This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json) Hash identifier: efX1YnGuYpOslmGrC3ykQyfgEtYyC+1AQdtnZ29q8ug= Subject key identifier: 2F:21:8B:C7:22:42:20:28:EA:BB:96:7B:5B:06:6B:CE:5F:B2:B8:67 Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a Certificate serial: 019AEFE3F77FCBA1968626E70526D31390AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 19:01:25 +0000 Manifest this update: Fri 05 Dec 2025 19:01:25 +0000 Manifest next update: Sat 06 Dec 2025 19:01:25 +0000 Files and hashes: 1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=) 2: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: +u9cGAFzhWKDz9ZcEu1fL2ezSGSRV4dcsJgNU4ehJWU=) 3: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:e3:f7:7f:cb:a1:96:86:26:e7:05:26:d3:13:90:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a Validity Not Before: Dec 5 19:01:25 2025 GMT Not After : Dec 6 19:01:25 2025 GMT Subject: CN=2f218bc722422028eabb967b5b066bce5fb2b867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:bd:34:00:86:10:95:54:cb:cf:1b:35:8e: f2:1f:11:9d:58:de:96:2b:95:e9:29:62:32:07:4b: 2f:78:00:27:bc:67:b5:a7:fa:48:65:40:bd:eb:14: d2:b9:05:9d:b7:7a:b4:3b:1b:ea:e7:1e:de:25:40: ad:d6:b6:02:40:c0:3e:c5:dd:e5:3c:bc:83:25:0b: dc:6e:1b:31:bd:12:78:9f:22:2b:8c:db:bf:76:e5: 8f:95:e7:15:54:d2:2a:0c:4c:61:d9:2d:5c:51:e3: e4:2f:3b:4d:bd:9b:90:cb:c9:e4:69:8a:ab:27:97: 17:2e:44:c0:14:67:64:f2:52:21:48:08:f0:77:86: d9:d0:e2:86:2c:7e:fc:33:b7:b8:82:6f:75:a0:63: d3:90:bf:b4:38:0c:67:d7:ad:7c:8e:06:a8:a5:e6: b7:26:3e:0c:c0:42:d4:cf:c7:ae:4f:6c:6d:91:0f: 27:28:c6:1b:32:07:81:64:b6:de:c6:d4:3b:03:9c: d3:70:f5:63:15:4a:28:c4:42:40:56:30:f7:64:58: 69:82:a6:0d:4e:bb:c8:32:77:55:6f:6f:b4:75:db: c1:c3:49:56:0f:b3:ed:d0:96:a1:bc:03:c4:de:79: 94:4f:9f:0d:02:84:74:45:b3:8d:1c:76:2c:27:0e: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:21:8B:C7:22:42:20:28:EA:BB:96:7B:5B:06:6B:CE:5F:B2:B8:67 X509v3 Authority Key Identifier: keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:1c:4a:93:33:c1:98:48:a2:61:6e:b3:39:f3:e8:60:ce:44: 99:83:72:e5:89:ae:ce:5b:1f:e0:84:24:a3:05:4b:64:25:b8: 8d:e6:38:3f:9f:00:c6:d9:18:91:fc:d8:8c:1c:f5:27:b3:79: bd:f9:48:38:65:dd:d9:8c:1b:cb:98:d6:03:d1:71:6d:47:10: 8f:9b:8f:9e:3b:f1:ff:0f:ed:e3:9d:87:f1:6c:4a:03:51:0c: cb:3f:56:cb:15:0e:09:89:1e:54:41:ca:8d:ab:61:e8:be:56: 0b:ce:41:87:fb:89:40:22:dc:b2:e5:58:28:c1:85:79:bf:c4: 01:d6:fe:4c:be:37:d6:f8:5c:bf:fa:34:34:52:ee:1f:39:77: d0:4a:c1:8a:d6:3e:bd:98:1d:9e:9c:9b:18:4f:05:00:24:a7: c3:71:fd:cb:09:fc:4e:99:2d:91:c1:49:da:bf:b8:30:2b:67: 8c:b9:0e:3f:91:90:87:e6:38:88:b0:3d:8d:b6:cf:ca:4d:20: 3b:cc:e1:f7:9d:1b:d3:39:76:17:aa:6a:38:02:60:ea:66:00: eb:3c:17:aa:10:82:c6:8b:4f:2f:46:7d:d1:81:c1:0c:43:1c: 39:27:1a:b3:bb:6a:96:c2:57:9d:18:32:da:c7:c7:70:35:23: e1:50:d9:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrv4/d/y6GWhibnBSbTE5CvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGYwNDI4MjQyNzNmY2ZmM2YwOTNkMGY5YjFkZWM2OTYw YmFlNmEwHhcNMjUxMjA1MTkwMTI1WhcNMjUxMjA2MTkwMTI1WjAzMTEwLwYDVQQD EygyZjIxOGJjNzIyNDIyMDI4ZWFiYjk2N2I1YjA2NmJjZTVmYjJiODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntC9NACGEJVUy88bNY7yHxGdWN6W K5XpKWIyB0sveAAnvGe1p/pIZUC96xTSuQWdt3q0Oxvq5x7eJUCt1rYCQMA+xd3l PLyDJQvcbhsxvRJ4nyIrjNu/duWPlecVVNIqDExh2S1cUePkLztNvZuQy8nkaYqr J5cXLkTAFGdk8lIhSAjwd4bZ0OKGLH78M7e4gm91oGPTkL+0OAxn1618jgaopea3 Jj4MwELUz8euT2xtkQ8nKMYbMgeBZLbextQ7A5zTcPVjFUooxEJAVjD3ZFhpgqYN TrvIMndVb2+0ddvBw0lWD7Pt0JahvAPE3nmUT58NAoR0RbONHHYsJw4mSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8hi8ciQiAo6ruWe1sGa85fsrhnMB8GA1UdIwQY MBaAFCffBCgkJz/P8/CT0Pmx3saWC65qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUt Y2UyMmQ1ZWFiODJmLzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUtY2UyMmQ1ZWFiODJm LzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5BxKkzPB mEiiYW6zOfPoYM5EmYNy5Ymuzlsf4IQkowVLZCW4jeY4P58AxtkYkfzYjBz1J7N5 vflIOGXd2Ywby5jWA9FxbUcQj5uPnjvx/w/t452H8WxKA1EMyz9WyxUOCYkeVEHK jath6L5WC85Bh/uJQCLcsuVYKMGFeb/EAdb+TL431vhcv/o0NFLuHzl30ErBitY+ vZgdnpybGE8FACSnw3H9ywn8TpktkcFJ2r+4MCtnjLkOP5GQh+Y4iLA9jbbPyk0g O8zh950b0zl2F6pqOAJg6mYA6zwXqhCCxotPL0Z90YHBDEMcOScas7tqlsJXnRgy 2sfHcDUj4VDZ8w== -----END CERTIFICATE-----Generated at Sat Dec 6 05:02:40 2025 by rpki-client