This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json) Hash identifier: piW7bG4I284PgwFqcTMCiJ1oqbdrJHx0u6h/rIPuQKg= Subject key identifier: 78:05:17:E1:F1:FD:B0:B9:0A:46:78:F7:D4:CA:66:43:EF:18:B9:6A Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a Certificate serial: 019AF42E029C38EDED36ED8161E8225E0A52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft Manifest number: 0C3E Signing time: Sat 06 Dec 2025 15:00:47 +0000 Manifest this update: Sat 06 Dec 2025 15:00:47 +0000 Manifest next update: Sun 07 Dec 2025 15:00:47 +0000 Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: mXG34grEFsnHqkaeZrC88m2pmE/SvowgEzYBijrJ70I=) 2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:02:9c:38:ed:ed:36:ed:81:61:e8:22:5e:0a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a Validity Not Before: Dec 6 15:00:47 2025 GMT Not After : Dec 7 15:00:47 2025 GMT Subject: CN=780517e1f1fdb0b90a4678f7d4ca6643ef18b96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f5:18:a4:fc:25:d0:33:45:7d:6c:63:09:72: 60:b5:37:03:76:29:c1:1a:35:15:c7:68:7b:00:f9: 10:34:e1:16:1e:5d:46:8a:53:a1:dd:64:fa:13:e8: 8c:45:cd:d8:c3:8a:4c:f8:a8:e8:07:02:6b:e2:e2: a7:e3:80:85:2e:96:0c:c4:f8:8d:7c:6d:23:44:88: e2:5a:24:c1:81:c0:87:86:f9:76:4b:c8:e2:a4:cf: ee:2e:0b:de:90:88:36:9b:26:ce:31:ef:1a:1c:b5: d0:1d:d9:e2:1e:00:aa:e6:a9:68:e3:8b:2f:84:4e: 49:cd:09:ef:54:28:92:f9:89:e0:dd:9f:31:a5:cd: ef:7d:4d:c6:20:15:fb:12:7e:4f:87:89:a8:8e:0d: 42:4f:27:2f:2a:62:dd:46:66:64:6f:d3:14:ac:60: 93:7f:63:07:b0:81:7e:f9:ec:16:00:04:99:c1:1b: 02:68:38:cb:af:d4:b4:a0:5c:02:03:0b:74:8e:d6: eb:d1:07:da:46:6a:21:32:20:3c:36:c4:2b:eb:f4: 86:1d:3f:7a:55:7b:26:a6:a4:9c:74:3d:1a:25:45: 40:00:1c:42:d8:4e:e8:fe:87:90:9b:91:7f:06:9c: da:ac:77:dc:dd:f6:da:6e:bd:f4:a3:11:db:5b:5b: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:05:17:E1:F1:FD:B0:B9:0A:46:78:F7:D4:CA:66:43:EF:18:B9:6A X509v3 Authority Key Identifier: keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:84:da:a2:c1:52:97:f2:b0:9a:5b:b9:db:1d:b0:49:f5:d3: c9:3d:dd:b2:c0:e1:54:5d:64:9f:ca:f2:1f:29:eb:b9:5c:0d: a3:90:19:dd:66:b6:6a:80:18:35:27:dc:51:52:5a:a9:c8:2f: 65:39:2a:e0:b0:f2:ab:7a:4d:6a:a3:67:73:ee:ef:43:e1:c7: b3:2d:09:91:bd:01:46:6f:8b:92:e2:2a:64:93:a9:de:c8:df: 34:e2:ee:83:2b:3a:7e:c9:e9:3d:ba:ce:f9:4e:42:c1:02:d8: 8f:a8:eb:cb:93:a1:11:a5:aa:f3:15:ad:92:f7:3a:e4:5a:bf: d1:a0:f8:65:12:71:73:0a:3f:f0:d0:ad:e8:cb:d6:2f:11:3d: 38:af:06:d9:3f:ec:0f:17:67:9b:0d:8a:de:81:6f:d4:bb:20: 9c:9b:3a:65:01:ed:28:37:4f:d9:08:ba:b0:ad:58:be:53:5e: e0:b2:f3:1e:42:14:fb:10:4d:02:a9:0f:67:8d:19:2d:ff:e0: 0c:19:9c:93:d7:f5:96:e2:a0:70:9f:c9:05:26:ae:f5:2c:09: c2:a1:8c:69:17:dd:f2:40:92:3b:9d:ba:9c:b7:40:a8:62:21: 49:92:18:d1:ca:0d:0f:4a:6e:7a:7b:6e:b5:ff:d6:6a:c5:84: 34:7c:fb:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgKcOO3tNu2BYegiXgpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1 ODY5MWEwHhcNMjUxMjA2MTUwMDQ3WhcNMjUxMjA3MTUwMDQ3WjAzMTEwLwYDVQQD Eyg3ODA1MTdlMWYxZmRiMGI5MGE0Njc4ZjdkNGNhNjY0M2VmMThiOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fUYpPwl0DNFfWxjCXJgtTcDdinB GjUVx2h7APkQNOEWHl1GilOh3WT6E+iMRc3Yw4pM+KjoBwJr4uKn44CFLpYMxPiN fG0jRIjiWiTBgcCHhvl2S8jipM/uLgvekIg2mybOMe8aHLXQHdniHgCq5qlo44sv hE5JzQnvVCiS+Yng3Z8xpc3vfU3GIBX7En5Ph4mojg1CTycvKmLdRmZkb9MUrGCT f2MHsIF++ewWAASZwRsCaDjLr9S0oFwCAwt0jtbr0QfaRmohMiA8NsQr6/SGHT96 VXsmpqScdD0aJUVAABxC2E7o/oeQm5F/BpzarHfc3fbabr30oxHbW1vJVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgFF+Hx/bC5CkZ499TKZkPvGLlqMB8GA1UdIwQY MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt NzkwMjQ0NTA4ZGY0LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0 LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoTaosFS l/Kwmlu52x2wSfXTyT3dssDhVF1kn8ryHynruVwNo5AZ3Wa2aoAYNSfcUVJaqcgv ZTkq4LDyq3pNaqNnc+7vQ+HHsy0Jkb0BRm+LkuIqZJOp3sjfNOLugys6fsnpPbrO +U5CwQLYj6jry5OhEaWq8xWtkvc65Fq/0aD4ZRJxcwo/8NCt6MvWLxE9OK8G2T/s Dxdnmw2K3oFv1LsgnJs6ZQHtKDdP2Qi6sK1YvlNe4LLzHkIU+xBNAqkPZ40ZLf/g DBmck9f1luKgcJ/JBSau9SwJwqGMaRfd8kCSO526nLdAqGIhSZIY0coND0puentu tf/WasWENHz7wQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:39 2025 by rpki-client