This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft File: J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json) Hash identifier: rLB5N0RkFzoVEiOtsOouX5eTLwsApS2EYbs8iT1jNJc= Subject key identifier: 71:CC:A4:E1:E3:5B:B0:98:20:88:CA:DD:48:48:2A:7E:02:71:68:FD Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF Certificate issuer: /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df Certificate serial: 019AF5AE9E138DE5D4A2C3FB7AA91B741768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft Manifest number: 0D92 Signing time: Sat 06 Dec 2025 22:00:52 +0000 Manifest this update: Sat 06 Dec 2025 22:00:52 +0000 Manifest next update: Sun 07 Dec 2025 22:00:52 +0000 Files and hashes: 1: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: YPu1XGPqF/1sCE5htUzjOWo2ODntc0j37yB0YUTDPu4=) 2: _BsLA-Yq0byQhwlqjwrfokOt_ao.roa (hash: nUVtATfYPG2WeBzHlW5fiB+hmlpSz5V9uTVR1MUQR8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:9e:13:8d:e5:d4:a2:c3:fb:7a:a9:1b:74:17:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df Validity Not Before: Dec 6 22:00:52 2025 GMT Not After : Dec 7 22:00:52 2025 GMT Subject: CN=71cca4e1e35bb0982088cadd48482a7e027168fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:a7:47:7e:04:d4:af:dd:98:06:94:a7:9d: 17:78:b5:a2:40:56:0a:57:79:49:4d:d8:e3:9f:b2: 96:51:51:09:49:68:59:77:14:c5:7a:36:a8:46:fb: c8:a0:0e:a4:26:73:46:a4:78:44:83:25:19:92:46: 70:85:ce:98:42:8d:72:b9:4c:7d:94:4d:b9:ee:b7: 20:79:68:8f:c6:c1:13:84:e2:9e:13:a4:8e:f3:58: e6:3f:af:af:5d:fd:2e:33:3f:a1:28:ad:42:58:79: c4:b4:d6:57:8d:fe:9b:0a:84:d5:8d:a0:ea:ee:42: 48:8e:b3:a2:2a:48:b0:fc:fc:cb:33:ba:b2:72:42: 12:7e:15:de:1e:50:e1:20:58:f0:59:8a:c0:de:cf: b2:12:9f:1a:03:71:39:4c:9d:97:ac:3f:46:d8:3b: 26:d0:b2:eb:8a:86:b8:00:11:31:2d:2f:b7:32:76: fa:49:9d:a3:0a:25:9c:93:56:e8:10:bb:71:86:1a: 16:67:fa:ec:75:ef:75:7b:ca:ef:f0:ad:76:9c:3c: 09:89:dd:24:01:ac:6b:f9:9a:e1:25:ac:1b:40:7e: 91:48:a1:b4:79:02:ba:5e:9b:66:9f:2f:56:01:34: b3:4a:10:b2:4b:02:f0:c6:ac:b1:4f:69:7e:07:80: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:A4:E1:E3:5B:B0:98:20:88:CA:DD:48:48:2A:7E:02:71:68:FD X509v3 Authority Key Identifier: keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:09:62:bb:03:e0:bc:90:d9:8c:40:d3:05:24:ea:c0:97:1f: df:59:0a:9c:b7:2e:ec:c2:6d:50:1c:78:48:a8:17:c1:a7:9e: 46:51:6e:32:86:c4:e5:35:d3:ad:cf:2d:16:60:4e:9e:f3:36: fc:1a:63:60:0e:d6:03:44:0b:e8:ff:17:e0:a4:74:c5:2f:77: 63:04:43:85:90:50:b4:ea:09:0c:78:8b:9e:cf:01:71:ea:b4: fd:04:55:8c:6d:34:a4:52:e4:e2:cc:35:1a:87:27:75:0c:1a: b5:64:c5:7e:f9:fd:02:e6:9f:a3:70:9f:f7:c4:97:3e:63:5c: 7a:de:38:4a:49:b9:fe:85:ff:ec:37:e5:94:e5:88:fa:30:90: cf:27:55:65:ad:43:b5:05:6b:bd:04:6f:4d:36:72:8f:94:5c: 44:81:0a:62:93:8a:38:ea:c6:3e:68:9a:07:8f:8a:25:b9:5d: f6:4b:69:4e:78:23:bc:6a:22:68:8e:b0:c9:03:63:c6:32:96: de:3c:70:1f:8d:62:50:31:48:8e:1f:31:3e:cc:17:07:e4:15: a2:2b:ee:26:2f:e9:d9:1f:16:4f:db:98:78:68:43:07:ae:8c: 0e:d7:52:4d:67:c4:23:33:59:7d:3f:6c:10:43:a8:c9:df:2b: 8a:a7:dd:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rp4TjeXUosP7eqkbdBdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NWFhYjdkZmJiMTUyYTY0NmFkZjMyNzNiMzFhYTVkZGU2 NGExZGYwHhcNMjUxMjA2MjIwMDUyWhcNMjUxMjA3MjIwMDUyWjAzMTEwLwYDVQQD Eyg3MWNjYTRlMWUzNWJiMDk4MjA4OGNhZGQ0ODQ4MmE3ZTAyNzE2OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUOnR34E1K/dmAaUp50XeLWiQFYK V3lJTdjjn7KWUVEJSWhZdxTFejaoRvvIoA6kJnNGpHhEgyUZkkZwhc6YQo1yuUx9 lE257rcgeWiPxsEThOKeE6SO81jmP6+vXf0uMz+hKK1CWHnEtNZXjf6bCoTVjaDq 7kJIjrOiKkiw/PzLM7qyckISfhXeHlDhIFjwWYrA3s+yEp8aA3E5TJ2XrD9G2Dsm 0LLrioa4ABExLS+3Mnb6SZ2jCiWck1boELtxhhoWZ/rsde91e8rv8K12nDwJid0k Aaxr+ZrhJawbQH6RSKG0eQK6Xptmny9WATSzShCySwLwxqyxT2l+B4CL/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHMpOHjW7CYIIjK3UhIKn4CcWj9MB8GA1UdIwQY MBaAFCdaq337sVKmRq3zJzsxql3eZKHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUt MGQwZDdjMDE4OWFkLzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUtMGQwZDdjMDE4OWFk LzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQliuwPg vJDZjEDTBSTqwJcf31kKnLcu7MJtUBx4SKgXwaeeRlFuMobE5TXTrc8tFmBOnvM2 /BpjYA7WA0QL6P8X4KR0xS93YwRDhZBQtOoJDHiLns8Bceq0/QRVjG00pFLk4sw1 GocndQwatWTFfvn9Auafo3Cf98SXPmNcet44Skm5/oX/7DfllOWI+jCQzydVZa1D tQVrvQRvTTZyj5RcRIEKYpOKOOrGPmiaB4+KJbld9ktpTngjvGoiaI6wyQNjxjKW 3jxwH41iUDFIjh8xPswXB+QVoivuJi/p2R8WT9uYeGhDB66MDtdSTWfEIzNZfT9s EEOoyd8riqfd1w== -----END CERTIFICATE-----Generated at Sun Dec 7 04:50:30 2025 by rpki-client