This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json) Hash identifier: iL9VSqq0GkCHrfT4rBW+HHRVkKJIf9Gpk1dxTVvzvXg= Subject key identifier: DD:C8:26:72:B8:B7:3F:6E:3A:4F:A0:26:FB:2E:64:C2:22:BA:10:43 Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49 Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249 Certificate serial: 019B1D97A95F5FCBD6293634506D6D526678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft Manifest number: 15D2 Signing time: Sun 14 Dec 2025 16:00:37 +0000 Manifest this update: Sun 14 Dec 2025 16:00:37 +0000 Manifest next update: Mon 15 Dec 2025 16:00:37 +0000 Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: Am08NFlE+WMBmTbIRauXshWXqXQrLX27X5JrLi3svmo=) 2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=) 3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:97:a9:5f:5f:cb:d6:29:36:34:50:6d:6d:52:66:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249 Validity Not Before: Dec 14 16:00:37 2025 GMT Not After : Dec 15 16:00:37 2025 GMT Subject: CN=ddc82672b8b73f6e3a4fa026fb2e64c222ba1043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:ab:b0:c6:55:6b:c7:ec:f0:f3:8b:7b:bd: a6:e9:84:fb:05:e8:1c:d1:76:e5:84:3c:1f:7e:b3: 73:1c:54:5d:a8:eb:ed:86:e6:62:c5:06:07:7c:09: e8:8f:1c:71:e6:08:22:5e:a4:29:89:9a:5b:f6:1b: ac:2e:00:46:a1:d9:e4:d7:7a:0e:89:46:1e:be:f6: b6:92:61:5d:d6:aa:9c:ac:c7:58:53:46:52:dd:02: fd:ee:19:ea:95:e6:db:ee:58:10:31:42:a7:30:b2: b3:9a:62:bc:87:2e:9a:34:b4:f1:b7:18:a4:ca:07: ac:96:2f:c4:d5:6d:bf:2e:f9:86:9f:a8:e8:fe:dd: e3:e4:38:a4:98:fc:be:da:64:97:45:92:71:30:8a: 3a:d2:d1:c0:e8:0c:00:63:f9:39:4c:ce:75:f8:04: 56:c9:cd:d3:14:f7:41:12:7e:ef:2b:28:81:ea:30: c0:24:b6:64:b4:c0:9e:d2:11:c2:00:c2:c6:dc:b8: a8:7b:00:c5:52:fd:0e:51:d1:f3:6c:e0:65:b5:33: 56:dd:a5:6d:4f:cd:34:1b:23:2a:39:ba:0e:ad:aa: bc:95:5b:50:b6:8e:8d:d2:70:a5:43:50:80:c9:53: b7:8f:94:5e:50:14:c1:b3:1f:eb:61:da:b7:64:d3: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C8:26:72:B8:B7:3F:6E:3A:4F:A0:26:FB:2E:64:C2:22:BA:10:43 X509v3 Authority Key Identifier: keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:64:fa:e6:dd:9e:98:21:ba:7b:dc:93:41:82:5e:47:c7:63: 4e:d2:f2:2d:97:fe:17:98:9a:a5:40:6f:65:4a:35:45:f6:2d: 71:eb:c0:39:13:3e:2e:ab:07:b6:36:40:c4:95:33:de:e5:8a: 2f:07:46:05:14:f2:44:ef:07:1d:69:aa:f0:b3:d9:43:82:57: 00:91:bd:07:27:53:da:be:99:e9:35:da:46:c9:0d:ad:c7:5b: 07:6e:a5:b7:d7:cf:e5:0e:9d:58:c6:ab:38:cb:06:e3:e5:ca: 70:6f:69:4c:dc:be:6b:9c:00:c4:54:8c:a8:b5:22:1f:3d:00: b9:18:92:8d:46:34:ce:8f:78:4a:34:17:d6:4f:c5:ad:76:ee: f7:bb:13:47:60:b9:a7:93:06:95:eb:b5:1c:f9:cf:e7:2b:dc: 46:77:1e:86:3b:e8:ba:3f:52:e2:60:f2:50:df:a4:85:bb:f0: 91:c0:18:5e:1c:59:aa:13:f4:63:88:83:fa:a8:a2:fc:d4:e3: b8:3f:c5:b4:1e:bd:50:e1:f6:ba:8e:fe:55:73:fe:a3:24:16: a0:af:56:80:ed:b3:70:76:20:0f:35:93:ef:de:a8:51:0d:a2: 43:29:cd:08:9c:ca:c5:04:7b:ee:e1:d5:8b:cd:6d:fa:20:44: d5:51:11:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdl6lfX8vWKTY0UG1tUmZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDg2NDBjMzA1MTA3NzY2YTY0NmZiZjhlYzgxZGI0NWNl MWYyNDkwHhcNMjUxMjE0MTYwMDM3WhcNMjUxMjE1MTYwMDM3WjAzMTEwLwYDVQQD EyhkZGM4MjY3MmI4YjczZjZlM2E0ZmEwMjZmYjJlNjRjMjIyYmExMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41irsMZVa8fs8POLe72m6YT7Begc 0XblhDwffrNzHFRdqOvthuZixQYHfAnojxxx5ggiXqQpiZpb9husLgBGodnk13oO iUYevva2kmFd1qqcrMdYU0ZS3QL97hnqlebb7lgQMUKnMLKzmmK8hy6aNLTxtxik ygesli/E1W2/LvmGn6jo/t3j5DikmPy+2mSXRZJxMIo60tHA6AwAY/k5TM51+ARW yc3TFPdBEn7vKyiB6jDAJLZktMCe0hHCAMLG3LioewDFUv0OUdHzbOBltTNW3aVt T800GyMqOboOraq8lVtQto6N0nClQ1CAyVO3j5ReUBTBsx/rYdq3ZNOpkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3IJnK4tz9uOk+gJvsuZMIiuhBDMB8GA1UdIwQY MBaAFCfYZAwwUQd2amRvv47IHbRc4fJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAt M2M2Zjg4YzkxNGIxLzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAtM2M2Zjg4YzkxNGIx LzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWT65t2e mCG6e9yTQYJeR8djTtLyLZf+F5iapUBvZUo1RfYtcevAORM+LqsHtjZAxJUz3uWK LwdGBRTyRO8HHWmq8LPZQ4JXAJG9BydT2r6Z6TXaRskNrcdbB26lt9fP5Q6dWMar OMsG4+XKcG9pTNy+a5wAxFSMqLUiHz0AuRiSjUY0zo94SjQX1k/FrXbu97sTR2C5 p5MGleu1HPnP5yvcRncehjvouj9S4mDyUN+khbvwkcAYXhxZqhP0Y4iD+qii/NTj uD/FtB69UOH2uo7+VXP+oyQWoK9WgO2zcHYgDzWT796oUQ2iQynNCJzKxQR77uHV i81t+iBE1VERhQ== -----END CERTIFICATE-----Generated at Sun Dec 14 22:53:24 2025 by rpki-client