This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft File: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft (raw, json) Hash identifier: Xd950dAY/Y9V7/Cowom0QEqqN/yLyaQIwpNf6z9CVKY= Subject key identifier: 74:C2:3B:39:E5:0E:C0:F6:42:01:05:7C:09:25:91:4A:B1:64:C5:42 Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB Certificate issuer: /CN=27d7d0d37bf0494589472189e03c193057e373ab Certificate serial: 019B2C66689A4AC7DD4AE47BAC1E795FEE80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft Manifest number: 0A35 Signing time: Wed 17 Dec 2025 13:01:07 +0000 Manifest this update: Wed 17 Dec 2025 13:01:07 +0000 Manifest next update: Thu 18 Dec 2025 13:01:07 +0000 Files and hashes: 1: APV-yd4iM5ft2_CZQSdpqn3Znl0.roa (hash: zO2jXcNxwkx67uSbTL8ewK9Q+yKE4kHcIhGP4291jJw=) 2: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl (hash: vHqCo8wHX9XVut1OnZ1F/8YO1BfXYjOxeW+EcjFvPts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:68:9a:4a:c7:dd:4a:e4:7b:ac:1e:79:5f:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab Validity Not Before: Dec 17 13:01:07 2025 GMT Not After : Dec 18 13:01:07 2025 GMT Subject: CN=74c23b39e50ec0f64201057c0925914ab164c542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:09:71:67:bd:e8:56:0a:06:8b:3a:95:bd: d0:e3:8f:5b:02:dc:50:41:54:be:a2:2a:f0:7a:fb: 49:92:13:60:2e:81:3b:b2:e6:0d:3c:cb:59:eb:6d: f4:98:b7:82:42:94:9f:57:f9:e8:b4:5a:eb:8e:c8: e9:e0:53:71:52:62:e5:38:cb:a9:74:f9:16:1a:f7: c4:cb:d6:89:6a:44:6d:08:d7:16:68:87:c7:07:d1: 11:36:60:7f:1f:cc:b8:55:c8:7c:61:b9:b8:92:11: ae:78:17:0c:f6:aa:a4:8f:fb:1b:07:a8:9e:01:99: 47:5e:52:1e:a6:e0:85:23:4c:fd:8c:f7:ec:3c:30: 0f:e0:3f:cc:94:60:29:46:fe:02:9e:41:9c:fd:91: 72:a5:9f:35:43:e5:a5:6c:97:fa:e0:02:50:3e:2e: e2:01:df:09:60:09:c4:37:af:5c:af:87:bc:90:12: c2:83:14:09:ed:6b:1a:ae:8f:4e:f9:50:a9:22:f7: 17:d5:ef:fe:92:1d:b0:c8:d0:63:b6:30:09:3f:9f: 27:14:75:d3:af:66:3b:7a:d0:55:e3:66:9e:3a:73: b1:b1:ad:00:d6:ef:37:5c:f8:67:fd:e7:81:55:ed: 99:b6:ca:ac:cc:a5:8b:2e:28:f1:c3:fa:0b:69:b0: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C2:3B:39:E5:0E:C0:F6:42:01:05:7C:09:25:91:4A:B1:64:C5:42 X509v3 Authority Key Identifier: keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:89:87:bc:97:ce:a4:e2:7b:a9:2f:b7:62:b3:a1:34:70:fa: ab:24:2f:1d:26:8c:b0:6c:64:ee:3a:3d:2e:3e:e9:29:a1:68: ce:9c:48:28:16:19:db:ea:73:54:c2:31:c5:d0:09:e4:96:8a: 43:3d:b1:61:51:5a:43:77:a9:90:f0:08:48:4b:ac:0a:64:36: 55:e9:5c:bc:ff:b2:be:7f:37:24:19:d1:20:5e:73:cd:aa:0c: 38:f2:b1:73:58:2a:72:f6:0f:ba:1c:3e:0f:c7:de:de:f2:2f: 56:5e:c9:35:f1:79:f1:0c:82:ef:88:41:b5:a0:bf:60:4a:94: a9:f4:57:0f:c2:12:03:9d:9f:d9:2b:dc:ec:d5:8e:b8:77:fd: a2:6f:ed:50:85:12:46:a9:c6:21:8a:fe:83:df:9a:5d:86:c4: c4:76:a6:da:05:1b:37:c2:a0:63:9e:00:76:3b:ff:4d:b0:5d: 7e:d7:9c:3e:d8:55:35:57:a7:a0:a9:7f:95:1a:9a:c2:9d:09: 5e:5f:1c:3f:d2:6e:2b:92:21:3e:17:10:f1:84:12:4a:69:b4: 5c:43:70:3c:08:1e:a2:c9:3b:5e:b1:06:1f:81:3d:d7:0d:c0: 82:dd:82:e4:54:95:5d:d9:18:19:c2:76:84:52:d7:85:4c:c2: 3d:a9:cc:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZmiaSsfdSuR7rB55X+6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDdkMGQzN2JmMDQ5NDU4OTQ3MjE4OWUwM2MxOTMwNTdl MzczYWIwHhcNMjUxMjE3MTMwMTA3WhcNMjUxMjE4MTMwMTA3WjAzMTEwLwYDVQQD Eyg3NGMyM2IzOWU1MGVjMGY2NDIwMTA1N2MwOTI1OTE0YWIxNjRjNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRgJcWe96FYKBos6lb3Q449bAtxQ QVS+oirwevtJkhNgLoE7suYNPMtZ6230mLeCQpSfV/notFrrjsjp4FNxUmLlOMup dPkWGvfEy9aJakRtCNcWaIfHB9ERNmB/H8y4Vch8Ybm4khGueBcM9qqkj/sbB6ie AZlHXlIepuCFI0z9jPfsPDAP4D/MlGApRv4CnkGc/ZFypZ81Q+WlbJf64AJQPi7i Ad8JYAnEN69cr4e8kBLCgxQJ7Wsaro9O+VCpIvcX1e/+kh2wyNBjtjAJP58nFHXT r2Y7etBV42aeOnOxsa0A1u83XPhn/eeBVe2ZtsqszKWLLijxw/oLabAdcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTCOznlDsD2QgEFfAklkUqxZMVCMB8GA1UdIwQY MBaAFCfX0NN78ElFiUchieA8GTBX43OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlmUTAzdndTVVdKUnlHSjREd1pNRmZqYzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kNjNiMjItNjBlMS00N2U1LTllNGQt MmY5YTRjZTQzNjJmLzEvSjlmUTAzdndTVVdKUnlHSjREd1pNRmZqYzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9kNjNiMjItNjBlMS00N2U1LTllNGQtMmY5YTRjZTQzNjJm LzEvSjlmUTAzdndTVVdKUnlHSjREd1pNRmZqYzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHomHvJfO pOJ7qS+3YrOhNHD6qyQvHSaMsGxk7jo9Lj7pKaFozpxIKBYZ2+pzVMIxxdAJ5JaK Qz2xYVFaQ3epkPAISEusCmQ2VelcvP+yvn83JBnRIF5zzaoMOPKxc1gqcvYPuhw+ D8fe3vIvVl7JNfF58QyC74hBtaC/YEqUqfRXD8ISA52f2Svc7NWOuHf9om/tUIUS RqnGIYr+g9+aXYbExHam2gUbN8KgY54Adjv/TbBdftecPthVNVenoKl/lRqawp0J Xl8cP9JuK5IhPhcQ8YQSSmm0XENwPAgeosk7XrEGH4E91w3Agt2C5FSVXdkYGcJ2 hFLXhUzCPanMMA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:12 2025 by rpki-client