This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json) Hash identifier: mWsnyPtjPZo/9ftfK3K6jnBt/txaLiWI1FbAJWlGQiw= Subject key identifier: 49:76:A5:E9:AA:B2:C6:CE:38:5D:16:FB:A1:96:27:15:33:91:FF:44 Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d Certificate serial: 019AF208B289C01DBB9F4F7D739B5951D3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: 4scng6Oa85IWDsbttqfN6AgzU2DHeLT1MMTftgux5Gc=) 2: hTYp4tVFk2Iv0MXe_TkiKDxhHf0.roa (hash: 6GO6BRanOpSP6VfdzTHxANKln0jgA0SAFTnzf0Z3Hfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b2:89:c0:1d:bb:9f:4f:7d:73:9b:59:51:d3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=4976a5e9aab2c6ce385d16fba19627153391ff44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:40:55:20:5a:6f:e6:2f:43:d5:35:b7:a3: d6:c9:90:d0:63:65:c6:b7:e4:5f:26:a1:17:f7:f9: 0e:54:9c:f6:98:21:35:ba:14:b2:e5:06:02:8e:66: a2:b2:2f:d1:12:2c:a9:c3:25:63:57:a4:46:c4:cc: d2:0a:cd:f4:fa:52:37:fe:7e:0f:1c:b6:1b:bf:62: 2a:eb:f5:6d:12:e7:c1:78:2b:0c:9a:66:b7:23:57: 04:b5:29:79:ca:f1:82:4e:ae:c1:06:88:75:d3:11: f8:79:bf:93:68:18:b6:c5:65:3a:bf:30:1d:29:09: 1c:dd:dc:7a:a7:94:37:6e:b6:3e:9c:79:f7:53:8d: 88:5e:f0:bf:89:22:99:72:eb:de:3d:05:a1:84:83: ec:78:23:10:c4:ec:ec:81:f5:2e:a1:ce:78:19:c6: 09:9c:de:c5:41:8f:98:56:40:e6:b2:5b:27:b5:32: a2:e8:ed:60:83:2f:84:33:1c:9c:87:ee:44:cd:6d: c2:bf:68:40:00:7c:b4:bb:7f:64:27:e2:f5:57:55: 77:08:bc:16:dd:f3:a2:4c:af:9c:d0:9b:f9:d6:46: c1:5a:f5:51:db:ea:42:76:3b:ea:cb:b8:99:1b:c6: d8:53:a7:eb:14:b3:1e:d8:aa:2e:29:61:ca:49:77: dd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:76:A5:E9:AA:B2:C6:CE:38:5D:16:FB:A1:96:27:15:33:91:FF:44 X509v3 Authority Key Identifier: keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2b:05:30:a4:9d:82:4f:d9:ab:2f:c2:eb:c7:2a:c2:73:1a: e7:3c:c0:49:34:a2:be:26:97:95:c0:f9:07:73:92:eb:f9:dc: ce:fe:07:8f:63:f9:7a:25:47:96:77:66:a9:44:24:09:c4:df: bc:59:fe:a3:cb:68:4f:cf:36:a1:44:ed:ed:7b:06:1a:30:5e: 21:56:2a:18:bb:03:08:96:ba:cf:a2:e3:b2:20:e2:56:18:ad: ac:1b:2d:2e:ed:4a:8d:40:df:ce:6f:9b:bb:17:8a:a1:63:0a: 21:d2:e3:76:82:a5:fe:18:9c:c2:02:c3:6f:0a:7c:da:c7:b3: 51:65:29:51:ad:d3:d7:b7:0a:39:2b:ed:22:79:d2:9f:71:c0: d9:fc:c7:45:53:18:c8:fd:34:6c:1b:38:7e:5f:3f:a1:dc:c5: e2:c3:ce:83:2d:36:6b:d8:ba:0c:bf:95:c2:4a:fd:2c:01:81: c2:20:82:83:69:51:c9:6b:7a:80:9a:44:27:10:ea:24:11:93: cd:59:06:3e:d5:0f:34:97:84:0c:27:65:ed:82:96:c1:ef:d5: b2:e4:5e:af:38:d9:0c:b3:da:9e:fb:6f:7c:51:3c:45:3a:c2: 19:d5:3a:9a:88:7d:bc:3f:cc:83:26:60:83:cf:31:ae:e9:0f: 96:20:88:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLKJwB27n099c5tZUdOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTYyYTMzZmQyMzQ4NzgxYWMxMjNhMTI3MjJhMDg2ZWU4 ZmJhN2QwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg0OTc2YTVlOWFhYjJjNmNlMzg1ZDE2ZmJhMTk2MjcxNTMzOTFmZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf1AVSBab+YvQ9U1t6PWyZDQY2XG t+RfJqEX9/kOVJz2mCE1uhSy5QYCjmaisi/REiypwyVjV6RGxMzSCs30+lI3/n4P HLYbv2Iq6/VtEufBeCsMmma3I1cEtSl5yvGCTq7BBoh10xH4eb+TaBi2xWU6vzAd KQkc3dx6p5Q3brY+nHn3U42IXvC/iSKZcuvePQWhhIPseCMQxOzsgfUuoc54GcYJ nN7FQY+YVkDmslsntTKi6O1ggy+EMxych+5EzW3Cv2hAAHy0u39kJ+L1V1V3CLwW 3fOiTK+c0Jv51kbBWvVR2+pCdjvqy7iZG8bYU6frFLMe2KouKWHKSXfdNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl2pemqssbOOF0W+6GWJxUzkf9EMB8GA1UdIwQY MBaAFCeWKjP9I0h4GsEjoScioIbuj7p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQt YmI2YmZmZTY2ZmYzLzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQtYmI2YmZmZTY2ZmYz LzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiisFMKSd gk/Zqy/C68cqwnMa5zzASTSiviaXlcD5B3OS6/nczv4Hj2P5eiVHlndmqUQkCcTf vFn+o8toT882oUTt7XsGGjBeIVYqGLsDCJa6z6LjsiDiVhitrBstLu1KjUDfzm+b uxeKoWMKIdLjdoKl/hicwgLDbwp82sezUWUpUa3T17cKOSvtInnSn3HA2fzHRVMY yP00bBs4fl8/odzF4sPOgy02a9i6DL+Vwkr9LAGBwiCCg2lRyWt6gJpEJxDqJBGT zVkGPtUPNJeEDCdl7YKWwe/VsuRerzjZDLPanvtvfFE8RTrCGdU6moh9vD/MgyZg g88xrukPliCIiA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:25 2025 by rpki-client