This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json) Hash identifier: 2TamT1eO0xqgEITYXnttcJct71+owbWMOS4R1k/+sMg= Subject key identifier: 20:F7:D6:EA:02:0A:B4:55:13:13:65:64:FA:11:3A:95:8B:14:F1:63 Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb Certificate serial: 019B32D715030B54EF52255811ECAB57E36A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft Manifest number: 0D44 Signing time: Thu 18 Dec 2025 19:01:54 +0000 Manifest this update: Thu 18 Dec 2025 19:01:54 +0000 Manifest next update: Fri 19 Dec 2025 19:01:54 +0000 Files and hashes: 1: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: vTYmkmLxe0gF5r5K1eKwX7NN64S1G2hmR0qdQrDY+Hg=) 2: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (hash: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:15:03:0b:54:ef:52:25:58:11:ec:ab:57:e3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb Validity Not Before: Dec 18 19:01:54 2025 GMT Not After : Dec 19 19:01:54 2025 GMT Subject: CN=20f7d6ea020ab45513136564fa113a958b14f163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:12:fc:4a:08:be:ba:81:e4:2d:79:27:5b: b1:23:71:34:af:27:e6:6a:9b:9b:7e:e3:97:48:b2: 67:83:06:c7:15:c9:10:27:1a:ee:89:a9:1e:75:b9: 4a:50:1b:10:df:80:78:4b:35:45:f2:ec:cb:06:d2: da:de:1d:96:9d:64:01:df:ff:d3:2d:9e:e1:74:d7: e0:05:1d:a9:7a:bc:57:3d:c2:23:a8:23:eb:32:b1: ea:1b:7b:10:34:fb:66:e3:44:80:e0:84:8b:8d:7b: 82:c4:f1:87:5b:fb:e8:70:a6:a9:b8:5d:78:11:f4: 23:f7:f9:af:ec:bc:b3:4c:f8:29:e3:fb:e0:e0:59: 13:3c:10:9a:33:3d:42:4b:71:0f:aa:82:ce:9b:b1: 6d:77:ab:1b:41:88:a9:c7:37:4f:4b:73:5f:47:09: 98:bd:e8:1a:94:f4:d8:2a:08:19:db:d6:a5:af:94: 66:89:3d:9e:24:ea:d2:a1:1b:3a:2b:ff:d5:19:30: 8a:c4:e8:68:af:a0:f3:de:4c:d0:6b:3f:ab:00:3d: 20:b0:1e:5f:06:32:94:9c:07:ec:a9:48:e5:22:b9: 78:f3:52:18:8b:c4:9b:82:e4:79:30:35:4f:74:54: 81:c3:57:76:d2:61:c7:c7:b4:17:2e:4d:9e:fb:d2: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F7:D6:EA:02:0A:B4:55:13:13:65:64:FA:11:3A:95:8B:14:F1:63 X509v3 Authority Key Identifier: keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f4:f1:b8:d4:0a:7e:44:46:0d:91:f0:72:52:a4:8b:8e:7c: c9:a8:9e:ba:11:e5:5e:27:ba:a1:61:4f:76:b1:45:46:48:06: a3:68:b8:df:47:63:e3:5a:ce:85:1b:b3:a0:cd:2b:53:58:4c: 2e:c8:3e:b2:02:06:95:52:be:eb:14:87:d3:27:5e:97:6c:33: c1:82:e2:42:5c:04:6e:73:36:d1:51:e9:a9:4b:6c:bd:80:e5: 9d:6f:91:17:1f:9f:f2:b7:e4:30:7c:7f:74:85:fe:5b:7c:4c: b2:61:58:01:ed:6e:29:16:49:00:61:3e:d8:f9:fd:c4:3e:a3: 41:d3:40:55:97:42:b2:5d:72:67:63:48:c3:21:f1:b1:0d:68: 6d:7e:94:18:07:19:88:9f:7e:8a:55:79:19:55:a3:9a:b4:26: ce:18:19:e4:fc:8e:5e:0c:4e:de:01:59:6e:4d:f6:7e:6d:7e: ed:c8:9b:30:24:fa:41:0e:a3:32:11:0e:b9:ae:ab:80:7a:c3: 30:98:53:04:52:99:31:14:74:0a:75:4f:98:ac:53:c7:24:f1: 08:53:63:b7:fa:ba:09:88:a2:75:36:1d:73:bd:c8:a5:b8:42: 9c:31:56:22:cc:62:fb:f2:63:46:93:9d:b3:13:c3:31:97:ae: ab:f0:1c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1xUDC1TvUiVYEeyrV+NqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGVkMWQ5MGM0ZDUyYjY4NzEwMjNiYzcxMjk2ZDA4YTk4 YzRjZGIwHhcNMjUxMjE4MTkwMTU0WhcNMjUxMjE5MTkwMTU0WjAzMTEwLwYDVQQD EygyMGY3ZDZlYTAyMGFiNDU1MTMxMzY1NjRmYTExM2E5NThiMTRmMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSgS/EoIvrqB5C15J1uxI3E0ryfm apubfuOXSLJngwbHFckQJxruiakedblKUBsQ34B4SzVF8uzLBtLa3h2WnWQB3//T LZ7hdNfgBR2perxXPcIjqCPrMrHqG3sQNPtm40SA4ISLjXuCxPGHW/vocKapuF14 EfQj9/mv7LyzTPgp4/vg4FkTPBCaMz1CS3EPqoLOm7Ftd6sbQYipxzdPS3NfRwmY vegalPTYKggZ29alr5RmiT2eJOrSoRs6K//VGTCKxOhor6Dz3kzQaz+rAD0gsB5f BjKUnAfsqUjlIrl481IYi8SbguR5MDVPdFSBw1d20mHHx7QXLk2e+9IKxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD31uoCCrRVExNlZPoROpWLFPFjMB8GA1UdIwQY MBaAFCfe0dkMTVK2hxAjvHEpbQipjEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMzgyMTItMzhhNy00NjhkLWI4NzQt MzUxYWI5ZjIzNmIwLzEvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMzgyMTItMzhhNy00NjhkLWI4NzQtMzUxYWI5ZjIzNmIw LzEvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfTxuNQK fkRGDZHwclKki458yaieuhHlXie6oWFPdrFFRkgGo2i430dj41rOhRuzoM0rU1hM Lsg+sgIGlVK+6xSH0ydel2wzwYLiQlwEbnM20VHpqUtsvYDlnW+RFx+f8rfkMHx/ dIX+W3xMsmFYAe1uKRZJAGE+2Pn9xD6jQdNAVZdCsl1yZ2NIwyHxsQ1obX6UGAcZ iJ9+ilV5GVWjmrQmzhgZ5PyOXgxO3gFZbk32fm1+7cibMCT6QQ6jMhEOua6rgHrD MJhTBFKZMRR0CnVPmKxTxyTxCFNjt/q6CYiidTYdc73IpbhCnDFWIsxi+/JjRpOd sxPDMZeuq/AcAA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:33:28 2025 by rpki-client