This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json) Hash identifier: IRql/wnECFD6BVFMWtIUytQiHxXe05AIRI5pgZ5ZQC0= Subject key identifier: E9:3A:9F:AC:18:FF:82:2C:95:E7:9D:14:D5:85:5A:1B:69:9C:52:67 Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c Certificate serial: 019B34C62F98671DA754A58F1F59CBB52675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:02:42 +0000 Manifest this update: Fri 19 Dec 2025 04:02:42 +0000 Manifest next update: Sat 20 Dec 2025 04:02:42 +0000 Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=) 2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: 6P0Quna/z+Hvjk9h8IJz+WoLTIgnGrXrqjqkJtx/+fY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:2f:98:67:1d:a7:54:a5:8f:1f:59:cb:b5:26:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c Validity Not Before: Dec 19 04:02:42 2025 GMT Not After : Dec 20 04:02:42 2025 GMT Subject: CN=e93a9fac18ff822c95e79d14d5855a1b699c5267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:8a:ac:15:b2:4f:6e:08:8f:d2:d0:fc:49: e7:3d:50:03:c8:91:43:4c:70:1e:d6:42:e0:6a:83: f8:18:3e:80:9f:28:b6:ad:ac:56:b8:4c:47:9f:3d: 6d:81:98:13:9d:20:eb:6e:67:f5:2b:13:ec:07:93: bb:38:a1:ba:de:7e:e4:12:8a:3a:bb:0c:98:60:d5: 81:66:bb:42:d2:28:23:11:99:85:5e:ae:7a:53:83: 33:85:73:03:5b:01:9e:92:47:50:98:1b:01:64:d3: 21:c6:6a:c5:bc:47:43:96:d3:0c:70:5b:59:21:54: d7:c9:d1:6a:83:05:14:0b:a6:04:24:a3:52:1c:a6: 75:7d:1a:a1:90:df:eb:dd:fd:88:d6:18:de:ec:9e: 4a:79:8e:e5:c8:ea:2e:0b:60:e1:1f:33:37:5a:cf: b9:a8:5a:51:91:55:cf:9a:23:71:84:98:7b:7f:f1: 33:1d:12:82:97:54:91:71:44:36:36:15:dd:d6:6c: ab:a8:51:b6:72:95:17:a6:6a:39:b9:aa:27:88:04: 9d:33:80:b7:ec:b3:0c:b2:f2:d2:7c:1e:02:c9:dd: 50:69:03:8a:a6:64:0b:13:f4:7d:47:52:7b:07:12: c1:12:58:65:f3:54:dc:7a:ef:d9:e6:5d:61:3c:32: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3A:9F:AC:18:FF:82:2C:95:E7:9D:14:D5:85:5A:1B:69:9C:52:67 X509v3 Authority Key Identifier: keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:aa:cf:b5:82:bc:51:9e:82:4c:68:0c:86:ab:67:83:61:af: 3d:f7:08:29:11:23:ba:e4:e8:01:6e:37:46:a0:25:17:7b:88: 0d:e5:2e:73:61:33:cf:5c:af:f0:49:09:65:5e:b8:0f:f0:9c: 55:fe:55:b8:4c:25:a6:af:01:ef:75:06:19:4c:d5:29:b3:4e: ca:84:30:09:96:d2:3e:ca:4e:ba:6d:99:93:09:55:85:d0:3a: 5c:ac:23:41:ec:9e:d8:09:96:cc:c2:f0:48:3e:52:1b:bf:37: 32:ea:1b:e4:ee:ed:78:40:26:3a:99:b8:a0:b1:10:ab:36:6e: 4d:9c:53:43:f7:af:98:2c:dc:75:c0:38:01:37:54:f3:d2:1d: 80:d4:93:99:8e:63:7b:ed:ea:89:31:bd:0f:bb:2d:29:eb:fb: 7c:43:7b:ea:71:67:77:08:cf:f9:39:77:d5:a8:2c:47:4e:8f: c4:54:15:0e:f7:c5:d4:c4:8c:79:d9:15:e0:ed:99:52:b3:3d: 42:54:92:93:ed:b9:dd:eb:c4:8a:4c:59:ac:dc:f5:3b:93:e4: 5c:d6:80:b7:be:a1:31:4c:10:2a:93:24:65:96:6a:4e:a3:01: e9:de:7e:28:83:fe:21:01:ad:69:4c:60:3a:f7:fc:33:92:15: 23:81:ce:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xi+YZx2nVKWPH1nLtSZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZTk0Mjc4YjNlMTkwMTg2M2FkZDYxZDdiZGYyZDI3M2Nm MTM0MGMwHhcNMjUxMjE5MDQwMjQyWhcNMjUxMjIwMDQwMjQyWjAzMTEwLwYDVQQD EyhlOTNhOWZhYzE4ZmY4MjJjOTVlNzlkMTRkNTg1NWExYjY5OWM1MjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6CKrBWyT24Ij9LQ/EnnPVADyJFD THAe1kLgaoP4GD6Anyi2raxWuExHnz1tgZgTnSDrbmf1KxPsB5O7OKG63n7kEoo6 uwyYYNWBZrtC0igjEZmFXq56U4MzhXMDWwGekkdQmBsBZNMhxmrFvEdDltMMcFtZ IVTXydFqgwUUC6YEJKNSHKZ1fRqhkN/r3f2I1hje7J5KeY7lyOouC2DhHzM3Ws+5 qFpRkVXPmiNxhJh7f/EzHRKCl1SRcUQ2NhXd1myrqFG2cpUXpmo5uaoniASdM4C3 7LMMsvLSfB4Cyd1QaQOKpmQLE/R9R1J7BxLBElhl81Tceu/Z5l1hPDIfZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk6n6wY/4IsleedFNWFWhtpnFJnMB8GA1UdIwQY MBaAFCfpQniz4ZAYY63WHXvfLSc88TQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQt YjdjOTlkZGFjNzAzLzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQtYjdjOTlkZGFjNzAz LzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmarPtYK8 UZ6CTGgMhqtng2GvPfcIKREjuuToAW43RqAlF3uIDeUuc2Ezz1yv8EkJZV64D/Cc Vf5VuEwlpq8B73UGGUzVKbNOyoQwCZbSPspOum2ZkwlVhdA6XKwjQeye2AmWzMLw SD5SG783Muob5O7teEAmOpm4oLEQqzZuTZxTQ/evmCzcdcA4ATdU89IdgNSTmY5j e+3qiTG9D7stKev7fEN76nFndwjP+Tl31agsR06PxFQVDvfF1MSMedkV4O2ZUrM9 QlSSk+253evEikxZrNz1O5PkXNaAt76hMUwQKpMkZZZqTqMB6d5+KIP+IQGtaUxg Ovf8M5IVI4HO/Q== -----END CERTIFICATE-----Generated at Fri Dec 19 12:52:06 2025 by rpki-client