This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft File: J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json) Hash identifier: N4EkHkOPv04HwN521YxoLF4dKWXb/YsECgDXlrt9x9A= Subject key identifier: D3:C9:DF:D6:3F:5E:1E:BC:6E:17:59:12:CF:38:EF:C2:F5:DC:CF:F3 Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14 Certificate issuer: /CN=27b56eb25b05a08826c2648fff1acf36b494d814 Certificate serial: 019AF3F807DF4312867A081A064142D40824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft Manifest number: 041E Signing time: Sat 06 Dec 2025 14:01:49 +0000 Manifest this update: Sat 06 Dec 2025 14:01:49 +0000 Manifest next update: Sun 07 Dec 2025 14:01:49 +0000 Files and hashes: 1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: eZzwB98xvy6hC7G4ITWbqJONWlsNIh7g6kqBJk+3bqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:07:df:43:12:86:7a:08:1a:06:41:42:d4:08:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814 Validity Not Before: Dec 6 14:01:49 2025 GMT Not After : Dec 7 14:01:49 2025 GMT Subject: CN=d3c9dfd63f5e1ebc6e175912cf38efc2f5dccff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:f1:99:ae:1f:98:d9:fc:10:f4:38:69:02: ad:34:07:92:d1:7d:1d:03:10:61:ea:df:15:f7:d2: 35:76:1c:39:89:c8:2f:87:ac:80:5e:f3:78:46:3c: dc:55:47:28:d9:b6:c4:53:a6:7d:20:16:0f:57:88: 28:c3:7a:95:a2:fc:51:9e:c4:31:48:09:04:92:4b: 32:2b:9a:d7:3e:2b:e6:38:ef:72:96:1a:dc:ed:f8: e7:6e:ad:05:47:eb:88:8b:7c:a3:30:aa:b6:27:d3: 11:28:27:de:e0:a7:c7:fd:6f:1b:54:fe:f4:55:65: 94:9f:ec:83:3a:98:c1:90:ce:8e:f3:3a:f9:98:bc: 59:ef:5f:e7:39:b5:41:78:45:f1:75:a5:ee:c6:c2: cc:cf:00:21:35:c3:21:e1:9c:66:c4:73:74:b0:af: fd:41:35:99:63:9b:2c:c5:d4:a6:c5:68:30:dc:9c: 9e:49:ec:11:c3:6e:74:09:3a:12:9b:4d:15:bf:27: 03:94:31:43:e0:d9:3b:87:bf:ff:48:ea:7c:bc:d7: df:ad:29:77:e0:cb:54:16:69:44:91:54:16:d6:c3: 78:bd:8c:6b:89:1c:61:1c:9d:46:0e:42:eb:c9:a1: 39:99:e6:02:1f:5c:99:55:6a:8c:38:81:2e:e5:1e: 7d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C9:DF:D6:3F:5E:1E:BC:6E:17:59:12:CF:38:EF:C2:F5:DC:CF:F3 X509v3 Authority Key Identifier: keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:67:33:07:fe:fd:55:6f:02:54:ce:b8:a0:73:f4:15:bc:a5: d2:51:e4:46:08:7a:3a:18:e1:37:7a:08:e6:6e:a7:8a:d2:d5: 2d:e3:b7:41:69:60:a3:f6:9e:ac:0b:09:ab:c8:28:65:ad:97: 1a:35:dd:a2:1f:74:21:1e:0b:76:a0:06:f1:f5:9d:aa:47:a8: 91:0f:c2:e3:90:17:a2:b7:fc:ce:3c:72:20:db:1f:f3:bf:48: ba:b8:b6:b9:28:88:33:82:0e:93:f9:0f:fd:7d:db:04:aa:90: ca:79:2f:5f:36:f0:85:91:92:74:14:0d:a7:3c:68:b2:cc:48: 77:6b:ac:03:d8:f5:68:07:52:9f:bd:53:e9:35:db:a8:21:76: 76:1b:25:02:56:69:60:10:ef:1c:2d:3f:4d:b2:ce:f4:65:5a: cf:11:74:18:2a:97:86:56:91:ce:a8:ca:d4:8b:a3:88:0e:4f: d5:e7:b8:80:1c:af:ec:16:d1:91:82:5f:41:12:49:79:74:28: b9:d1:9e:75:e3:14:8b:53:b1:8e:ce:72:05:3a:c1:13:10:45: 50:7d:9e:ac:c0:c2:6e:cc:58:06:3a:fe:cd:8e:2b:f9:a9:82: 40:a2:79:22:58:0a:f1:60:2d:00:3c:b6:93:f9:36:53:35:7d: 3f:21:be:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AffQxKGeggaBkFC1AgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjU2ZWIyNWIwNWEwODgyNmMyNjQ4ZmZmMWFjZjM2YjQ5 NGQ4MTQwHhcNMjUxMjA2MTQwMTQ5WhcNMjUxMjA3MTQwMTQ5WjAzMTEwLwYDVQQD EyhkM2M5ZGZkNjNmNWUxZWJjNmUxNzU5MTJjZjM4ZWZjMmY1ZGNjZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylDxma4fmNn8EPQ4aQKtNAeS0X0d AxBh6t8V99I1dhw5icgvh6yAXvN4RjzcVUco2bbEU6Z9IBYPV4gow3qVovxRnsQx SAkEkksyK5rXPivmOO9ylhrc7fjnbq0FR+uIi3yjMKq2J9MRKCfe4KfH/W8bVP70 VWWUn+yDOpjBkM6O8zr5mLxZ71/nObVBeEXxdaXuxsLMzwAhNcMh4ZxmxHN0sK/9 QTWZY5ssxdSmxWgw3JyeSewRw250CToSm00VvycDlDFD4Nk7h7//SOp8vNffrSl3 4MtUFmlEkVQW1sN4vYxriRxhHJ1GDkLryaE5meYCH1yZVWqMOIEu5R59RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPJ39Y/Xh68bhdZEs8478L13M/zMB8GA1UdIwQY MBaAFCe1brJbBaCIJsJkj/8azza0lNgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTct MDM4ZjE1OTU2M2ZmLzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTctMDM4ZjE1OTU2M2Zm LzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWczB/79 VW8CVM64oHP0Fbyl0lHkRgh6OhjhN3oI5m6nitLVLeO3QWlgo/aerAsJq8goZa2X GjXdoh90IR4LdqAG8fWdqkeokQ/C45AXorf8zjxyINsf879Iuri2uSiIM4IOk/kP /X3bBKqQynkvXzbwhZGSdBQNpzxossxId2usA9j1aAdSn71T6TXbqCF2dhslAlZp YBDvHC0/TbLO9GVazxF0GCqXhlaRzqjK1IujiA5P1ee4gByv7BbRkYJfQRJJeXQo udGedeMUi1Oxjs5yBTrBExBFUH2erMDCbsxYBjr+zY4r+amCQKJ5IlgK8WAtADy2 k/k2UzV9PyG+0w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:01:37 2025 by rpki-client