This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json) Hash identifier: smw+K+kkobeJ3J2jA/9KCcrf5WQiOeM0bZpcxgFxHao= Subject key identifier: 17:14:88:CC:D0:AD:35:ED:2A:CB:CD:7C:A7:4D:48:50:4E:9A:5F:A2 Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98 Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098 Certificate serial: 019B337ADB3901EEEDE95918EA7A0E21ADFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft Manifest number: 0B19 Signing time: Thu 18 Dec 2025 22:00:48 +0000 Manifest this update: Thu 18 Dec 2025 22:00:48 +0000 Manifest next update: Fri 19 Dec 2025 22:00:48 +0000 Files and hashes: 1: 8lytrNRAlkzl2XNEuoqT9hqGeHI.roa (hash: bsiOs3LeZM/7MgOmaqSi5ylqvDA5KYlcRdJP7/Y5e7k=) 2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: f4XArjm/1P/OPsVOwVzsuT/5nDmz7YcA0pqbH+eA58c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:db:39:01:ee:ed:e9:59:18:ea:7a:0e:21:ad:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098 Validity Not Before: Dec 18 22:00:48 2025 GMT Not After : Dec 19 22:00:48 2025 GMT Subject: CN=171488ccd0ad35ed2acbcd7ca74d48504e9a5fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:1f:70:7f:ef:0a:85:9a:b4:5f:22:9a:da: 8d:60:40:5b:bd:48:0f:a1:78:e2:9c:a8:f4:b2:70: 25:5c:c5:99:00:58:ce:61:67:45:7b:f6:a3:f0:11: 33:dd:fc:db:b6:a8:ce:17:b1:ea:2f:e6:c2:6b:d1: 3e:04:43:fb:3e:c2:be:e4:77:df:80:68:a4:b7:b2: e9:20:06:ef:11:48:be:82:b9:af:78:c9:fc:eb:aa: 90:fd:8c:f0:63:94:28:fa:7b:af:0e:af:57:1b:b6: cf:55:4d:a4:7f:af:c9:b2:a5:e0:ab:ae:fa:5a:e5: 70:ea:92:23:df:84:76:f4:1f:b7:c5:8b:d3:06:08: 2c:6b:fb:75:4b:96:cd:31:35:8f:bb:60:92:28:d2: 66:e3:38:fb:54:f3:a4:df:9c:b3:48:a6:12:3f:e0: 71:0f:0e:fe:c2:22:f4:f1:d3:75:c5:99:31:91:be: b1:c4:09:cf:ab:9f:82:ed:01:da:40:bb:7e:64:0f: 1c:76:78:00:e1:06:91:51:cb:01:3b:f3:6b:cf:63: 34:48:34:ca:57:05:07:d6:10:92:1a:42:57:ec:8f: e2:0f:ba:06:61:51:39:5c:c7:9a:e1:f6:27:0a:8c: bb:84:53:f0:b3:3f:cc:a5:a8:5c:c0:aa:79:26:28: b4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:14:88:CC:D0:AD:35:ED:2A:CB:CD:7C:A7:4D:48:50:4E:9A:5F:A2 X509v3 Authority Key Identifier: keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4b:70:75:55:b5:19:60:a7:d3:3f:37:ed:4b:1e:49:d9:d4: 3a:17:7d:e9:ad:e2:29:31:ba:9a:00:2d:58:06:ba:57:5c:c1: 56:2b:e3:15:e1:5a:7e:2b:02:d1:76:0f:22:5c:7f:78:95:d1: d7:a4:41:7c:b2:ea:0d:fe:b3:1a:b2:6d:4a:d6:0c:33:cd:2c: e1:8b:3c:97:f2:7e:47:bb:a8:c3:b8:c7:3b:2f:f4:3b:1a:cd: 83:90:fd:f2:69:4a:8b:42:3a:83:ef:35:29:58:12:f5:bf:08: a9:e4:c2:d9:dc:ae:e0:a3:ba:5e:c6:77:83:26:b1:c2:a1:36: 72:ad:09:f3:7e:a4:24:1d:7c:3d:a3:93:24:b1:c5:be:a3:05: df:ee:63:67:8d:ff:c8:21:12:61:42:be:c0:ac:22:4b:f4:c5: a1:e3:ed:95:f3:31:b4:48:88:9f:b3:55:0a:ad:b2:45:0c:1a: 06:2c:c1:4a:31:12:a3:08:74:22:5b:1b:35:42:d7:db:0a:91: 19:08:6f:c7:3d:d1:cb:0b:a8:d5:cd:0c:60:f6:93:0c:c4:eb: ea:f2:78:da:4d:97:67:b4:b1:c3:54:f9:7f:20:2c:9a:4c:12: 6b:b5:b0:59:25:8d:d3:a0:06:50:d2:80:57:9c:bc:cc:82:9c: 73:df:f1:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszets5Ae7t6VkY6noOIa37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDAyODQ3MDYwNDMzNmZkYjkzMDhlNTFiYTUzZTk1MWFl MmUwOTgwHhcNMjUxMjE4MjIwMDQ4WhcNMjUxMjE5MjIwMDQ4WjAzMTEwLwYDVQQD EygxNzE0ODhjY2QwYWQzNWVkMmFjYmNkN2NhNzRkNDg1MDRlOWE1ZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOEfcH/vCoWatF8imtqNYEBbvUgP oXjinKj0snAlXMWZAFjOYWdFe/aj8BEz3fzbtqjOF7HqL+bCa9E+BEP7PsK+5Hff gGikt7LpIAbvEUi+grmveMn866qQ/YzwY5Qo+nuvDq9XG7bPVU2kf6/JsqXgq676 WuVw6pIj34R29B+3xYvTBggsa/t1S5bNMTWPu2CSKNJm4zj7VPOk35yzSKYSP+Bx Dw7+wiL08dN1xZkxkb6xxAnPq5+C7QHaQLt+ZA8cdngA4QaRUcsBO/Nrz2M0SDTK VwUH1hCSGkJX7I/iD7oGYVE5XMea4fYnCoy7hFPwsz/MpahcwKp5Jii0iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcUiMzQrTXtKsvNfKdNSFBOml+iMB8GA1UdIwQY MBaAFCfQKEcGBDNv25MI5RulPpUa4uCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9iMzgwNWYtYmU2Zi00MTMzLWI1ZWMt YTRlYmJmZTcxMGMzLzEvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9iMzgwNWYtYmU2Zi00MTMzLWI1ZWMtYTRlYmJmZTcxMGMz LzEvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZktwdVW1 GWCn0z837UseSdnUOhd96a3iKTG6mgAtWAa6V1zBVivjFeFafisC0XYPIlx/eJXR 16RBfLLqDf6zGrJtStYMM80s4Ys8l/J+R7uow7jHOy/0OxrNg5D98mlKi0I6g+81 KVgS9b8IqeTC2dyu4KO6XsZ3gyaxwqE2cq0J836kJB18PaOTJLHFvqMF3+5jZ43/ yCESYUK+wKwiS/TFoePtlfMxtEiIn7NVCq2yRQwaBizBSjESowh0IlsbNULX2wqR GQhvxz3Rywuo1c0MYPaTDMTr6vJ42k2XZ7Sxw1T5fyAsmkwSa7WwWSWN06AGUNKA V5y8zIKcc9/xEQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:36:07 2025 by rpki-client