This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json) Hash identifier: Z7/rBDLLLdE/azjxtUadcnAWHsh2XmkYspZ//FS8XRE= Subject key identifier: 3A:F9:18:4D:27:AF:08:17:0F:0A:45:32:6A:FC:5C:69:7A:67:1A:10 Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Certificate serial: 019B1C4E37717054F73DA01B6662E0356E3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft Manifest number: 02CF Signing time: Sun 14 Dec 2025 10:00:46 +0000 Manifest this update: Sun 14 Dec 2025 10:00:46 +0000 Manifest next update: Mon 15 Dec 2025 10:00:46 +0000 Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=) 2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: EUMoMVXS6KVxOv7x1tbYYR54F3IuNNg/8Uz+apT7s7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:37:71:70:54:f7:3d:a0:1b:66:62:e0:35:6e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Validity Not Before: Dec 14 10:00:46 2025 GMT Not After : Dec 15 10:00:46 2025 GMT Subject: CN=3af9184d27af08170f0a45326afc5c697a671a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:90:62:e8:20:6b:f3:8d:2a:86:d7:3b:53: 9d:90:b8:0d:59:11:a7:ee:f1:b2:18:6f:a3:28:89: 37:05:c2:0d:fa:e1:1d:a4:eb:fe:96:2b:c7:53:46: 3f:14:60:10:ca:ac:20:2e:64:76:2b:27:6e:b8:35: 30:ac:16:80:53:55:b1:2b:09:f4:c5:9b:03:e3:97: 09:24:2c:16:9d:b8:d3:4d:f8:ca:d8:8b:58:c2:4d: 21:c2:37:f4:59:7c:a3:15:91:6e:e9:42:08:08:f1: db:03:84:54:ca:ce:59:3d:67:84:1f:1a:8f:0e:45: 79:95:0d:78:89:67:d7:f2:a8:52:26:c2:74:bc:ee: a6:0a:d2:b4:85:a5:18:ae:5c:b0:f3:97:26:ea:45: 99:a9:e8:b1:80:b8:28:50:6e:f1:47:b7:6f:4d:4f: 08:72:f8:2a:fd:91:27:cf:72:5e:5b:48:a3:d8:87: ea:19:51:33:61:78:06:5b:84:37:a5:ff:19:9b:63: 88:a9:41:fd:54:93:be:b1:eb:8c:93:2b:7c:64:5d: af:e2:aa:1b:e2:f9:e2:e1:b3:cb:fd:67:bc:ad:6b: 34:c0:ff:3d:84:df:f4:7f:8e:99:01:1c:78:7d:b6: 1d:31:58:eb:1a:7d:be:f0:90:1e:18:e2:01:82:e6: f0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F9:18:4D:27:AF:08:17:0F:0A:45:32:6A:FC:5C:69:7A:67:1A:10 X509v3 Authority Key Identifier: keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:97:57:44:34:2b:b3:6c:5a:fe:a0:d4:96:bb:96:ba:0c:79: aa:e6:15:c9:46:6a:76:42:ef:c9:26:4f:8d:84:83:02:ee:7f: 83:d3:8d:ee:08:74:c8:29:ef:14:c1:7e:a2:8e:55:1f:a9:46: 06:8b:2c:a8:60:08:e4:74:de:ef:85:11:6d:df:dc:68:bb:70: a6:b8:88:c4:da:85:10:84:d9:4f:03:a7:86:0e:05:27:84:83: d5:e9:80:9a:3f:57:8b:0e:b8:fc:64:09:91:7a:e6:3e:2e:6d: 33:72:73:4f:4f:77:84:11:e7:b2:35:fb:20:ab:88:7b:87:e4: 36:f9:a9:ab:87:01:f4:a8:4e:89:c4:10:2b:4a:a5:fe:c6:b1: bb:86:04:57:24:25:2e:76:a5:fe:42:de:93:c3:88:2c:c6:9e: 73:b8:0f:49:b1:0c:1c:1b:ea:98:2e:25:dd:a6:36:13:f5:7a: 26:14:ad:8d:0a:c6:c0:86:a6:b8:66:da:cc:3f:19:9d:a5:d9: 51:43:07:f5:50:c2:85:43:e4:bd:2f:b8:c0:7c:79:d6:e6:ad: 32:71:a9:dc:2e:92:7a:3e:c0:4a:4e:57:5e:11:7c:41:50:16: 70:89:cf:62:33:c8:c6:fb:bf:63:c6:d9:5e:9e:77:af:25:1d: e5:bb:df:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTjdxcFT3PaAbZmLgNW4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjgyZmYzZWM3Y2I4MWI3OGU2MjhhNzM1MTc2NDhkNjIy OWNhYjcwHhcNMjUxMjE0MTAwMDQ2WhcNMjUxMjE1MTAwMDQ2WjAzMTEwLwYDVQQD EygzYWY5MTg0ZDI3YWYwODE3MGYwYTQ1MzI2YWZjNWM2OTdhNjcxYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUSQYugga/ONKobXO1OdkLgNWRGn 7vGyGG+jKIk3BcIN+uEdpOv+livHU0Y/FGAQyqwgLmR2KyduuDUwrBaAU1WxKwn0 xZsD45cJJCwWnbjTTfjK2ItYwk0hwjf0WXyjFZFu6UIICPHbA4RUys5ZPWeEHxqP DkV5lQ14iWfX8qhSJsJ0vO6mCtK0haUYrlyw85cm6kWZqeixgLgoUG7xR7dvTU8I cvgq/ZEnz3JeW0ij2IfqGVEzYXgGW4Q3pf8Zm2OIqUH9VJO+seuMkyt8ZF2v4qob 4vni4bPL/We8rWs0wP89hN/0f46ZARx4fbYdMVjrGn2+8JAeGOIBgubwWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDr5GE0nrwgXDwpFMmr8XGl6ZxoQMB8GA1UdIwQY MBaAFIwoL/PsfLgbeOYopzUXZI1iKcq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUt NmNhM2U5ZDNlNzhkLzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUtNmNhM2U5ZDNlNzhk LzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJdXRDQr s2xa/qDUlruWugx5quYVyUZqdkLvySZPjYSDAu5/g9ON7gh0yCnvFMF+oo5VH6lG BossqGAI5HTe74URbd/caLtwpriIxNqFEITZTwOnhg4FJ4SD1emAmj9Xiw64/GQJ kXrmPi5tM3JzT093hBHnsjX7IKuIe4fkNvmpq4cB9KhOicQQK0ql/saxu4YEVyQl Lnal/kLek8OILMaec7gPSbEMHBvqmC4l3aY2E/V6JhStjQrGwIamuGbazD8ZnaXZ UUMH9VDChUPkvS+4wHx51uatMnGp3C6Sej7ASk5XXhF8QVAWcInPYjPIxvu/Y8bZ Xp53ryUd5bvf6g== -----END CERTIFICATE-----Generated at Sun Dec 14 11:49:18 2025 by rpki-client