This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft File: jXskLMdAYjU4IyQFjJHa_GOZACY.mft (raw, json) Hash identifier: Pn3tWyr7S3hT9PDxybcuVN59eWi5hhePLnbaGGCQl38= Subject key identifier: 6C:8B:CF:C3:D7:B7:81:B7:D1:5E:C2:E2:02:AA:6D:BC:70:5B:29:98 Authority key identifier: 8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26 Certificate issuer: /CN=8d7b242cc7406235382324058c91dafc63990026 Certificate serial: 019B296583C6A2CD10BB095B8B87F85DC1C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft Manifest number: 15 Signing time: Tue 16 Dec 2025 23:01:17 +0000 Manifest this update: Tue 16 Dec 2025 23:01:17 +0000 Manifest next update: Wed 17 Dec 2025 23:01:17 +0000 Files and hashes: 1: P0CumdZQgDSrrWlI0D1aYJJUcd0.asa (hash: BA2NFYuYvPxMigDBuhbLG4trF8mSaN77z6KytfnkVdg=) 2: jXskLMdAYjU4IyQFjJHa_GOZACY.crl (hash: ON0l+lfybMT/arj3++H4odqhyC2SrLUsgoRCR9ctzi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:65:83:c6:a2:cd:10:bb:09:5b:8b:87:f8:5d:c1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7b242cc7406235382324058c91dafc63990026 Validity Not Before: Dec 16 23:01:17 2025 GMT Not After : Dec 17 23:01:17 2025 GMT Subject: CN=6c8bcfc3d7b781b7d15ec2e202aa6dbc705b2998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:d0:dd:28:f0:4c:62:1d:97:16:37:18:2b: 27:cf:e5:0b:3e:39:72:51:19:d6:23:12:fb:f5:27: 0f:29:e0:3c:e1:dc:25:fe:3c:77:a9:41:68:b0:cd: a5:c2:8b:54:dc:25:59:67:00:f7:30:92:bc:a6:7c: f7:69:75:2d:ed:16:8c:9d:f0:8d:15:4d:a0:c1:b7: 35:76:36:2d:61:3f:3e:25:1e:0b:1a:55:b3:f2:55: 33:77:75:d9:3d:2f:ba:b0:30:4b:9f:7d:ab:cf:33: 36:c6:d9:93:3d:08:75:12:3e:99:c4:0c:e5:d9:89: 23:c4:68:cb:e5:51:04:c0:1b:57:99:94:a9:67:20: d6:b2:2e:33:ad:ec:e9:fd:e5:54:0b:4e:c3:3b:fd: db:ef:1d:0b:64:3c:d9:36:ab:6b:af:58:77:62:01: 40:51:58:09:fe:ef:28:ca:88:43:30:f5:6f:3f:6c: db:ad:6c:dd:99:3a:76:f8:88:4a:5d:77:50:9c:28: 06:a3:ed:36:33:56:a7:50:1e:92:65:08:e0:96:dc: b6:8d:28:5b:1d:20:75:99:bb:d9:e5:4c:94:c0:90: d7:7f:61:ea:62:6c:8b:bf:25:63:59:bb:00:76:35: 46:ce:a1:3b:e7:d3:4c:d2:11:60:68:19:62:22:a1: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8B:CF:C3:D7:B7:81:B7:D1:5E:C2:E2:02:AA:6D:BC:70:5B:29:98 X509v3 Authority Key Identifier: keyid:8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:da:65:a2:c1:b0:c9:77:40:85:69:e7:4c:bf:57:e3:6d:a4: 0b:21:39:e4:97:bf:e9:ea:d9:71:18:1d:a9:06:27:63:f8:60: d8:1f:8a:53:06:87:15:e1:25:2b:3f:9f:10:ba:e1:67:96:00: 1c:bc:13:3a:2f:b0:1d:ec:be:88:0f:93:39:a9:04:c6:ac:40: ed:56:48:b4:15:8f:df:fc:3c:4f:7f:29:96:11:88:9c:11:c7: 97:41:ca:3c:a2:a6:6a:3b:d9:bb:ce:3f:f9:ea:07:0c:34:c8: c6:00:3b:87:31:a0:40:aa:24:ba:b3:1d:c0:5e:47:60:e8:26: dd:7d:c5:17:46:ce:36:62:da:2a:ab:6c:8e:1e:fc:a5:2c:89: da:d9:a4:3b:cd:5e:0a:d7:e5:2a:6e:32:af:18:ff:61:3e:f5: b0:d7:79:e1:c8:bc:80:22:ec:c8:c4:4b:1a:9c:fb:47:52:f0: 76:df:f6:b1:1b:cf:a1:e1:bc:72:ec:cf:c3:c3:41:ce:99:5b: e0:02:b2:37:7b:91:a9:db:3b:ea:08:32:03:10:1c:18:7c:f3: bf:3d:36:8f:fc:62:de:02:d8:34:ce:5a:6b:d6:63:e7:d7:9a: 08:5c:8e:43:7d:00:68:b7:e0:eb:a1:d0:f1:a2:76:45:a5:07: 85:af:6f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspZYPGos0Quwlbi4f4XcHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkN2IyNDJjYzc0MDYyMzUzODIzMjQwNThjOTFkYWZjNjM5 OTAwMjYwHhcNMjUxMjE2MjMwMTE3WhcNMjUxMjE3MjMwMTE3WjAzMTEwLwYDVQQD Eyg2YzhiY2ZjM2Q3Yjc4MWI3ZDE1ZWMyZTIwMmFhNmRiYzcwNWIyOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN3Q3SjwTGIdlxY3GCsnz+ULPjly URnWIxL79ScPKeA84dwl/jx3qUFosM2lwotU3CVZZwD3MJK8pnz3aXUt7RaMnfCN FU2gwbc1djYtYT8+JR4LGlWz8lUzd3XZPS+6sDBLn32rzzM2xtmTPQh1Ej6ZxAzl 2YkjxGjL5VEEwBtXmZSpZyDWsi4zrezp/eVUC07DO/3b7x0LZDzZNqtrr1h3YgFA UVgJ/u8oyohDMPVvP2zbrWzdmTp2+IhKXXdQnCgGo+02M1anUB6SZQjglty2jShb HSB1mbvZ5UyUwJDXf2HqYmyLvyVjWbsAdjVGzqE759NM0hFgaBliIqFwFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyLz8PXt4G30V7C4gKqbbxwWymYMB8GA1UdIwQY MBaAFI17JCzHQGI1OCMkBYyR2vxjmQAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xNzRiNDktNTBjYi00NzhmLThhNWMt NGMyMjAzNWI5MmYwLzEvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xNzRiNDktNTBjYi00NzhmLThhNWMtNGMyMjAzNWI5MmYw LzEvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9plosGw yXdAhWnnTL9X422kCyE55Je/6erZcRgdqQYnY/hg2B+KUwaHFeElKz+fELrhZ5YA HLwTOi+wHey+iA+TOakExqxA7VZItBWP3/w8T38plhGInBHHl0HKPKKmajvZu84/ +eoHDDTIxgA7hzGgQKokurMdwF5HYOgm3X3FF0bONmLaKqtsjh78pSyJ2tmkO81e CtflKm4yrxj/YT71sNd54ci8gCLsyMRLGpz7R1Lwdt/2sRvPoeG8cuzPw8NBzplb 4AKyN3uRqds76ggyAxAcGHzzvz02j/xi3gLYNM5aa9Zj59eaCFyOQ30AaLfg66HQ 8aJ2RaUHha9v8w== -----END CERTIFICATE-----Generated at Wed Dec 17 06:27:05 2025 by rpki-client