This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json) Hash identifier: 8Nb7v9tRKT92ijmyVdnaqrRNwVkwMTIYxXVcRPRQ3ek= Subject key identifier: 1E:D3:64:9F:AE:48:7F:EC:5D:5D:75:75:23:04:D8:6C:0B:A3:71:DB Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36 Certificate serial: 019AF541324F2076A2ABB7A3403E93E06FA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft Manifest number: 1628 Signing time: Sat 06 Dec 2025 20:01:21 +0000 Manifest this update: Sat 06 Dec 2025 20:01:21 +0000 Manifest next update: Sun 07 Dec 2025 20:01:21 +0000 Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=) 2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=) 3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: hpHzAgeubH0N1Nt5CAEvfSMfR1FNPOeBwSeu1jR9QFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:32:4f:20:76:a2:ab:b7:a3:40:3e:93:e0:6f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36 Validity Not Before: Dec 6 20:01:21 2025 GMT Not After : Dec 7 20:01:21 2025 GMT Subject: CN=1ed3649fae487fec5d5d75752304d86c0ba371db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:14:50:cb:3b:78:52:f5:c7:73:d6:d5:5a: c1:48:41:62:46:33:eb:46:f3:78:75:b6:32:96:c2: 89:0c:1a:90:42:5c:24:7b:83:bb:cc:51:40:77:ed: a6:36:e7:36:ee:b9:18:a6:75:80:49:90:25:a6:44: 8d:77:f8:f2:1d:ff:e4:f1:63:55:f7:bd:cc:a7:e7: b1:f8:51:7c:67:33:16:9d:6c:a3:50:da:e5:0a:10: f9:14:ba:b5:27:cf:b1:cf:dd:c7:30:5b:2f:46:68: 76:f6:b0:89:3c:f9:c1:a6:99:1f:62:e7:d7:1e:3e: 95:ab:e4:b0:6f:02:3e:dc:9b:91:26:f5:c4:48:6c: 87:24:a8:62:28:94:06:cb:bb:1e:c8:76:6d:03:52: d7:28:2e:30:97:9d:a6:ef:a3:62:ef:94:25:bc:1b: 1b:f6:e1:92:ce:e8:e9:a6:61:92:b5:75:7f:d0:e7: e2:9b:6e:32:5b:7b:21:9f:c0:38:60:29:ff:5f:17: b7:9f:f0:7f:3d:47:40:36:1b:aa:3e:92:90:ad:fc: 63:08:99:6c:aa:ec:00:a3:6b:c7:f5:05:5d:18:73: a2:39:5c:e6:a9:62:ba:81:42:bc:b9:1c:b9:7a:96: 68:be:38:77:78:40:dc:e3:48:8e:d6:9a:94:11:34: 54:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D3:64:9F:AE:48:7F:EC:5D:5D:75:75:23:04:D8:6C:0B:A3:71:DB X509v3 Authority Key Identifier: keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e8:49:50:ec:59:31:5d:f6:39:69:69:32:41:c0:8c:9f:b6: 13:e0:10:2b:17:9d:40:4b:d6:01:9b:02:c1:2e:4d:10:91:ff: 42:76:18:c8:ba:42:32:f8:62:e0:1b:73:ca:2a:44:f0:92:42: 3f:9f:36:d0:34:73:39:36:98:22:71:91:7f:87:f1:d0:1a:a3: c8:00:0f:c5:50:5d:0d:0c:e0:99:90:9e:be:f5:d7:35:36:49: d1:78:5e:d7:f3:d0:67:1f:16:60:b8:64:1c:10:fa:21:d3:98: 7f:00:61:31:56:b1:ac:cb:61:c6:8e:4e:4a:fa:f3:1b:24:ab: 7c:4c:ed:c3:26:33:85:5a:ef:0a:69:cd:82:d7:43:88:e5:ad: f7:7d:38:bc:eb:d3:49:9c:5e:31:6e:7e:f4:82:18:8e:d8:a6: e5:c8:ce:2d:3b:9c:52:83:95:ed:a1:e1:c1:6b:64:13:75:d1: b6:d2:5f:00:98:63:be:87:ff:70:4e:fe:12:52:a5:09:d8:31: 29:c9:7a:82:e2:3a:c3:de:02:f4:2c:1f:55:fc:79:4d:79:4c: a7:5e:f3:60:c4:e5:6d:e6:5e:b3:ef:f6:1f:c0:ab:ac:46:ef: 1b:1e:09:23:a7:09:07:52:ad:b5:73:f9:1f:d1:44:73:45:1e: 94:4d:f3:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QTJPIHaiq7ejQD6T4G+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNmVhZGI4NjU5YmM3MzRkY2NiMjlmNjM4NDIxMDM2YmI5 MjJlMzYwHhcNMjUxMjA2MjAwMTIxWhcNMjUxMjA3MjAwMTIxWjAzMTEwLwYDVQQD EygxZWQzNjQ5ZmFlNDg3ZmVjNWQ1ZDc1NzUyMzA0ZDg2YzBiYTM3MWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7kUUMs7eFL1x3PW1VrBSEFiRjPr RvN4dbYylsKJDBqQQlwke4O7zFFAd+2mNuc27rkYpnWASZAlpkSNd/jyHf/k8WNV 973Mp+ex+FF8ZzMWnWyjUNrlChD5FLq1J8+xz93HMFsvRmh29rCJPPnBppkfYufX Hj6Vq+SwbwI+3JuRJvXESGyHJKhiKJQGy7seyHZtA1LXKC4wl52m76Ni75QlvBsb 9uGSzujppmGStXV/0Ofim24yW3shn8A4YCn/Xxe3n/B/PUdANhuqPpKQrfxjCJls quwAo2vH9QVdGHOiOVzmqWK6gUK8uRy5epZovjh3eEDc40iO1pqUETRULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7TZJ+uSH/sXV11dSME2GwLo3HbMB8GA1UdIwQY MBaAFIxurbhlm8c03Msp9jhCEDa7ki42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQt NjY0NWRkM2Q2MjRiLzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQtNjY0NWRkM2Q2MjRi LzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+hJUOxZ MV32OWlpMkHAjJ+2E+AQKxedQEvWAZsCwS5NEJH/QnYYyLpCMvhi4BtzyipE8JJC P5820DRzOTaYInGRf4fx0BqjyAAPxVBdDQzgmZCevvXXNTZJ0Xhe1/PQZx8WYLhk HBD6IdOYfwBhMVaxrMthxo5OSvrzGySrfEztwyYzhVrvCmnNgtdDiOWt9304vOvT SZxeMW5+9IIYjtim5cjOLTucUoOV7aHhwWtkE3XRttJfAJhjvof/cE7+ElKlCdgx Kcl6guI6w94C9CwfVfx5TXlMp17zYMTlbeZes+/2H8CrrEbvGx4JI6cJB1KttXP5 H9FEc0UelE3zLA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:00 2025 by rpki-client