This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json) Hash identifier: ruXQOMP+VnO/JqbnhKekxownBxuKfP6gxi7DWgrdVK8= Subject key identifier: E1:0B:3D:F7:E6:DB:D9:EC:BB:E2:B5:EB:EB:A4:3B:D0:99:0C:83:D4 Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb Certificate serial: 019B085AD1FD880CD6BC8B4244D8BCABCBED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft Manifest number: 0D2E Signing time: Wed 10 Dec 2025 13:02:08 +0000 Manifest this update: Wed 10 Dec 2025 13:02:08 +0000 Manifest next update: Thu 11 Dec 2025 13:02:08 +0000 Files and hashes: 1: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: l6PWT7EgCWwDPdk1JpbnWFweiF2jNoZ7wmaXh4rnHmg=) 2: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (hash: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:d1:fd:88:0c:d6:bc:8b:42:44:d8:bc:ab:cb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb Validity Not Before: Dec 10 13:02:08 2025 GMT Not After : Dec 11 13:02:08 2025 GMT Subject: CN=e10b3df7e6dbd9ecbbe2b5ebeba43bd0990c83d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:20:a5:84:00:8c:29:9f:93:24:0c:51:82:0d: f7:98:25:2a:23:eb:16:28:a2:fa:d6:fe:48:68:b8: 5b:bd:d7:b8:3b:91:9d:b1:0a:d7:a1:ed:3d:d1:95: f4:6d:9e:4a:01:81:34:54:37:7a:df:f5:83:d6:80: 67:1a:08:0c:6b:9d:97:fa:6d:cf:cf:fd:1b:21:74: ad:c6:64:99:a5:7e:bb:a5:c5:e1:f4:81:57:8b:7b: 0d:ff:bf:98:f3:5f:06:95:ae:90:48:58:1a:3f:b9: b9:fa:5f:c7:0a:c0:78:6f:5b:31:a3:de:41:06:11: 8e:da:8b:d2:89:53:bc:55:77:f2:5f:87:d4:12:d9: 5b:f7:c3:09:d5:b5:d4:87:2b:6d:ca:e4:c1:12:32: 04:56:df:20:1d:c3:3d:8c:a4:28:fb:93:a7:65:bd: cf:91:a4:80:ab:7a:69:e0:e6:0b:8b:d6:75:85:24: e5:0e:05:25:39:e1:f2:fc:26:06:3c:03:36:3a:81: cb:97:d6:0d:5a:ca:88:26:97:42:e9:60:6e:dd:54: f1:c9:cb:f8:21:af:8b:77:1f:13:4f:7e:91:5f:a7: 5a:84:25:03:2f:65:f1:b5:23:0f:5d:02:29:78:25: 51:80:45:e2:8f:44:f8:30:09:e8:59:e8:73:72:f9: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:3D:F7:E6:DB:D9:EC:BB:E2:B5:EB:EB:A4:3B:D0:99:0C:83:D4 X509v3 Authority Key Identifier: keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:35:c4:f5:21:c4:96:a5:61:c9:f4:0c:5d:94:48:da:50:5d: 42:13:b3:d5:12:84:77:6a:30:7e:f6:b0:c4:86:c1:d4:b2:e1: 66:5c:77:a1:c7:43:85:ef:3c:c6:20:90:3c:7d:d7:38:00:d6: 9e:8f:35:46:d4:91:aa:ad:12:ea:5f:88:f7:60:3e:3d:72:81: 39:43:9a:5a:ee:8f:e4:c0:cd:91:7a:bc:a2:cd:0a:1f:1e:02: c8:38:74:49:4c:d1:44:66:79:e2:da:a9:3e:63:f4:f7:da:c1: a7:ac:6d:52:20:8d:11:4b:df:74:e2:c5:34:c7:ee:14:c2:09: f2:c8:aa:c1:08:16:6f:ff:1d:be:46:b1:20:4c:22:0b:c6:1d: e9:ff:e3:81:52:b9:3e:25:38:93:18:5c:c6:56:c2:d2:69:2c: 16:24:8a:3c:94:21:21:8f:e9:2c:fe:38:cc:3f:0b:38:58:ea: c4:ca:a5:34:10:0f:23:56:99:58:ef:f2:7a:ee:19:36:fd:7f: b4:b8:65:8c:26:62:da:28:da:02:e1:15:dc:40:87:11:42:1a: d6:72:21:ac:6d:78:ac:80:be:b1:5a:c0:12:fa:8c:90:54:cd: bd:13:19:91:b9:56:6c:22:5f:82:f8:40:66:60:c9:38:ae:71: 21:ca:ef:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWtH9iAzWvItCRNi8q8vtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGVkMWQ5MGM0ZDUyYjY4NzEwMjNiYzcxMjk2ZDA4YTk4 YzRjZGIwHhcNMjUxMjEwMTMwMjA4WhcNMjUxMjExMTMwMjA4WjAzMTEwLwYDVQQD EyhlMTBiM2RmN2U2ZGJkOWVjYmJlMmI1ZWJlYmE0M2JkMDk5MGM4M2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCClhACMKZ+TJAxRgg33mCUqI+sW KKL61v5IaLhbvde4O5GdsQrXoe090ZX0bZ5KAYE0VDd63/WD1oBnGggMa52X+m3P z/0bIXStxmSZpX67pcXh9IFXi3sN/7+Y818Gla6QSFgaP7m5+l/HCsB4b1sxo95B BhGO2ovSiVO8VXfyX4fUEtlb98MJ1bXUhyttyuTBEjIEVt8gHcM9jKQo+5OnZb3P kaSAq3pp4OYLi9Z1hSTlDgUlOeHy/CYGPAM2OoHLl9YNWsqIJpdC6WBu3VTxycv4 Ia+Ldx8TT36RX6dahCUDL2XxtSMPXQIpeCVRgEXij0T4MAnoWehzcvkogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOELPffm29nsu+K16+ukO9CZDIPUMB8GA1UdIwQY MBaAFCfe0dkMTVK2hxAjvHEpbQipjEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMzgyMTItMzhhNy00NjhkLWI4NzQt MzUxYWI5ZjIzNmIwLzEvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMzgyMTItMzhhNy00NjhkLWI4NzQtMzUxYWI5ZjIzNmIw LzEvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDXE9SHE lqVhyfQMXZRI2lBdQhOz1RKEd2owfvawxIbB1LLhZlx3ocdDhe88xiCQPH3XOADW no81RtSRqq0S6l+I92A+PXKBOUOaWu6P5MDNkXq8os0KHx4CyDh0SUzRRGZ54tqp PmP099rBp6xtUiCNEUvfdOLFNMfuFMIJ8siqwQgWb/8dvkaxIEwiC8Yd6f/jgVK5 PiU4kxhcxlbC0mksFiSKPJQhIY/pLP44zD8LOFjqxMqlNBAPI1aZWO/yeu4ZNv1/ tLhljCZi2ijaAuEV3ECHEUIa1nIhrG14rIC+sVrAEvqMkFTNvRMZkblWbCJfgvhA ZmDJOK5xIcrvzA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:07:12 2025 by rpki-client