This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json) Hash identifier: 55oxNaXE1+Co6yviPjwXER3Ydg0m3uuQ8qufX8lEO4I= Subject key identifier: CA:5D:0F:BE:6B:AC:D2:C6:C7:C3:57:D8:00:E1:91:B5:67:0C:C5:C9 Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a Certificate serial: 019AF3526B412889C56FBB6CEEF64EAB65C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 11:00:56 +0000 Manifest this update: Sat 06 Dec 2025 11:00:56 +0000 Manifest next update: Sun 07 Dec 2025 11:00:56 +0000 Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: 64AxUnwNJP2nJ73GPle/5YZDj9L6Gw9wL4S6guj5ylE=) 2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:6b:41:28:89:c5:6f:bb:6c:ee:f6:4e:ab:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a Validity Not Before: Dec 6 11:00:56 2025 GMT Not After : Dec 7 11:00:56 2025 GMT Subject: CN=ca5d0fbe6bacd2c6c7c357d800e191b5670cc5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:62:fe:a0:00:03:83:6f:4a:08:6b:c0:41: de:2a:0c:54:a6:f4:aa:63:d8:b7:2f:86:78:4d:59: ca:49:af:85:10:4c:ff:d6:f3:3f:34:69:e7:90:83: 0f:f0:62:94:c8:12:70:ff:e7:5c:72:84:2b:1c:fa: 90:e5:29:7f:46:c0:fb:c9:d3:a8:a9:b8:2c:0d:73: 98:a1:31:ef:12:f0:34:af:a1:15:b7:27:bc:f2:fb: 5f:07:7b:43:bc:e3:ed:cf:e0:35:06:ec:73:9c:93: ff:c3:1d:a2:42:32:a7:85:45:df:85:0d:b2:ca:1b: ee:0b:61:b8:93:1c:82:c7:01:97:53:70:cb:01:d8: 7d:85:d4:88:16:e9:41:71:be:f1:23:41:65:7b:af: 15:05:c0:9d:b5:2c:f3:6b:f8:f2:fe:b8:13:40:09: 01:a2:dd:52:85:d9:02:54:31:be:cf:0d:10:d2:18: 6b:1c:a5:40:c2:48:06:f7:22:21:43:88:d1:99:1f: 2e:1c:83:1b:03:6b:a3:1c:30:55:ab:11:c2:e4:dc: c1:63:41:fc:a4:c3:cd:9f:7f:3b:0b:d9:d7:47:b8: 29:2e:83:2e:0b:9a:e3:47:89:ce:65:5d:35:ad:32: 8f:f1:1d:ee:17:72:ae:10:1a:88:4c:28:60:4b:7a: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5D:0F:BE:6B:AC:D2:C6:C7:C3:57:D8:00:E1:91:B5:67:0C:C5:C9 X509v3 Authority Key Identifier: keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8d:84:ea:98:ae:33:be:4d:ae:d0:a9:0f:10:8c:35:ad:76: 7b:13:33:72:92:c7:2d:d2:e9:d6:ed:42:87:d2:8a:3d:51:43: 32:62:1b:04:c7:60:79:4c:70:07:9a:ef:ca:55:0a:99:d9:61: b3:13:43:6f:75:2a:db:9e:37:6e:42:3e:15:b9:dd:d5:be:6e: 7c:c2:08:9a:5b:f3:e0:c0:f7:f9:aa:1f:d2:b0:41:e0:11:55: 08:65:21:a3:ab:02:a8:13:87:79:fb:6f:a5:28:92:5e:6d:45: 08:8f:9c:f8:4d:07:6d:9f:19:b5:30:9f:a4:c2:11:72:15:80: 7c:54:c7:71:52:54:d0:fe:a4:83:08:ec:09:02:d4:99:44:bb: 0a:ba:27:67:54:58:be:91:3c:fb:00:27:49:23:9f:58:2d:ac: 17:c7:2d:1a:0b:f5:b9:17:a4:6e:5f:c1:b5:0f:d4:0d:5f:ea: 9a:89:27:75:18:2c:3c:61:e5:59:b3:84:6f:82:de:0c:05:63: d9:c7:79:ec:fe:38:b9:25:1b:1f:8d:30:99:d7:dd:5c:b6:68: e0:3a:fe:64:98:17:25:8a:89:fe:e8:a4:fe:7d:b4:79:de:25: 1c:63:7d:a9:35:56:d2:2a:ef:86:91:40:09:f8:21:f2:af:9c: 2e:b4:9b:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmtBKInFb7ts7vZOq2XAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODkwMWMwNjFhMzU1YTNmZGFhY2UwYzgwYjk2N2FkMWNk MzcxN2EwHhcNMjUxMjA2MTEwMDU2WhcNMjUxMjA3MTEwMDU2WjAzMTEwLwYDVQQD EyhjYTVkMGZiZTZiYWNkMmM2YzdjMzU3ZDgwMGUxOTFiNTY3MGNjNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiNi/qAAA4NvSghrwEHeKgxUpvSq Y9i3L4Z4TVnKSa+FEEz/1vM/NGnnkIMP8GKUyBJw/+dccoQrHPqQ5Sl/RsD7ydOo qbgsDXOYoTHvEvA0r6EVtye88vtfB3tDvOPtz+A1BuxznJP/wx2iQjKnhUXfhQ2y yhvuC2G4kxyCxwGXU3DLAdh9hdSIFulBcb7xI0Fle68VBcCdtSzza/jy/rgTQAkB ot1ShdkCVDG+zw0Q0hhrHKVAwkgG9yIhQ4jRmR8uHIMbA2ujHDBVqxHC5NzBY0H8 pMPNn387C9nXR7gpLoMuC5rjR4nOZV01rTKP8R3uF3KuEBqITChgS3qgewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpdD75rrNLGx8NX2ADhkbVnDMXJMB8GA1UdIwQY MBaAFCeJAcBho1Wj/arODIC5Z60c03F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQt OWM3YTdiY2FhZjM2LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQtOWM3YTdiY2FhZjM2 LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW42E6piu M75NrtCpDxCMNa12exMzcpLHLdLp1u1Ch9KKPVFDMmIbBMdgeUxwB5rvylUKmdlh sxNDb3Uq2543bkI+Fbnd1b5ufMIImlvz4MD3+aof0rBB4BFVCGUho6sCqBOHeftv pSiSXm1FCI+c+E0HbZ8ZtTCfpMIRchWAfFTHcVJU0P6kgwjsCQLUmUS7CronZ1RY vpE8+wAnSSOfWC2sF8ctGgv1uRekbl/BtQ/UDV/qmokndRgsPGHlWbOEb4LeDAVj 2cd57P44uSUbH40wmdfdXLZo4Dr+ZJgXJYqJ/uik/n20ed4lHGN9qTVW0irvhpFA Cfgh8q+cLrSbfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:46 2025 by rpki-client