This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft File: J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json) Hash identifier: O1MNVyURRqO+XOPIiH9VgU997JaeOR1m6aXS7ZX+Ego= Subject key identifier: BA:3B:75:7B:BE:DF:FA:81:6A:BB:E6:3A:A4:D8:96:1D:E8:8D:2D:0C Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6 Certificate issuer: /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6 Certificate serial: 019AF208D3ED2354074AB0D97C9FC158C0B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft Manifest number: 0D76 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: AhTBPxMnkB/pEZUbf78hU6bCJzTpuwRRQURHAawwdtQ=) 2: T_CxlSwnknQox-JCH593XHkgLvM.roa (hash: CV6mCgtIXghwvOdJmAcgD8Xq7LAE7fozTfYdfKC5Sfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d3:ed:23:54:07:4a:b0:d9:7c:9f:c1:58:c0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=ba3b757bbedffa816abbe63aa4d8961de88d2d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d5:71:32:f4:c6:04:26:50:94:01:87:40:e1: 60:dc:c6:0a:61:a7:77:df:11:fb:44:f5:ea:c0:38: 46:9a:47:49:6c:39:57:bd:8b:a9:18:40:b6:c0:6e: ea:a6:89:11:9b:a0:e7:06:66:ec:d8:90:de:f7:90: 68:9e:c1:60:7d:c3:c3:0e:df:19:8d:bd:fb:a0:88: f2:bb:4b:07:4c:8a:98:70:a5:8f:9c:91:fc:d7:f1: f8:14:6e:71:5e:fc:b7:b2:70:8f:63:19:4e:fe:d3: f2:8e:70:bb:4f:a3:f0:5c:fa:ba:e9:ef:e6:54:11: cb:db:38:4e:f0:6d:f6:5d:87:fa:5c:4d:bc:a6:b7: 17:72:2a:07:77:2e:1d:2a:19:fc:9b:f4:a6:e9:da: 69:f7:71:5a:b5:20:67:90:e6:bc:5b:c9:f7:bd:14: d0:df:44:d9:5e:8a:2b:15:f9:cd:95:77:77:33:aa: ed:89:b5:3a:e6:d7:4e:27:9c:53:94:78:8c:f8:5d: 0c:5a:e2:67:01:32:91:38:57:35:d6:1f:4c:27:57: 7c:02:b2:60:bb:3b:d2:17:f7:5d:af:b5:af:d3:df: fc:53:6d:b3:d5:3f:f3:81:84:d6:5b:70:e2:66:0d: e5:2b:95:cc:bb:0f:6c:5e:d3:33:94:98:db:a6:9b: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3B:75:7B:BE:DF:FA:81:6A:BB:E6:3A:A4:D8:96:1D:E8:8D:2D:0C X509v3 Authority Key Identifier: keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b1:2e:c4:4c:ac:77:00:2c:15:e8:49:8c:81:50:c3:5a:de: e1:33:a2:29:d7:2a:07:fa:62:9b:6c:39:a5:6f:68:bc:a7:5c: 57:cf:ef:b8:ee:d5:cc:1c:e5:1c:d0:d0:16:5b:32:69:55:fe: 0c:53:24:91:e5:b6:06:f5:1a:23:f2:8c:9e:73:26:ba:af:83: 92:3c:2b:7f:a5:87:5b:ea:c8:1d:88:f7:34:69:5f:e3:24:04: b0:09:00:70:6a:95:59:1f:e5:09:74:b9:76:c2:7d:41:bf:f6: b9:81:cb:61:e6:b4:0e:d9:a1:68:8a:f2:6d:60:56:d0:cb:5f: 51:3f:fd:b0:ef:d5:ae:ff:13:f7:2c:e1:a4:26:17:db:08:48: d2:f5:db:fd:45:59:b6:d7:fd:8e:3d:91:42:02:fd:0d:01:04: 3d:a0:ab:b7:9f:7e:e7:e8:24:c1:9f:3b:a4:b0:44:80:30:6e: 73:ea:d7:ab:eb:1f:24:8a:e1:68:74:9c:e7:ef:0a:38:2c:b7: 3d:ab:99:39:12:bf:01:d9:ff:53:7c:c9:04:52:ca:ec:f9:8c: 21:0f:c2:7f:63:80:ec:48:a6:c3:a0:58:7c:be:ce:0b:9c:9d: 48:ea:e7:b9:e7:30:16:27:9c:a9:14:9e:f5:e6:d8:ab:53:00: d5:dc:03:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNPtI1QHSrDZfJ/BWMC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NzZkNjRlYThmZDAyOGI2ODg4ZTM3NDU1N2JiOTFmMDVl ZTBlYzYwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhiYTNiNzU3YmJlZGZmYTgxNmFiYmU2M2FhNGQ4OTYxZGU4OGQyZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39VxMvTGBCZQlAGHQOFg3MYKYad3 3xH7RPXqwDhGmkdJbDlXvYupGEC2wG7qpokRm6DnBmbs2JDe95BonsFgfcPDDt8Z jb37oIjyu0sHTIqYcKWPnJH81/H4FG5xXvy3snCPYxlO/tPyjnC7T6PwXPq66e/m VBHL2zhO8G32XYf6XE28prcXcioHdy4dKhn8m/Sm6dpp93FatSBnkOa8W8n3vRTQ 30TZXoorFfnNlXd3M6rtibU65tdOJ5xTlHiM+F0MWuJnATKROFc11h9MJ1d8ArJg uzvSF/ddr7Wv09/8U22z1T/zgYTWW3DiZg3lK5XMuw9sXtMzlJjbppsQ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo7dXu+3/qBarvmOqTYlh3ojS0MMB8GA1UdIwQY MBaAFCd21k6o/QKLaIjjdFV7uR8F7g7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjNiV1RxajlBb3RvaU9OMFZYdTVId1h1RHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZWQ5N2QtZTg2Ny00MjVmLTg3NDMt MGRhZWQzYWE2MjQ5LzEvSjNiV1RxajlBb3RvaU9OMFZYdTVId1h1RHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zZWQ5N2QtZTg2Ny00MjVmLTg3NDMtMGRhZWQzYWE2MjQ5 LzEvSjNiV1RxajlBb3RvaU9OMFZYdTVId1h1RHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLEuxEys dwAsFehJjIFQw1re4TOiKdcqB/pim2w5pW9ovKdcV8/vuO7VzBzlHNDQFlsyaVX+ DFMkkeW2BvUaI/KMnnMmuq+Dkjwrf6WHW+rIHYj3NGlf4yQEsAkAcGqVWR/lCXS5 dsJ9Qb/2uYHLYea0DtmhaIrybWBW0MtfUT/9sO/Vrv8T9yzhpCYX2whI0vXb/UVZ ttf9jj2RQgL9DQEEPaCrt59+5+gkwZ87pLBEgDBuc+rXq+sfJIrhaHSc5+8KOCy3 PauZORK/Adn/U3zJBFLK7PmMIQ/Cf2OA7Eimw6BYfL7OC5ydSOrnuecwFiecqRSe 9ebYq1MA1dwDRA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:30 2025 by rpki-client