This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json) Hash identifier: aofnOYvMKKiX1WNiQLZ4q0FK2fUcAP45BvIk3Y8HeN8= Subject key identifier: 9C:B0:AB:67:EA:96:B8:3B:AE:43:B7:43:7F:0C:61:4D:43:4B:77:08 Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95 Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95 Certificate serial: 019AF0F5E2E39C0E5DDB57462BF138E0F4C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft Manifest number: 0E37 Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: VP5+BYHtTnGYxpp5Vs/JfgUIRIe5KsjiB0ZP0F0TjCI=) 2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e2:e3:9c:0e:5d:db:57:46:2b:f1:38:e0:f4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=9cb0ab67ea96b83bae43b7437f0c614d434b7708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:c5:ac:92:58:41:2b:66:62:93:c8:14:08: 77:51:a8:6b:23:6e:0f:f1:65:6d:32:9c:84:3c:31: 58:56:dc:c7:86:af:c9:3b:5e:e1:2f:18:9b:b9:a6: 60:46:86:e1:3a:1e:d5:ac:49:f7:fb:e2:b0:7a:fd: 31:cc:e0:ae:02:e8:18:01:89:cc:22:16:d8:fd:71: 56:aa:36:de:b0:fd:da:d4:7a:4d:d9:2b:01:14:70: dd:82:af:d1:d6:aa:0d:20:7e:dc:c7:ca:90:33:36: e7:c0:18:e1:37:af:2b:2c:72:ed:83:e6:c4:f3:36: 08:4b:0d:0d:0c:05:5b:46:f3:73:03:d3:5b:57:d4: bc:ce:18:42:5c:33:16:74:82:ce:bb:0f:f6:81:89: e6:74:9f:e1:b4:47:98:45:63:ac:34:0e:6d:e2:e0: 15:42:cc:87:2c:3a:c6:97:0d:7f:9b:13:6e:51:e7: 14:fa:99:c0:58:9e:61:53:52:7e:a1:a4:9e:7b:23: 11:73:de:dc:46:59:39:43:49:d4:44:72:52:2b:89: d5:44:68:8b:48:fe:f9:78:49:62:b5:af:5e:79:92: 69:db:03:36:5e:d6:56:2d:7b:0c:57:66:09:fb:e4: 82:ec:ec:31:05:d2:b3:dd:c0:89:32:4c:97:15:9a: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B0:AB:67:EA:96:B8:3B:AE:43:B7:43:7F:0C:61:4D:43:4B:77:08 X509v3 Authority Key Identifier: keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:77:c9:a8:7e:e0:48:1f:14:70:a7:32:20:70:dd:fb:ae:27: 68:7d:80:14:c4:15:91:3e:d0:a9:2d:1a:f7:b1:8c:76:b9:06: f7:97:af:f3:d1:5c:e4:4e:7b:62:b7:45:5e:24:75:f1:e0:8a: 1e:86:30:d0:5a:1c:fe:1b:09:23:26:66:de:4d:31:bb:47:ec: 72:5d:c1:d1:a4:bc:b9:e3:80:05:a0:f7:78:83:31:85:ae:76: 13:20:ca:09:d5:8d:82:f2:fc:1b:ca:4a:7a:66:44:05:fe:63: 5f:2b:d3:f4:be:98:a3:e6:f2:5c:34:30:af:71:7c:24:79:4c: 96:33:ac:8d:13:fd:76:54:e7:25:ad:79:73:08:37:b7:5c:e3: d5:8b:10:53:0f:b5:c2:98:13:73:c0:88:2d:27:79:02:91:23: 6d:95:5a:9a:d9:e9:31:bb:ca:61:92:fb:3d:76:6e:9b:d5:43: 30:a6:de:89:c3:1d:b9:d4:30:9a:57:d7:13:ee:9b:8a:83:71: 5e:64:9b:f4:61:bb:c1:82:b4:d3:47:dd:8c:04:af:89:e7:55: 54:c6:a1:cf:a4:b0:9e:fb:a5:19:e3:36:96:51:67:7b:34:60: c2:c8:9d:07:36:a5:9a:3a:eb:81:a7:b5:bc:31:b4:b5:6f:04: e6:1b:f9:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eLjnA5d21dGK/E44PTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl MWNjOTUwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD Eyg5Y2IwYWI2N2VhOTZiODNiYWU0M2I3NDM3ZjBjNjE0ZDQzNGI3NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmLFrJJYQStmYpPIFAh3UahrI24P 8WVtMpyEPDFYVtzHhq/JO17hLxibuaZgRobhOh7VrEn3++Kwev0xzOCuAugYAYnM IhbY/XFWqjbesP3a1HpN2SsBFHDdgq/R1qoNIH7cx8qQMzbnwBjhN68rLHLtg+bE 8zYISw0NDAVbRvNzA9NbV9S8zhhCXDMWdILOuw/2gYnmdJ/htEeYRWOsNA5t4uAV QsyHLDrGlw1/mxNuUecU+pnAWJ5hU1J+oaSeeyMRc97cRlk5Q0nURHJSK4nVRGiL SP75eElita9eeZJp2wM2XtZWLXsMV2YJ++SC7OwxBdKz3cCJMkyXFZo2RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJywq2fqlrg7rkO3Q38MYU1DS3cIMB8GA1UdIwQY MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt MDkxMTVkNTkyZTZmLzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnfJqH7g SB8UcKcyIHDd+64naH2AFMQVkT7QqS0a97GMdrkG95ev89Fc5E57YrdFXiR18eCK HoYw0Foc/hsJIyZm3k0xu0fscl3B0aS8ueOABaD3eIMxha52EyDKCdWNgvL8G8pK emZEBf5jXyvT9L6Yo+byXDQwr3F8JHlMljOsjRP9dlTnJa15cwg3t1zj1YsQUw+1 wpgTc8CILSd5ApEjbZVamtnpMbvKYZL7PXZum9VDMKbeicMdudQwmlfXE+6bioNx XmSb9GG7wYK000fdjASviedVVMahz6SwnvulGeM2llFnezRgwsidBzalmjrrgae1 vDG0tW8E5hv51A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:29 2025 by rpki-client