This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json) Hash identifier: gHRBXUqNkAZuWisI10BaazjiqrkM+i0VZbcLAYKVZ7w= Subject key identifier: CD:28:BF:F5:87:16:A3:A7:97:2C:15:8F:F1:8D:BD:6E:EF:4E:91:83 Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc Certificate serial: 019AF35281BE2D1C0F74D3319AEF53E4E9B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:01:01 +0000 Manifest this update: Sat 06 Dec 2025 11:01:01 +0000 Manifest next update: Sun 07 Dec 2025 11:01:01 +0000 Files and hashes: 1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=) 2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: cvTpB3SopRv/iC0ZG/Q4qq98Kr2F0Hki7C91xs4Z7rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:81:be:2d:1c:0f:74:d3:31:9a:ef:53:e4:e9:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc Validity Not Before: Dec 6 11:01:01 2025 GMT Not After : Dec 7 11:01:01 2025 GMT Subject: CN=cd28bff58716a3a7972c158ff18dbd6eef4e9183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:e5:fb:e2:aa:8b:a3:88:37:1b:b5:6d:00: 5d:18:39:66:88:33:80:8d:ba:ec:ce:5d:73:a9:fc: 92:2d:d7:bd:e2:fa:c0:48:ab:0b:90:ea:9e:c0:44: a5:54:37:b0:c2:31:d0:81:4d:e7:13:d6:db:7a:f8: fa:c3:08:95:7a:77:05:80:21:0b:60:4a:57:e9:f2: 98:94:f8:40:e2:e5:cd:60:f7:be:7c:09:f7:84:74: 29:c5:3f:be:21:7b:b0:93:ad:5a:c1:0e:72:7e:42: 82:9d:59:a6:fe:10:b3:fd:39:4d:2b:4f:91:53:9b: f8:6a:c1:db:3a:67:c7:b5:eb:d1:29:8c:01:42:06: 19:22:39:ee:a3:85:52:bd:d4:31:61:86:48:19:21: 73:bf:e8:f0:b4:36:6b:57:37:6f:29:b0:72:97:83: b5:c5:b5:55:af:54:19:77:a8:40:64:b6:da:64:ca: fb:55:f1:0e:f5:53:f4:7d:83:87:24:17:b1:85:d2: 0e:2f:e0:d8:82:b3:86:cf:1f:86:8b:1b:b5:01:68: 31:e7:d2:c3:9a:82:9d:bb:3e:4a:d3:29:da:5e:04: 52:a6:e2:0f:b4:ed:fe:77:e9:2e:76:ee:69:19:fb: 48:04:b0:42:f7:5c:6d:68:86:c7:f4:a7:2c:d7:7f: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:BF:F5:87:16:A3:A7:97:2C:15:8F:F1:8D:BD:6E:EF:4E:91:83 X509v3 Authority Key Identifier: keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f3:8e:ad:cd:73:5e:5c:26:36:77:d6:be:b8:da:cd:59:18: b8:e6:15:f4:e7:9d:68:5e:6e:d2:b4:5e:1d:0a:59:69:e7:d4: 76:3b:5c:4e:ca:fe:fc:5f:f3:2b:47:2b:d0:27:07:f6:a4:cc: f3:2a:ef:14:82:da:30:d8:ab:1a:09:da:18:53:23:e0:c4:48: 0c:45:65:78:69:a2:ef:7f:22:71:8e:3e:27:b8:78:6b:3a:00: 2f:1f:83:ee:c5:f4:3a:90:0a:99:5a:80:78:77:f8:db:a5:13: ba:78:a3:6c:27:41:6a:be:0a:24:43:f8:95:de:b2:2a:8d:7e: f4:0d:0e:13:50:5a:26:43:55:69:2f:5a:28:4e:35:0c:ca:6d: bc:05:8e:bf:c3:5c:90:92:9c:41:e4:7e:8f:b7:c5:32:b9:f1: 7d:8a:f3:ab:80:02:6a:dd:ef:36:56:77:69:86:7b:8c:d2:9a: 19:8c:6e:b4:c7:01:dd:a0:c7:b9:c3:e8:9c:6b:2e:ff:22:8d: bd:ca:fe:64:e3:cf:19:2e:2c:44:44:b6:b3:5f:3e:3b:20:de: af:0b:80:46:a0:e5:b0:66:e3:02:fa:57:49:25:ce:96:df:40: 62:20:bb:f4:5c:d3:4d:01:8f:53:d8:80:7b:5e:10:c1:19:26: 74:f8:32:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoG+LRwPdNMxmu9T5Om1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjEzMGI2ZjQ1ZjAwZjdjMWQxMzViNmM5M2IyMGU2OTA0 MTJjZmMwHhcNMjUxMjA2MTEwMTAxWhcNMjUxMjA3MTEwMTAxWjAzMTEwLwYDVQQD EyhjZDI4YmZmNTg3MTZhM2E3OTcyYzE1OGZmMThkYmQ2ZWVmNGU5MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdDl++Kqi6OINxu1bQBdGDlmiDOA jbrszl1zqfySLde94vrASKsLkOqewESlVDewwjHQgU3nE9bbevj6wwiVencFgCEL YEpX6fKYlPhA4uXNYPe+fAn3hHQpxT++IXuwk61awQ5yfkKCnVmm/hCz/TlNK0+R U5v4asHbOmfHtevRKYwBQgYZIjnuo4VSvdQxYYZIGSFzv+jwtDZrVzdvKbByl4O1 xbVVr1QZd6hAZLbaZMr7VfEO9VP0fYOHJBexhdIOL+DYgrOGzx+Gixu1AWgx59LD moKduz5K0ynaXgRSpuIPtO3+d+kudu5pGftIBLBC91xtaIbH9Kcs139NIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0ov/WHFqOnlywVj/GNvW7vTpGDMB8GA1UdIwQY MBaAFCfxMLb0XwD3wdE1tsk7IOaQQSz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQt MDdkYmQ5MDBjNGFkLzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQtMDdkYmQ5MDBjNGFk LzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPOOrc1z XlwmNnfWvrjazVkYuOYV9OedaF5u0rReHQpZaefUdjtcTsr+/F/zK0cr0CcH9qTM 8yrvFILaMNirGgnaGFMj4MRIDEVleGmi738icY4+J7h4azoALx+D7sX0OpAKmVqA eHf426UTunijbCdBar4KJEP4ld6yKo1+9A0OE1BaJkNVaS9aKE41DMptvAWOv8Nc kJKcQeR+j7fFMrnxfYrzq4ACat3vNlZ3aYZ7jNKaGYxutMcB3aDHucPonGsu/yKN vcr+ZOPPGS4sRES2s18+OyDerwuARqDlsGbjAvpXSSXOlt9AYiC79FzTTQGPU9iA e14QwRkmdPgyQA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:44 2025 by rpki-client