This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json) Hash identifier: 1F1t/G71x7uPB62uGLVcscvqpw+1raHY0Hq/zl7xzjU= Subject key identifier: CC:51:78:DE:0D:5E:6B:26:CD:32:8F:35:96:41:F9:17:6D:02:37:38 Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Certificate serial: 019B0DB739AC4625DF772B24B49D76C8931E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft Manifest number: 01F8 Signing time: Thu 11 Dec 2025 14:01:09 +0000 Manifest this update: Thu 11 Dec 2025 14:01:09 +0000 Manifest next update: Fri 12 Dec 2025 14:01:09 +0000 Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: FLXe82j/hodFDFzCobT0FNe07bFYS0KlMWvgand0Up4=) 2: tSgs3XUIsHh7rxyC6KI4dfFcjtI.roa (hash: aP/8w3eyX9ywh3RSZ1FyfaCe/EGfUTND1DeYuxP49kA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:39:ac:46:25:df:77:2b:24:b4:9d:76:c8:93:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Validity Not Before: Dec 11 14:01:09 2025 GMT Not After : Dec 12 14:01:09 2025 GMT Subject: CN=cc5178de0d5e6b26cd328f359641f9176d023738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:2b:95:c4:e1:13:94:c1:c1:56:6b:34:d0: 13:80:36:32:22:60:c2:62:c7:2d:77:11:0d:06:26: e4:76:56:bf:f1:8f:75:a1:5e:ce:03:1f:25:34:26: 27:f3:e1:fc:66:29:bd:4d:a5:4e:3d:15:fb:be:16: 8e:75:5b:fb:29:fb:ef:7b:5b:65:cb:bf:be:75:8f: 2e:ca:c8:c1:91:38:f0:26:4f:60:74:1c:d0:f6:3d: 80:1d:40:13:cc:3b:b2:9c:bf:64:c4:e8:8b:7e:d2: 57:ff:5e:40:a0:33:5e:95:f7:34:57:3d:a9:97:af: 01:df:7b:2c:e8:8d:5c:e2:cc:18:4e:b0:94:16:66: b2:0f:90:59:98:b5:eb:09:b7:1f:3c:1e:69:f5:06: b4:19:cc:10:22:11:98:6a:7a:15:6b:82:9f:34:81: 01:06:d8:3d:c9:3b:ea:c4:27:7c:e0:90:63:da:d7: 75:4e:56:ed:3f:5c:2a:8f:00:00:45:24:bc:aa:ab: e2:a9:dc:70:4a:6d:97:ed:54:88:3b:ce:2e:09:c0: cf:c3:57:df:50:17:54:30:8b:19:59:47:92:ba:3d: 54:4a:63:02:d6:56:3a:2e:bc:17:b8:23:75:c1:b6: 38:74:af:63:87:ac:b3:32:84:2a:9e:79:7b:5b:8b: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:51:78:DE:0D:5E:6B:26:CD:32:8F:35:96:41:F9:17:6D:02:37:38 X509v3 Authority Key Identifier: keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a8:22:4c:48:f8:0b:c7:84:8d:58:ee:44:25:59:75:99:3f: 81:8a:10:5d:48:66:1a:42:fe:2b:98:30:41:30:5b:11:e4:d3: 06:63:3f:b0:4d:8c:63:dd:98:be:a7:40:72:bf:7e:5c:47:7f: c9:63:f2:20:13:e6:2e:15:d1:65:dc:0c:93:dd:74:26:65:41: d4:2f:80:10:05:d7:5d:06:78:77:7d:e7:ea:ab:83:2b:4f:ae: fd:2c:10:e5:cf:15:e8:7f:5f:30:33:74:e2:fc:cb:15:4a:8d: 39:f1:fc:63:e8:b2:40:30:74:d9:71:95:2e:9d:25:be:3b:22: ba:80:0a:24:c0:ff:44:1b:dc:3e:d2:9a:5c:3c:ae:d5:52:12: 8a:9c:bf:39:7f:82:86:33:7c:da:ff:5d:03:fb:19:13:12:0d: 84:77:c2:45:af:97:49:21:0f:e8:c9:71:05:0d:b0:f2:5a:54: b3:c7:87:4a:76:3c:c3:0e:d9:1a:3f:1c:6d:13:02:2c:21:88: 6b:9c:60:0a:d3:c5:f5:e2:0e:e5:9e:aa:9a:8b:7a:2e:c0:11: e4:49:36:b7:8d:d5:ea:44:79:4c:10:68:08:78:f5:9e:32:00: 68:bf:61:a8:db:48:f0:f5:0d:b4:9a:e8:e7:b5:d7:c7:fa:8a: 4e:88:94:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtzmsRiXfdysktJ12yJMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDY5ZjE4ODNkY2NjOTNhNzg2OWM0MWVjM2U5NzJmZjVm ZDRiMDEwHhcNMjUxMjExMTQwMTA5WhcNMjUxMjEyMTQwMTA5WjAzMTEwLwYDVQQD EyhjYzUxNzhkZTBkNWU2YjI2Y2QzMjhmMzU5NjQxZjkxNzZkMDIzNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIMrlcThE5TBwVZrNNATgDYyImDC YsctdxENBibkdla/8Y91oV7OAx8lNCYn8+H8Zim9TaVOPRX7vhaOdVv7Kfvve1tl y7++dY8uysjBkTjwJk9gdBzQ9j2AHUATzDuynL9kxOiLftJX/15AoDNelfc0Vz2p l68B33ss6I1c4swYTrCUFmayD5BZmLXrCbcfPB5p9Qa0GcwQIhGYanoVa4KfNIEB Btg9yTvqxCd84JBj2td1TlbtP1wqjwAARSS8qqviqdxwSm2X7VSIO84uCcDPw1ff UBdUMIsZWUeSuj1USmMC1lY6LrwXuCN1wbY4dK9jh6yzMoQqnnl7W4vVKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxReN4NXmsmzTKPNZZB+RdtAjc4MB8GA1UdIwQY MBaAFCcGnxiD3MyTp4acQew+ly/1/UsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgt MDQ2MmI2NDg0ZDYwLzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgtMDQ2MmI2NDg0ZDYw LzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKgiTEj4 C8eEjVjuRCVZdZk/gYoQXUhmGkL+K5gwQTBbEeTTBmM/sE2MY92YvqdAcr9+XEd/ yWPyIBPmLhXRZdwMk910JmVB1C+AEAXXXQZ4d33n6quDK0+u/SwQ5c8V6H9fMDN0 4vzLFUqNOfH8Y+iyQDB02XGVLp0lvjsiuoAKJMD/RBvcPtKaXDyu1VISipy/OX+C hjN82v9dA/sZExINhHfCRa+XSSEP6MlxBQ2w8lpUs8eHSnY8ww7ZGj8cbRMCLCGI a5xgCtPF9eIO5Z6qmot6LsAR5Ek2t43V6kR5TBBoCHj1njIAaL9hqNtI8PUNtJro 57XXx/qKToiUdQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:17 2025 by rpki-client