This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json) Hash identifier: 9q1IPvSdQAr34E2V1gOLQ5WfZF5HMsi/MGRybS9rbi8= Subject key identifier: E7:A0:AF:9F:5E:C3:58:1E:40:2F:76:21:66:D8:8B:83:B6:A0:64:43 Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0 Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0 Certificate serial: 019AF68A56975D1CD8C530284050B498D237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft Manifest number: 0A44 Signing time: Sun 07 Dec 2025 02:00:52 +0000 Manifest this update: Sun 07 Dec 2025 02:00:52 +0000 Manifest next update: Mon 08 Dec 2025 02:00:52 +0000 Files and hashes: 1: B0B4Y6WmKTSsGtgiy_GaSYzTEw4.roa (hash: fz9V9BUWuOk2Mh3Jcg5jFOYmVDkKnHhcxn1Jkrdsy98=) 2: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: jkGFP3l7dUyGgvNp07ZXosXnZ/H7Yl1VXtdU/+vHnAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:56:97:5d:1c:d8:c5:30:28:40:50:b4:98:d2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0 Validity Not Before: Dec 7 02:00:52 2025 GMT Not After : Dec 8 02:00:52 2025 GMT Subject: CN=e7a0af9f5ec3581e402f762166d88b83b6a06443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ce:bb:9e:d9:5a:16:88:f7:26:f5:ae:64:30: 85:96:45:2e:8d:14:d1:2a:66:66:9e:6f:22:26:01: a6:4b:7c:59:5d:16:e1:3c:92:2c:87:f1:f4:be:ee: 08:f4:c0:58:b0:a2:6a:0d:c6:e7:25:86:44:a0:a7: 43:10:b7:1f:f9:b1:b4:76:3d:17:0b:7b:f0:c4:b2: c7:0d:d0:84:29:3b:e2:4b:ec:25:a4:3e:f1:b9:a4: 2c:04:31:30:f4:20:5a:14:17:f1:ab:7b:55:e4:e2: 4c:ed:cd:41:b6:db:5a:6e:06:03:8f:db:48:c4:0f: cb:e6:b6:b3:0e:fe:d2:dd:7a:7f:13:5e:69:0a:8e: 67:28:1f:bd:09:f4:eb:17:66:10:3e:9f:6f:0e:ee: e4:07:88:05:7f:be:33:3d:70:39:1d:57:c8:9c:a9: 58:e2:30:76:88:1d:89:95:c8:53:ae:53:ad:ae:bc: 0f:91:58:b2:7a:34:c6:ff:d5:db:0d:ef:18:9f:de: 8a:3e:8d:46:1e:1c:51:55:64:10:72:c8:00:56:12: d8:0c:ba:5b:7d:4c:01:c3:c9:a5:a5:9c:a0:fb:25: e0:7b:14:9a:44:d4:32:70:d2:a3:a6:ed:34:27:07: c8:0f:db:0a:00:8a:78:ec:a6:5e:f7:32:92:29:4e: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:AF:9F:5E:C3:58:1E:40:2F:76:21:66:D8:8B:83:B6:A0:64:43 X509v3 Authority Key Identifier: keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:03:a6:4b:07:0e:37:2c:86:3b:4b:0c:ed:cf:d3:4d:34:0e: 92:2d:f8:82:e7:70:8f:16:5f:47:63:09:b2:c3:5f:c1:55:25: 17:cc:03:bd:d5:f2:10:fe:4b:54:81:07:f7:6d:34:76:bd:97: a2:0e:95:b6:8f:e0:e0:25:ea:e4:27:e3:d6:5e:2b:9e:bb:2b: 7d:0c:75:9e:b0:32:7f:e9:8b:1f:9a:61:d2:ac:00:b9:a0:a7: 6e:7d:1a:91:0c:17:75:41:4a:70:23:4b:bf:3e:1b:76:ca:af: 07:66:5c:13:cf:b2:56:9e:0d:8f:e5:0c:29:45:bd:2c:5c:95: dc:3c:22:d4:dc:f1:4d:78:75:ce:63:28:7a:cd:1d:db:31:87: e7:ce:d3:cd:b2:aa:53:45:2f:81:a6:79:d4:c6:30:d9:3d:96: 79:b3:c9:3a:71:e9:f5:94:79:92:e6:45:6f:05:32:16:81:9d: a0:d1:41:28:3e:e7:67:b5:d3:79:2e:d3:8a:dc:fa:e8:e3:4d: 36:7f:f1:ab:bd:90:96:5c:36:73:48:a8:44:40:15:0d:a2:6a: dc:7c:9f:aa:04:8c:22:d0:a1:39:ac:27:39:1f:8f:ea:a1:c4: d0:8a:c1:29:12:0d:fb:3e:11:94:3b:39:6b:72:68:3e:44:99: 61:29:a7:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ilaXXRzYxTAoQFC0mNI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OGY2MmYzYTVmODQ3MjI4NTJmYzcwZjA1MmNmMTNkZWEy Mzc0ZDAwHhcNMjUxMjA3MDIwMDUyWhcNMjUxMjA4MDIwMDUyWjAzMTEwLwYDVQQD EyhlN2EwYWY5ZjVlYzM1ODFlNDAyZjc2MjE2NmQ4OGI4M2I2YTA2NDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm867ntlaFoj3JvWuZDCFlkUujRTR KmZmnm8iJgGmS3xZXRbhPJIsh/H0vu4I9MBYsKJqDcbnJYZEoKdDELcf+bG0dj0X C3vwxLLHDdCEKTviS+wlpD7xuaQsBDEw9CBaFBfxq3tV5OJM7c1BtttabgYDj9tI xA/L5razDv7S3Xp/E15pCo5nKB+9CfTrF2YQPp9vDu7kB4gFf74zPXA5HVfInKlY 4jB2iB2JlchTrlOtrrwPkViyejTG/9XbDe8Yn96KPo1GHhxRVWQQcsgAVhLYDLpb fUwBw8mlpZyg+yXgexSaRNQycNKjpu00JwfID9sKAIp47KZe9zKSKU69VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOegr59ew1geQC92IWbYi4O2oGRDMB8GA1UdIwQY MBaAFCePYvOl+EcihS/HDwUs8T3qI3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3Njgt NTM1YmY5YjFlOGI3LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3NjgtNTM1YmY5YjFlOGI3 LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAOmSwcO NyyGO0sM7c/TTTQOki34gudwjxZfR2MJssNfwVUlF8wDvdXyEP5LVIEH9200dr2X og6Vto/g4CXq5Cfj1l4rnrsrfQx1nrAyf+mLH5ph0qwAuaCnbn0akQwXdUFKcCNL vz4bdsqvB2ZcE8+yVp4Nj+UMKUW9LFyV3Dwi1NzxTXh1zmMoes0d2zGH587TzbKq U0UvgaZ51MYw2T2WebPJOnHp9ZR5kuZFbwUyFoGdoNFBKD7nZ7XTeS7Titz66ONN Nn/xq72Qllw2c0ioREAVDaJq3HyfqgSMItChOawnOR+P6qHE0IrBKRIN+z4RlDs5 a3JoPkSZYSmn1w== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:49 2025 by rpki-client