This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json) Hash identifier: Vjj5ma5B+uVqXp5Ft6H8IIkIGElwYoQ73EX/fT+8JNQ= Subject key identifier: 1F:FC:89:00:39:52:75:8B:4D:AF:40:DD:E6:43:8E:CF:17:17:9E:15 Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3 Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3 Certificate serial: 019AF23F7EBFAFD9EE21027D557162C7F519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft Manifest number: 04B2 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: MIEpREdnC8tg+IqpBYpIahtv3M5vBseGQ2h41m4RuRI=) 2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7e:bf:af:d9:ee:21:02:7d:55:71:62:c7:f5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=1ffc89003952758b4daf40dde6438ecf17179e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:14:ba:87:fb:6b:29:87:71:5a:a1:65:fa:cd: 89:61:d3:71:44:a5:67:f3:55:f4:94:19:61:37:75: 1c:bf:01:60:61:3c:15:fb:5d:3f:74:8c:00:a1:9f: 74:28:eb:05:c2:a1:29:7e:fa:ee:1d:17:08:a9:af: 92:ad:68:e4:5d:2c:37:0b:14:46:ba:24:6f:a1:c3: 9f:52:b3:49:93:20:a2:7f:09:e7:22:29:0a:ca:48: 07:0d:e4:65:f0:eb:03:4e:d9:83:14:82:94:b3:ca: 38:36:de:61:d0:73:b8:4b:81:ba:e3:0d:cb:0c:51: 94:e0:aa:6e:e1:06:3d:0a:3c:12:91:70:be:c4:34: 20:0c:9d:90:61:f8:29:2c:19:b5:77:23:3f:02:a0: d0:37:f8:a2:fe:30:6d:9d:7b:02:17:27:3f:9d:1b: 41:62:97:20:01:41:a0:83:69:45:fa:a5:05:d3:73: d2:19:9c:53:ec:48:e9:2d:6f:71:38:1b:5f:d5:5b: 2a:ba:64:2f:98:1e:3c:ae:a0:b2:a4:fe:7d:58:ea: 82:5d:a8:72:1f:da:6c:19:7a:f6:ac:fb:75:1b:a5: cb:b6:b4:e7:d4:ea:44:63:aa:cf:b2:e8:ea:37:fc: b8:fe:3a:dc:89:68:5c:65:7e:9c:de:0c:34:97:3d: bd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FC:89:00:39:52:75:8B:4D:AF:40:DD:E6:43:8E:CF:17:17:9E:15 X509v3 Authority Key Identifier: keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a9:65:f9:be:0a:61:2f:7b:39:6d:12:74:13:d0:54:fa:c4: fa:3c:55:67:4e:69:cb:e0:97:2b:77:20:65:5f:92:92:67:b2: d3:6c:6b:bc:e6:96:05:76:b3:64:f7:10:0d:5f:3c:a8:76:be: 2c:ec:05:8a:4e:38:af:da:f6:c6:26:15:b0:e7:c8:00:54:3c: 41:b9:83:a0:3c:48:80:0f:86:7d:e5:98:a2:9b:7f:d0:ca:5f: ec:2c:07:cf:90:16:c2:50:7f:38:43:cc:64:90:35:97:ed:0f: 69:ef:1b:b0:bb:60:17:56:5e:65:a8:4b:bc:28:17:cf:f2:a8: 55:d0:e8:fa:0b:56:35:e8:91:63:88:97:2f:5f:00:b0:f7:ef: 5d:39:c5:61:69:db:54:77:f9:a5:3b:bd:f0:03:c4:ad:30:e6: e1:ea:e5:59:15:0f:6e:d2:f0:31:f5:ce:bf:82:5b:57:24:cf: 3c:8f:81:4f:f9:d7:2d:ed:67:23:90:08:36:e1:9a:ce:15:68: ff:91:f4:4c:9d:a9:29:95:b0:b3:34:46:2a:7a:d9:36:2e:c4: d1:14:44:62:24:db:5b:bc:43:43:a0:79:f9:02:7d:d6:48:03: 7e:6b:b2:59:9c:39:a7:7e:45:ee:78:de:84:b9:dd:6a:c5:25: af:21:60:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP36/r9nuIQJ9VXFix/UZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTg5YWI1M2YzMmVmZjY1NzI2ZmQ0OWQwOGQ0MmZmODEy YzZkYjMwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD EygxZmZjODkwMDM5NTI3NThiNGRhZjQwZGRlNjQzOGVjZjE3MTc5ZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RS6h/trKYdxWqFl+s2JYdNxRKVn 81X0lBlhN3UcvwFgYTwV+10/dIwAoZ90KOsFwqEpfvruHRcIqa+SrWjkXSw3CxRG uiRvocOfUrNJkyCifwnnIikKykgHDeRl8OsDTtmDFIKUs8o4Nt5h0HO4S4G64w3L DFGU4Kpu4QY9CjwSkXC+xDQgDJ2QYfgpLBm1dyM/AqDQN/ii/jBtnXsCFyc/nRtB YpcgAUGgg2lF+qUF03PSGZxT7EjpLW9xOBtf1VsqumQvmB48rqCypP59WOqCXahy H9psGXr2rPt1G6XLtrTn1OpEY6rPsujqN/y4/jrciWhcZX6c3gw0lz29FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/8iQA5UnWLTa9A3eZDjs8XF54VMB8GA1UdIwQY MBaAFCcYmrU/Mu/2Vyb9SdCNQv+BLG2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hMzRjMWUtMTg4MS00ZDZjLWFhZDYt NTA3MDI1OGRiZjJmLzEvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hMzRjMWUtMTg4MS00ZDZjLWFhZDYtNTA3MDI1OGRiZjJm LzEvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKll+b4K YS97OW0SdBPQVPrE+jxVZ05py+CXK3cgZV+Skmey02xrvOaWBXazZPcQDV88qHa+ LOwFik44r9r2xiYVsOfIAFQ8QbmDoDxIgA+GfeWYopt/0Mpf7CwHz5AWwlB/OEPM ZJA1l+0Pae8bsLtgF1ZeZahLvCgXz/KoVdDo+gtWNeiRY4iXL18AsPfvXTnFYWnb VHf5pTu98APErTDm4erlWRUPbtLwMfXOv4JbVyTPPI+BT/nXLe1nI5AINuGazhVo /5H0TJ2pKZWwszRGKnrZNi7E0RREYiTbW7xDQ6B5+QJ91kgDfmuyWZw5p35F7nje hLndasUlryFgdw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:13:59 2025 by rpki-client