This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json) Hash identifier: Rk5I0Rwolw5gFK7zAZvCYXpJ43EeqDmUNL5KaP/j1Hc= Subject key identifier: B4:E6:5B:E3:58:BC:00:84:2F:68:1F:D4:66:A5:A0:33:9E:66:14:9A Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb Certificate serial: 019AF16420031C1D648293446004191193CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:02 +0000 Manifest this update: Sat 06 Dec 2025 02:01:02 +0000 Manifest next update: Sun 07 Dec 2025 02:01:02 +0000 Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: gBBjF4pyT8WdNv1hus3Zdrrh/BK5BYsZ4ekz1AHST0o=) 2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:20:03:1c:1d:64:82:93:44:60:04:19:11:93:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb Validity Not Before: Dec 6 02:01:02 2025 GMT Not After : Dec 7 02:01:02 2025 GMT Subject: CN=b4e65be358bc00842f681fd466a5a0339e66149a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:2c:f3:b3:03:ca:99:b7:5f:1c:b9:2c:b9: 66:88:c7:c6:e2:16:b5:8b:7a:b0:48:92:f5:01:9b: 2f:36:22:54:72:0e:7a:23:00:12:3e:9e:e3:8b:1f: 77:e9:25:77:43:50:0b:59:eb:09:f1:c6:84:45:e3: d0:79:3e:25:57:9c:80:d3:35:3b:ea:f2:aa:1a:21: e2:55:c6:6f:a8:a2:f2:f5:78:4a:26:15:71:16:95: f8:8b:93:ba:89:15:8f:bd:a1:34:c8:6c:10:01:d7: b8:2b:41:f2:cf:aa:3b:3d:bb:38:7a:9a:24:2e:8c: 89:52:76:83:9c:ff:01:b5:0b:22:61:75:46:aa:6e: 11:7b:93:b3:be:2d:68:70:2d:3e:69:0f:90:09:24: f4:c7:1d:41:73:3e:22:02:fb:b8:49:bf:72:c4:ea: 54:fa:c6:d6:1b:d9:f8:6c:48:cf:bd:48:52:16:d6: b5:14:f9:82:1d:74:fe:ee:83:de:9e:9a:e1:3e:64: 8b:5a:8d:6e:c2:d9:b1:e1:f7:7a:03:26:bb:e5:3a: fd:3b:65:e1:98:45:01:d8:00:ed:90:71:29:74:04: 54:bb:ba:4d:27:61:74:1e:81:e5:13:29:e7:26:8a: bc:fb:d4:d4:dc:e1:a4:0a:26:b3:70:e4:95:05:ea: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:5B:E3:58:BC:00:84:2F:68:1F:D4:66:A5:A0:33:9E:66:14:9A X509v3 Authority Key Identifier: keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8d:6c:f3:4c:e4:de:da:28:65:b2:16:2f:e9:80:65:a0:90: 93:f9:2a:19:82:f7:81:16:7f:b8:16:3c:c2:84:49:b7:e7:51: 7a:f0:f5:e5:bf:75:45:8a:17:76:b4:91:e8:52:0b:4b:e4:ea: 14:62:00:e5:f2:12:fd:99:bd:25:58:a8:5b:e0:34:b0:18:04: 82:3c:3d:b7:24:3c:9a:9c:bf:58:bf:41:ed:55:cf:d8:eb:64: c4:20:08:6f:77:64:c5:04:56:18:56:3d:e6:5d:9e:52:19:65: 0c:21:7a:c5:32:1b:7f:b0:55:43:95:b1:fc:a4:cc:57:86:9e: 72:f2:4d:78:6e:35:70:d1:c0:e6:d2:04:7d:d2:9f:36:6d:c6: 68:ff:2e:f8:f7:8d:88:d3:3e:73:71:36:ab:7e:7f:75:a7:19: 25:45:f2:60:54:94:61:1d:0a:06:9b:c9:06:05:5c:3d:c0:3f: 4a:30:b4:e9:bb:88:d0:79:e4:77:c0:f7:92:fe:3f:7c:06:f8: 87:37:5b:c5:4a:78:3e:fe:87:1e:b1:37:fa:a2:7f:52:22:ee: bc:79:33:99:ae:ec:e8:8d:ab:30:67:a9:60:7f:8c:c4:65:41: e6:c3:f3:1a:61:e3:58:6e:d7:2f:70:74:8f:d0:d5:0a:42:a9: 1e:2d:c7:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCADHB1kgpNEYAQZEZPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGQyNDc5YmFkY2I0MGEyNGE0MzZiMWVkY2MzNjFjM2Zh NjJhZmIwHhcNMjUxMjA2MDIwMTAyWhcNMjUxMjA3MDIwMTAyWjAzMTEwLwYDVQQD EyhiNGU2NWJlMzU4YmMwMDg0MmY2ODFmZDQ2NmE1YTAzMzllNjYxNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQIs87MDypm3Xxy5LLlmiMfG4ha1 i3qwSJL1AZsvNiJUcg56IwASPp7jix936SV3Q1ALWesJ8caERePQeT4lV5yA0zU7 6vKqGiHiVcZvqKLy9XhKJhVxFpX4i5O6iRWPvaE0yGwQAde4K0Hyz6o7Pbs4epok LoyJUnaDnP8BtQsiYXVGqm4Re5Ozvi1ocC0+aQ+QCST0xx1Bcz4iAvu4Sb9yxOpU +sbWG9n4bEjPvUhSFta1FPmCHXT+7oPenprhPmSLWo1uwtmx4fd6Aya75Tr9O2Xh mEUB2ADtkHEpdARUu7pNJ2F0HoHlEynnJoq8+9TU3OGkCiazcOSVBerm4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTmW+NYvACEL2gf1GaloDOeZhSaMB8GA1UdIwQY MBaAFCfdJHm63LQKJKQ2se3MNhw/pir7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEt YmMyYzQ1M2MwZWM4LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEtYmMyYzQ1M2MwZWM4 LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ41s80zk 3tooZbIWL+mAZaCQk/kqGYL3gRZ/uBY8woRJt+dRevD15b91RYoXdrSR6FILS+Tq FGIA5fIS/Zm9JVioW+A0sBgEgjw9tyQ8mpy/WL9B7VXP2OtkxCAIb3dkxQRWGFY9 5l2eUhllDCF6xTIbf7BVQ5Wx/KTMV4aecvJNeG41cNHA5tIEfdKfNm3GaP8u+PeN iNM+c3E2q35/dacZJUXyYFSUYR0KBpvJBgVcPcA/SjC06buI0Hnkd8D3kv4/fAb4 hzdbxUp4Pv6HHrE3+qJ/UiLuvHkzma7s6I2rMGepYH+MxGVB5sPzGmHjWG7XL3B0 j9DVCkKpHi3HFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:18 2025 by rpki-client