This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json) Hash identifier: uMKsyQshjtaJGX6LlZWqBYcOp9JlY/a+41LoBTa80XY= Subject key identifier: A8:0D:3E:42:B1:7C:CC:CD:65:7B:9B:58:D7:41:E3:C9:A2:70:AD:63 Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8 Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8 Certificate serial: 019B5A516B2E6DEFA4FB9020C09AA27BBF1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft Manifest number: 081E Signing time: Fri 26 Dec 2025 11:00:43 +0000 Manifest this update: Fri 26 Dec 2025 11:00:43 +0000 Manifest next update: Sat 27 Dec 2025 11:00:43 +0000 Files and hashes: 1: EOZUjXctaYMkRcyyMQLguIWxilg.roa (hash: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=) 2: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: Wj0IjOKp3cfVE/WlKXLLLYIX2BksBhMILkYTwSUC55s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:6b:2e:6d:ef:a4:fb:90:20:c0:9a:a2:7b:bf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8 Validity Not Before: Dec 26 11:00:43 2025 GMT Not After : Dec 27 11:00:43 2025 GMT Subject: CN=a80d3e42b17ccccd657b9b58d741e3c9a270ad63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:36:96:62:fe:a6:5c:6e:98:66:e8:03:c0:65: 49:37:52:a0:19:2b:61:ec:4b:60:62:93:f7:7b:b8: 25:64:7e:c3:00:bc:4a:c0:12:90:db:85:cb:7b:da: a1:9e:b0:03:4d:54:2a:1d:79:0e:c4:28:9d:2f:9c: 96:68:70:ec:01:b2:bd:bd:2d:4d:87:40:ba:18:0f: 51:04:c6:fb:81:11:02:e9:5e:c0:d9:6c:81:eb:a8: 54:37:b1:ad:e4:26:75:54:1e:58:59:ea:f6:ef:a1: 87:54:73:e4:5c:dd:fc:80:90:79:db:99:f8:73:6b: 15:b0:3a:7a:77:d3:4e:5e:58:af:d1:e2:44:68:fe: 2b:96:9d:1f:c5:86:e7:05:41:c1:5f:02:48:17:61: e0:7b:33:bb:c7:89:c2:a4:98:8b:43:e9:8f:aa:b5: d3:fa:66:51:8a:94:f7:01:d1:08:f3:d0:3d:94:73: f6:2e:0c:59:c8:0f:c4:ed:70:36:bd:94:d9:4c:b9: 0e:0e:e9:6a:1d:51:39:2c:b5:51:63:d7:74:f6:74: e1:03:23:82:67:00:ee:ed:47:b7:27:5b:c5:09:ee: 91:56:3a:60:1f:8e:85:bf:85:9b:43:27:2c:30:bf: 5b:4b:f0:36:f0:b4:ed:65:dd:50:d0:dc:8e:dc:13: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0D:3E:42:B1:7C:CC:CD:65:7B:9B:58:D7:41:E3:C9:A2:70:AD:63 X509v3 Authority Key Identifier: keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1a:9e:b5:0f:be:c9:4e:a1:0d:d0:df:21:b8:b7:41:c8:c5: c7:3a:47:44:57:f5:2a:8f:d2:aa:5c:43:11:d8:cb:91:a5:3c: ec:4e:5a:8c:ce:a9:63:ce:f0:5b:0d:b4:20:38:68:ad:27:aa: 46:48:53:09:cd:8d:33:e2:83:6a:7f:b1:02:ee:ae:b9:23:35: 52:4b:21:39:65:2a:9e:70:d4:46:41:ba:a2:f7:71:b2:d3:30: 46:71:06:d3:5a:64:78:50:9e:12:47:4d:0f:a6:76:39:0f:e3: db:e1:97:2d:7e:91:18:71:ae:6c:76:a3:bf:ff:59:03:80:d9: c1:3d:44:13:df:0d:f9:ed:6d:94:d9:ae:30:0e:bb:c7:0a:cf: e2:e0:f6:86:2c:5d:43:23:c5:e0:a8:1f:fd:d4:04:67:25:f3: ed:22:39:cb:4f:d9:12:9a:2b:52:e0:30:49:12:66:17:cb:42: 13:c7:43:f8:bf:83:f0:9f:15:26:56:04:7c:c6:28:cf:4b:8f: cf:c8:a5:87:79:8e:fe:ee:da:fb:6d:d0:4b:86:0f:f1:97:5e: 28:73:94:a9:8c:1e:d3:0c:77:79:48:93:38:25:88:0a:60:66: 35:0c:58:cc:76:39:f3:c7:0f:66:2f:10:a4:6f:86:c5:fe:5f: 79:0f:fa:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWsube+k+5AgwJqie78fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzVmMzY0MTNlN2FmNDcyODEzZmUzYTcxNGUyZWNkYWEy MWYyZTgwHhcNMjUxMjI2MTEwMDQzWhcNMjUxMjI3MTEwMDQzWjAzMTEwLwYDVQQD EyhhODBkM2U0MmIxN2NjY2NkNjU3YjliNThkNzQxZTNjOWEyNzBhZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzaWYv6mXG6YZugDwGVJN1KgGSth 7EtgYpP3e7glZH7DALxKwBKQ24XLe9qhnrADTVQqHXkOxCidL5yWaHDsAbK9vS1N h0C6GA9RBMb7gREC6V7A2WyB66hUN7Gt5CZ1VB5YWer276GHVHPkXN38gJB525n4 c2sVsDp6d9NOXliv0eJEaP4rlp0fxYbnBUHBXwJIF2HgezO7x4nCpJiLQ+mPqrXT +mZRipT3AdEI89A9lHP2LgxZyA/E7XA2vZTZTLkODulqHVE5LLVRY9d09nThAyOC ZwDu7Ue3J1vFCe6RVjpgH46Fv4WbQycsML9bS/A28LTtZd1Q0NyO3BO2SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgNPkKxfMzNZXubWNdB48micK1jMB8GA1UdIwQY MBaAFCfF82QT569HKBP+OnFOLs2qIfLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMt NzkxMzI5NDZiNjk5LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMtNzkxMzI5NDZiNjk5 LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBqetQ++ yU6hDdDfIbi3QcjFxzpHRFf1Ko/SqlxDEdjLkaU87E5ajM6pY87wWw20IDhorSeq RkhTCc2NM+KDan+xAu6uuSM1UkshOWUqnnDURkG6ovdxstMwRnEG01pkeFCeEkdN D6Z2OQ/j2+GXLX6RGHGubHajv/9ZA4DZwT1EE98N+e1tlNmuMA67xwrP4uD2hixd QyPF4Kgf/dQEZyXz7SI5y0/ZEporUuAwSRJmF8tCE8dD+L+D8J8VJlYEfMYoz0uP z8ilh3mO/u7a+23QS4YP8ZdeKHOUqYwe0wx3eUiTOCWICmBmNQxYzHY588cPZi8Q pG+Gxf5feQ/6Dg== -----END CERTIFICATE-----Generated at Fri Dec 26 19:31:13 2025 by rpki-client