This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json) Hash identifier: I9S3DiM91kvBhZGVO3pDu0zTVBbZ+w8EVOl1ijEdrek= Subject key identifier: 7C:80:55:27:37:F9:A2:17:6E:9A:D9:E3:70:75:98:EC:60:37:50:A4 Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12 Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12 Certificate serial: 019AF2097DAE47C78B91087FCF7CA727E4DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: sDzlNrcoFQoHyMgGQEtc4Q46XOplo8nGhqe1S9NqG/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7d:ae:47:c7:8b:91:08:7f:cf:7c:a7:27:e4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=7c80552737f9a2176e9ad9e3707598ec603750a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:33:6e:3b:c4:f4:9a:d9:69:e1:e0:83:ff: e3:46:e6:81:e7:dd:0d:b9:87:e2:08:72:e8:78:cc: 49:e7:bf:c5:c3:d8:18:c4:81:99:05:53:b7:90:2a: 84:e2:bf:9d:d9:cc:b4:25:fa:79:9c:f5:9c:24:f0: 21:89:37:b4:5c:82:22:ab:bc:23:4f:a7:58:f6:d7: 23:39:c7:50:53:15:f8:da:11:ab:85:70:2d:54:2e: 52:8f:8a:13:e4:d5:ca:10:44:d0:0a:19:b9:28:8f: 05:ef:06:41:db:c8:60:13:05:a9:df:15:d6:5f:c7: c3:32:ce:10:42:c4:56:b6:c4:50:5e:fa:c2:c9:cb: 7e:d9:a9:94:6b:13:20:d5:42:3a:44:6a:0c:89:70: 9b:29:a3:27:88:24:57:05:75:79:99:5a:1f:bd:66: 33:34:1a:87:02:9a:7a:f1:a7:f0:83:5f:16:31:f5: 3e:c9:8a:3f:96:59:8d:81:49:8b:eb:ac:22:db:94: a6:c8:b9:a8:6e:6a:a6:88:b6:a8:2c:4c:f6:ac:f0: 63:06:81:9a:7b:62:d7:7d:25:3b:53:f0:a0:15:7e: e6:07:8d:46:0e:4e:9b:b1:46:d6:89:28:3d:ee:ac: d6:4e:18:9a:18:53:de:ad:f0:36:ba:61:f7:28:b9: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:80:55:27:37:F9:A2:17:6E:9A:D9:E3:70:75:98:EC:60:37:50:A4 X509v3 Authority Key Identifier: keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e3:72:5d:eb:f8:46:35:dc:21:c0:0c:ae:b4:65:5e:08:d7: 9f:50:5b:23:2b:19:bf:5d:d9:63:c2:8c:37:24:f8:15:67:aa: 05:c7:76:48:4d:2d:7d:1c:85:ac:cd:f7:00:f6:18:33:02:d9: 1c:a9:46:46:21:ce:41:a7:c0:34:d1:12:31:da:6f:da:68:3f: 01:56:c2:92:ae:c8:60:53:88:af:cf:ce:1c:50:6d:4b:07:ab: de:70:72:04:e6:22:51:34:d7:9e:14:bb:d0:9f:df:56:bb:61: 6e:6a:1e:04:ee:e4:12:7f:58:32:87:ae:e3:f6:a2:64:6b:08: 7b:13:9d:d1:34:72:7a:1e:3e:7a:d2:af:72:ea:4e:bb:ec:67: d7:fd:d3:31:a0:65:4c:c2:fb:36:99:8a:59:bc:52:2a:1c:a1: 22:56:54:f9:24:89:ed:1e:43:65:02:f5:10:96:08:7f:e7:75: f0:e6:17:a7:c7:6c:8b:34:a9:4f:86:10:91:0d:c9:71:92:35: fa:51:e3:3d:19:96:1b:bd:e7:ee:4a:4c:c0:12:61:13:4d:74: 5a:dc:22:ee:38:8c:c3:ad:66:53:90:df:eb:d7:67:71:11:c0: 1b:30:c5:52:f5:d0:b7:78:89:d3:8e:1e:a9:ce:70:cf:0b:ff: ab:be:78:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX2uR8eLkQh/z3ynJ+TaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDRkNjk2YmFkYjEwOTRjYWExNWQ3YmU4NmMzOWE3MTJl MGVlMTIwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg3YzgwNTUyNzM3ZjlhMjE3NmU5YWQ5ZTM3MDc1OThlYzYwMzc1MGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ0zbjvE9JrZaeHgg//jRuaB590N uYfiCHLoeMxJ57/Fw9gYxIGZBVO3kCqE4r+d2cy0Jfp5nPWcJPAhiTe0XIIiq7wj T6dY9tcjOcdQUxX42hGrhXAtVC5Sj4oT5NXKEETQChm5KI8F7wZB28hgEwWp3xXW X8fDMs4QQsRWtsRQXvrCyct+2amUaxMg1UI6RGoMiXCbKaMniCRXBXV5mVofvWYz NBqHApp68afwg18WMfU+yYo/llmNgUmL66wi25SmyLmobmqmiLaoLEz2rPBjBoGa e2LXfSU7U/CgFX7mB41GDk6bsUbWiSg97qzWThiaGFPerfA2umH3KLlU3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyAVSc3+aIXbprZ43B1mOxgN1CkMB8GA1UdIwQY MBaAFCfU1pa62xCUyqFde+hsOacS4O4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQt ZThhNGVjZTkzYTM1LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQtZThhNGVjZTkzYTM1 LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnONyXev4 RjXcIcAMrrRlXgjXn1BbIysZv13ZY8KMNyT4FWeqBcd2SE0tfRyFrM33APYYMwLZ HKlGRiHOQafANNESMdpv2mg/AVbCkq7IYFOIr8/OHFBtSwer3nByBOYiUTTXnhS7 0J/fVrthbmoeBO7kEn9YMoeu4/aiZGsIexOd0TRyeh4+etKvcupOu+xn1/3TMaBl TML7NpmKWbxSKhyhIlZU+SSJ7R5DZQL1EJYIf+d18OYXp8dsizSpT4YQkQ3JcZI1 +lHjPRmWG73n7kpMwBJhE010Wtwi7jiMw61mU5Df69dncRHAGzDFUvXQt3iJ044e qc5wzwv/q754Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:52 2025 by rpki-client