This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json) Hash identifier: KsnPahf8vLviMH2Cr3ZBHZgaLPQU7Kn1kM4fx7eMy/8= Subject key identifier: 99:18:03:3A:44:7C:1F:92:EB:B1:93:DA:4E:2B:A8:93:CF:C0:A7:FF Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1 Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1 Certificate serial: 019AF50BAEEBE0121D7B3EFF38B73B4C0077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft Manifest number: 13DB Signing time: Sat 06 Dec 2025 19:02:54 +0000 Manifest this update: Sat 06 Dec 2025 19:02:54 +0000 Manifest next update: Sun 07 Dec 2025 19:02:54 +0000 Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: 92++vgJFs2cMhJC2hgYAZhdu5WRW1/7owMDgHYmlAIQ=) 2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:ae:eb:e0:12:1d:7b:3e:ff:38:b7:3b:4c:00:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1 Validity Not Before: Dec 6 19:02:54 2025 GMT Not After : Dec 7 19:02:54 2025 GMT Subject: CN=9918033a447c1f92ebb193da4e2ba893cfc0a7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:23:b6:0f:81:b4:2b:ec:2c:da:9b:99:a1: 47:c0:69:98:31:39:70:a5:35:95:ad:d7:86:27:32: af:c5:ec:44:be:11:12:a3:47:1c:17:32:15:04:e5: 80:12:67:a4:c6:d0:a2:b7:9f:13:ec:93:38:91:09: 61:ed:dd:a4:54:f4:76:9b:f6:27:61:97:27:fd:d1: 19:11:e2:10:5c:53:5e:8f:91:af:99:36:1c:70:28: 66:76:e7:a0:83:d7:12:a7:45:02:71:1c:4a:ed:6f: 86:2c:bf:af:37:97:6e:bc:eb:54:40:af:3f:ff:14: 70:e3:0f:f5:f1:a5:59:1b:e4:ad:78:31:80:f7:a0: 4a:ff:9e:83:ce:0e:11:76:cb:75:4a:97:6e:30:59: 43:e3:1d:17:e8:92:ca:71:d8:f8:1a:99:76:c2:fa: 9a:c4:3b:83:2b:f3:9f:91:62:79:01:0c:88:32:22: d4:60:79:6a:cc:2f:5c:ca:be:2f:15:92:2e:e5:a6: 81:6d:ee:11:a0:df:b7:c3:40:38:95:a0:0f:93:11: c9:28:63:1e:13:9a:d5:7e:20:f6:21:bf:78:77:7e: 94:1b:52:6c:b2:15:11:32:d2:e2:cc:63:38:dd:d1: 88:3e:f0:cf:fc:f3:14:66:cf:aa:54:a0:77:f1:79: c4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:03:3A:44:7C:1F:92:EB:B1:93:DA:4E:2B:A8:93:CF:C0:A7:FF X509v3 Authority Key Identifier: keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1e:4b:44:71:c9:b2:65:0d:65:37:49:c6:88:19:ab:7e:9f: 73:dd:16:a7:67:67:9b:aa:e2:73:86:c2:18:4d:ad:53:bd:4c: 62:74:cd:d8:dd:da:c1:2e:78:ca:0a:70:d7:32:ad:c8:92:81: 14:d0:81:42:40:2b:41:a6:9a:a2:78:74:64:d9:60:d7:2d:bc: 96:59:f9:b0:3f:1f:ec:da:65:2b:47:57:8b:85:4f:28:79:49: 27:d1:1b:14:d0:74:eb:c8:67:e5:91:48:c0:b0:8d:81:3e:a5: 51:85:fa:1c:41:e7:3c:bb:ff:9b:4f:fe:09:84:bf:0b:95:b3: 3f:78:72:0e:e2:25:b7:6f:9c:b9:4a:5d:04:8c:0b:c2:ab:b3: b8:b6:b1:cd:d6:bc:7a:fb:93:42:a8:76:dd:bf:f5:e7:08:9a: 01:65:32:a1:6d:c1:21:7f:84:d6:f6:48:90:02:24:6c:8f:71: 6f:eb:b2:2c:71:19:09:82:95:0d:0a:d5:a6:a6:5e:3b:c8:8e: 5d:c7:57:fb:0c:de:bf:e3:b0:35:74:72:ad:3d:0e:31:f3:78: c6:f7:35:63:1c:3b:8b:c4:2f:30:69:ac:b0:a6:ef:91:2b:29: ce:c8:db:93:e5:13:b9:3f:33:30:30:11:ba:e5:a7:ec:3d:5e: d2:84:55:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C67r4BIdez7/OLc7TAB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWYzNjUyZTQ0NThmYTAwMWM2NzM4YTQxNDI1YjA3ZTcw YzkxYTEwHhcNMjUxMjA2MTkwMjU0WhcNMjUxMjA3MTkwMjU0WjAzMTEwLwYDVQQD Eyg5OTE4MDMzYTQ0N2MxZjkyZWJiMTkzZGE0ZTJiYTg5M2NmYzBhN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zgjtg+BtCvsLNqbmaFHwGmYMTlw pTWVrdeGJzKvxexEvhESo0ccFzIVBOWAEmekxtCit58T7JM4kQlh7d2kVPR2m/Yn YZcn/dEZEeIQXFNej5GvmTYccChmduegg9cSp0UCcRxK7W+GLL+vN5duvOtUQK8/ /xRw4w/18aVZG+SteDGA96BK/56Dzg4Rdst1SpduMFlD4x0X6JLKcdj4Gpl2wvqa xDuDK/OfkWJ5AQyIMiLUYHlqzC9cyr4vFZIu5aaBbe4RoN+3w0A4laAPkxHJKGMe E5rVfiD2Ib94d36UG1JsshURMtLizGM43dGIPvDP/PMUZs+qVKB38XnEFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkYAzpEfB+S67GT2k4rqJPPwKf/MB8GA1UdIwQY MBaAFCefNlLkRY+gAcZzikFCWwfnDJGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEt ZjhlNmJmZTFhZGZiLzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEtZjhlNmJmZTFhZGZi LzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx5LRHHJ smUNZTdJxogZq36fc90Wp2dnm6ric4bCGE2tU71MYnTN2N3awS54ygpw1zKtyJKB FNCBQkArQaaaonh0ZNlg1y28lln5sD8f7NplK0dXi4VPKHlJJ9EbFNB068hn5ZFI wLCNgT6lUYX6HEHnPLv/m0/+CYS/C5WzP3hyDuIlt2+cuUpdBIwLwquzuLaxzda8 evuTQqh23b/15wiaAWUyoW3BIX+E1vZIkAIkbI9xb+uyLHEZCYKVDQrVpqZeO8iO XcdX+wzev+OwNXRyrT0OMfN4xvc1Yxw7i8QvMGmssKbvkSspzsjbk+UTuT8zMDAR uuWn7D1e0oRV+g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:16 2025 by rpki-client