This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft File: J0zEEJs00UTL604gpr08B1kYIbU.mft (raw, json) Hash identifier: qRvmZ1fqCyvYNK1F8AverfR2EUXxyBrt4lJmYKSapEA= Subject key identifier: F1:A7:6C:45:9D:17:3A:1B:F1:93:0C:05:40:10:23:72:A0:2B:B6:37 Authority key identifier: 27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5 Certificate issuer: /CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5 Certificate serial: 019AF1D25DEA3CA4A97C123C657036107F9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: J0zEEJs00UTL604gpr08B1kYIbU.crl (hash: VUY7+TlzlkD54qujdmP4qFls4LyvzA4Fl9Yu/Tui3R0=) 2: W2Bt5n75RL1yPisK5n22fF2D8bI.roa (hash: paOvg+wgSlBKgewYZP5vibp/Ng8VGrHC/AvIdfss8fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5d:ea:3c:a4:a9:7c:12:3c:65:70:36:10:7f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=f1a76c459d173a1bf1930c0540102372a02bb637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:99:a8:3e:41:50:8c:89:92:a9:56:6d:80: 1b:c8:17:dd:3c:f7:eb:0d:5a:d5:91:82:2b:6a:1f: e7:09:93:45:83:73:0b:b8:ef:91:1b:80:4c:7b:92: 8c:2f:de:37:c0:aa:07:ff:fb:1b:17:07:55:b9:94: f0:a9:51:ba:d8:8b:5a:03:b9:6b:54:f2:60:9f:eb: 4b:08:0c:70:35:79:39:42:b3:9d:22:7f:14:67:ed: c8:6d:18:34:c2:09:c9:c2:72:1b:16:1f:45:b4:97: c9:e5:85:2e:be:76:53:1b:35:2e:b6:fa:6e:f9:0b: 7c:a7:64:f7:52:f8:11:fa:ff:1b:fc:21:95:8a:ab: 1a:81:4d:3f:c9:ee:ea:74:df:08:00:b1:28:d2:de: 5b:7e:0b:07:29:4d:b5:d9:ec:fa:12:fc:40:04:4d: 49:cc:e8:13:3b:c9:a2:8d:84:aa:7f:9e:ed:94:f3: 1d:68:92:38:4f:df:77:c6:00:3b:21:57:aa:76:6e: 8a:08:08:9d:ee:61:b3:28:aa:00:09:9b:b4:7f:a7: 56:05:fa:e5:4b:11:63:7a:91:ed:e3:8b:f1:f2:a9: 7e:72:ae:88:b6:3b:ed:8f:2c:13:db:b5:9c:31:8a: c4:b7:c3:aa:96:21:fd:9d:b0:8b:92:4e:df:cf:e9: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A7:6C:45:9D:17:3A:1B:F1:93:0C:05:40:10:23:72:A0:2B:B6:37 X509v3 Authority Key Identifier: keyid:27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:8d:8f:c6:60:e1:5b:e9:45:2f:c5:f1:5d:1f:c8:93:0a:0d: 43:31:c7:ad:81:46:4b:16:40:bb:ad:0d:5c:b7:fe:0e:08:ba: 28:16:ef:7c:98:06:93:db:78:af:f9:b6:0c:89:59:e9:df:3d: b4:01:10:42:16:f1:5a:ba:f4:d6:6d:48:20:92:25:3a:07:ba: 9a:f8:84:97:66:77:0a:aa:b5:f7:e8:99:e5:dd:55:1c:f6:ad: 1a:c9:bc:87:c4:68:0f:9d:bd:ac:36:7e:d8:83:4e:b0:d6:85: 0d:c3:02:70:63:98:95:17:11:31:6f:da:5b:67:53:df:ef:5f: ea:de:86:db:79:91:18:dc:d6:97:bd:24:f1:96:b7:04:59:3c: 55:cf:0b:ab:31:3b:9a:34:57:c4:c7:32:85:ed:ee:c0:1c:d9: a1:23:4c:67:61:37:c7:4f:cc:21:7f:05:f2:eb:9b:6b:28:82: cf:e4:d8:20:1a:d5:7a:90:80:4a:84:fe:60:25:ec:af:75:c0: d0:69:c4:23:0b:9c:b9:c1:b4:6a:be:ec:a2:a5:bd:71:66:23: 30:0d:58:10:61:10:e6:ca:cf:05:13:7d:d7:d8:6b:d6:0e:04: 78:1e:d9:98:12:a3:03:1e:4d:66:55:36:f8:55:62:9e:29:15: 32:82:18:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l3qPKSpfBI8ZXA2EH+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NGNjNDEwOWIzNGQxNDRjYmViNGUyMGE2YmQzYzA3NTkx ODIxYjUwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EyhmMWE3NmM0NTlkMTczYTFiZjE5MzBjMDU0MDEwMjM3MmEwMmJiNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsduZqD5BUIyJkqlWbYAbyBfdPPfr DVrVkYIrah/nCZNFg3MLuO+RG4BMe5KML943wKoH//sbFwdVuZTwqVG62ItaA7lr VPJgn+tLCAxwNXk5QrOdIn8UZ+3IbRg0wgnJwnIbFh9FtJfJ5YUuvnZTGzUutvpu +Qt8p2T3UvgR+v8b/CGViqsagU0/ye7qdN8IALEo0t5bfgsHKU212ez6EvxABE1J zOgTO8mijYSqf57tlPMdaJI4T993xgA7IVeqdm6KCAid7mGzKKoACZu0f6dWBfrl SxFjepHt44vx8ql+cq6ItjvtjywT27WcMYrEt8OqliH9nbCLkk7fz+lcAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGnbEWdFzob8ZMMBUAQI3KgK7Y3MB8GA1UdIwQY MBaAFCdMxBCbNNFEy+tOIKa9PAdZGCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNDRiNjAtODg5ZC00MWYyLWI5ZjIt YmUxNWRmOTliMTFkLzEvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zNDRiNjAtODg5ZC00MWYyLWI5ZjItYmUxNWRmOTliMTFk LzEvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsY2PxmDh W+lFL8XxXR/IkwoNQzHHrYFGSxZAu60NXLf+Dgi6KBbvfJgGk9t4r/m2DIlZ6d89 tAEQQhbxWrr01m1IIJIlOge6mviEl2Z3Cqq19+iZ5d1VHPatGsm8h8RoD529rDZ+ 2INOsNaFDcMCcGOYlRcRMW/aW2dT3+9f6t6G23mRGNzWl70k8Za3BFk8Vc8LqzE7 mjRXxMcyhe3uwBzZoSNMZ2E3x0/MIX8F8uubayiCz+TYIBrVepCASoT+YCXsr3XA 0GnEIwucucG0ar7soqW9cWYjMA1YEGEQ5srPBRN919hr1g4EeB7ZmBKjAx5NZlU2 +FVinikVMoIYjA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:10 2025 by rpki-client