This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json) Hash identifier: +WbMv7ev8ghvrEmu+qXS7ODScfPkQFwZKt5Az2JhGSY= Subject key identifier: 44:1F:6C:2D:F1:7A:E7:0C:5F:68:E3:02:3A:2C:C2:DF:0E:C1:31:6B Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd Certificate serial: 019AF31C4DC53361A7AE7E1AC7F0BF4D6D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft Manifest number: 10EE Signing time: Sat 06 Dec 2025 10:01:49 +0000 Manifest this update: Sat 06 Dec 2025 10:01:49 +0000 Manifest next update: Sun 07 Dec 2025 10:01:49 +0000 Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: TALpawN4992Dh0sK0uHNeIrWxWAxtFj6N/Yc4mcLjtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4d:c5:33:61:a7:ae:7e:1a:c7:f0:bf:4d:6d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd Validity Not Before: Dec 6 10:01:49 2025 GMT Not After : Dec 7 10:01:49 2025 GMT Subject: CN=441f6c2df17ae70c5f68e3023a2cc2df0ec1316b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:03:1b:18:33:d5:92:18:0d:d8:a0:ea:a6: 81:47:00:a5:04:48:fa:9b:f6:41:7d:db:6c:89:e5: 0a:69:9d:e4:6a:75:19:7d:70:a5:ae:65:ff:2c:e4: 10:26:65:e9:1b:63:0c:22:f9:4a:ee:9f:e2:0a:49: 6f:c1:a5:25:dd:ad:82:a8:0b:02:18:16:9a:55:dd: 3a:f2:fa:40:19:7b:2a:54:71:85:ee:ef:50:c9:2f: d0:b2:82:19:34:45:a4:26:81:bd:67:d1:c3:87:cf: d0:b9:09:d5:ae:45:62:92:b7:fa:6c:6d:ae:af:f9: 19:18:d9:4a:ef:e5:97:00:1c:05:e9:5d:c1:5e:44: f6:ed:af:70:93:5d:5d:0e:7c:62:5a:77:81:4a:ac: 35:2f:50:3b:3d:79:e0:0c:38:de:72:63:60:ab:2e: 71:d9:aa:09:a3:c3:fd:da:39:bc:62:ee:a8:1d:20: 10:f0:fd:54:95:6e:c6:13:04:4d:fa:f7:85:7e:25: d0:4d:00:c8:01:54:27:35:15:05:98:c9:45:f6:ee: 68:ab:f1:15:b4:38:e0:cf:15:d7:13:47:d9:99:ce: b5:5b:11:f4:77:c1:55:ab:96:56:82:2f:ae:b4:7a: e3:60:38:87:b1:52:dd:91:1c:43:2a:f6:00:24:61: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1F:6C:2D:F1:7A:E7:0C:5F:68:E3:02:3A:2C:C2:DF:0E:C1:31:6B X509v3 Authority Key Identifier: keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:31:c7:13:7d:ac:dc:fe:b5:4a:af:9c:25:1b:f2:24:16:71: 65:83:86:b4:fc:36:d2:75:1a:1f:4b:48:cf:70:68:6d:f4:93: 2f:6a:68:df:70:cc:df:47:43:19:9d:20:2c:e5:e7:f5:ae:7d: 1f:64:05:2c:d2:bf:19:2d:46:1a:e1:d8:8e:82:8e:6b:d6:fe: 24:79:b6:95:dc:91:c0:6f:27:26:31:3f:8b:c8:f7:02:2e:51: 85:ec:1f:a6:91:7c:21:27:74:ef:0b:90:3c:dd:1f:fb:0e:a6: 40:8e:c8:8d:22:86:1c:fa:5a:d0:9d:a8:78:05:ed:29:56:d6: 92:7a:ef:66:ad:4c:26:6a:3d:3c:ed:49:76:6c:b1:b9:ee:2d: bf:ba:c5:3a:09:98:52:b5:13:a6:a3:b9:fa:25:12:c7:37:00: 67:3a:27:ac:39:ed:0a:85:19:f5:19:d9:87:40:58:8f:31:d9: 56:b4:39:5c:a5:f9:fa:d5:1d:dd:3e:47:2b:61:ee:8a:90:ae: 45:c7:63:d0:fb:64:87:91:20:14:1e:73:fb:fa:f8:32:a2:19: e2:89:13:0a:ce:83:fa:68:48:77:a3:42:89:d1:16:15:05:18: bb:17:9c:e5:98:6a:fb:5a:20:ba:91:59:70:9d:1e:02:32:4b: 08:04:9b:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHE3FM2Gnrn4ax/C/TW18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODc2YWE5MTdiNmQwMWQ5NGZmMjU2NjJiMDhmYjIxM2Yw ZmU3YmQwHhcNMjUxMjA2MTAwMTQ5WhcNMjUxMjA3MTAwMTQ5WjAzMTEwLwYDVQQD Eyg0NDFmNmMyZGYxN2FlNzBjNWY2OGUzMDIzYTJjYzJkZjBlYzEzMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMkDGxgz1ZIYDdig6qaBRwClBEj6 m/ZBfdtsieUKaZ3kanUZfXClrmX/LOQQJmXpG2MMIvlK7p/iCklvwaUl3a2CqAsC GBaaVd068vpAGXsqVHGF7u9QyS/QsoIZNEWkJoG9Z9HDh8/QuQnVrkVikrf6bG2u r/kZGNlK7+WXABwF6V3BXkT27a9wk11dDnxiWneBSqw1L1A7PXngDDjecmNgqy5x 2aoJo8P92jm8Yu6oHSAQ8P1UlW7GEwRN+veFfiXQTQDIAVQnNRUFmMlF9u5oq/EV tDjgzxXXE0fZmc61WxH0d8FVq5ZWgi+utHrjYDiHsVLdkRxDKvYAJGFZvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQfbC3xeucMX2jjAjoswt8OwTFrMB8GA1UdIwQY MBaAFCeHaqkXttAdlP8lZisI+yE/D+e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YjM3ZGItMDQyYy00MDQxLTg3OTct ZjBhN2E0YzU4NjczLzEvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80YjM3ZGItMDQyYy00MDQxLTg3OTctZjBhN2E0YzU4Njcz LzEvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzHHE32s 3P61Sq+cJRvyJBZxZYOGtPw20nUaH0tIz3BobfSTL2po33DM30dDGZ0gLOXn9a59 H2QFLNK/GS1GGuHYjoKOa9b+JHm2ldyRwG8nJjE/i8j3Ai5RhewfppF8ISd07wuQ PN0f+w6mQI7IjSKGHPpa0J2oeAXtKVbWknrvZq1MJmo9PO1Jdmyxue4tv7rFOgmY UrUTpqO5+iUSxzcAZzonrDntCoUZ9RnZh0BYjzHZVrQ5XKX5+tUd3T5HK2HuipCu Rcdj0Ptkh5EgFB5z+/r4MqIZ4okTCs6D+mhId6NCidEWFQUYuxec5Zhq+1ogupFZ cJ0eAjJLCASb/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:53 2025 by rpki-client