FE:3E:82:D6:36:59:6C:67:21:DF:9F:2A:C5:A4:E7:DD:A9 X509v3 Authority Key Identifier: keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:70:b9:44:d3:ea:e3:e5:d1:e0:44:f7:af:67:a5:2c:b9:97: 08:cb:86:5b:4d:c0:35:86:e9:23:eb:79:20:de:b4:7a:e0:b4: 65:da:7e:98:8c:e6:03:9e:a8:58:cc:74:3a:dc:a5:1d:02:a8: c3:05:ed:83:e1:5e:e0:3a:df:75:9a:54:c7:96:ae:80:ce:19: cb:86:92:da:2e:68:a8:21:86:2f:b3:d7:14:93:66:cc:66:59: b7:88:ad:ce:b4:3f:98:92:e1:6c:20:47:68:af:06:09:a8:f4: 5f:c0:4a:e2:a7:46:03:2a:79:53:fb:b7:5e:7e:60:5e:d5:72: ec:ab:a8:9e:93:78:eb:c9:bb:db:8a:37:c7:a0:de:20:46:84: 9e:2a:ab:a6:dc:ec:1a:47:d3:8f:f1:5c:30:ba:54:41:12:44: d6:65:b7:36:e8:b3:c6:6f:c2:1d:bf:e8:4f:dc:34:89:09:52: a5:b1:0d:71:40:0b:35:9b:ad:6c:df:3b:ca:7d:66:99:f1:25: ce:f2:58:b1:20:fb:f4:71:fd:ed:ce:72:cc:56:ff:92:b7:31: 7d:2c:fc:13:ea:e3:98:89:e8:28:2b:c4:73:66:c9:88:02:fb: 23:6a:81:98:f1:d0:54:5e:b9:97:ff:ce:fc:24:ab:c7:5c:b1: e0:b5:24:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoGzTLdW/Jwzk291KO5LjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDkwOWQ3M2EyNzk4ODNlMjU3MTExZTQ4NGU3ZjA3OGI1 ZWM4ZmQwHhcNMjUxMjE2MTcwMDMwWhcNMjUxMjE3MTcwMDMwWjAzMTEwLwYDVQQD EyhkMzhmYWZmZTNlODJkNjM2NTk2YzY3MjFkZjlmMmFjNWE0ZTdkZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T6tJyDI16FJCHh2mGO35Zljuyy6 uv6OeEFGb1YfIQ6YZgRjgNtl7p8m4d1Fhmwpr4oMNJOgLWbKzgneX58+HrcowEsM We9gOUQdLA4dGDRvoexFHdHwjBNgqij0wQrEYXENwmEowkV8SMJilNF9DIbx0pnv YvdknYw93GEwtXTOtLVPKe8wq9IBh8tuaTwjhSk87QYK9JTzCXYJwdyRx1naGy6i 7bodk/B3YjLdwDtYjrGO0VxBm88tjqpPlRbTZ3ti+bJOJt+bf4GxOUAkqilT/7Y3 epEgMlci4z+eJo4L28QU3Byd+brVYZlADx2qQgBgWBCeoDvEdY+S+QLsaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOPr/4+gtY2WWxnId+fKsWk592pMB8GA1UdIwQY MBaAFCYJCdc6J5iD4lcRHkhOfweLXsj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWIt NjU2MTMxN2NmMjYzLzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWItNjU2MTMxN2NmMjYz LzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3C5RNPq 4+XR4ET3r2elLLmXCMuGW03ANYbpI+t5IN60euC0Zdp+mIzmA56oWMx0OtylHQKo wwXtg+Fe4DrfdZpUx5augM4Zy4aS2i5oqCGGL7PXFJNmzGZZt4itzrQ/mJLhbCBH aK8GCaj0X8BK4qdGAyp5U/u3Xn5gXtVy7KuonpN468m724o3x6DeIEaEniqrptzs GkfTj/FcMLpUQRJE1mW3Nuizxm/CHb/oT9w0iQlSpbENcUALNZutbN87yn1mmfEl zvJYsSD79HH97c5yzFb/krcxfSz8E+rjmInoKCvEc2bJiAL7I2qBmPHQVF65l//O /CSrx1yx4LUkwQ== -----END CERTIFICATE-----Generated at Wed Dec 17 01:45:33 2025 by rpki-client