This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json) Hash identifier: SvzFQfn7Z71oY3sEimAzeufBt7uplOyBi4t6mbcUbHw= Subject key identifier: D9:A2:0E:21:E5:21:C7:9F:59:E3:82:31:D3:52:BB:16:28:4D:D4:B5 Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Certificate serial: 019B1013DC449981962395CEB1BFDE9E318A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft Manifest number: 1704 Signing time: Fri 12 Dec 2025 01:01:35 +0000 Manifest this update: Fri 12 Dec 2025 01:01:35 +0000 Manifest next update: Sat 13 Dec 2025 01:01:35 +0000 Files and hashes: 1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=) 2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=) 3: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=) 4: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: yCOU0DaDBbWFflUxvN1YSU5Y0pIwrLwAvN21c9+HCt0=) 5: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:dc:44:99:81:96:23:95:ce:b1:bf:de:9e:31:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Validity Not Before: Dec 12 01:01:35 2025 GMT Not After : Dec 13 01:01:35 2025 GMT Subject: CN=d9a20e21e521c79f59e38231d352bb16284dd4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:b5:b8:5b:1c:ae:c9:5e:d2:92:58:19:7a: 49:a0:39:10:b4:5c:71:8f:dd:60:bd:63:4c:64:15: a7:a4:9c:25:39:d2:bc:af:50:69:d5:45:23:72:3a: f0:c7:a5:27:01:e1:23:62:a9:ff:fb:0c:3e:a4:11: 02:b2:e4:20:00:b2:95:15:10:1a:b2:da:6a:e7:31: 5a:80:2c:51:7c:00:5b:ee:6d:26:f6:d2:54:5f:e5: ce:f7:67:f0:c3:b3:fa:0a:48:58:b9:f7:73:89:45: ee:4c:a9:0b:ed:4e:e5:06:00:2b:47:6e:45:ed:72: c9:e4:5a:8a:a8:14:ff:71:d3:b2:28:88:42:64:c8: 7d:b0:ba:ef:5d:ad:0a:cc:fd:01:bd:0d:28:16:50: 45:e0:49:3a:a8:3a:6d:64:2a:04:ad:18:ad:2d:23: 86:db:56:68:f6:aa:95:a5:23:aa:3f:cb:c2:8f:2b: 90:cd:92:f2:15:b2:ce:8c:e2:6e:79:71:be:10:5c: 42:99:d6:32:15:9a:8a:6f:d0:a3:42:63:5e:8c:06: a9:a2:04:2e:34:ba:a8:c8:75:2a:0b:1e:42:0a:1c: 72:2d:f8:a8:ab:9d:6d:7c:50:af:d7:8c:83:5c:72: 51:86:dc:2c:ea:64:00:90:f2:b8:d9:66:91:a4:25: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A2:0E:21:E5:21:C7:9F:59:E3:82:31:D3:52:BB:16:28:4D:D4:B5 X509v3 Authority Key Identifier: keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c2:24:2d:fe:3f:66:f6:85:3c:4b:63:c0:a2:69:c5:2a:4e: 6e:03:fb:77:8a:d3:8b:c9:40:00:e6:8e:fb:85:f4:d5:8c:9e: 6c:8c:8f:35:0e:0c:c5:b8:72:a3:38:19:de:59:90:55:b2:cd: 44:b4:f3:23:87:f1:4a:fa:36:45:47:fe:ee:56:6e:17:fe:a0: 84:1f:33:3e:ab:22:c2:00:8a:ed:b7:a3:8e:e6:26:94:7f:ee: be:66:b7:86:b1:4a:93:2e:ff:b3:66:51:51:3a:a8:d6:cf:64: 92:96:ca:23:b7:b8:fc:0c:c3:a3:5a:83:e5:12:0b:1f:3d:e0: 99:5c:3a:4f:d0:81:67:56:95:8a:4e:02:b5:21:fc:54:b7:5c: 81:1e:0b:cf:79:7e:0d:e3:a3:af:84:88:19:8d:09:eb:1a:6d: 24:42:d7:5d:14:86:f9:44:81:e4:72:86:49:f2:09:59:36:1f: 9e:d9:02:f0:c0:a1:0c:25:42:7d:a2:03:99:74:fe:9e:7d:2b: 14:17:03:3c:2c:a2:1e:71:c0:7e:73:eb:b0:94:ee:2a:ef:6b: 40:50:67:4b:28:e8:e7:d1:ca:31:f7:4d:5f:6d:fd:63:6f:96: fe:d6:b2:13:e8:41:43:7f:d8:41:1d:36:3d:0c:94:30:e9:46: 6b:b7:b9:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE9xEmYGWI5XOsb/enjGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx ZTI5YzQwHhcNMjUxMjEyMDEwMTM1WhcNMjUxMjEzMDEwMTM1WjAzMTEwLwYDVQQD EyhkOWEyMGUyMWU1MjFjNzlmNTllMzgyMzFkMzUyYmIxNjI4NGRkNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlna1uFscrsle0pJYGXpJoDkQtFxx j91gvWNMZBWnpJwlOdK8r1Bp1UUjcjrwx6UnAeEjYqn/+ww+pBECsuQgALKVFRAa stpq5zFagCxRfABb7m0m9tJUX+XO92fww7P6CkhYufdziUXuTKkL7U7lBgArR25F 7XLJ5FqKqBT/cdOyKIhCZMh9sLrvXa0KzP0BvQ0oFlBF4Ek6qDptZCoErRitLSOG 21Zo9qqVpSOqP8vCjyuQzZLyFbLOjOJueXG+EFxCmdYyFZqKb9CjQmNejAapogQu NLqoyHUqCx5CChxyLfioq51tfFCv14yDXHJRhtws6mQAkPK42WaRpCWwGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmiDiHlIcefWeOCMdNSuxYoTdS1MB8GA1UdIwQY MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt Mzg2YzFmOGIwNjQwLzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasIkLf4/ ZvaFPEtjwKJpxSpObgP7d4rTi8lAAOaO+4X01YyebIyPNQ4MxbhyozgZ3lmQVbLN RLTzI4fxSvo2RUf+7lZuF/6ghB8zPqsiwgCK7bejjuYmlH/uvma3hrFKky7/s2ZR UTqo1s9kkpbKI7e4/AzDo1qD5RILHz3gmVw6T9CBZ1aVik4CtSH8VLdcgR4Lz3l+ DeOjr4SIGY0J6xptJELXXRSG+USB5HKGSfIJWTYfntkC8MChDCVCfaIDmXT+nn0r FBcDPCyiHnHAfnPrsJTuKu9rQFBnSyjo59HKMfdNX239Y2+W/tayE+hBQ3/YQR02 PQyUMOlGa7e59A== -----END CERTIFICATE-----Generated at Fri Dec 12 05:32:44 2025 by rpki-client