This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft File: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft (raw, json) Hash identifier: kwWL2zPJ2GIN5osc0S6ggMlQJmI+MQPzPGcgiVEiIt0= Subject key identifier: B0:7F:F9:CB:04:79:2C:35:0B:93:55:C1:20:CD:9C:FD:F7:F5:36:7F Authority key identifier: 27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF Certificate issuer: /CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff Certificate serial: 019B1A5FAC6D9141A4D505AFF72E93D3173F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft Manifest number: 05D8 Signing time: Sun 14 Dec 2025 01:00:36 +0000 Manifest this update: Sun 14 Dec 2025 01:00:36 +0000 Manifest next update: Mon 15 Dec 2025 01:00:36 +0000 Files and hashes: 1: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl (hash: hWeV8MbQrkSvmBnGCzBEY2dVbbjhvjRF0t/azYh36c4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:ac:6d:91:41:a4:d5:05:af:f7:2e:93:d3:17:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff Validity Not Before: Dec 14 01:00:36 2025 GMT Not After : Dec 15 01:00:36 2025 GMT Subject: CN=b07ff9cb04792c350b9355c120cd9cfdf7f5367f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:29:1b:76:e3:32:ad:b6:57:87:b7:f3:a5: db:63:15:e6:71:cd:63:e8:e3:39:23:27:40:5b:9b: 7e:b6:42:62:54:e4:a8:ff:f4:bb:22:60:e6:82:f4: a8:7b:e0:6e:b4:ee:72:b1:91:7a:44:b7:56:97:41: 80:09:69:02:8f:d8:e7:37:e8:29:b6:c5:02:64:c9: ff:96:23:ad:73:0f:73:3b:4c:54:9a:ca:ff:51:60: 07:8d:33:c1:72:80:92:91:20:1e:b3:87:9d:f1:d4: a3:64:89:24:2c:ee:f8:8d:3b:69:6c:64:bb:37:a3: cf:4a:dc:b4:53:11:02:2f:6f:00:aa:5f:4c:bd:6c: 2a:d7:0a:8f:2e:72:80:78:07:f3:f0:67:a0:28:f1: 35:41:ba:79:14:6a:56:00:5a:e4:d2:5c:11:f9:4d: 63:5c:b3:81:11:f4:c9:a7:36:43:e1:48:0f:b1:08: 4e:17:a9:b7:e3:52:33:d6:9d:c4:0c:e8:1e:90:02: ea:a8:e2:2f:81:c9:2e:43:2e:ff:23:1a:f4:07:41: bb:03:09:91:68:76:13:15:95:f3:4e:03:97:fc:c7: 8e:47:26:3e:60:79:54:2d:eb:e9:67:96:a8:67:84: e8:fb:43:5a:ac:55:53:9e:63:4a:1e:a3:07:0b:6f: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7F:F9:CB:04:79:2C:35:0B:93:55:C1:20:CD:9C:FD:F7:F5:36:7F X509v3 Authority Key Identifier: keyid:27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9c:5c:05:d8:a5:b0:fa:85:d9:7f:7d:af:9e:f1:44:c9:e1: 0a:14:1c:ed:d1:4d:a9:82:23:79:56:88:f8:3c:99:5a:77:0e: 2e:c6:2c:f8:1e:4f:6d:06:94:32:27:6f:db:f9:b2:1c:8c:71: c2:1e:9d:83:c1:68:57:fb:3e:db:a1:8d:df:f0:5d:89:da:18: e7:19:c7:a8:df:37:79:de:b4:5c:14:37:34:43:8c:86:51:cc: 15:95:e2:80:08:3c:5b:91:75:37:8c:d6:a4:29:f1:08:e1:5d: af:62:ef:4c:04:d4:e0:54:5e:8e:48:db:60:1a:41:48:63:e0: cc:e4:a5:e1:94:bc:9a:da:a3:9d:c2:94:78:b5:29:f1:b5:28: 98:d1:98:bb:c9:20:68:7e:89:4a:96:d5:6a:54:38:11:fe:c0: 6e:2f:2e:0b:0a:79:57:af:1e:00:0d:cf:24:b4:c4:67:b5:f6: 47:6f:28:a2:05:77:f4:bc:37:a7:c5:64:2e:fc:6b:f8:56:cb: 0d:99:c5:51:5d:46:74:bf:14:1b:a4:2a:23:f3:d5:60:86:5f: 20:9d:1a:b6:f1:94:ba:ec:cd:5f:7a:d1:f2:97:98:71:89:ec: 21:61:4e:8a:6e:ac:d5:be:7a:93:3a:69:f2:5b:b4:75:21:31: 80:55:8e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX6xtkUGk1QWv9y6T0xc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZWE2MmY2ZjIzMTljYWQyMmQzZjk0YmUzYWZiMmE0NTY3 ODA1ZmYwHhcNMjUxMjE0MDEwMDM2WhcNMjUxMjE1MDEwMDM2WjAzMTEwLwYDVQQD EyhiMDdmZjljYjA0NzkyYzM1MGI5MzU1YzEyMGNkOWNmZGY3ZjUzNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsgpG3bjMq22V4e386XbYxXmcc1j 6OM5IydAW5t+tkJiVOSo//S7ImDmgvSoe+ButO5ysZF6RLdWl0GACWkCj9jnN+gp tsUCZMn/liOtcw9zO0xUmsr/UWAHjTPBcoCSkSAes4ed8dSjZIkkLO74jTtpbGS7 N6PPSty0UxECL28Aql9MvWwq1wqPLnKAeAfz8GegKPE1Qbp5FGpWAFrk0lwR+U1j XLOBEfTJpzZD4UgPsQhOF6m341Iz1p3EDOgekALqqOIvgckuQy7/Ixr0B0G7AwmR aHYTFZXzTgOX/MeORyY+YHlULevpZ5aoZ4To+0NarFVTnmNKHqMHC283bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB/+csEeSw1C5NVwSDNnP339TZ/MB8GA1UdIwQY MBaAFCfqYvbyMZytItP5S+OvsqRWeAX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDBmNzQtYWYwMi00MDRjLTg0MWYt ZjcxMzc2NGY5MDNkLzEvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDBmNzQtYWYwMi00MDRjLTg0MWYtZjcxMzc2NGY5MDNk LzEvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApxcBdil sPqF2X99r57xRMnhChQc7dFNqYIjeVaI+DyZWncOLsYs+B5PbQaUMidv2/myHIxx wh6dg8FoV/s+26GN3/BdidoY5xnHqN83ed60XBQ3NEOMhlHMFZXigAg8W5F1N4zW pCnxCOFdr2LvTATU4FRejkjbYBpBSGPgzOSl4ZS8mtqjncKUeLUp8bUomNGYu8kg aH6JSpbValQ4Ef7Abi8uCwp5V68eAA3PJLTEZ7X2R28oogV39Lw3p8VkLvxr+FbL DZnFUV1GdL8UG6QqI/PVYIZfIJ0atvGUuuzNX3rR8peYcYnsIWFOim6s1b56kzpp 8lu0dSExgFWOKg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:20 2025 by rpki-client