This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft File: J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json) Hash identifier: dj2Ymsm42dMpt8aYKXkaQMflnalkzc7nnAjERx0H7+A= Subject key identifier: 57:72:61:74:AC:42:98:66:E0:4F:98:72:A7:45:2D:41:6F:FC:51:BE Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4 Certificate issuer: /CN=27fdce9db6af9b8133a32617eef4e046444efdd4 Certificate serial: 019AF3F7261780D172667F8A438DEC55EEC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft Manifest number: 08D8 Signing time: Sat 06 Dec 2025 14:00:51 +0000 Manifest this update: Sat 06 Dec 2025 14:00:51 +0000 Manifest next update: Sun 07 Dec 2025 14:00:51 +0000 Files and hashes: 1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: TXuUItxURKDisiJA2NLjAS9luKVmHY6qmRvVn91ArH0=) 2: WQUjTS9p84oOcXA50chvpNniznQ.roa (hash: b9u2bPYyFl9JVGS2r/Wv4Q0+aj8rFnnmE/wBKVY/4HE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:26:17:80:d1:72:66:7f:8a:43:8d:ec:55:ee:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4 Validity Not Before: Dec 6 14:00:51 2025 GMT Not After : Dec 7 14:00:51 2025 GMT Subject: CN=57726174ac429866e04f9872a7452d416ffc51be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:c0:33:5a:95:65:d4:e7:77:36:97:3a:bf: 62:22:6b:b4:a0:72:62:2e:76:2e:59:2e:2a:53:52: e8:ca:6c:82:aa:3a:42:9f:f9:48:a3:04:2b:9f:fa: d0:02:14:0b:6d:3d:06:04:bf:1c:c1:45:fa:64:c5: 0f:8e:2a:f3:d3:4b:0c:7d:a9:d7:8b:94:0a:ab:a0: 00:9c:60:13:2d:ec:b4:83:fa:f5:b6:6e:78:c5:db: 94:d0:6c:de:ab:d5:ea:48:29:bc:d5:6e:91:a4:2a: 69:e2:0e:03:60:9a:3e:ba:88:28:81:19:1a:71:99: 4f:ee:da:e6:d5:a9:75:44:b4:7c:91:96:10:f3:bc: 67:84:d0:37:39:03:f7:c4:d0:77:00:0c:26:84:6d: 95:ff:3a:a3:2d:1f:65:0a:c2:e7:68:08:1b:23:ad: dd:ec:cb:50:06:df:b4:f6:77:be:3c:9c:73:34:26: 19:7a:f1:89:b5:ca:f2:40:9c:7f:f6:67:59:e6:7e: b5:83:be:a1:0c:e5:e1:41:42:9a:41:8b:c9:af:6d: f5:01:10:57:e0:77:cc:28:19:46:e8:af:8f:f8:a9: 41:d0:65:db:82:71:d3:42:98:01:a1:4a:fa:b5:3d: d9:56:39:02:45:00:cd:e0:5b:66:20:7c:1b:8c:3b: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:72:61:74:AC:42:98:66:E0:4F:98:72:A7:45:2D:41:6F:FC:51:BE X509v3 Authority Key Identifier: keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:fb:e2:07:5d:21:34:b6:30:4d:26:66:db:52:89:49:1b:74: 38:df:d4:01:41:50:ec:e2:d8:e5:35:ed:c4:1c:a1:9e:44:54: a4:9f:05:59:5a:c8:d0:e6:c1:8b:30:39:d2:cc:3b:a0:93:24: c8:67:89:a3:96:b3:6b:68:fa:fa:c1:a4:d1:20:c2:96:fa:78: bd:87:67:ce:ec:d5:1c:e1:db:94:a7:a2:f6:10:e8:06:9e:bd: 5c:79:09:cf:06:15:e5:b3:19:fc:61:b5:e1:f9:fd:a6:ed:29: f8:e3:db:35:41:9f:72:10:eb:08:c6:d2:9a:84:df:63:8f:07: f4:d1:47:e5:7d:5c:4d:25:da:99:28:25:c0:33:e1:e0:97:02: 21:8a:28:89:ea:77:cf:8f:93:c0:76:d2:5e:a9:06:f7:c7:2c: ea:81:62:04:7c:5d:78:9d:a9:52:0d:91:ea:f3:da:58:0e:8f: da:d0:13:ec:fc:1b:ca:20:6d:91:1c:f1:a9:72:f6:e9:c7:72: a2:ce:19:51:5d:c1:88:27:dc:6f:c7:f2:9b:70:a3:44:a5:c9: cf:5a:e5:44:91:d0:30:fa:ab:3f:63:24:cc:58:0e:fc:6f:4e: 98:2b:89:c1:27:05:92:c5:f0:87:d4:bd:95:73:e0:90:5b:2c: 7d:fa:ce:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yYXgNFyZn+KQ43sVe7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZmRjZTlkYjZhZjliODEzM2EzMjYxN2VlZjRlMDQ2NDQ0 ZWZkZDQwHhcNMjUxMjA2MTQwMDUxWhcNMjUxMjA3MTQwMDUxWjAzMTEwLwYDVQQD Eyg1NzcyNjE3NGFjNDI5ODY2ZTA0Zjk4NzJhNzQ1MmQ0MTZmZmM1MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiTAM1qVZdTndzaXOr9iImu0oHJi LnYuWS4qU1LoymyCqjpCn/lIowQrn/rQAhQLbT0GBL8cwUX6ZMUPjirz00sMfanX i5QKq6AAnGATLey0g/r1tm54xduU0Gzeq9XqSCm81W6RpCpp4g4DYJo+uogogRka cZlP7trm1al1RLR8kZYQ87xnhNA3OQP3xNB3AAwmhG2V/zqjLR9lCsLnaAgbI63d 7MtQBt+09ne+PJxzNCYZevGJtcryQJx/9mdZ5n61g76hDOXhQUKaQYvJr231ARBX 4HfMKBlG6K+P+KlB0GXbgnHTQpgBoUr6tT3ZVjkCRQDN4FtmIHwbjDt/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdyYXSsQphm4E+YcqdFLUFv/FG+MB8GA1UdIwQY MBaAFCf9zp22r5uBM6MmF+704EZETv3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl8zT25iYXZtNEV6b3lZWDd2VGdSa1JPX2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wNDMzZTMtYmQ2MS00ZDEzLTg0N2Et ZDkwYzYxNzdlNDAyLzEvSl8zT25iYXZtNEV6b3lZWDd2VGdSa1JPX2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wNDMzZTMtYmQ2MS00ZDEzLTg0N2EtZDkwYzYxNzdlNDAy LzEvSl8zT25iYXZtNEV6b3lZWDd2VGdSa1JPX2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fviB10h NLYwTSZm21KJSRt0ON/UAUFQ7OLY5TXtxByhnkRUpJ8FWVrI0ObBizA50sw7oJMk yGeJo5aza2j6+sGk0SDClvp4vYdnzuzVHOHblKei9hDoBp69XHkJzwYV5bMZ/GG1 4fn9pu0p+OPbNUGfchDrCMbSmoTfY48H9NFH5X1cTSXamSglwDPh4JcCIYooiep3 z4+TwHbSXqkG98cs6oFiBHxdeJ2pUg2R6vPaWA6P2tAT7PwbyiBtkRzxqXL26cdy os4ZUV3BiCfcb8fym3CjRKXJz1rlRJHQMPqrP2MkzFgO/G9OmCuJwScFksXwh9S9 lXPgkFssffrOrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:20 2025 by rpki-client