This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json) Hash identifier: vLdR0RV2WGBItRhIHD+rdSmv2m2ZKf8TzpfokNORDEg= Subject key identifier: FE:39:F9:D9:BE:3F:FC:FB:5A:4F:16:AE:EC:2D:91:0A:CE:B2:71:A7 Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a Certificate serial: 019B1E3D4A93BF649748DB8B5AB64CA5A4D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 19:01:31 +0000 Manifest this update: Sun 14 Dec 2025 19:01:31 +0000 Manifest next update: Mon 15 Dec 2025 19:01:31 +0000 Files and hashes: 1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=) 2: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: 4xmYcva7yw5JkS6xDGq8XNIfNqoADpMeTdP31h2sPeQ=) 3: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:4a:93:bf:64:97:48:db:8b:5a:b6:4c:a5:a4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a Validity Not Before: Dec 14 19:01:31 2025 GMT Not After : Dec 15 19:01:31 2025 GMT Subject: CN=fe39f9d9be3ffcfb5a4f16aeec2d910aceb271a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:0c:24:8d:3e:cc:97:83:12:bd:9d:a9:5b: 5a:74:cd:0c:1b:dd:ba:91:6a:dd:d3:73:0c:a5:b3: be:69:1a:1b:88:10:0f:27:b2:41:1d:29:8f:e6:23: 23:84:79:be:89:ab:db:41:7f:fa:6f:76:70:6a:ab: fe:99:96:28:8c:10:4d:93:ca:e5:8d:c8:56:ae:49: 4c:c4:01:25:c8:71:6d:33:2d:b5:ed:bc:3d:2b:d3: 17:a8:aa:8b:e0:e6:b7:a8:59:80:b6:ef:39:83:e9: 93:4e:cd:18:b1:ff:5d:b6:e9:96:1d:69:b0:7b:3f: 0d:c6:84:b7:92:93:c0:af:c2:3d:6a:74:9d:b6:be: 9c:36:68:a4:c9:87:cf:41:6f:76:39:21:fb:5b:d6: 31:8f:aa:3f:58:06:f4:56:34:c1:88:af:4e:ba:d6: 7b:44:4e:ec:4d:f8:54:24:63:c8:f6:24:3d:15:d8: 0d:5e:4a:18:03:9c:5c:0c:e7:02:c1:ea:0a:22:92: de:28:5f:24:c7:b2:a3:e7:f7:7f:b2:86:72:e5:28: d7:1e:09:5c:95:57:54:78:a9:47:d9:57:b4:f7:67: 2a:ee:4e:19:8d:0b:a7:b6:b2:8e:2a:7c:5b:4c:ab: df:92:ae:13:35:82:ee:af:64:6d:1e:07:f5:b3:b5: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:39:F9:D9:BE:3F:FC:FB:5A:4F:16:AE:EC:2D:91:0A:CE:B2:71:A7 X509v3 Authority Key Identifier: keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:53:a5:31:b9:76:38:7d:25:1d:88:0d:88:a9:24:2b:85:d9: 1c:96:0a:54:bd:ee:03:7a:aa:4e:eb:35:3f:e1:aa:b4:49:82: 06:85:5b:8e:f6:80:d2:04:fe:3e:6a:41:3a:25:ec:39:3d:af: 26:d3:a4:80:66:8b:99:7a:a4:aa:20:1c:34:fa:df:e8:b0:ae: 2a:01:a9:cd:17:17:83:42:ee:7c:a6:4e:7d:7f:74:f1:ef:0a: 75:e9:6c:e5:0a:87:30:87:08:d9:67:37:21:82:1b:6f:69:da: 89:6a:e1:de:73:04:58:3e:f3:43:9b:b5:57:3a:dd:c5:65:d5: 59:02:67:67:1d:26:2f:55:f9:68:bb:11:8a:43:d8:79:e2:03: 7e:8c:ea:b9:5a:6b:80:8b:a6:6b:b6:3c:5a:10:5a:29:ad:c0: 51:72:40:04:e6:b1:bc:01:e8:46:8f:88:c3:35:2b:17:70:46: 3b:c0:22:f3:11:ac:c5:d2:09:13:98:16:e2:c9:ea:8e:c3:7f: 08:72:a2:eb:a8:4a:12:8e:38:3d:c3:79:25:26:d5:85:d6:05: 6c:64:e4:9c:87:9a:0b:bf:01:52:fe:cb:b5:91:01:7b:68:bb: 75:ee:73:a2:58:b2:a5:22:44:a3:f3:6b:f4:c5:bf:6b:91:60: 59:5b:56:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePUqTv2SXSNuLWrZMpaTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGYwNDI4MjQyNzNmY2ZmM2YwOTNkMGY5YjFkZWM2OTYw YmFlNmEwHhcNMjUxMjE0MTkwMTMxWhcNMjUxMjE1MTkwMTMxWjAzMTEwLwYDVQQD EyhmZTM5ZjlkOWJlM2ZmY2ZiNWE0ZjE2YWVlYzJkOTEwYWNlYjI3MWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc8MJI0+zJeDEr2dqVtadM0MG926 kWrd03MMpbO+aRobiBAPJ7JBHSmP5iMjhHm+iavbQX/6b3Zwaqv+mZYojBBNk8rl jchWrklMxAElyHFtMy217bw9K9MXqKqL4Oa3qFmAtu85g+mTTs0Ysf9dtumWHWmw ez8NxoS3kpPAr8I9anSdtr6cNmikyYfPQW92OSH7W9Yxj6o/WAb0VjTBiK9OutZ7 RE7sTfhUJGPI9iQ9FdgNXkoYA5xcDOcCweoKIpLeKF8kx7Kj5/d/soZy5SjXHglc lVdUeKlH2Ve092cq7k4ZjQuntrKOKnxbTKvfkq4TNYLur2RtHgf1s7VxuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP45+dm+P/z7Wk8WruwtkQrOsnGnMB8GA1UdIwQY MBaAFCffBCgkJz/P8/CT0Pmx3saWC65qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUt Y2UyMmQ1ZWFiODJmLzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUtY2UyMmQ1ZWFiODJm LzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFOlMbl2 OH0lHYgNiKkkK4XZHJYKVL3uA3qqTus1P+GqtEmCBoVbjvaA0gT+PmpBOiXsOT2v JtOkgGaLmXqkqiAcNPrf6LCuKgGpzRcXg0LufKZOfX908e8Kdels5QqHMIcI2Wc3 IYIbb2naiWrh3nMEWD7zQ5u1VzrdxWXVWQJnZx0mL1X5aLsRikPYeeIDfozquVpr gIuma7Y8WhBaKa3AUXJABOaxvAHoRo+IwzUrF3BGO8Ai8xGsxdIJE5gW4snqjsN/ CHKi66hKEo44PcN5JSbVhdYFbGTknIeaC78BUv7LtZEBe2i7de5zoliypSJEo/Nr 9MW/a5FgWVtWzA== -----END CERTIFICATE-----Generated at Mon Dec 15 01:22:14 2025 by rpki-client