This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft File: J83PK9CaINK63Tq2yMft-h_Vwsw.mft (raw, json) Hash identifier: MhU11eTl3rviVOhQCn+AGbD26xvDI9Kv8Jc9iJZjHsk= Subject key identifier: 2C:D8:25:13:23:68:A5:9A:06:1E:08:7F:A9:0C:D0:5D:3B:2B:39:1D Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc Certificate serial: 019AF5E63DE8509A44DD6C50D07584E97F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft Manifest number: 047D Signing time: Sat 06 Dec 2025 23:01:38 +0000 Manifest this update: Sat 06 Dec 2025 23:01:38 +0000 Manifest next update: Sun 07 Dec 2025 23:01:38 +0000 Files and hashes: 1: J83PK9CaINK63Tq2yMft-h_Vwsw.crl (hash: rNCOWhF/mVdNswp4hDf01oLeYG9OgdjebvB2cRfWu8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:3d:e8:50:9a:44:dd:6c:50:d0:75:84:e9:7f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc Validity Not Before: Dec 6 23:01:38 2025 GMT Not After : Dec 7 23:01:38 2025 GMT Subject: CN=2cd825132368a59a061e087fa90cd05d3b2b391d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:f2:31:f6:77:cd:96:be:af:54:ef:85:ee: 33:3d:e0:ea:3b:a5:be:96:e5:61:fa:c4:02:0f:c4: ae:04:38:0d:e3:c9:61:e6:cf:0b:32:fe:01:d7:1b: 19:a2:1b:e1:1a:2c:02:e3:c3:b7:3c:b8:69:64:62: 21:b0:a2:16:22:8b:51:2b:4e:2b:5c:a1:b9:f8:fa: 7b:28:ce:3e:70:0d:2d:f3:99:2d:57:a1:a1:b9:66: 5d:e0:52:36:7b:89:22:fe:66:02:16:47:02:ca:c1: dd:b7:87:e2:13:a8:ff:bb:4b:37:2e:34:3f:37:9f: 6d:7a:22:ac:91:9c:da:3f:0b:18:9f:de:83:6b:ca: d6:db:04:c3:c6:6d:31:f7:07:d1:51:04:f6:88:6a: a5:7c:69:6d:17:02:4c:1a:fe:a5:76:40:75:b2:b5: 2e:2c:5f:42:b5:7b:22:e3:a4:f9:e9:aa:09:3e:93: 27:ca:e3:02:c0:95:27:b5:34:ed:94:96:0c:4b:61: dc:8f:83:ac:b1:f2:f4:a7:65:83:42:17:4d:4e:ab: e9:58:e3:3c:89:b3:44:85:fa:48:9b:f8:a0:4b:a8: 20:45:ad:93:f2:51:cc:94:b1:67:6c:56:86:0b:55: 37:13:83:c4:5f:70:3b:fd:90:c1:1a:a0:7b:91:83: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D8:25:13:23:68:A5:9A:06:1E:08:7F:A9:0C:D0:5D:3B:2B:39:1D X509v3 Authority Key Identifier: keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:cd:ad:08:7b:0f:e1:97:a0:ca:3b:e6:65:ed:02:33:fc:8e: b2:37:9b:5d:8f:cc:fd:46:bc:1d:dd:0c:e7:1b:c7:07:d7:dc: 46:0d:17:f1:86:50:c6:6c:a9:8e:5e:41:0a:3f:38:a3:08:55: 1c:6c:f6:b8:b4:15:d5:19:ea:d0:88:07:eb:49:4b:49:f7:a1: b6:bd:2a:ad:12:90:66:e9:0a:16:ff:2a:8e:3b:6d:8e:0a:fc: 8b:86:f2:92:40:42:00:42:c1:04:75:0d:ac:1b:38:af:84:17: 8b:c9:03:5f:58:fe:be:cd:3c:e2:29:66:50:3a:5a:9a:4a:94: af:4a:ac:09:1c:0e:f6:47:65:84:fc:ea:64:b0:52:1b:ef:52: d2:77:c1:49:2a:80:bf:1e:f9:67:01:97:24:f1:9d:da:34:fe: 16:c3:00:a3:c0:27:3b:75:87:38:3d:d0:8b:d0:12:16:ae:d0: 97:cf:97:e1:1c:7e:dc:fd:2e:c3:43:74:7c:9c:af:22:43:45: 7c:93:26:28:38:2f:2a:fc:31:22:fa:fb:43:4d:fd:40:b0:ce: 4d:b5:0e:fd:77:35:91:f4:23:66:25:5c:86:00:a7:c2:8d:b5: a2:31:77:55:9a:10:95:c7:52:f1:63:3e:01:23:35:b0:8d:a5: d1:c0:11:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15j3oUJpE3WxQ0HWE6X8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3Y2RjZjJiZDA5YTIwZDJiYWRkM2FiNmM4YzdlZGZhMWZk NWMyY2MwHhcNMjUxMjA2MjMwMTM4WhcNMjUxMjA3MjMwMTM4WjAzMTEwLwYDVQQD EygyY2Q4MjUxMzIzNjhhNTlhMDYxZTA4N2ZhOTBjZDA1ZDNiMmIzOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKHyMfZ3zZa+r1Tvhe4zPeDqO6W+ luVh+sQCD8SuBDgN48lh5s8LMv4B1xsZohvhGiwC48O3PLhpZGIhsKIWIotRK04r XKG5+Pp7KM4+cA0t85ktV6GhuWZd4FI2e4ki/mYCFkcCysHdt4fiE6j/u0s3LjQ/ N59teiKskZzaPwsYn96Da8rW2wTDxm0x9wfRUQT2iGqlfGltFwJMGv6ldkB1srUu LF9CtXsi46T56aoJPpMnyuMCwJUntTTtlJYMS2Hcj4OssfL0p2WDQhdNTqvpWOM8 ibNEhfpIm/igS6ggRa2T8lHMlLFnbFaGC1U3E4PEX3A7/ZDBGqB7kYNIJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzYJRMjaKWaBh4If6kM0F07KzkdMB8GA1UdIwQY MBaAFCfNzyvQmiDSut06tsjH7fof1cLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjgzUEs5Q2FJTks2M1RxMnlNZnQtaF9Wd3N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kMmJjOTAtMjk1MC00MzIyLWE5MmUt YzYzZmNkMDNhODliLzEvSjgzUEs5Q2FJTks2M1RxMnlNZnQtaF9Wd3N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kMmJjOTAtMjk1MC00MzIyLWE5MmUtYzYzZmNkMDNhODli LzEvSjgzUEs5Q2FJTks2M1RxMnlNZnQtaF9Wd3N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoc2tCHsP 4ZegyjvmZe0CM/yOsjebXY/M/Ua8Hd0M5xvHB9fcRg0X8YZQxmypjl5BCj84owhV HGz2uLQV1Rnq0IgH60lLSfehtr0qrRKQZukKFv8qjjttjgr8i4bykkBCAELBBHUN rBs4r4QXi8kDX1j+vs084ilmUDpamkqUr0qsCRwO9kdlhPzqZLBSG+9S0nfBSSqA vx75ZwGXJPGd2jT+FsMAo8AnO3WHOD3Qi9ASFq7Ql8+X4Rx+3P0uw0N0fJyvIkNF fJMmKDgvKvwxIvr7Q039QLDOTbUO/Xc1kfQjZiVchgCnwo21ojF3VZoQlcdS8WM+ ASM1sI2l0cARbw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:16 2025 by rpki-client