This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json) Hash identifier: 6j+U6fRF+NFFPU9ZPf70QF97TetPxnZZO2vEyRDnoqo= Subject key identifier: F0:F2:77:0C:FB:51:10:D3:4C:B8:05:8A:4D:BD:A9:E3:B7:85:D2:01 Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd Certificate serial: 019B3420454A6A79012008ACBA8927C3FF80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft Manifest number: 0BD6 Signing time: Fri 19 Dec 2025 01:01:28 +0000 Manifest this update: Fri 19 Dec 2025 01:01:28 +0000 Manifest next update: Sat 20 Dec 2025 01:01:28 +0000 Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: DX7/xPtBx33Tx4rQo6aIYkMhrXDSEsEupdVf7V+YCMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:45:4a:6a:79:01:20:08:ac:ba:89:27:c3:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd Validity Not Before: Dec 19 01:01:28 2025 GMT Not After : Dec 20 01:01:28 2025 GMT Subject: CN=f0f2770cfb5110d34cb8058a4dbda9e3b785d201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:0a:19:50:85:8b:29:28:c0:1a:da:fc:e0: 64:eb:0c:3e:46:42:89:3e:c0:8a:5c:86:28:46:0a: 24:45:3a:88:70:7c:5f:ae:03:5b:fb:be:f6:7d:2f: 7f:16:2b:4b:8e:3e:e6:57:15:29:72:6f:a4:52:c9: 40:5e:4a:20:09:ab:87:db:1a:30:80:86:86:8b:7c: 61:80:4f:4a:0a:d4:22:c9:89:7a:c2:10:d6:7a:16: 94:f2:5b:61:1a:41:6b:db:0c:46:83:60:43:d2:04: 22:3f:40:fd:47:66:df:1b:c1:01:47:9b:ad:a2:55: 6a:e3:93:2c:c7:20:fc:c0:d3:85:ab:25:1e:ba:30: a3:84:ef:eb:ef:39:ed:cf:b0:75:35:79:05:41:94: 47:bc:70:da:5a:8e:32:5a:59:1d:ed:ab:2b:da:19: 52:f7:79:67:88:82:7d:50:df:12:6c:ee:f4:5b:0b: 22:fb:c0:98:68:5f:77:2c:64:5f:1d:a9:c5:0f:40: 6e:f1:42:4c:67:cd:6f:1c:c7:be:3d:db:11:90:ef: 74:fc:86:7f:39:4e:fc:63:d7:f0:f3:c4:05:1e:14: b0:4b:52:e7:7e:b1:3c:3e:4c:bc:47:32:95:dd:6a: 93:1c:22:e8:b3:cd:9c:51:4b:3b:be:68:e1:45:f8: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F2:77:0C:FB:51:10:D3:4C:B8:05:8A:4D:BD:A9:E3:B7:85:D2:01 X509v3 Authority Key Identifier: keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:dc:40:09:5a:2e:a7:69:91:6c:bb:e0:3d:5c:0b:e3:76:ee: e8:5a:4a:57:03:24:f1:54:10:97:37:72:fc:b1:8a:99:9a:c7: 29:be:38:40:f2:2c:94:16:68:33:c0:e3:a3:a8:7a:9f:5c:8f: d5:61:04:a7:04:f4:66:80:13:11:4b:33:42:14:64:07:f6:95: 9f:c6:1f:35:97:c4:e0:d1:a5:e8:74:42:7f:a4:ec:5a:c4:db: 08:18:05:61:fb:db:a9:c8:e0:9a:1a:87:0b:5d:50:db:ba:fa: c2:a1:13:75:a1:2a:34:a6:e8:f7:06:d6:48:be:23:3f:3c:5a: 3b:d1:bb:5c:87:44:b5:f6:4c:48:fc:ed:bf:18:df:71:44:56: 8e:1f:5e:62:84:f0:9b:1d:bb:64:87:c1:41:bf:58:c1:d6:56: 8e:2f:18:a5:41:8b:55:6d:45:5a:f4:21:c6:dc:81:98:24:cd: 9e:a5:05:c2:39:4c:31:8e:2b:3a:c1:b1:b0:93:1c:4e:ad:37: 8d:7b:01:f8:3f:3c:6d:fb:c5:56:cd:9a:40:7b:b0:6c:50:b9: 7e:72:81:36:27:71:05:53:8d:53:b8:0e:18:b8:20:06:ef:8e: b8:bc:ae:c5:a1:0a:f3:43:78:5c:af:3d:85:72:b5:b0:61:a2: 2d:46:c8:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IEVKankBIAisuoknw/+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDY2YjZiNmMxMzYwMzUwMWFhMjU2ZmNkYzM3NDBkZjc3 ODAxZGQwHhcNMjUxMjE5MDEwMTI4WhcNMjUxMjIwMDEwMTI4WjAzMTEwLwYDVQQD EyhmMGYyNzcwY2ZiNTExMGQzNGNiODA1OGE0ZGJkYTllM2I3ODVkMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL0KGVCFiykowBra/OBk6ww+RkKJ PsCKXIYoRgokRTqIcHxfrgNb+772fS9/FitLjj7mVxUpcm+kUslAXkogCauH2xow gIaGi3xhgE9KCtQiyYl6whDWehaU8lthGkFr2wxGg2BD0gQiP0D9R2bfG8EBR5ut olVq45MsxyD8wNOFqyUeujCjhO/r7zntz7B1NXkFQZRHvHDaWo4yWlkd7asr2hlS 93lniIJ9UN8SbO70Wwsi+8CYaF93LGRfHanFD0Bu8UJMZ81vHMe+PdsRkO90/IZ/ OU78Y9fw88QFHhSwS1LnfrE8Pky8RzKV3WqTHCLos82cUUs7vmjhRfiqNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDydwz7URDTTLgFik29qeO3hdIBMB8GA1UdIwQY MBaAFCYGa2tsE2A1Aaolb83DdA33eAHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yMjc3MWUtYTM4My00NTBmLTg1YmIt MTRiNDdmNTkxMWQ3LzEvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yMjc3MWUtYTM4My00NTBmLTg1YmItMTRiNDdmNTkxMWQ3 LzEvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdxACVou p2mRbLvgPVwL43bu6FpKVwMk8VQQlzdy/LGKmZrHKb44QPIslBZoM8Djo6h6n1yP 1WEEpwT0ZoATEUszQhRkB/aVn8YfNZfE4NGl6HRCf6TsWsTbCBgFYfvbqcjgmhqH C11Q27r6wqETdaEqNKbo9wbWSL4jPzxaO9G7XIdEtfZMSPztvxjfcURWjh9eYoTw mx27ZIfBQb9YwdZWji8YpUGLVW1FWvQhxtyBmCTNnqUFwjlMMY4rOsGxsJMcTq03 jXsB+D88bfvFVs2aQHuwbFC5fnKBNidxBVONU7gOGLggBu+OuLyuxaEK80N4XK89 hXK1sGGiLUbI8Q== -----END CERTIFICATE-----Generated at Fri Dec 19 04:56:14 2025 by rpki-client