This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json) Hash identifier: GGEJOdmUJXdJ1cwzgamlZa6s5v8GE2dFLOpjcKUXd64= Subject key identifier: 8D:58:23:A1:7D:38:F1:2C:2A:63:D9:2C:15:36:72:B4:B1:BA:3C:16 Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Certificate serial: 019AF49C47164DC6A98920020C6C51A4874E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft Manifest number: 01EB Signing time: Sat 06 Dec 2025 17:01:13 +0000 Manifest this update: Sat 06 Dec 2025 17:01:13 +0000 Manifest next update: Sun 07 Dec 2025 17:01:13 +0000 Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: I8JD96tarC39ppZtFDDhi2+xxGlZGoDDLDZDInZ72Ag=) 2: tSgs3XUIsHh7rxyC6KI4dfFcjtI.roa (hash: aP/8w3eyX9ywh3RSZ1FyfaCe/EGfUTND1DeYuxP49kA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:47:16:4d:c6:a9:89:20:02:0c:6c:51:a4:87:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Validity Not Before: Dec 6 17:01:13 2025 GMT Not After : Dec 7 17:01:13 2025 GMT Subject: CN=8d5823a17d38f12c2a63d92c153672b4b1ba3c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:89:98:1e:34:2e:87:15:49:d4:2c:25:8b: 41:9a:b9:90:31:53:f8:c0:02:a7:65:6b:a1:13:83: e2:13:47:1a:48:69:09:6f:fa:92:a0:bd:a9:82:4b: cd:63:a5:7c:57:71:ac:8f:17:eb:cf:48:3b:f5:6b: d6:bb:e2:b5:c1:41:01:21:8c:79:31:cc:0b:3a:32: 0d:e1:a8:32:c9:59:aa:cd:7c:20:bd:cb:d3:87:72: a3:cf:69:ec:fa:e1:86:6b:dd:0f:96:13:77:e8:26: 13:57:e2:f2:ba:3b:4c:c0:44:2f:40:ec:c6:a4:35: 14:7d:4f:29:08:b7:89:76:27:58:2a:a2:12:d2:15: 65:4c:c8:73:57:c0:66:7c:f7:9e:bb:b6:9c:35:9f: aa:13:d0:05:f8:22:75:fa:d8:b9:8d:5c:52:e1:0d: e8:14:c4:9f:f0:4d:9c:86:6f:40:cd:11:31:dc:68: c0:69:23:c4:17:f9:19:30:9d:0e:9c:c4:fc:41:a0: 5f:1b:a5:1c:44:16:4c:ad:c6:82:b2:6e:2b:5e:cd: d0:33:24:09:1b:2c:58:df:2e:e8:f6:d7:15:10:b3: 87:e0:fa:41:cb:c0:2a:94:68:31:d1:64:6a:be:0e: f0:e2:7e:8e:7c:e9:a1:22:ea:2c:91:7a:6d:13:68: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:58:23:A1:7D:38:F1:2C:2A:63:D9:2C:15:36:72:B4:B1:BA:3C:16 X509v3 Authority Key Identifier: keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:51:bf:26:42:70:d7:ca:ee:79:e3:7d:f5:f6:80:12:8e:14: 78:16:59:2e:52:45:fe:4b:9f:8c:87:20:30:53:88:80:4d:af: b8:44:6f:1b:c8:31:4a:94:b3:92:69:20:7a:b5:84:e2:60:dc: e9:ce:56:a9:d5:43:51:9b:b1:eb:30:b2:1d:90:0b:cf:d0:ef: b6:23:8d:55:2d:a0:a3:38:d1:b5:43:2f:ae:2d:96:c9:81:e2: d5:0a:d8:20:1e:d7:25:c6:8d:27:e2:86:09:d5:a8:2e:46:5b: 60:52:b1:24:59:6d:1f:de:67:f8:72:0b:c3:7a:90:a7:e9:77: 4d:13:0e:d5:dc:ab:da:bf:79:b4:77:74:17:67:0e:b3:4e:0e: 40:de:9d:35:68:37:8c:20:a1:cb:90:93:92:2e:a3:0b:b1:13: b6:5c:4d:11:99:56:7c:59:31:53:f5:ac:1c:ec:52:5a:b1:e6: 08:7f:d5:3a:5e:19:6a:c4:8e:b0:f0:ed:91:db:9b:44:2a:ba: d9:64:fc:5c:da:86:24:51:c9:7b:05:13:ec:29:5f:8e:93:e8: 34:a7:5a:4a:02:23:ae:d6:fb:77:48:49:18:15:32:03:46:7a: 47:cb:f0:db:c3:41:d9:5a:e4:79:09:44:51:74:8f:75:41:ad: 36:a1:7d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEcWTcapiSACDGxRpIdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDY5ZjE4ODNkY2NjOTNhNzg2OWM0MWVjM2U5NzJmZjVm ZDRiMDEwHhcNMjUxMjA2MTcwMTEzWhcNMjUxMjA3MTcwMTEzWjAzMTEwLwYDVQQD Eyg4ZDU4MjNhMTdkMzhmMTJjMmE2M2Q5MmMxNTM2NzJiNGIxYmEzYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs+JmB40LocVSdQsJYtBmrmQMVP4 wAKnZWuhE4PiE0caSGkJb/qSoL2pgkvNY6V8V3Gsjxfrz0g79WvWu+K1wUEBIYx5 McwLOjIN4agyyVmqzXwgvcvTh3Kjz2ns+uGGa90PlhN36CYTV+LyujtMwEQvQOzG pDUUfU8pCLeJdidYKqIS0hVlTMhzV8BmfPeeu7acNZ+qE9AF+CJ1+ti5jVxS4Q3o FMSf8E2chm9AzREx3GjAaSPEF/kZMJ0OnMT8QaBfG6UcRBZMrcaCsm4rXs3QMyQJ GyxY3y7o9tcVELOH4PpBy8AqlGgx0WRqvg7w4n6OfOmhIuoskXptE2itLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1YI6F9OPEsKmPZLBU2crSxujwWMB8GA1UdIwQY MBaAFCcGnxiD3MyTp4acQew+ly/1/UsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgt MDQ2MmI2NDg0ZDYwLzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgtMDQ2MmI2NDg0ZDYw LzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFG/JkJw 18rueeN99faAEo4UeBZZLlJF/kufjIcgMFOIgE2vuERvG8gxSpSzkmkgerWE4mDc 6c5WqdVDUZux6zCyHZALz9DvtiONVS2gozjRtUMvri2WyYHi1QrYIB7XJcaNJ+KG CdWoLkZbYFKxJFltH95n+HILw3qQp+l3TRMO1dyr2r95tHd0F2cOs04OQN6dNWg3 jCChy5CTki6jC7ETtlxNEZlWfFkxU/WsHOxSWrHmCH/VOl4ZasSOsPDtkdubRCq6 2WT8XNqGJFHJewUT7ClfjpPoNKdaSgIjrtb7d0hJGBUyA0Z6R8vw28NB2VrkeQlE UXSPdUGtNqF97Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:01 2025 by rpki-client