This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json) Hash identifier: a9LrSNnwvhbhyrEgwZweTc/q3wYv3qHFhlOoVo+ES04= Subject key identifier: 28:B8:6A:55:5F:07:29:62:AB:D2:4F:BD:8A:6E:C8:EE:F8:60:BF:63 Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0 Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0 Certificate serial: 019AF5E620EAAA76B63E79CD84F1F9E0B151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft Manifest number: 0310 Signing time: Sat 06 Dec 2025 23:01:30 +0000 Manifest this update: Sat 06 Dec 2025 23:01:30 +0000 Manifest next update: Sun 07 Dec 2025 23:01:30 +0000 Files and hashes: 1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: iThYZegYiljqT362YZyozDgsmNdMP/u2tiQXjs84vT8=) 2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:20:ea:aa:76:b6:3e:79:cd:84:f1:f9:e0:b1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0 Validity Not Before: Dec 6 23:01:30 2025 GMT Not After : Dec 7 23:01:30 2025 GMT Subject: CN=28b86a555f072962abd24fbd8a6ec8eef860bf63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fa:8b:a3:1e:8d:ff:1f:80:11:2a:d3:16:05: c2:94:d6:09:72:82:19:e8:7f:d7:72:f7:d4:35:61: 34:e7:d9:c3:87:b2:57:fe:9e:44:4c:24:64:b6:da: de:5e:f9:e8:fd:50:1a:d5:85:d6:60:8b:56:ba:28: ef:0f:30:ed:e2:7a:3d:ce:21:fa:80:4b:e5:ae:03: bf:3e:89:43:73:b5:25:d7:0d:fd:5a:37:33:82:d7: c7:39:75:bc:a0:45:84:cb:3a:65:a3:08:bf:44:76: 5c:d2:91:1f:f1:05:94:d5:a6:11:75:e6:dd:67:7b: f8:94:15:f4:fd:fe:e4:ec:e0:2e:56:56:45:0b:cb: 3a:63:ec:3b:eb:ea:f1:22:81:7d:f3:b9:a2:0a:13: 47:19:e3:1f:fa:f5:3f:1f:5a:f0:a9:41:f2:fe:d0: 63:a4:41:14:74:41:0f:86:30:fd:f9:7f:ee:33:01: 41:d3:64:85:1e:d8:20:2d:6e:13:31:ab:6c:9e:54: a7:1f:bd:cd:3f:2c:b8:c4:a4:24:32:0a:42:03:f6: 4f:af:ef:3b:64:c1:8f:63:d2:8a:b5:c8:a4:d3:75: c8:8e:95:76:66:c0:fe:4d:0e:d9:39:13:50:8a:2e: 36:9c:31:c1:40:8d:18:34:23:b2:d1:e7:39:35:43: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B8:6A:55:5F:07:29:62:AB:D2:4F:BD:8A:6E:C8:EE:F8:60:BF:63 X509v3 Authority Key Identifier: keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f0:62:51:50:c3:69:46:93:ea:0b:e5:21:8e:7a:d3:0a:4b: 52:3e:b1:43:54:6f:d1:52:a1:a7:9e:06:b9:aa:45:f0:0c:61: e1:09:76:b7:bf:ee:6c:82:21:e4:72:f9:16:14:e0:a6:84:50: e0:07:67:5c:ac:c7:ad:e3:cc:65:f5:b4:21:e9:54:c0:cf:e6: 3e:8a:38:b3:62:f6:3d:e1:7b:5e:83:61:7b:74:78:2f:01:dc: b9:36:f8:21:3c:02:9f:01:1f:7a:bc:fe:7c:20:f2:4b:26:bb: 15:ab:44:d7:96:2e:a0:3f:e5:0d:bf:9b:90:35:6f:83:c0:18: a4:0c:67:b2:ee:00:c3:5f:bf:8c:70:05:a1:11:b0:8c:05:ff: b3:1b:9f:66:af:9f:f0:72:ad:25:04:25:9a:7d:80:e5:a2:57: 5b:de:3a:4a:5a:c9:2a:cd:43:ed:51:f1:d6:95:3f:cc:a8:5d: e7:6d:3a:51:64:79:72:ea:a6:2f:78:60:2c:49:ee:da:26:32: 93:62:5e:dc:a4:ad:b3:fc:d6:72:d2:99:9a:40:20:27:44:55: f4:64:bb:54:62:79:f4:d5:48:e5:b5:c4:3d:5f:ca:b0:48:54: e9:1d:76:c3:1e:41:40:39:6c:9f:1c:53:fd:a9:84:8d:ba:6c: 66:3f:f3:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15iDqqna2PnnNhPH54LFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDQxNjA1ZmRlYjVkOWMzZGVhYmVlMmY1ZDdjNjY3ZDk2 ZmQ4ZTAwHhcNMjUxMjA2MjMwMTMwWhcNMjUxMjA3MjMwMTMwWjAzMTEwLwYDVQQD EygyOGI4NmE1NTVmMDcyOTYyYWJkMjRmYmQ4YTZlYzhlZWY4NjBiZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vqLox6N/x+AESrTFgXClNYJcoIZ 6H/XcvfUNWE059nDh7JX/p5ETCRkttreXvno/VAa1YXWYItWuijvDzDt4no9ziH6 gEvlrgO/PolDc7Ul1w39WjczgtfHOXW8oEWEyzplowi/RHZc0pEf8QWU1aYRdebd Z3v4lBX0/f7k7OAuVlZFC8s6Y+w76+rxIoF987miChNHGeMf+vU/H1rwqUHy/tBj pEEUdEEPhjD9+X/uMwFB02SFHtggLW4TMatsnlSnH73NPyy4xKQkMgpCA/ZPr+87 ZMGPY9KKtcik03XIjpV2ZsD+TQ7ZORNQii42nDHBQI0YNCOy0ec5NUPksQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi4alVfByliq9JPvYpuyO74YL9jMB8GA1UdIwQY MBaAFCdEFgX9612cPeq+4vXXxmfZb9jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBRV0JmM3JYWnc5NnI3aTlkZkdaOWx2Mk9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmRiNTQtYzA0My00NTU0LTg0OTIt NzUyYzk1YzljZjc5LzEvSjBRV0JmM3JYWnc5NnI3aTlkZkdaOWx2Mk9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNmRiNTQtYzA0My00NTU0LTg0OTItNzUyYzk1YzljZjc5 LzEvSjBRV0JmM3JYWnc5NnI3aTlkZkdaOWx2Mk9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvBiUVDD aUaT6gvlIY560wpLUj6xQ1Rv0VKhp54GuapF8Axh4Ql2t7/ubIIh5HL5FhTgpoRQ 4AdnXKzHrePMZfW0IelUwM/mPoo4s2L2PeF7XoNhe3R4LwHcuTb4ITwCnwEferz+ fCDySya7FatE15YuoD/lDb+bkDVvg8AYpAxnsu4Aw1+/jHAFoRGwjAX/sxufZq+f 8HKtJQQlmn2A5aJXW946SlrJKs1D7VHx1pU/zKhd5206UWR5cuqmL3hgLEnu2iYy k2Je3KSts/zWctKZmkAgJ0RV9GS7VGJ59NVI5bXEPV/KsEhU6R12wx5BQDlsnxxT /amEjbpsZj/zCg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:08 2025 by rpki-client