This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json) Hash identifier: p02DtDU2RwK/Pg1kplkUIG8etE/zWECBtwHu5WOwQKk= Subject key identifier: 11:61:01:2D:35:85:00:16:F3:2E:1F:CA:1A:18:46:9C:82:49:6F:DA Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Certificate serial: 019B337AF4C0405E300B81FA66F2A41FD062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft Manifest number: 02DB Signing time: Thu 18 Dec 2025 22:00:54 +0000 Manifest this update: Thu 18 Dec 2025 22:00:54 +0000 Manifest next update: Fri 19 Dec 2025 22:00:54 +0000 Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=) 2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: dgpYNfdxi/Ka5pASAblG2OiuYmTnxGLJTks+iTep4cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:f4:c0:40:5e:30:0b:81:fa:66:f2:a4:1f:d0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Validity Not Before: Dec 18 22:00:54 2025 GMT Not After : Dec 19 22:00:54 2025 GMT Subject: CN=1161012d35850016f32e1fca1a18469c82496fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:40:7a:05:97:db:9f:2d:54:1c:8f:00:0c: d0:a9:7b:e7:5c:fc:12:41:13:65:84:50:f3:dc:d1: 66:93:1f:c5:96:a3:91:71:b7:bf:ce:49:a1:cb:60: c3:1c:e1:2a:d0:d4:51:30:19:df:48:8b:4a:9b:26: e0:f4:58:7b:e6:f8:4c:4d:c4:0e:87:4a:8c:b8:32: 5f:44:8c:f3:1f:9d:ed:27:fd:74:83:42:b5:6f:16: c8:a7:c5:e9:a8:02:bb:9b:3d:c2:a1:85:df:76:81: ef:cf:7a:f6:67:4b:a7:21:09:a2:1b:a7:b6:56:04: 33:60:3d:86:fd:63:b1:42:c5:40:4a:98:28:1f:3f: 9c:0d:72:b3:1a:b4:c2:e7:7a:5c:cf:c8:f9:d3:1d: b7:27:92:09:11:13:49:70:a9:f6:45:ac:73:8a:2c: 4d:a4:60:d2:43:06:55:ba:ac:01:2f:ab:99:52:cc: 87:99:22:a6:50:5d:15:34:56:8e:bc:16:84:c6:6b: a3:70:45:ac:43:b9:0d:a4:cb:77:a0:0f:4a:a6:7a: 44:ea:f7:6e:a0:41:a2:7f:23:6f:be:1f:4d:da:a4: 47:b7:f5:b6:3a:bb:96:8c:39:9b:8b:8c:17:0d:bb: 57:a8:09:f2:12:d5:3c:eb:f1:91:31:2a:ec:2f:bb: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:61:01:2D:35:85:00:16:F3:2E:1F:CA:1A:18:46:9C:82:49:6F:DA X509v3 Authority Key Identifier: keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:be:1e:87:5b:a8:53:b3:96:0a:9d:2a:43:87:be:36:fc:8a: 7d:30:a3:5b:09:55:86:83:0f:a9:35:da:d3:05:33:ee:81:bf: ad:98:e6:e3:9e:96:0f:b5:41:4d:8c:d7:a8:7b:b9:3c:9f:14: 60:d4:cc:38:4f:8c:8d:10:2d:51:08:8b:ce:99:72:f7:c3:3f: 50:33:4c:6a:71:20:f4:2f:ed:be:47:ff:d1:e6:8c:32:74:2f: 64:3a:70:3d:c6:97:bf:bf:bb:1a:bf:de:9a:45:85:d2:82:89: 75:5d:d5:59:41:48:9a:c2:4d:c6:da:1e:11:dd:11:db:53:2e: a2:dc:7d:27:16:f0:e8:20:d0:38:ec:06:28:9f:66:ed:46:10: 2e:98:6f:7d:5a:c2:f9:86:ab:a9:39:1c:3e:da:c1:1d:95:39: 3a:9a:ad:65:a7:05:ae:d2:12:27:5c:5a:9a:d7:cf:5e:6f:42: b9:9d:bd:16:92:3a:f1:ec:9a:cc:e3:97:ba:1b:39:3d:c4:57: b4:da:e2:05:52:f8:cf:63:d0:2a:40:85:e3:a4:de:cf:2c:73: 72:76:af:5a:ae:86:75:ad:37:b3:60:8a:1a:4d:76:3e:fa:3e: 1f:e1:f3:2c:5f:43:4b:56:64:d0:cc:a3:79:a9:f7:f4:b9:a0: 8f:e5:f5:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszevTAQF4wC4H6ZvKkH9BiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjgyZmYzZWM3Y2I4MWI3OGU2MjhhNzM1MTc2NDhkNjIy OWNhYjcwHhcNMjUxMjE4MjIwMDU0WhcNMjUxMjE5MjIwMDU0WjAzMTEwLwYDVQQD EygxMTYxMDEyZDM1ODUwMDE2ZjMyZTFmY2ExYTE4NDY5YzgyNDk2ZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrJAegWX258tVByPAAzQqXvnXPwS QRNlhFDz3NFmkx/FlqORcbe/zkmhy2DDHOEq0NRRMBnfSItKmybg9Fh75vhMTcQO h0qMuDJfRIzzH53tJ/10g0K1bxbIp8XpqAK7mz3CoYXfdoHvz3r2Z0unIQmiG6e2 VgQzYD2G/WOxQsVASpgoHz+cDXKzGrTC53pcz8j50x23J5IJERNJcKn2RaxziixN pGDSQwZVuqwBL6uZUsyHmSKmUF0VNFaOvBaExmujcEWsQ7kNpMt3oA9KpnpE6vdu oEGifyNvvh9N2qRHt/W2OruWjDmbi4wXDbtXqAnyEtU86/GRMSrsL7uLuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFhAS01hQAW8y4fyhoYRpyCSW/aMB8GA1UdIwQY MBaAFIwoL/PsfLgbeOYopzUXZI1iKcq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUt NmNhM2U5ZDNlNzhkLzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUtNmNhM2U5ZDNlNzhk LzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlL4eh1uo U7OWCp0qQ4e+NvyKfTCjWwlVhoMPqTXa0wUz7oG/rZjm456WD7VBTYzXqHu5PJ8U YNTMOE+MjRAtUQiLzply98M/UDNManEg9C/tvkf/0eaMMnQvZDpwPcaXv7+7Gr/e mkWF0oKJdV3VWUFImsJNxtoeEd0R21Muotx9Jxbw6CDQOOwGKJ9m7UYQLphvfVrC +YarqTkcPtrBHZU5OpqtZacFrtISJ1xamtfPXm9CuZ29FpI68eyazOOXuhs5PcRX tNriBVL4z2PQKkCF46TezyxzcnavWq6Gda03s2CKGk12Pvo+H+HzLF9DS1Zk0Myj ean39Lmgj+X1jQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:50:59 2025 by rpki-client