This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft (raw, json) Hash identifier: HK1FzOehYvI9CPPaaHJdKjsllffMvYQYq+Hfck/SQpE= Subject key identifier: 2D:0C:80:3B:41:62:7B:AA:D6:47:06:71:CE:53:DF:11:E2:BE:E9:76 Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64 Certificate issuer: /CN=27fca5b7a77d887649f68a45c90d667c76500164 Certificate serial: 019AF42E6CC4448B77B7F523EF2995E5BD34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft Manifest number: BF Signing time: Sat 06 Dec 2025 15:01:14 +0000 Manifest this update: Sat 06 Dec 2025 15:01:14 +0000 Manifest next update: Sun 07 Dec 2025 15:01:14 +0000 Files and hashes: 1: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl (hash: jb30uFMqsJTQEuddiX8bt1eAsibbbul1pPEeJtj/kXs=) 2: g6KZdG6GOmFS1EyUyMBY8rDGjCw.roa (hash: tD7PjxVbS569hHWyN1mFiCS5hizATSbPnq85D7KgzB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:6c:c4:44:8b:77:b7:f5:23:ef:29:95:e5:bd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164 Validity Not Before: Dec 6 15:01:14 2025 GMT Not After : Dec 7 15:01:14 2025 GMT Subject: CN=2d0c803b41627baad6470671ce53df11e2bee976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:1b:9a:63:25:2b:8b:df:29:77:29:a0:fe: 62:8a:94:c0:5f:39:4d:1d:63:23:57:76:02:c9:89: 38:37:06:6b:b5:08:35:e4:8b:0c:cc:57:82:7c:1f: 80:3d:05:a1:a9:c7:d3:bf:dc:d3:de:69:b6:f6:61: c0:9a:8d:94:c4:06:75:bb:49:5b:f9:3b:d0:e2:d0: 89:87:35:56:91:ba:55:9b:1f:45:f2:d0:32:37:47: 23:9f:60:a0:37:65:a4:da:77:6d:4b:f3:15:22:2b: 84:1d:58:61:4f:95:89:cb:45:71:79:db:2e:4b:b4: 1c:18:ee:5d:c9:34:e3:6d:0d:58:24:56:75:9a:e3: ea:94:47:61:4e:18:fa:e6:77:67:a8:d8:a8:af:7d: 95:57:33:fd:f4:f4:71:56:07:f6:d2:12:4a:9b:9f: 44:37:3b:eb:99:54:63:b0:ff:af:91:9f:90:72:0e: 8a:0e:3c:13:46:3e:a9:d3:16:22:fa:44:7e:08:ac: 66:fb:14:a4:bc:19:50:60:34:5c:33:69:8f:d5:45: 25:1e:38:41:39:bc:ed:a7:0f:4d:05:dd:bc:87:73: 5c:73:93:a1:c0:63:68:fb:88:dc:67:d1:d3:d5:e5: 45:d1:d5:bc:c4:0d:72:e8:e0:b8:b6:46:15:e0:4c: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0C:80:3B:41:62:7B:AA:D6:47:06:71:CE:53:DF:11:E2:BE:E9:76 X509v3 Authority Key Identifier: keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:53:59:88:f7:a9:28:7f:ff:79:60:e8:22:99:84:2b:da:10: 03:e5:c5:ea:52:88:b1:08:80:b8:97:6e:2a:f7:39:7a:69:f4: 2b:d9:c8:e2:89:23:0b:44:3d:77:37:46:5c:58:00:6d:5a:07: 49:28:18:41:79:3d:fd:b1:f7:21:8f:49:5d:c8:55:8c:cb:85: 61:d1:77:9f:2b:85:28:7d:13:75:69:17:72:07:15:4d:5f:c3: 2d:3b:a0:b5:b3:e2:99:2b:e7:b7:6d:8b:e4:03:bd:f0:fa:9a: 18:cc:3d:55:ca:43:42:5c:2d:34:c6:25:82:48:11:85:f8:a0: ce:88:25:86:7b:8b:6f:b9:67:41:9b:52:c0:7a:3f:d5:4f:b4: 08:53:40:fe:39:b0:04:29:0d:c5:0c:be:46:f1:aa:90:b3:23: 42:8e:be:ed:bb:d5:88:5f:66:6f:25:fb:20:91:4b:d9:51:bd: 5c:43:ee:bc:6f:31:37:3b:c5:93:ac:0e:60:85:48:de:9e:da: 57:07:7a:1a:39:98:35:67:40:94:96:30:33:fb:36:ab:c3:a1: 4e:b9:13:2b:a7:92:f8:77:57:32:90:a3:ac:35:d5:16:29:4c: 59:8d:f9:a7:6d:36:4c:41:63:c8:62:d1:c9:dd:3c:4f:2c:2a: 47:ec:f9:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmzERIt3t/Uj7ymV5b00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZmNhNWI3YTc3ZDg4NzY0OWY2OGE0NWM5MGQ2NjdjNzY1 MDAxNjQwHhcNMjUxMjA2MTUwMTE0WhcNMjUxMjA3MTUwMTE0WjAzMTEwLwYDVQQD EygyZDBjODAzYjQxNjI3YmFhZDY0NzA2NzFjZTUzZGYxMWUyYmVlOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodgbmmMlK4vfKXcpoP5iipTAXzlN HWMjV3YCyYk4NwZrtQg15IsMzFeCfB+APQWhqcfTv9zT3mm29mHAmo2UxAZ1u0lb +TvQ4tCJhzVWkbpVmx9F8tAyN0cjn2CgN2Wk2ndtS/MVIiuEHVhhT5WJy0Vxedsu S7QcGO5dyTTjbQ1YJFZ1muPqlEdhThj65ndnqNior32VVzP99PRxVgf20hJKm59E NzvrmVRjsP+vkZ+Qcg6KDjwTRj6p0xYi+kR+CKxm+xSkvBlQYDRcM2mP1UUlHjhB Obztpw9NBd28h3Ncc5OhwGNo+4jcZ9HT1eVF0dW8xA1y6OC4tkYV4EyKyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0MgDtBYnuq1kcGcc5T3xHivul2MB8GA1UdIwQY MBaAFCf8pbenfYh2SfaKRckNZnx2UAFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjct YzFmYWUwMDg4OWRiLzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjctYzFmYWUwMDg4OWRi LzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1NZiPep KH//eWDoIpmEK9oQA+XF6lKIsQiAuJduKvc5emn0K9nI4okjC0Q9dzdGXFgAbVoH SSgYQXk9/bH3IY9JXchVjMuFYdF3nyuFKH0TdWkXcgcVTV/DLTugtbPimSvnt22L 5AO98PqaGMw9VcpDQlwtNMYlgkgRhfigzoglhnuLb7lnQZtSwHo/1U+0CFNA/jmw BCkNxQy+RvGqkLMjQo6+7bvViF9mbyX7IJFL2VG9XEPuvG8xNzvFk6wOYIVI3p7a Vwd6GjmYNWdAlJYwM/s2q8OhTrkTK6eS+HdXMpCjrDXVFilMWY35p202TEFjyGLR yd08TywqR+z5GA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:34 2025 by rpki-client