This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json) Hash identifier: 9dA50IJzlQVebSfYqJdCCsXlgXZV1QHV2/MP1JndMj4= Subject key identifier: B0:32:46:AF:22:00:AF:BB:2D:80:F1:AB:48:F9:0F:6B:CB:E4:02:DD Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36 Certificate serial: 019B330D5622FFA185631900E57BE8F8ED00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft Manifest number: 1648 Signing time: Thu 18 Dec 2025 20:01:10 +0000 Manifest this update: Thu 18 Dec 2025 20:01:10 +0000 Manifest next update: Fri 19 Dec 2025 20:01:10 +0000 Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=) 2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=) 3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: 4naL6usBMQ1OUnoX9Jr3zvQZW8+sUaC60OSKxx+T5BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:56:22:ff:a1:85:63:19:00:e5:7b:e8:f8:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36 Validity Not Before: Dec 18 20:01:10 2025 GMT Not After : Dec 19 20:01:10 2025 GMT Subject: CN=b03246af2200afbb2d80f1ab48f90f6bcbe402dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:78:5c:35:19:e8:1b:21:ee:e4:a5:3f:61: 48:a9:36:f5:80:bb:ff:ec:8a:23:54:ab:bf:43:c3: 94:d9:2d:32:32:6a:56:fa:7f:c8:eb:db:cb:19:96: 20:b8:eb:d6:0f:2d:d1:93:ad:f4:ca:05:ec:93:83: 2c:d5:62:07:e5:fe:7b:df:7b:dd:93:21:8c:7e:7d: a9:59:6e:18:4b:ac:b1:cc:b2:1b:ff:b8:68:b5:8c: 8c:e9:bc:ca:34:02:ad:cb:1d:10:b9:19:a9:0f:c4: aa:8f:11:09:6a:0e:13:8a:05:6a:19:7a:e6:eb:b7: 6c:47:d8:77:59:43:aa:e2:37:c1:dd:a9:de:4e:54: ac:ad:3a:d3:68:e7:8b:f3:ba:75:be:c6:fe:b0:19: b6:70:b1:2b:7c:44:c2:c6:86:73:08:23:fb:94:f7: 40:4f:5d:72:b7:3e:6b:3d:0a:5e:4a:05:51:b2:95: b5:34:ab:8c:e1:ed:20:6f:bb:0d:4b:6a:e8:7d:6d: 26:6b:7a:70:a1:46:cc:4c:49:72:a2:ed:8e:de:59: 75:d3:17:eb:d5:65:ba:18:6d:1e:3f:c4:03:1e:40: d6:b9:47:b9:62:d4:24:dc:8c:92:df:4a:ec:b0:03: 6c:e7:ff:a8:95:8c:23:27:f3:e6:58:00:8b:31:97: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:32:46:AF:22:00:AF:BB:2D:80:F1:AB:48:F9:0F:6B:CB:E4:02:DD X509v3 Authority Key Identifier: keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e0:36:20:26:12:a1:35:b4:f7:4b:08:ef:a4:6b:ea:b6:35: f2:08:83:e8:80:86:d1:d1:cf:bc:72:41:5b:7a:6d:30:10:42: 4b:9d:36:97:9c:06:b1:72:b4:2a:42:f8:69:81:5b:9d:61:ee: 30:ae:2f:b9:f5:f3:bf:70:ef:74:6c:25:c5:7f:b7:71:4e:21: 79:3c:3a:d3:f4:cf:28:a3:a7:41:a4:91:b9:cd:a4:1f:50:99: 33:b0:ed:58:2f:a6:ef:1a:ae:f6:3f:46:4c:96:ae:df:d9:1f: 67:0f:96:0d:a0:06:a3:61:50:ec:88:4f:56:e7:c3:c4:90:a0: 6b:f4:4b:1d:fc:e5:b2:ba:57:28:0e:7a:af:67:4c:f5:48:cb: 4e:9a:94:6c:6e:7a:0f:36:23:91:dd:35:f9:7b:5b:57:43:15: 9a:7a:a4:bf:33:e1:4d:fa:c8:54:21:32:4f:53:ab:fa:c0:8c: fa:0d:43:61:9b:87:1b:d7:84:07:c2:01:77:2f:73:d6:db:e8: 0a:f8:fc:08:8f:a0:7d:4a:ae:80:38:13:62:1d:c2:5d:4b:3b: 23:97:cc:da:e2:fc:43:02:31:a5:22:f7:af:47:9d:a6:10:a7: b1:ae:5f:82:9b:21:86:6d:45:18:89:af:3e:9e:e8:67:5e:db: c0:ea:b0:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDVYi/6GFYxkA5Xvo+O0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNmVhZGI4NjU5YmM3MzRkY2NiMjlmNjM4NDIxMDM2YmI5 MjJlMzYwHhcNMjUxMjE4MjAwMTEwWhcNMjUxMjE5MjAwMTEwWjAzMTEwLwYDVQQD EyhiMDMyNDZhZjIyMDBhZmJiMmQ4MGYxYWI0OGY5MGY2YmNiZTQwMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/p4XDUZ6Bsh7uSlP2FIqTb1gLv/ 7IojVKu/Q8OU2S0yMmpW+n/I69vLGZYguOvWDy3Rk630ygXsk4Ms1WIH5f5733vd kyGMfn2pWW4YS6yxzLIb/7hotYyM6bzKNAKtyx0QuRmpD8SqjxEJag4TigVqGXrm 67dsR9h3WUOq4jfB3aneTlSsrTrTaOeL87p1vsb+sBm2cLErfETCxoZzCCP7lPdA T11ytz5rPQpeSgVRspW1NKuM4e0gb7sNS2rofW0ma3pwoUbMTElyou2O3ll10xfr 1WW6GG0eP8QDHkDWuUe5YtQk3IyS30rssANs5/+olYwjJ/PmWACLMZeuFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAyRq8iAK+7LYDxq0j5D2vL5ALdMB8GA1UdIwQY MBaAFIxurbhlm8c03Msp9jhCEDa7ki42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQt NjY0NWRkM2Q2MjRiLzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQtNjY0NWRkM2Q2MjRi LzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOA2ICYS oTW090sI76Rr6rY18giD6ICG0dHPvHJBW3ptMBBCS502l5wGsXK0KkL4aYFbnWHu MK4vufXzv3DvdGwlxX+3cU4heTw60/TPKKOnQaSRuc2kH1CZM7DtWC+m7xqu9j9G TJau39kfZw+WDaAGo2FQ7IhPVufDxJCga/RLHfzlsrpXKA56r2dM9UjLTpqUbG56 DzYjkd01+XtbV0MVmnqkvzPhTfrIVCEyT1Or+sCM+g1DYZuHG9eEB8IBdy9z1tvo Cvj8CI+gfUqugDgTYh3CXUs7I5fM2uL8QwIxpSL3r0edphCnsa5fgpshhm1FGImv Pp7oZ17bwOqw9g== -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:57 2025 by rpki-client