This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json) Hash identifier: hqeuYaOMTjSIq2iSnV1sdaRrNGn6kwMpHDsq0QRaMK4= Subject key identifier: D6:CA:4D:4B:25:E3:CC:0E:51:DA:CC:B1:D0:E3:F3:CE:82:05:9B:FB Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c Certificate serial: 019AF19AF8B3C0A1341DD4F3DDD5FAF18DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft Manifest number: 02AC Signing time: Sat 06 Dec 2025 03:00:56 +0000 Manifest this update: Sat 06 Dec 2025 03:00:56 +0000 Manifest next update: Sun 07 Dec 2025 03:00:56 +0000 Files and hashes: 1: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: Z9oCsRV78PWTJUDX8ud5eca9CPYxqT5edkQhuYyIHcI=) 2: dDAgjd5fwQ3cte1EAxZ7pLJLl0U.roa (hash: 2txr4+GD0XgpxhSLLq5aM5yNR187eckG+kO4tKZmm3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f8:b3:c0:a1:34:1d:d4:f3:dd:d5:fa:f1:8d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c Validity Not Before: Dec 6 03:00:56 2025 GMT Not After : Dec 7 03:00:56 2025 GMT Subject: CN=d6ca4d4b25e3cc0e51daccb1d0e3f3ce82059bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:ac:57:87:ae:64:3f:71:bf:d8:f5:5c:d6: 79:a5:22:f7:ef:7f:ae:4f:3c:b2:12:fd:1c:3c:00: 65:af:49:0e:00:8c:00:26:ab:15:9a:26:a0:e9:06: 6a:ae:44:e5:78:4c:23:3d:7a:7a:2c:cd:a3:07:c4: 82:34:c0:fa:2c:13:ec:6c:53:44:0d:be:3b:e2:0e: 50:3f:9f:1a:b7:c2:54:b5:48:c4:44:95:6a:80:8b: 50:c7:1a:9b:8f:0b:05:cd:41:7c:3b:ab:96:ea:c5: b3:f0:f4:da:f8:14:de:34:fd:6d:ba:e9:44:db:c1: 7f:0a:92:ca:e7:0e:72:e4:c9:ea:64:c0:57:8b:e2: 05:c3:73:20:58:c0:09:3a:c3:14:c8:97:0d:a6:36: 34:f3:f0:91:5b:67:1a:ba:d5:fd:c7:97:35:5e:00: 88:e7:30:02:be:5d:ad:3e:9c:f4:47:b8:56:18:03: 2f:53:1f:49:12:21:de:51:1f:82:c1:59:38:d2:b4: eb:47:c4:46:57:b9:27:59:cd:97:06:8d:4a:44:1e: 52:ae:73:0a:64:85:d5:85:52:04:e3:b4:bd:86:f8: b6:ba:c4:3a:8f:cf:de:9a:37:81:3c:7f:0d:a7:cb: 10:9b:1d:06:a6:bb:1e:d6:bd:53:a0:93:b9:04:48: bd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CA:4D:4B:25:E3:CC:0E:51:DA:CC:B1:D0:E3:F3:CE:82:05:9B:FB X509v3 Authority Key Identifier: keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4f:67:c1:f6:af:02:f3:98:5b:17:b4:d4:f4:94:72:12:f2: 04:8e:57:78:dc:de:eb:83:9a:b9:1a:93:b6:f6:f6:75:cc:b9: 36:a8:43:f6:43:81:58:80:a5:d4:c1:01:30:12:d9:30:53:ff: a9:cc:0f:0e:61:29:c3:34:41:4d:1b:74:58:77:a6:9d:c7:42: de:bb:45:a0:14:44:99:87:37:91:22:37:bc:40:0f:f1:e3:94: c2:6c:72:05:26:fd:9c:f3:01:1b:be:4c:35:81:c0:6e:62:8e: 5c:d6:90:5b:4e:18:52:96:8b:40:05:70:69:4a:0d:8a:bc:bf: 0b:3a:aa:a5:14:b8:d1:c4:80:21:92:f3:5c:05:8d:35:7e:bf: 82:a1:6c:1e:90:0f:a2:a8:b0:cf:0d:be:94:39:ba:89:4a:c0: 99:5d:42:d0:cc:3e:f1:4b:e2:e3:a5:32:fc:f5:1a:43:06:4e: c9:17:5b:84:36:a5:b2:8d:be:85:f6:9b:5a:ba:87:93:fa:26: 8b:aa:78:0d:de:97:72:af:b9:4a:00:a7:cf:02:57:22:fc:d6: 94:31:08:0e:15:a6:68:b9:a2:71:f1:17:5f:b1:0c:b9:16:32: ae:49:84:fe:28:fc:e8:55:f7:35:07:5f:45:bb:63:3e:e1:39: f8:b9:37:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvizwKE0HdTz3dX68Y3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDNkYjdlZTM0YWMyZDRlZDU3OGY0OTVlMDA5NmNiOThh ZmY3MWMwHhcNMjUxMjA2MDMwMDU2WhcNMjUxMjA3MDMwMDU2WjAzMTEwLwYDVQQD EyhkNmNhNGQ0YjI1ZTNjYzBlNTFkYWNjYjFkMGUzZjNjZTgyMDU5YmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSqsV4euZD9xv9j1XNZ5pSL373+u TzyyEv0cPABlr0kOAIwAJqsVmiag6QZqrkTleEwjPXp6LM2jB8SCNMD6LBPsbFNE Db474g5QP58at8JUtUjERJVqgItQxxqbjwsFzUF8O6uW6sWz8PTa+BTeNP1tuulE 28F/CpLK5w5y5MnqZMBXi+IFw3MgWMAJOsMUyJcNpjY08/CRW2cautX9x5c1XgCI 5zACvl2tPpz0R7hWGAMvUx9JEiHeUR+CwVk40rTrR8RGV7knWc2XBo1KRB5SrnMK ZIXVhVIE47S9hvi2usQ6j8/emjeBPH8Np8sQmx0Gprse1r1ToJO5BEi9/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbKTUsl48wOUdrMsdDj886CBZv7MB8GA1UdIwQY MBaAFCdD237jSsLU7VePSV4AlsuYr/ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yZmJjNjctZDZmOC00ZWE0LWJkZTMt NTNiMzEwNDRlZDViLzEvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8yZmJjNjctZDZmOC00ZWE0LWJkZTMtNTNiMzEwNDRlZDVi LzEvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsk9nwfav AvOYWxe01PSUchLyBI5XeNze64OauRqTtvb2dcy5NqhD9kOBWICl1MEBMBLZMFP/ qcwPDmEpwzRBTRt0WHemncdC3rtFoBREmYc3kSI3vEAP8eOUwmxyBSb9nPMBG75M NYHAbmKOXNaQW04YUpaLQAVwaUoNiry/CzqqpRS40cSAIZLzXAWNNX6/gqFsHpAP oqiwzw2+lDm6iUrAmV1C0Mw+8Uvi46Uy/PUaQwZOyRdbhDalso2+hfabWrqHk/om i6p4Dd6Xcq+5SgCnzwJXIvzWlDEIDhWmaLmicfEXX7EMuRYyrkmE/ij86FX3NQdf RbtjPuE5+Lk3sw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:00 2025 by rpki-client