This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json) Hash identifier: ajltglYmvM2+R0mEMZXzM42JoD4jg9yI7KUzlLVh3ds= Subject key identifier: 2F:97:9C:A3:63:5E:19:5E:EA:D0:D5:B8:EF:08:28:60:7C:EC:6A:84 Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2 Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2 Certificate serial: 019B4280270E53485464821817D884F9D7AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft Manifest number: 1771 Signing time: Sun 21 Dec 2025 20:00:53 +0000 Manifest this update: Sun 21 Dec 2025 20:00:53 +0000 Manifest next update: Mon 22 Dec 2025 20:00:53 +0000 Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=) 2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: x7K116qAlL/cTLAVAsljY5FvvcFKJy8PnrYn6XbsUhE=) 3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:27:0e:53:48:54:64:82:18:17:d8:84:f9:d7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2 Validity Not Before: Dec 21 20:00:53 2025 GMT Not After : Dec 22 20:00:53 2025 GMT Subject: CN=2f979ca3635e195eead0d5b8ef0828607cec6a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:e6:88:55:27:0b:b3:1e:e9:8c:7f:3b:07: cf:cb:a9:20:31:a1:2a:85:10:22:15:67:f5:2f:ec: f8:ad:72:ab:54:1d:0d:c1:06:9b:35:8d:fb:9c:82: 2c:ff:41:69:5e:68:df:34:ba:a4:5a:96:7b:20:66: ba:04:60:c7:d8:62:96:7c:b2:5a:a1:73:f3:18:81: 9b:70:fd:a9:e5:32:15:9b:2d:38:e8:3b:17:05:a6: d1:26:0d:42:9b:82:f6:89:8f:ba:36:6a:20:8d:d0: 8a:20:49:d3:de:d3:3f:8b:ee:9f:af:e8:c0:be:a6: 54:f7:2d:1f:42:6b:89:d1:58:52:35:23:01:15:3e: 48:51:ba:63:7e:77:3c:a4:61:d0:a3:7c:18:f0:0a: 50:3b:ce:26:5f:50:08:24:98:44:09:e7:84:1c:cf: 88:09:2b:4b:af:56:21:b4:c6:54:b7:67:9f:13:e4: 35:e7:9c:d3:f8:87:8d:53:10:a5:18:c1:59:d7:0b: 92:c8:e1:3c:a4:a5:8a:00:3b:ea:0e:98:a4:83:f5: 9f:a8:aa:20:27:5c:a1:4f:d4:0b:b2:76:ca:5e:6d: e1:bd:89:a8:dc:dc:55:56:49:9e:4a:9f:a4:64:02: 73:4c:e6:d7:9c:b7:af:7b:b0:f8:12:29:4c:a4:8f: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:97:9C:A3:63:5E:19:5E:EA:D0:D5:B8:EF:08:28:60:7C:EC:6A:84 X509v3 Authority Key Identifier: keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f7:1e:b5:20:9b:19:d5:53:c3:81:90:e3:cb:8b:35:a0:66: 52:51:19:2a:14:e0:af:1e:e5:e6:c8:fa:94:d8:a0:11:6e:1d: 53:94:d4:38:f9:a9:45:e7:23:2f:47:f1:f2:f6:d3:ea:5f:a9: 8a:c6:5e:1e:4e:ea:ed:5e:d5:57:f6:f2:ee:52:de:1a:98:1c: 2a:bc:4c:d8:f7:2c:05:74:07:1c:ae:71:b8:7d:c5:17:03:2c: 91:4e:7e:8c:52:c3:68:4c:82:b5:e6:1e:9b:ef:92:8b:2a:20: 9a:67:fc:00:92:02:a8:06:f1:12:a0:cc:78:c1:4f:00:99:2a: 8e:d7:a9:44:78:8f:81:30:37:a3:3c:de:5c:81:52:ac:34:39: 4f:94:14:2e:d8:29:f3:39:7c:59:ea:96:6f:db:27:1c:98:67: 4e:a5:39:f5:a8:54:04:46:8a:b5:a2:7e:a8:04:9b:6e:92:b9: c9:23:f7:ed:d8:83:12:cd:e2:a7:7d:70:c5:db:a7:f5:1d:0a: 76:96:8e:9c:08:94:88:37:41:5e:a2:db:12:dd:8e:78:f5:a6: 60:fa:91:ed:a4:5d:71:17:b5:f6:4c:a9:0e:33:b7:d0:2b:d3: de:1a:22:8f:74:25:c0:8b:35:ff:6f:35:47:38:93:72:65:a1: 27:f5:57:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgCcOU0hUZIIYF9iE+desMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjOTZjNjZhZjMzMWM5ODViODU5ZDQwM2IzNjk3NGMwNjMy ZTFlZjIwHhcNMjUxMjIxMjAwMDUzWhcNMjUxMjIyMjAwMDUzWjAzMTEwLwYDVQQD EygyZjk3OWNhMzYzNWUxOTVlZWFkMGQ1YjhlZjA4Mjg2MDdjZWM2YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUPmiFUnC7Me6Yx/OwfPy6kgMaEq hRAiFWf1L+z4rXKrVB0NwQabNY37nIIs/0FpXmjfNLqkWpZ7IGa6BGDH2GKWfLJa oXPzGIGbcP2p5TIVmy046DsXBabRJg1Cm4L2iY+6NmogjdCKIEnT3tM/i+6fr+jA vqZU9y0fQmuJ0VhSNSMBFT5IUbpjfnc8pGHQo3wY8ApQO84mX1AIJJhECeeEHM+I CStLr1YhtMZUt2efE+Q155zT+IeNUxClGMFZ1wuSyOE8pKWKADvqDpikg/WfqKog J1yhT9QLsnbKXm3hvYmo3NxVVkmeSp+kZAJzTObXnLeve7D4EilMpI98LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+XnKNjXhle6tDVuO8IKGB87GqEMB8GA1UdIwQY MBaAFIyWxmrzMcmFuFnUA7NpdMBjLh7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgt ODNhNDQzMTBhOTY0LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgtODNhNDQzMTBhOTY0 LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/cetSCb GdVTw4GQ48uLNaBmUlEZKhTgrx7l5sj6lNigEW4dU5TUOPmpRecjL0fx8vbT6l+p isZeHk7q7V7VV/by7lLeGpgcKrxM2PcsBXQHHK5xuH3FFwMskU5+jFLDaEyCteYe m++Siyogmmf8AJICqAbxEqDMeMFPAJkqjtepRHiPgTA3ozzeXIFSrDQ5T5QULtgp 8zl8WeqWb9snHJhnTqU59ahUBEaKtaJ+qASbbpK5ySP37diDEs3ip31wxdun9R0K dpaOnAiUiDdBXqLbEt2OePWmYPqR7aRdcRe19kypDjO30CvT3hoij3QlwIs1/281 RziTcmWhJ/VXPA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:52:41 2025 by rpki-client