This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json) Hash identifier: rWpTSOGU8B9Xf3b2XZYkwUCuaoNyROYTfNzi6mRa8XY= Subject key identifier: E9:C1:59:96:A8:0B:C4:16:38:BE:72:FF:80:68:85:B1:4A:A6:AF:37 Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae Certificate serial: 019AF088BF56FA7805EB5AB5FB0D86F22550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft Manifest number: 132F Signing time: Fri 05 Dec 2025 22:01:24 +0000 Manifest this update: Fri 05 Dec 2025 22:01:24 +0000 Manifest next update: Sat 06 Dec 2025 22:01:24 +0000 Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: W97E61CNyGs0AThb8ln3v4DXt89XOaqHkAXmKHWE0qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:bf:56:fa:78:05:eb:5a:b5:fb:0d:86:f2:25:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae Validity Not Before: Dec 5 22:01:24 2025 GMT Not After : Dec 6 22:01:24 2025 GMT Subject: CN=e9c15996a80bc41638be72ff806885b14aa6af37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:e9:d2:bb:1e:87:1d:d4:37:31:5f:20:9d: ab:3f:10:6f:20:e6:98:2c:a4:61:af:7e:b1:7d:c7: cc:ee:6c:5a:c9:51:ed:73:11:6f:e1:c0:18:09:78: 29:24:b3:d0:bf:6f:91:f1:c3:46:9b:02:f8:9c:75: 7b:31:24:0c:be:06:0f:6a:a1:1c:da:8a:ea:c3:37: bc:3a:7b:bb:cd:91:bd:c0:88:94:ba:a5:f2:9b:40: 39:af:c0:2c:7b:d5:73:de:49:21:b0:a5:f7:79:1e: 8d:57:64:d7:0c:45:27:63:6d:8a:bd:21:e8:80:99: 5e:2b:a5:3f:29:01:58:6c:86:5a:80:ca:56:fd:3e: 8e:01:14:2c:e7:61:c1:1f:4a:75:ce:69:db:b3:ec: ac:78:08:5b:28:9d:9d:35:68:15:ca:3a:12:3d:46: 39:19:10:75:33:c5:7c:d2:74:d8:d4:2c:7e:7d:0c: ba:a2:32:a5:13:59:6e:a4:d9:39:be:00:d7:03:b1: 0b:02:58:f5:45:11:83:64:99:91:1c:d2:f6:42:2d: 04:98:bb:f5:61:f9:46:e0:11:d1:b7:44:c0:d0:cb: 0c:c1:f6:5c:d4:01:26:07:9c:98:11:e2:76:b6:e2: d8:00:db:ad:02:4d:58:6b:e2:70:3c:2c:2d:c9:c8: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C1:59:96:A8:0B:C4:16:38:BE:72:FF:80:68:85:B1:4A:A6:AF:37 X509v3 Authority Key Identifier: keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d1:f4:3b:06:cd:bc:e6:18:84:45:5d:0d:f6:5c:dd:35:1f: 31:d3:bf:0a:ca:59:44:fb:64:2b:b9:64:3e:20:46:7c:5f:28: 16:83:5b:4f:30:0d:6e:63:4f:0a:28:7a:9b:0f:5d:ca:b2:03: b5:28:a4:71:5f:b7:81:85:eb:24:7f:fd:c6:cd:83:64:62:16: f3:9c:4c:0d:47:a8:36:f2:83:ba:4f:cf:4a:d7:ba:ea:cb:c3: b3:33:41:75:07:64:30:5e:ce:35:2f:6d:42:06:30:e5:72:ec: 05:5b:05:a2:59:7f:9f:e1:a1:0d:8b:11:9f:cf:42:84:9e:ec: 41:fa:82:a6:94:4b:0e:76:3f:14:43:94:1b:51:18:e0:be:f3: 60:db:5b:6c:70:61:f5:cf:5a:8c:1c:50:31:5b:fc:77:c4:89: ca:72:9f:43:04:08:66:1b:b1:85:6d:84:08:4a:0b:06:3c:9d: 3d:10:e8:ae:ac:71:3d:81:ba:2b:d6:70:72:5c:11:1e:a8:d3: d6:a8:58:f6:b0:5a:4c:17:65:da:f3:38:ec:b8:72:0d:10:f8: ab:f7:da:12:42:bb:70:79:a9:97:47:f2:8e:3e:66:ad:0a:b8: 0c:86:b5:10:41:df:bb:cc:83:24:d1:8f:b0:17:a4:fc:42:6b: 9c:1f:03:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiL9W+ngF61q1+w2G8iVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3N2IzNjgzMzA3YzZmY2MzMmJlZDE3NzIzMmYxZDQ3NDU0 MWZiYWUwHhcNMjUxMjA1MjIwMTI0WhcNMjUxMjA2MjIwMTI0WjAzMTEwLwYDVQQD EyhlOWMxNTk5NmE4MGJjNDE2MzhiZTcyZmY4MDY4ODViMTRhYTZhZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeLp0rsehx3UNzFfIJ2rPxBvIOaY LKRhr36xfcfM7mxayVHtcxFv4cAYCXgpJLPQv2+R8cNGmwL4nHV7MSQMvgYPaqEc 2orqwze8Onu7zZG9wIiUuqXym0A5r8Ase9Vz3kkhsKX3eR6NV2TXDEUnY22KvSHo gJleK6U/KQFYbIZagMpW/T6OARQs52HBH0p1zmnbs+yseAhbKJ2dNWgVyjoSPUY5 GRB1M8V80nTY1Cx+fQy6ojKlE1lupNk5vgDXA7ELAlj1RRGDZJmRHNL2Qi0EmLv1 YflG4BHRt0TA0MsMwfZc1AEmB5yYEeJ2tuLYANutAk1Ya+JwPCwtycjsXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnBWZaoC8QWOL5y/4BohbFKpq83MB8GA1UdIwQY MBaAFCd7NoMwfG/MMr7RdyMvHUdFQfuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzkt YWM1MjJmOTU3NTRmLzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzktYWM1MjJmOTU3NTRm LzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9H0OwbN vOYYhEVdDfZc3TUfMdO/CspZRPtkK7lkPiBGfF8oFoNbTzANbmNPCih6mw9dyrID tSikcV+3gYXrJH/9xs2DZGIW85xMDUeoNvKDuk/PSte66svDszNBdQdkMF7ONS9t QgYw5XLsBVsFoll/n+GhDYsRn89ChJ7sQfqCppRLDnY/FEOUG1EY4L7zYNtbbHBh 9c9ajBxQMVv8d8SJynKfQwQIZhuxhW2ECEoLBjydPRDorqxxPYG6K9ZwclwRHqjT 1qhY9rBaTBdl2vM47LhyDRD4q/faEkK7cHmpl0fyjj5mrQq4DIa1EEHfu8yDJNGP sBek/EJrnB8Dhw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:13 2025 by rpki-client