This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json) Hash identifier: CJ6F7nTMNl5FfQkINc+hqpUTsZ4dIrtOoIjc7PX8Sho= Subject key identifier: D4:CE:2B:D9:8C:E7:6E:DF:6E:58:D1:03:31:75:15:E8:AE:E9:FE:5F Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c Certificate serial: 019AF31CBCEC5660717D00B11A56717A92B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:17 +0000 Manifest this update: Sat 06 Dec 2025 10:02:17 +0000 Manifest next update: Sun 07 Dec 2025 10:02:17 +0000 Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=) 2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: aQv+dioV2FqOQITV18CtQiRjYyjybvLxYIciAfVXKNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:bc:ec:56:60:71:7d:00:b1:1a:56:71:7a:92:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c Validity Not Before: Dec 6 10:02:17 2025 GMT Not After : Dec 7 10:02:17 2025 GMT Subject: CN=d4ce2bd98ce76edf6e58d103317515e8aee9fe5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:ea:7e:cd:6a:de:bd:09:67:98:9d:59:93: db:b8:f5:1b:df:dc:f7:e0:7c:0e:f8:71:bf:e2:e7: 4a:2f:3b:01:ca:06:85:15:23:02:fc:76:4e:01:60: 1e:9c:2a:c9:08:1f:bf:43:a5:c1:e9:7c:51:4f:97: 68:5d:e7:72:6e:fe:9d:0f:28:a4:c0:29:33:c7:ff: 85:1d:3a:4f:58:7d:7f:1f:77:87:b4:07:81:fb:1b: e1:ca:73:2d:e4:23:be:7e:25:d3:15:0e:1f:e9:1e: da:6b:12:d8:43:90:4d:76:df:40:57:b9:07:27:9f: 25:28:26:51:bc:29:91:ae:bc:21:06:ce:5c:dc:a1: 06:f4:2a:fb:3e:7d:e0:d8:cc:62:25:fe:ff:ae:69: 94:2a:20:ea:96:76:b9:51:4b:ac:59:83:51:59:84: e3:50:4f:90:20:3d:bd:df:10:7f:eb:88:fd:a2:d1: 36:1e:cf:bc:86:8c:b9:55:68:47:38:d5:f0:19:db: c6:d9:70:a7:54:04:2d:e3:86:47:43:ff:24:26:ac: a6:e3:96:76:ed:c9:a9:5c:e0:a8:07:47:4b:e9:8b: e7:00:61:63:52:2f:58:56:7c:09:07:97:90:1f:d0: 41:ad:39:af:ff:59:dd:7e:2a:cf:70:a8:da:32:af: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:2B:D9:8C:E7:6E:DF:6E:58:D1:03:31:75:15:E8:AE:E9:FE:5F X509v3 Authority Key Identifier: keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:31:90:72:67:d4:5e:6f:53:a4:d8:39:3e:00:52:40:dd:d2: b8:48:cb:89:76:3e:76:49:3a:f0:ab:89:a1:6f:b4:4e:e7:06: 11:af:f8:95:7d:50:59:57:83:f9:fc:06:ee:b0:db:d7:16:d6: be:33:92:15:2a:5c:0e:9b:3f:0c:ef:7e:fb:3f:6f:61:ba:9e: 82:5a:68:ed:72:fd:b8:33:53:e6:80:6c:f0:52:0b:91:45:56: e4:6b:b3:8c:2b:fc:db:6a:41:ef:1b:c8:24:e8:b5:02:3f:18: bc:1a:df:9f:ef:2f:f5:43:4b:c5:b1:f9:de:f3:3d:1b:8a:a1: 1c:1a:6d:b2:a9:94:ca:97:47:14:cc:33:30:9d:9f:cd:9a:50: bb:62:34:f7:67:b1:aa:68:2d:9d:a2:f8:22:30:51:8d:91:a1: 3b:85:ab:89:e3:16:bb:a0:68:b2:dc:3d:23:3b:22:af:ad:33: 6b:d4:02:9d:16:82:56:12:93:51:63:ce:ec:b9:25:91:65:1a: d3:d3:57:62:ab:b8:f1:a5:a5:12:32:b2:eb:d5:2b:cf:ea:b6: 85:db:ba:11:da:70:e7:92:c0:48:e0:3b:e6:b6:14:c6:3a:9b: c4:54:0a:b6:8c:25:12:14:92:08:19:62:a0:61:e1:a0:cc:8c: e6:dc:0d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLzsVmBxfQCxGlZxepKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZTk0Mjc4YjNlMTkwMTg2M2FkZDYxZDdiZGYyZDI3M2Nm MTM0MGMwHhcNMjUxMjA2MTAwMjE3WhcNMjUxMjA3MTAwMjE3WjAzMTEwLwYDVQQD EyhkNGNlMmJkOThjZTc2ZWRmNmU1OGQxMDMzMTc1MTVlOGFlZTlmZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pHqfs1q3r0JZ5idWZPbuPUb39z3 4HwO+HG/4udKLzsBygaFFSMC/HZOAWAenCrJCB+/Q6XB6XxRT5doXedybv6dDyik wCkzx/+FHTpPWH1/H3eHtAeB+xvhynMt5CO+fiXTFQ4f6R7aaxLYQ5BNdt9AV7kH J58lKCZRvCmRrrwhBs5c3KEG9Cr7Pn3g2MxiJf7/rmmUKiDqlna5UUusWYNRWYTj UE+QID293xB/64j9otE2Hs+8hoy5VWhHONXwGdvG2XCnVAQt44ZHQ/8kJqym45Z2 7cmpXOCoB0dL6YvnAGFjUi9YVnwJB5eQH9BBrTmv/1ndfirPcKjaMq+69wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTOK9mM527fbljRAzF1Feiu6f5fMB8GA1UdIwQY MBaAFCfpQniz4ZAYY63WHXvfLSc88TQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQt YjdjOTlkZGFjNzAzLzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQtYjdjOTlkZGFjNzAz LzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTGQcmfU Xm9TpNg5PgBSQN3SuEjLiXY+dkk68KuJoW+0TucGEa/4lX1QWVeD+fwG7rDb1xbW vjOSFSpcDps/DO9++z9vYbqeglpo7XL9uDNT5oBs8FILkUVW5GuzjCv822pB7xvI JOi1Aj8YvBrfn+8v9UNLxbH53vM9G4qhHBptsqmUypdHFMwzMJ2fzZpQu2I092ex qmgtnaL4IjBRjZGhO4WrieMWu6Bostw9Izsir60za9QCnRaCVhKTUWPO7LklkWUa 09NXYqu48aWlEjKy69Urz+q2hdu6Edpw55LASOA75rYUxjqbxFQKtowlEhSSCBli oGHhoMyM5twNyg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:42 2025 by rpki-client