This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft File: J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json) Hash identifier: JZOGTmntVUxjmtps/4sZ9wW8QVSHHxMiTeruP/tq2jw= Subject key identifier: 3A:9E:B0:E5:69:C4:E6:09:B9:07:99:27:AA:CF:AB:93:2D:BC:EB:96 Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4 Certificate issuer: /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4 Certificate serial: 019B492744F8C2CCEFEDF32474BE4F2E78A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft Manifest number: 0359 Signing time: Tue 23 Dec 2025 03:01:08 +0000 Manifest this update: Tue 23 Dec 2025 03:01:08 +0000 Manifest next update: Wed 24 Dec 2025 03:01:08 +0000 Files and hashes: 1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: 6UzOXW186XOMr/T4koOuXozNTuoYETU2ISVf/zhOih4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:44:f8:c2:cc:ef:ed:f3:24:74:be:4f:2e:78:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4 Validity Not Before: Dec 23 03:01:08 2025 GMT Not After : Dec 24 03:01:08 2025 GMT Subject: CN=3a9eb0e569c4e609b9079927aacfab932dbceb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:3a:d0:d7:33:78:d2:4a:e3:f5:ed:35:dd: f4:b1:66:f8:c1:04:1e:cf:d2:b7:64:7b:36:19:3a: ff:43:b9:62:61:a0:95:10:46:16:50:59:b0:2e:6b: 8a:47:ad:26:2b:a6:c4:7c:c2:65:15:77:3f:61:bb: 7b:77:eb:ab:09:03:8a:c0:d4:9f:8a:a8:03:9d:f7: b0:a4:55:8c:2d:b1:9c:5a:c5:65:44:6b:57:8e:cc: c1:1a:99:99:9e:59:80:e2:af:e7:f8:ef:a8:84:2c: 84:cd:ac:ed:50:13:4f:03:b5:b9:82:70:63:6c:a5: 96:ad:23:24:ea:26:ae:83:ed:25:90:d9:41:11:95: 8e:17:4d:21:03:f7:49:b2:ce:b4:30:13:4c:31:a7: f9:2a:4d:a1:55:4f:6f:43:88:7b:06:3f:12:7b:17: 28:6c:f8:53:0c:02:a6:06:6a:60:68:d9:1d:43:23: b8:c9:9c:bb:ca:7a:49:70:85:65:31:20:d6:63:5c: b5:28:ef:60:a8:49:a0:3a:d0:a7:55:91:ef:8e:8e: 98:d2:0c:e5:fb:be:97:be:fd:ff:8d:4a:2a:5f:ed: a3:6d:76:15:15:19:b6:b0:b1:16:16:25:fa:a5:57: 29:4d:df:35:8f:92:2b:ad:6a:78:a6:e2:9e:9e:64: 53:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9E:B0:E5:69:C4:E6:09:B9:07:99:27:AA:CF:AB:93:2D:BC:EB:96 X509v3 Authority Key Identifier: keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f1:b6:93:90:b7:ec:42:08:ea:93:d5:e2:ed:e9:d7:bc:cc: dc:37:9d:f1:e5:52:9f:b5:5b:9f:42:43:b8:a5:d7:8e:fb:ca: b5:6e:0d:8d:32:47:c3:a8:71:01:5e:79:ad:8c:90:51:12:41: 07:55:4f:be:36:5f:f1:4a:3f:34:cb:cf:ec:3d:08:69:81:03: 6a:c4:45:0c:7e:ad:0a:e3:7d:ca:b7:2b:82:36:89:c8:7f:37: c9:6f:8c:c1:e6:b3:c4:30:c8:df:32:44:f8:6d:41:4b:10:06: 02:d6:76:c8:ab:60:70:a1:b2:a3:ea:de:dc:22:f0:07:b8:89: 86:9f:8c:e5:fe:c4:42:44:a6:66:22:9c:cf:42:f8:37:82:c6: 20:e8:38:ab:11:c2:7d:3f:88:f3:f8:73:77:1d:05:56:b0:b3: 74:eb:9a:4b:f2:0b:af:c5:3d:97:2c:36:9d:17:00:7f:c7:b5: 75:e6:6e:26:4c:b6:f6:31:4c:e8:04:1c:ac:11:0a:36:1c:bd: 5a:ed:e9:f9:99:1c:42:5b:57:1b:5f:1a:ec:9c:f9:fe:5b:5d: cf:fe:3e:38:e1:39:5b:67:31:e6:13:a2:05:00:36:96:69:3b: 3c:fe:ff:11:2f:be:03:29:3b:75:99:42:e9:f6:40:04:17:38: 92:85:d3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ0T4wszv7fMkdL5PLnihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3N2Q4MGYwZmUyYjQzZDA0NmJlYjNkNzliYWMxOTdhNzk4 OWMyZTQwHhcNMjUxMjIzMDMwMTA4WhcNMjUxMjI0MDMwMTA4WjAzMTEwLwYDVQQD EygzYTllYjBlNTY5YzRlNjA5YjkwNzk5MjdhYWNmYWI5MzJkYmNlYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AM60NczeNJK4/XtNd30sWb4wQQe z9K3ZHs2GTr/Q7liYaCVEEYWUFmwLmuKR60mK6bEfMJlFXc/Ybt7d+urCQOKwNSf iqgDnfewpFWMLbGcWsVlRGtXjszBGpmZnlmA4q/n+O+ohCyEzaztUBNPA7W5gnBj bKWWrSMk6iaug+0lkNlBEZWOF00hA/dJss60MBNMMaf5Kk2hVU9vQ4h7Bj8Sexco bPhTDAKmBmpgaNkdQyO4yZy7ynpJcIVlMSDWY1y1KO9gqEmgOtCnVZHvjo6Y0gzl +76Xvv3/jUoqX+2jbXYVFRm2sLEWFiX6pVcpTd81j5IrrWp4puKenmRTRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqesOVpxOYJuQeZJ6rPq5MtvOuWMB8GA1UdIwQY MBaAFCd9gPD+K0PQRr6z15usGXp5icLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xOTA5NTAtZDQxYy00ZDI2LTg1YmMt NTE4NGI1NWYxY2ZmLzEvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xOTA5NTAtZDQxYy00ZDI2LTg1YmMtNTE4NGI1NWYxY2Zm LzEvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvG2k5C3 7EII6pPV4u3p17zM3Ded8eVSn7Vbn0JDuKXXjvvKtW4NjTJHw6hxAV55rYyQURJB B1VPvjZf8Uo/NMvP7D0IaYEDasRFDH6tCuN9yrcrgjaJyH83yW+MweazxDDI3zJE +G1BSxAGAtZ2yKtgcKGyo+re3CLwB7iJhp+M5f7EQkSmZiKcz0L4N4LGIOg4qxHC fT+I8/hzdx0FVrCzdOuaS/ILr8U9lyw2nRcAf8e1deZuJky29jFM6AQcrBEKNhy9 Wu3p+ZkcQltXG18a7Jz5/ltdz/4+OOE5W2cx5hOiBQA2lmk7PP7/ES++Ayk7dZlC 6fZABBc4koXT5Q== -----END CERTIFICATE-----Generated at Tue Dec 23 06:51:13 2025 by rpki-client