This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft File: J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json) Hash identifier: DAl3PiCXqX5762oNJOA/wBqAs//iZLRX9sfdZ10VZKE= Subject key identifier: AF:9F:23:D2:E7:6B:AF:61:F0:10:D0:EC:76:B9:58:EF:84:B7:A6:04 Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b Certificate serial: 019AF3F7234E21FCAC775E7315EE6CC8EB64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft Manifest number: 130B Signing time: Sat 06 Dec 2025 14:00:51 +0000 Manifest this update: Sat 06 Dec 2025 14:00:51 +0000 Manifest next update: Sun 07 Dec 2025 14:00:51 +0000 Files and hashes: 1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: ouYH4lhSNG1aFgZKlNGBs3x3rMe9D59g7byreyvkfe8=) 2: hmlDPtU43ODpSbSwKm7b72QgfNg.roa (hash: yhUDh7b541QuzocbLv67rZZ0JwDcRkg1md4GPfBmUpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:23:4e:21:fc:ac:77:5e:73:15:ee:6c:c8:eb:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b Validity Not Before: Dec 6 14:00:51 2025 GMT Not After : Dec 7 14:00:51 2025 GMT Subject: CN=af9f23d2e76baf61f010d0ec76b958ef84b7a604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:51:aa:96:00:65:2b:c8:16:86:79:8f:95: 4f:00:8b:fa:4a:17:2f:75:4b:ec:45:10:5f:d7:e3: ec:a5:88:6f:89:2b:68:69:ca:9d:c5:bf:a6:67:c8: 9e:1d:dc:4f:12:a5:c5:97:e2:13:ad:6f:f9:0d:eb: 96:5d:32:49:2b:5e:52:f8:e2:eb:76:29:42:d4:01: 6a:f4:9d:32:8d:49:35:02:4e:a0:ff:4f:38:94:48: 2a:83:32:e6:9e:fc:ef:8e:35:62:49:6c:d6:f9:cb: 60:dc:de:fe:74:2b:49:04:c0:42:e5:a4:82:0e:93: 2f:58:ae:b2:01:47:57:e3:1b:0e:83:d3:2c:d6:7b: 71:b4:f4:14:be:6f:0d:8e:0b:cf:98:9f:f4:b7:14: 40:00:93:f2:82:2a:3a:c6:53:aa:b7:3d:f7:4e:45: fc:40:b3:9d:8f:5a:ca:88:c8:0d:8d:70:1c:74:67: 53:de:22:91:c5:17:f5:9f:b0:fa:99:61:d1:fc:6f: b9:65:b5:8a:20:eb:83:b1:b7:f2:59:75:93:6a:f4: 51:da:f1:8a:32:01:ba:7e:bf:60:d5:e5:7b:f8:bf: 4e:b4:90:75:3d:59:91:b7:b0:8f:e5:8f:c3:bb:ea: fc:ad:c3:84:53:f5:3a:45:7a:fc:86:c5:0a:9e:9c: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9F:23:D2:E7:6B:AF:61:F0:10:D0:EC:76:B9:58:EF:84:B7:A6:04 X509v3 Authority Key Identifier: keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a9:1d:c2:ea:07:7d:f7:61:73:f3:08:d3:e3:e4:00:ae:da: 9d:78:6e:c1:3e:2b:78:ed:6a:1e:69:f5:dd:51:8a:d2:65:dc: 9a:2a:2c:17:0e:61:39:5b:3e:70:68:49:5c:1b:b7:5b:5a:4c: 57:46:64:e6:74:ef:4e:f0:d2:b5:9c:70:20:ca:4e:5b:27:58: 35:c1:84:dc:5c:80:43:52:08:47:b5:31:c2:3a:e8:64:3f:6b: 17:9b:cb:08:fb:72:4b:b0:ee:0a:22:3e:67:a6:f3:34:83:aa: 6c:8b:8d:85:a5:08:dd:1b:29:12:7d:22:52:1e:85:9c:1d:35: 5a:af:a0:7e:87:26:83:28:e2:83:24:c1:96:67:a4:19:27:78: 47:ff:00:89:91:3a:f5:33:5e:3d:67:44:f8:fe:de:22:5c:68: ab:a8:d4:4b:28:f1:d4:74:7b:d8:42:5d:3c:9e:04:fb:2f:6c: 78:3f:ae:73:7c:09:b5:89:c3:1f:3a:82:f9:ff:ea:8e:3b:f2: e7:20:a0:9e:22:b5:d9:44:a0:75:26:60:d7:8d:ca:b4:cd:46: 25:bd:b0:59:ea:32:0b:24:ba:59:72:dc:3d:51:5a:43:5e:3e: c7:1e:b0:34:34:b5:1a:28:20:00:6c:1f:e9:a0:6e:bc:c3:9f: b6:11:ca:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yNOIfysd15zFe5syOtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODYxNzc0MGVjZDk1YjcwNGRhOTdhNWY5ZTUzYzAzMTE0 NDQyNmIwHhcNMjUxMjA2MTQwMDUxWhcNMjUxMjA3MTQwMDUxWjAzMTEwLwYDVQQD EyhhZjlmMjNkMmU3NmJhZjYxZjAxMGQwZWM3NmI5NThlZjg0YjdhNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28xRqpYAZSvIFoZ5j5VPAIv6Shcv dUvsRRBf1+PspYhviStoacqdxb+mZ8ieHdxPEqXFl+ITrW/5DeuWXTJJK15S+OLr dilC1AFq9J0yjUk1Ak6g/084lEgqgzLmnvzvjjViSWzW+ctg3N7+dCtJBMBC5aSC DpMvWK6yAUdX4xsOg9Ms1ntxtPQUvm8NjgvPmJ/0txRAAJPygio6xlOqtz33TkX8 QLOdj1rKiMgNjXAcdGdT3iKRxRf1n7D6mWHR/G+5ZbWKIOuDsbfyWXWTavRR2vGK MgG6fr9g1eV7+L9OtJB1PVmRt7CP5Y/Du+r8rcOEU/U6RXr8hsUKnpzNwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+fI9Lna69h8BDQ7Ha5WO+Et6YEMB8GA1UdIwQY MBaAFCeGF3QOzZW3BNqXpfnlPAMRREJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNzhhYjQtMzQ5MC00MDBiLTkwMTkt OWVkZDAxZDA3MjNjLzEvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNzhhYjQtMzQ5MC00MDBiLTkwMTktOWVkZDAxZDA3MjNj LzEvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlakdwuoH ffdhc/MI0+PkAK7anXhuwT4reO1qHmn13VGK0mXcmiosFw5hOVs+cGhJXBu3W1pM V0Zk5nTvTvDStZxwIMpOWydYNcGE3FyAQ1IIR7UxwjroZD9rF5vLCPtyS7DuCiI+ Z6bzNIOqbIuNhaUI3RspEn0iUh6FnB01Wq+gfocmgyjigyTBlmekGSd4R/8AiZE6 9TNePWdE+P7eIlxoq6jUSyjx1HR72EJdPJ4E+y9seD+uc3wJtYnDHzqC+f/qjjvy 5yCgniK12USgdSZg143KtM1GJb2wWeoyCyS6WXLcPVFaQ14+xx6wNDS1GiggAGwf 6aBuvMOfthHK0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:32 2025 by rpki-client