This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json) Hash identifier: F5ShR02WPsLjUJKViax2JWrz/77jckSRXtEfzxnMz0k= Subject key identifier: 34:F7:A9:A3:AE:33:20:00:8D:4B:9B:2E:C1:A6:9A:55:22:79:2F:D5 Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8 Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8 Certificate serial: 019AF3F7B40A9AC593AAD8797A4F6F272120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft Manifest number: 07E9 Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: EOZUjXctaYMkRcyyMQLguIWxilg.roa (hash: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=) 2: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: oOvF3TT5gXewVUYhreoNQtAzwCiuxxyZj0U468+HHlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b4:0a:9a:c5:93:aa:d8:79:7a:4f:6f:27:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8 Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=34f7a9a3ae3320008d4b9b2ec1a69a5522792fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:82:b1:cd:d7:b5:d9:35:55:89:ec:b8:74: a4:c3:62:b5:ab:fb:07:5a:49:c7:dd:d1:87:ba:93: 79:fd:f4:b0:c7:d7:cb:8b:ea:91:c6:68:12:12:a1: 0a:15:85:99:77:e5:65:7d:8b:7c:72:fd:78:f8:1f: 1a:7d:11:9f:2e:f3:57:40:71:d2:92:53:b0:b4:7a: 0a:92:51:d9:6b:7c:c8:f4:e9:c7:0d:53:af:0c:a0: cf:d7:0c:50:29:dd:71:96:d9:29:b2:33:d4:79:20: f8:87:f2:20:83:fe:f0:ec:4f:07:5f:13:d3:f6:4c: e0:d0:45:2c:da:5d:39:77:1d:5b:17:76:aa:4b:3f: 2e:30:e9:aa:8e:6f:3e:8b:f6:a7:5b:b2:89:59:af: c3:f5:30:ca:7f:eb:0e:79:ab:d4:5f:4c:5c:aa:a2: e5:d8:50:b2:73:92:54:c2:5e:74:f1:85:78:3b:2b: 62:42:38:7e:66:5f:2c:82:17:0f:69:08:eb:55:76: e7:6a:a1:ba:dc:f8:b3:2f:37:7c:71:b8:3d:22:22: c5:43:cd:61:e0:95:60:7e:9c:ec:04:70:bf:2f:43: 9b:99:08:34:37:e0:74:cc:47:e3:cc:bb:96:6c:7d: d6:c9:65:3c:29:ac:1e:82:0a:f0:15:66:c9:f5:3a: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F7:A9:A3:AE:33:20:00:8D:4B:9B:2E:C1:A6:9A:55:22:79:2F:D5 X509v3 Authority Key Identifier: keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e8:bf:c4:47:47:a5:cc:35:09:19:b4:0b:05:39:08:11:4e: b3:82:fd:a0:58:ae:71:55:75:9f:6a:ab:ed:db:61:7a:38:d9: fa:d5:e8:d9:92:fb:d6:e8:bc:12:a2:31:f1:41:b1:cd:36:30: fd:ed:76:29:84:61:60:ae:c0:50:1a:8c:2c:9d:da:91:99:52: e6:e7:0f:e4:97:af:00:0c:d3:c5:9b:11:27:e2:0f:0c:ed:2d: ae:15:86:1b:44:98:72:02:71:e8:fa:14:9f:2b:76:e6:75:ee: 01:20:aa:09:db:34:9f:4d:f1:ca:ca:a7:d9:d9:94:5b:0e:2b: 9e:6d:1a:42:f5:c1:96:cc:e9:34:17:d6:db:a5:01:40:38:4f: 91:31:ec:0f:82:0b:fb:72:46:af:60:92:72:b0:66:39:ba:e4: c1:f7:88:54:53:20:d9:e8:95:d7:c8:6d:b0:c6:70:a4:74:01: a3:60:6b:3e:cb:c7:be:14:0d:e6:29:7a:45:24:11:99:b2:50: 98:24:19:dc:b9:9b:02:0a:97:1a:7f:5c:61:c4:a6:20:7c:9f: 8a:70:9a:3d:9b:3d:5a:38:2d:75:6a:35:2f:f3:de:f5:62:cc: f1:37:7d:ea:f7:95:a7:d9:27:d2:59:c3:92:98:48:39:7c:17: 3d:83:4d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97QKmsWTqth5ek9vJyEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzVmMzY0MTNlN2FmNDcyODEzZmUzYTcxNGUyZWNkYWEy MWYyZTgwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD EygzNGY3YTlhM2FlMzMyMDAwOGQ0YjliMmVjMWE2OWE1NTIyNzkyZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6OCsc3Xtdk1VYnsuHSkw2K1q/sH WknH3dGHupN5/fSwx9fLi+qRxmgSEqEKFYWZd+VlfYt8cv14+B8afRGfLvNXQHHS klOwtHoKklHZa3zI9OnHDVOvDKDP1wxQKd1xltkpsjPUeSD4h/Igg/7w7E8HXxPT 9kzg0EUs2l05dx1bF3aqSz8uMOmqjm8+i/anW7KJWa/D9TDKf+sOeavUX0xcqqLl 2FCyc5JUwl508YV4OytiQjh+Zl8sghcPaQjrVXbnaqG63PizLzd8cbg9IiLFQ81h 4JVgfpzsBHC/L0ObmQg0N+B0zEfjzLuWbH3WyWU8KaweggrwFWbJ9TrXZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDT3qaOuMyAAjUubLsGmmlUieS/VMB8GA1UdIwQY MBaAFCfF82QT569HKBP+OnFOLs2qIfLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMt NzkxMzI5NDZiNjk5LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMtNzkxMzI5NDZiNjk5 LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApui/xEdH pcw1CRm0CwU5CBFOs4L9oFiucVV1n2qr7dthejjZ+tXo2ZL71ui8EqIx8UGxzTYw /e12KYRhYK7AUBqMLJ3akZlS5ucP5JevAAzTxZsRJ+IPDO0trhWGG0SYcgJx6PoU nyt25nXuASCqCds0n03xysqn2dmUWw4rnm0aQvXBlszpNBfW26UBQDhPkTHsD4IL +3JGr2CScrBmObrkwfeIVFMg2eiV18htsMZwpHQBo2BrPsvHvhQN5il6RSQRmbJQ mCQZ3LmbAgqXGn9cYcSmIHyfinCaPZs9WjgtdWo1L/Pe9WLM8Td96veVp9kn0lnD kphIOXwXPYNNUg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:35 2025 by rpki-client