This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft File: J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft (raw, json) Hash identifier: GMAwon8ndTfy4pMLJdnbl6VbrHwr6xLHsc3wDxRXSQE= Subject key identifier: C3:74:76:DE:7B:48:C2:79:39:03:D4:B6:11:08:8B:39:04:9D:3F:C1 Authority key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73 Certificate issuer: /CN=27a110452384649d05c1e98fb97b49ae11600973 Certificate serial: 019B3420198A51A215B12A88DA7B9E9F255D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft Manifest number: 0F9E Signing time: Fri 19 Dec 2025 01:01:17 +0000 Manifest this update: Fri 19 Dec 2025 01:01:17 +0000 Manifest next update: Sat 20 Dec 2025 01:01:17 +0000 Files and hashes: 1: J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl (hash: 2Uxu4G8zIxUh9VrVfc9I8vNGZaC4646ZjbhIefFdUW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:19:8a:51:a2:15:b1:2a:88:da:7b:9e:9f:25:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a110452384649d05c1e98fb97b49ae11600973 Validity Not Before: Dec 19 01:01:17 2025 GMT Not After : Dec 20 01:01:17 2025 GMT Subject: CN=c37476de7b48c2793903d4b611088b39049d3fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:e2:18:fc:c8:8d:2b:16:ed:77:0e:42:37: 06:49:f3:1f:3c:58:c4:4a:26:5b:c6:06:ad:26:16: 28:33:94:ef:d7:8f:71:ea:16:95:d7:a2:e3:f0:46: f0:8c:46:90:63:e6:49:8a:a1:f2:bb:f2:80:05:06: b4:52:3a:60:d7:28:31:b0:7b:5c:7c:08:63:92:57: b0:d0:c5:6a:25:db:f9:3c:58:c7:94:b3:ae:24:d4: 7a:e2:54:bc:1e:87:ec:0d:d3:3b:04:35:03:36:cc: 76:9d:14:bc:ca:b1:8e:6b:72:8b:46:4e:a6:27:0c: 3b:2f:53:cf:6c:bf:75:34:34:e4:a0:de:23:5d:3c: 7a:0b:5b:c1:a5:c5:31:f1:0e:1c:86:7c:96:75:67: 96:51:bb:34:9a:7c:6a:af:3d:65:db:96:61:9e:05: 48:1a:85:6a:cb:e1:87:86:80:16:70:80:12:79:fe: 05:5f:52:1e:9f:01:d2:34:e4:7b:74:49:3e:eb:ad: 2f:48:c2:82:c8:56:4a:8b:36:b3:7b:92:71:fd:cc: 18:4a:f0:4f:1c:8b:99:34:0a:3f:00:c6:17:be:2b: 62:f1:a8:46:0e:37:a8:a4:b8:a3:f6:a2:99:8c:b3: 43:2b:93:a9:ae:81:ee:53:fa:5c:9e:84:ed:83:12: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:74:76:DE:7B:48:C2:79:39:03:D4:B6:11:08:8B:39:04:9D:3F:C1 X509v3 Authority Key Identifier: keyid:27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:26:e0:1c:0e:f9:d7:f2:9f:04:57:d2:33:1d:45:8b:61:b8: 5a:70:15:15:57:82:c6:d9:c9:25:4d:72:36:7c:71:c5:54:88: b7:52:f4:44:54:de:68:24:75:81:65:1a:1d:42:5c:9a:a3:98: eb:34:3a:56:90:7b:c5:27:09:c6:dc:84:09:cd:c4:ec:ca:95: 2f:dc:e5:aa:78:43:43:90:79:3d:7d:ad:f4:eb:21:55:f3:9a: fb:01:6b:0f:48:78:2b:71:53:49:a0:9f:ca:06:0e:56:fd:30: 5b:2b:1a:4f:a5:e9:f0:d1:2b:31:39:68:43:07:1a:c5:36:f7: 19:9c:87:b7:2f:39:d5:15:cd:f9:d9:27:2d:31:30:4f:b8:a2: a7:b4:94:d2:e1:4d:8f:09:b3:e2:d4:37:78:d7:9f:cf:f7:06: c3:cd:56:d5:a4:2a:9b:e2:12:5d:58:3f:c2:0d:2f:36:02:2b: 81:66:3a:74:6e:b3:64:aa:d1:f2:12:b5:ae:93:e9:14:38:c5: eb:08:44:b8:d5:86:3f:2d:10:7a:24:a7:40:5d:0e:b0:cc:4e: a3:28:6f:5d:b9:8d:8a:4a:26:fb:19:b7:30:1b:28:e8:28:59: 51:b7:60:e1:dd:f2:0d:92:97:09:a7:02:4b:5a:d7:d4:77:7e: af:73:33:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IBmKUaIVsSqI2nuenyVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTExMDQ1MjM4NDY0OWQwNWMxZTk4ZmI5N2I0OWFlMTE2 MDA5NzMwHhcNMjUxMjE5MDEwMTE3WhcNMjUxMjIwMDEwMTE3WjAzMTEwLwYDVQQD EyhjMzc0NzZkZTdiNDhjMjc5MzkwM2Q0YjYxMTA4OGIzOTA0OWQzZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6viGPzIjSsW7XcOQjcGSfMfPFjE SiZbxgatJhYoM5Tv149x6haV16Lj8EbwjEaQY+ZJiqHyu/KABQa0Ujpg1ygxsHtc fAhjklew0MVqJdv5PFjHlLOuJNR64lS8HofsDdM7BDUDNsx2nRS8yrGOa3KLRk6m Jww7L1PPbL91NDTkoN4jXTx6C1vBpcUx8Q4chnyWdWeWUbs0mnxqrz1l25ZhngVI GoVqy+GHhoAWcIASef4FX1IenwHSNOR7dEk+660vSMKCyFZKizaze5Jx/cwYSvBP HIuZNAo/AMYXviti8ahGDjeopLij9qKZjLNDK5OproHuU/pcnoTtgxJ/uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN0dt57SMJ5OQPUthEIizkEnT/BMB8GA1UdIwQY MBaAFCehEEUjhGSdBcHpj7l7Sa4RYAlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NzBiZGQtYjNlNC00MDFhLTk0NzAt MGVhOGNkYmM0YjA4LzEvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83NzBiZGQtYjNlNC00MDFhLTk0NzAtMGVhOGNkYmM0YjA4 LzEvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbybgHA75 1/KfBFfSMx1Fi2G4WnAVFVeCxtnJJU1yNnxxxVSIt1L0RFTeaCR1gWUaHUJcmqOY 6zQ6VpB7xScJxtyECc3E7MqVL9zlqnhDQ5B5PX2t9OshVfOa+wFrD0h4K3FTSaCf ygYOVv0wWysaT6Xp8NErMTloQwcaxTb3GZyHty851RXN+dknLTEwT7iip7SU0uFN jwmz4tQ3eNefz/cGw81W1aQqm+ISXVg/wg0vNgIrgWY6dG6zZKrR8hK1rpPpFDjF 6whEuNWGPy0QeiSnQF0OsMxOoyhvXbmNikom+xm3MBso6ChZUbdg4d3yDZKXCacC S1rX1Hd+r3MzRA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:26:31 2025 by rpki-client