This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json) Hash identifier: AueITq0TogK3QNcUk6AtXB/YL4g70hU2KvQV00ktEcM= Subject key identifier: 19:E0:8B:01:66:46:0E:73:DB:FF:16:58:C0:AB:AA:F7:D0:CF:4F:56 Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8 Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8 Certificate serial: 019AF208DA55B224FA06B494207F9A99ACEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft Manifest number: 01FB Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: 1uVppqSNypdViRSWjLj/Oau1dCsNl+UGMJrKkNeoR2s=) 2: PXQZ8Kqy_mx9lBo5_cDxC51se1U.roa (hash: 9tHWBrF2ZmcSWuE44cZk0kByYXScp8kTGOAiMALH64w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:da:55:b2:24:fa:06:b4:94:20:7f:9a:99:ac:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8 Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=19e08b0166460e73dbff1658c0abaaf7d0cf4f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:14:65:59:7b:7d:d1:c7:8f:e9:8f:16:49: 3f:62:81:82:85:1a:15:56:ad:04:94:59:75:83:0c: be:68:0e:6f:9e:73:89:e9:57:83:63:e0:55:ca:65: dc:6b:61:67:fb:b7:0b:f2:08:f1:ad:7b:8f:91:76: c0:38:ac:ff:74:cd:7d:9c:02:72:a4:3a:03:f9:eb: 01:d1:43:d5:8c:99:93:f1:e5:89:63:72:ca:87:92: 5f:b6:9a:6e:47:e5:f1:76:b7:23:69:73:00:de:90: 5c:42:68:a2:b0:03:c6:07:94:1a:6b:f7:ea:a3:a1: 5d:a1:04:83:14:a7:71:d1:eb:8f:11:a0:1a:d6:3c: a6:a2:a6:9d:4a:08:e2:f8:7a:2b:11:ac:02:6b:1d: c7:59:98:e5:ce:15:da:d5:12:0d:16:8f:91:dc:b1: 3e:49:4d:24:c0:be:8d:c4:8d:04:4b:dd:c7:4d:23: 42:b7:ef:b9:99:ae:28:7a:dc:ae:72:9b:8a:74:84: a5:5c:d6:70:1c:ce:71:68:ad:af:8a:2c:6e:9b:49: 1e:b2:ff:85:92:55:77:6b:56:8a:75:3e:f3:bd:0f: 7f:10:6a:2e:01:04:48:ed:50:5d:50:1c:47:0d:ab: ac:60:fb:34:ac:df:83:88:17:e2:21:fa:11:85:79: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E0:8B:01:66:46:0E:73:DB:FF:16:58:C0:AB:AA:F7:D0:CF:4F:56 X509v3 Authority Key Identifier: keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e5:ce:09:9b:74:02:0d:82:19:4b:3d:a1:27:fe:c7:3a:da: 2e:7f:a5:ff:e0:75:55:70:b7:b0:bd:da:b2:52:df:6c:32:4a: 2c:87:44:2a:c1:e9:df:b0:b0:24:fd:56:01:34:47:09:ac:6e: 07:ec:81:6a:f8:ac:2c:bf:1f:bf:b3:eb:7a:8b:4c:e4:d0:f5: 9c:2e:23:cd:43:f9:73:32:8b:53:c1:dd:71:a7:10:db:76:01: cb:e3:2c:10:b1:1a:d6:ab:fb:84:a2:91:f3:06:43:a2:90:bc: c2:86:c5:e9:0c:f4:54:44:29:d8:a5:3f:f3:75:d6:2b:c4:3e: 5c:41:25:da:6a:d5:b8:b5:f3:3a:d1:f8:e4:d0:c6:ee:e6:ef: d8:a6:14:27:28:23:1f:5d:71:09:b9:b4:55:68:76:f0:c5:3c: a4:3a:b7:36:94:24:14:db:11:b3:48:a8:3d:1b:4c:35:54:4c: 83:23:8f:9e:95:ee:86:4e:69:f2:24:ea:79:0e:85:92:97:84: 0c:8b:47:61:d7:f6:fb:01:e8:b7:ca:a1:28:89:58:1b:7e:40: fb:3d:dc:a5:2c:27:31:61:9d:59:aa:13:45:f7:c6:1f:ed:5f: 95:0b:9f:1c:41:44:09:a5:38:5c:37:ac:a5:86:be:d3:f0:0c: 58:0d:a8:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNpVsiT6BrSUIH+amazvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy OTUwZjgwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD EygxOWUwOGIwMTY2NDYwZTczZGJmZjE2NThjMGFiYWFmN2QwY2Y0ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruEUZVl7fdHHj+mPFkk/YoGChRoV Vq0ElFl1gwy+aA5vnnOJ6VeDY+BVymXca2Fn+7cL8gjxrXuPkXbAOKz/dM19nAJy pDoD+esB0UPVjJmT8eWJY3LKh5JftppuR+XxdrcjaXMA3pBcQmiisAPGB5Qaa/fq o6FdoQSDFKdx0euPEaAa1jymoqadSgji+HorEawCax3HWZjlzhXa1RINFo+R3LE+ SU0kwL6NxI0ES93HTSNCt++5ma4oetyucpuKdISlXNZwHM5xaK2viixum0kesv+F klV3a1aKdT7zvQ9/EGouAQRI7VBdUBxHDausYPs0rN+DiBfiIfoRhXmftQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBngiwFmRg5z2/8WWMCrqvfQz09WMB8GA1UdIwQY MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt MWQxMjI4MGJhMzIyLzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+XOCZt0 Ag2CGUs9oSf+xzraLn+l/+B1VXC3sL3aslLfbDJKLIdEKsHp37CwJP1WATRHCaxu B+yBavisLL8fv7PreotM5ND1nC4jzUP5czKLU8HdcacQ23YBy+MsELEa1qv7hKKR 8wZDopC8wobF6Qz0VEQp2KU/83XWK8Q+XEEl2mrVuLXzOtH45NDG7ubv2KYUJygj H11xCbm0VWh28MU8pDq3NpQkFNsRs0ioPRtMNVRMgyOPnpXuhk5p8iTqeQ6FkpeE DItHYdf2+wHot8qhKIlYG35A+z3cpSwnMWGdWaoTRffGH+1flQufHEFECaU4XDes pYa+0/AMWA2oNg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:24 2025 by rpki-client