This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json) Hash identifier: dqjjpsqFx1fGwf4wNBa3jpMF9LO3eYCuxv+xN7oCsY4= Subject key identifier: 33:43:25:60:F8:CD:5C:72:F9:6D:82:43:55:A4:90:51:21:9C:44:61 Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a Certificate serial: 019B31FAD8B0586E1C80A2F65F6DCD2FF6C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft Manifest number: 0C5E Signing time: Thu 18 Dec 2025 15:01:21 +0000 Manifest this update: Thu 18 Dec 2025 15:01:21 +0000 Manifest next update: Fri 19 Dec 2025 15:01:21 +0000 Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: OXMRXlx3ojnccScwKHe83eoczy4FgbAwK29xgHI6SDk=) 2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:d8:b0:58:6e:1c:80:a2:f6:5f:6d:cd:2f:f6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a Validity Not Before: Dec 18 15:01:21 2025 GMT Not After : Dec 19 15:01:21 2025 GMT Subject: CN=33432560f8cd5c72f96d824355a49051219c4461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:3d:00:9b:f5:bd:07:0d:4c:4b:cc:d1:10: 0b:49:40:0c:fa:8b:ca:35:45:81:1e:6d:ed:aa:f4: 88:2d:b3:22:ae:8b:90:29:61:e2:ec:a3:68:d4:93: 34:43:07:22:f4:b2:88:b5:12:05:34:1f:c7:d0:2b: 79:14:cf:49:63:3d:15:c5:26:70:15:74:bf:c3:95: 0e:11:ec:1f:97:54:be:c0:d5:c6:98:2f:4c:a7:5f: b2:37:8b:c3:d7:98:e2:60:dd:da:9e:47:a0:3d:1c: bc:4e:f6:79:7e:da:23:3b:92:6a:2e:da:bd:c4:ac: 19:ec:d4:54:68:b5:a9:cc:9e:38:dd:66:6f:07:45: cd:c3:6e:ea:48:60:bf:86:d3:46:ce:64:c6:d7:d0: 41:f4:32:cc:3a:ad:d0:70:b5:69:d3:de:f3:d5:96: ab:f2:7f:79:85:cf:ce:ba:e7:c2:a8:45:61:3b:86: c3:32:27:71:c1:f7:ab:6b:c7:bf:01:28:bc:ac:55: dd:40:d1:21:b0:64:ce:e5:49:13:31:df:71:bd:e2: be:ae:e7:52:e4:9b:1f:e2:ff:22:d5:51:3e:ee:91: bf:5c:bb:1a:99:3d:64:f6:95:a1:a1:d6:4d:37:cc: 1c:3f:ea:fb:b3:79:c0:c3:3f:5e:f3:f2:f9:69:e4: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:43:25:60:F8:CD:5C:72:F9:6D:82:43:55:A4:90:51:21:9C:44:61 X509v3 Authority Key Identifier: keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5a:c8:87:ad:b9:c7:41:38:59:32:6f:3c:7e:0d:04:ae:a4: 74:69:89:77:4c:0c:9c:af:db:b6:bb:3b:97:00:80:43:9b:78: 7c:50:b1:dd:f1:e4:95:f2:1f:20:50:1c:c7:d1:b2:73:55:6d: 8a:ac:d5:c7:ec:d7:91:25:db:44:53:ab:bf:8c:bd:76:1e:db: d9:03:f9:05:19:11:cb:d6:4f:7c:aa:b2:02:e8:de:2c:99:ad: a4:10:f8:2c:7a:ff:b9:36:64:21:ae:70:4d:30:df:47:d5:f5: dc:65:80:ca:66:31:a4:b0:ee:e0:da:65:a6:6f:40:b0:cc:3e: 5b:8b:27:66:db:67:09:fc:fe:72:05:b0:63:f6:34:a5:7f:a5: 79:8a:5a:bc:7d:36:6b:ca:c5:3e:31:e0:8d:f0:f5:94:30:af: c6:6b:79:99:e1:12:3e:26:b0:1c:ce:98:61:da:d3:83:3c:45: 1b:91:a1:40:66:22:e1:05:d4:50:75:10:1b:d8:0b:73:71:4d: 24:f5:77:13:24:f4:85:ea:d3:5f:56:ed:f1:dd:03:a6:d2:85: 3e:ff:37:a0:4a:bb:aa:ac:ac:a1:2c:7a:d9:71:2d:d7:82:17: 77:7f:13:2f:2e:39:f1:87:00:a3:85:b5:71:d4:14:47:93:14: a5:c6:17:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+tiwWG4cgKL2X23NL/bJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1 ODY5MWEwHhcNMjUxMjE4MTUwMTIxWhcNMjUxMjE5MTUwMTIxWjAzMTEwLwYDVQQD EygzMzQzMjU2MGY4Y2Q1YzcyZjk2ZDgyNDM1NWE0OTA1MTIxOWM0NDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYQ9AJv1vQcNTEvM0RALSUAM+ovK NUWBHm3tqvSILbMirouQKWHi7KNo1JM0Qwci9LKItRIFNB/H0Ct5FM9JYz0VxSZw FXS/w5UOEewfl1S+wNXGmC9Mp1+yN4vD15jiYN3ankegPRy8TvZ5ftojO5JqLtq9 xKwZ7NRUaLWpzJ443WZvB0XNw27qSGC/htNGzmTG19BB9DLMOq3QcLVp097z1Zar 8n95hc/OuufCqEVhO4bDMidxwfera8e/ASi8rFXdQNEhsGTO5UkTMd9xveK+rudS 5Jsf4v8i1VE+7pG/XLsamT1k9pWhodZNN8wcP+r7s3nAwz9e8/L5aeQ3/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNDJWD4zVxy+W2CQ1WkkFEhnERhMB8GA1UdIwQY MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt NzkwMjQ0NTA4ZGY0LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0 LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFrIh625 x0E4WTJvPH4NBK6kdGmJd0wMnK/btrs7lwCAQ5t4fFCx3fHklfIfIFAcx9Gyc1Vt iqzVx+zXkSXbRFOrv4y9dh7b2QP5BRkRy9ZPfKqyAujeLJmtpBD4LHr/uTZkIa5w TTDfR9X13GWAymYxpLDu4Nplpm9AsMw+W4snZttnCfz+cgWwY/Y0pX+leYpavH02 a8rFPjHgjfD1lDCvxmt5meESPiawHM6YYdrTgzxFG5GhQGYi4QXUUHUQG9gLc3FN JPV3EyT0herTX1bt8d0DptKFPv83oEq7qqysoSx62XEt14IXd38TLy458YcAo4W1 cdQUR5MUpcYXiQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:57:15 2025 by rpki-client