This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json) Hash identifier: PPuXmbz6DDzpIA3/lCbd6M1nPFeRR8+BQL2rZWtprCg= Subject key identifier: FA:7C:76:5E:E5:6E:6F:B0:6B:32:26:A6:81:9B:D0:0D:EE:BD:E5:A8 Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99 Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699 Certificate serial: 019B5A51C01058E732AC2389CECA8B8717D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 11:01:05 +0000 Manifest this update: Fri 26 Dec 2025 11:01:05 +0000 Manifest next update: Sat 27 Dec 2025 11:01:05 +0000 Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=) 2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: i8Op99leQ70ICWxmirTaYOtG3RcWj7gIMPsLd3k9n0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c0:10:58:e7:32:ac:23:89:ce:ca:8b:87:17:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699 Validity Not Before: Dec 26 11:01:05 2025 GMT Not After : Dec 27 11:01:05 2025 GMT Subject: CN=fa7c765ee56e6fb06b3226a6819bd00deebde5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:54:43:a0:6d:f1:ea:31:61:79:d5:fd:88:60: 9e:ca:ed:47:3f:9f:f8:74:2c:f7:cf:20:04:48:06: df:31:93:ae:65:7d:4e:ef:48:4d:cf:01:4b:85:e5: 99:89:e4:97:2d:b8:bb:38:c2:cf:a0:46:9c:ad:b0: ae:53:8a:c1:85:e9:b3:8a:62:aa:28:53:c2:e3:91: 3b:da:c4:18:33:93:15:dc:9f:2e:51:54:dc:80:98: b2:3d:4a:07:4d:0a:56:c8:9a:54:3e:47:5c:88:d0: 29:04:d8:d0:8a:27:96:7e:8e:23:df:f6:bd:3a:af: 3b:fc:3e:c1:d7:5d:40:8d:58:3f:ae:e4:29:31:96: c8:61:f5:c6:c2:15:7b:7a:51:19:39:50:37:c2:ed: 20:87:7c:c1:a8:4d:97:bc:2b:99:f4:e7:de:0d:f5: c2:77:13:65:c0:2f:21:65:96:ac:cc:5b:07:61:2e: d5:11:29:8a:8b:75:a7:02:b4:46:a7:22:44:2b:04: 6e:95:cc:3e:77:9b:34:5a:49:01:9a:e5:cc:1a:69: c0:02:70:b0:05:c2:11:57:17:48:d5:8a:cd:c5:cd: e8:64:82:eb:6f:0b:88:a0:69:d2:7b:76:72:73:49: 59:0b:e6:9a:3e:ae:7b:6a:8e:b4:7e:62:4e:de:a0: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7C:76:5E:E5:6E:6F:B0:6B:32:26:A6:81:9B:D0:0D:EE:BD:E5:A8 X509v3 Authority Key Identifier: keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:22:ac:23:24:68:51:a4:62:26:cc:8a:c8:07:8e:03:58:0e: 51:ca:11:e2:aa:06:64:a0:98:1e:b2:e1:da:4f:f8:34:69:26: 2a:49:40:ab:cd:bb:26:d0:13:43:8f:b5:f2:6a:36:67:f7:de: fb:e6:6e:b4:71:4f:1f:c4:d5:bd:c3:06:3b:99:80:86:fd:e6: 22:c3:49:5f:a7:fc:c9:8a:8a:1a:02:88:65:15:62:37:f1:48: 23:a1:30:52:f5:32:2b:c2:c1:13:10:2d:e5:ff:a1:f2:16:36: 54:c5:17:81:30:97:aa:a8:18:cc:e6:18:f5:1a:71:f1:99:91: 07:fe:3f:25:34:83:55:b1:df:00:07:5b:82:3b:96:ef:c9:52: 18:33:11:d9:6f:49:cd:9a:fb:b9:d9:91:cd:53:8d:a3:7d:1c: 7e:b9:1f:e8:4e:d1:9f:0f:ce:46:2f:9a:0b:2f:68:45:e7:8a: dc:6e:94:e3:6c:c8:7f:34:33:93:b1:34:e6:b2:a0:61:20:e3: c7:c9:7e:24:18:b0:e5:ea:97:77:9e:73:6b:28:0b:d3:5e:16: 14:e9:48:21:d3:5e:15:26:ac:60:0b:4f:15:22:42:03:ee:ea: fa:86:d5:88:6b:c3:82:5d:eb:e6:99:69:78:e2:2d:d9:40:e1: 1e:51:fd:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUcAQWOcyrCOJzsqLhxfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDA0ODQzYzRmM2E0ZTc2Njk0ZGIzY2ZiZjliZTNhOWI2 N2M2OTkwHhcNMjUxMjI2MTEwMTA1WhcNMjUxMjI3MTEwMTA1WjAzMTEwLwYDVQQD EyhmYTdjNzY1ZWU1NmU2ZmIwNmIzMjI2YTY4MTliZDAwZGVlYmRlNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVRDoG3x6jFhedX9iGCeyu1HP5/4 dCz3zyAESAbfMZOuZX1O70hNzwFLheWZieSXLbi7OMLPoEacrbCuU4rBhemzimKq KFPC45E72sQYM5MV3J8uUVTcgJiyPUoHTQpWyJpUPkdciNApBNjQiieWfo4j3/a9 Oq87/D7B111AjVg/ruQpMZbIYfXGwhV7elEZOVA3wu0gh3zBqE2XvCuZ9OfeDfXC dxNlwC8hZZaszFsHYS7VESmKi3WnArRGpyJEKwRulcw+d5s0WkkBmuXMGmnAAnCw BcIRVxdI1YrNxc3oZILrbwuIoGnSe3Zyc0lZC+aaPq57ao60fmJO3qCQlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp8dl7lbm+wazImpoGb0A3uveWoMB8GA1UdIwQY MBaAFCfQSEPE86TnZpTbPPv5vjqbZ8aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMt YjA5YjkzODVkNzI3LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMtYjA5YjkzODVkNzI3 LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyKsIyRo UaRiJsyKyAeOA1gOUcoR4qoGZKCYHrLh2k/4NGkmKklAq827JtATQ4+18mo2Z/fe ++ZutHFPH8TVvcMGO5mAhv3mIsNJX6f8yYqKGgKIZRViN/FII6EwUvUyK8LBExAt 5f+h8hY2VMUXgTCXqqgYzOYY9Rpx8ZmRB/4/JTSDVbHfAAdbgjuW78lSGDMR2W9J zZr7udmRzVONo30cfrkf6E7Rnw/ORi+aCy9oReeK3G6U42zIfzQzk7E05rKgYSDj x8l+JBiw5eqXd55zaygL014WFOlIIdNeFSasYAtPFSJCA+7q+obViGvDgl3r5plp eOIt2UDhHlH9TQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:57 2025 by rpki-client