This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json) Hash identifier: SKWBXXD3igqL5OXqOboeUM0jNxJMjk0w2M8HZnQkLH0= Subject key identifier: 42:B8:F9:D2:31:AD:98:EE:06:D6:47:98:03:A6:AE:C0:78:66:FC:2F Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57 Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57 Certificate serial: 019AF5409957A05C04BC83F1C06E055600A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 20:00:42 +0000 Manifest this update: Sat 06 Dec 2025 20:00:42 +0000 Manifest next update: Sun 07 Dec 2025 20:00:42 +0000 Files and hashes: 1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: +V+9SVqiaOz+i4HPZg6fVlvXmolViLPdihIz/31gc5Q=) 2: c8_yE52FicqJDyLTZs83EXz0uyw.roa (hash: dhlDGU7iUlzSklC2rupr+JKl7gpxZEkuve5PU6eqNIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:99:57:a0:5c:04:bc:83:f1:c0:6e:05:56:00:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57 Validity Not Before: Dec 6 20:00:42 2025 GMT Not After : Dec 7 20:00:42 2025 GMT Subject: CN=42b8f9d231ad98ee06d6479803a6aec07866fc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:cd:3a:e8:ac:14:cb:e2:e9:08:eb:69:96: fd:2e:f5:0d:f3:f5:27:64:66:72:57:90:d4:97:67: 33:06:81:c0:66:2e:2a:49:cd:27:f7:05:d1:3b:68: 79:65:d1:d5:0c:0a:64:bc:29:92:a2:38:a8:f8:c2: 1b:b2:d7:3a:3b:f0:a2:f7:c7:99:bf:88:2e:a0:93: 61:e5:33:89:e1:90:3c:fa:25:f4:6f:ff:f6:1b:2c: a3:db:70:2e:a7:d4:cf:95:5c:a3:b4:29:c8:ed:6e: a8:7c:cd:61:ef:d7:7d:eb:71:40:18:62:9c:67:6d: fb:7c:cb:86:8e:be:a7:c3:6a:db:56:02:11:b4:48: 71:1b:a9:c6:63:a1:83:ce:4f:e4:fc:c7:d8:a4:2d: a9:e0:04:26:c1:4e:cf:0f:a5:1c:e5:4b:71:4e:70: 24:e9:58:9b:24:c6:d9:23:9a:1c:ed:e9:79:d4:50: e7:09:f4:17:b3:0f:d6:6f:7b:fd:15:df:7e:c6:11: 75:44:9e:b0:47:60:71:4c:a4:03:98:c9:84:ee:00: a2:50:40:7e:95:d3:c2:1b:1c:c6:46:df:72:26:50: 7c:eb:2f:96:2e:9b:c1:48:fb:b5:31:26:96:80:11: f7:be:b3:da:e4:f1:11:a0:72:75:cf:73:6c:f9:dc: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B8:F9:D2:31:AD:98:EE:06:D6:47:98:03:A6:AE:C0:78:66:FC:2F X509v3 Authority Key Identifier: keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:18:6b:1d:dd:64:50:a8:e8:9e:a0:76:3f:04:87:ee:a3:e9: d5:53:ce:d0:7a:47:1d:8d:3b:e7:31:f5:7f:c8:ea:96:81:db: 6b:c6:86:ad:cd:22:89:33:3f:25:2a:6d:9a:df:35:b2:95:66: 28:4d:17:49:38:d7:6e:22:94:ec:6f:aa:06:07:bc:98:4b:ea: 11:92:e4:bc:5a:fa:0c:e8:1f:c5:69:4e:d6:6a:17:07:a5:f7: 4a:6f:25:f9:19:d2:bb:fa:9b:4b:3b:98:ef:37:89:8e:6c:66: bc:de:75:d6:8e:03:48:99:b1:15:a6:7c:db:b5:fd:aa:59:aa: 24:f0:01:38:43:98:29:35:c9:56:81:08:d9:5c:04:48:36:5c: e8:70:e8:e2:3b:ba:d1:86:72:be:2d:b6:ad:d3:7e:76:c1:da: 47:23:9c:0d:c6:c0:21:c9:80:00:dd:c4:5a:8c:5e:df:02:38: fb:f7:aa:8f:4d:4c:b9:05:81:69:cb:26:8f:f1:61:d4:8c:cd: c1:e8:ec:3d:39:f2:f3:c9:02:11:b4:6e:36:2d:11:d3:c6:fe: 7a:bc:53:93:27:de:72:b8:d1:6e:27:06:e8:8d:cb:b0:04:a9: c0:bc:f1:81:5d:f2:8a:c0:a8:c6:bf:0d:64:f0:06:e3:10:75: 9e:cd:8d:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJlXoFwEvIPxwG4FVgChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YmIzMmFhOGM5ZjhkMDVjNTE3YmUyYWQ2NjUyZjY2NTUw YThkNTcwHhcNMjUxMjA2MjAwMDQyWhcNMjUxMjA3MjAwMDQyWjAzMTEwLwYDVQQD Eyg0MmI4ZjlkMjMxYWQ5OGVlMDZkNjQ3OTgwM2E2YWVjMDc4NjZmYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs/NOuisFMvi6QjraZb9LvUN8/Un ZGZyV5DUl2czBoHAZi4qSc0n9wXRO2h5ZdHVDApkvCmSojio+MIbstc6O/Ci98eZ v4guoJNh5TOJ4ZA8+iX0b//2Gyyj23Aup9TPlVyjtCnI7W6ofM1h79d963FAGGKc Z237fMuGjr6nw2rbVgIRtEhxG6nGY6GDzk/k/MfYpC2p4AQmwU7PD6Uc5UtxTnAk 6VibJMbZI5oc7el51FDnCfQXsw/Wb3v9Fd9+xhF1RJ6wR2BxTKQDmMmE7gCiUEB+ ldPCGxzGRt9yJlB86y+WLpvBSPu1MSaWgBH3vrPa5PERoHJ1z3Ns+dxwywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEK4+dIxrZjuBtZHmAOmrsB4ZvwvMB8GA1UdIwQY MBaAFCe7MqqMn40FxRe+KtZlL2ZVCo1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUt NDg0MjIxYTFmMjg1LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUtNDg0MjIxYTFmMjg1 LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORhrHd1k UKjonqB2PwSH7qPp1VPO0HpHHY075zH1f8jqloHba8aGrc0iiTM/JSptmt81spVm KE0XSTjXbiKU7G+qBge8mEvqEZLkvFr6DOgfxWlO1moXB6X3Sm8l+RnSu/qbSzuY 7zeJjmxmvN511o4DSJmxFaZ827X9qlmqJPABOEOYKTXJVoEI2VwESDZc6HDo4ju6 0YZyvi22rdN+dsHaRyOcDcbAIcmAAN3EWoxe3wI4+/eqj01MuQWBacsmj/Fh1IzN wejsPTny88kCEbRuNi0R08b+erxTkyfecrjRbicG6I3LsASpwLzxgV3yisCoxr8N ZPAG4xB1ns2NfA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:59 2025 by rpki-client