This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft File: J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json) Hash identifier: 2cD9swo/T4Q9Qf+ePeVevx5zqAlf8sL/cYRJRwjGvAs= Subject key identifier: 9C:87:EB:6B:E8:20:49:71:1E:9F:BC:3B:85:4D:47:50:46:D4:D2:9F Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF Certificate issuer: /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df Certificate serial: 019B337B24E54BE0781C8B99D903F23FEA80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft Manifest number: 0DB2 Signing time: Thu 18 Dec 2025 22:01:06 +0000 Manifest this update: Thu 18 Dec 2025 22:01:06 +0000 Manifest next update: Fri 19 Dec 2025 22:01:06 +0000 Files and hashes: 1: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: /n+OYIsUJJa4rHnTfZ0vD1DV3v2VzUms3233NAXmVcU=) 2: _BsLA-Yq0byQhwlqjwrfokOt_ao.roa (hash: nUVtATfYPG2WeBzHlW5fiB+hmlpSz5V9uTVR1MUQR8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:24:e5:4b:e0:78:1c:8b:99:d9:03:f2:3f:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df Validity Not Before: Dec 18 22:01:06 2025 GMT Not After : Dec 19 22:01:06 2025 GMT Subject: CN=9c87eb6be82049711e9fbc3b854d475046d4d29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:00:39:4e:99:79:de:86:ef:c6:95:24:98: 65:9c:dc:ad:bb:2c:92:22:6e:46:75:07:36:72:68: b4:5d:d7:4c:f4:ee:a4:0d:42:d2:9f:aa:cc:2e:5e: da:56:9b:67:ea:c7:83:d4:3d:24:38:df:10:11:56: 9f:2f:7c:86:49:6f:5e:1a:ee:3d:a2:e2:fd:1d:db: 97:9c:cd:44:48:a8:92:40:80:23:2e:4f:e1:6c:85: 30:ad:f1:66:3e:18:83:93:d9:df:a4:46:60:a3:7a: 9d:8f:25:82:98:69:25:fb:60:37:91:ee:e8:de:de: fd:1c:62:19:c8:56:02:b5:5d:15:49:47:3a:2b:8d: 82:9f:91:00:c8:55:99:66:13:29:f7:52:7c:df:20: 22:b0:bd:6d:94:bf:1f:01:e8:10:23:d0:89:5a:56: 6d:9c:c9:99:20:75:f9:fb:83:85:6b:10:9d:46:07: f6:0e:ab:93:fa:09:a9:b6:8b:71:91:35:71:88:7f: f1:15:c1:18:57:46:b3:e9:3f:99:29:cc:d1:44:6b: 09:04:cf:3c:0b:d8:ac:98:97:d7:46:ce:10:39:53: d7:cd:74:66:7f:05:36:7e:b3:82:f3:41:2c:4e:eb: b5:7d:d3:a2:42:e8:8a:67:65:90:a3:ad:df:cd:78: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:87:EB:6B:E8:20:49:71:1E:9F:BC:3B:85:4D:47:50:46:D4:D2:9F X509v3 Authority Key Identifier: keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:38:22:02:d4:ba:ce:ea:c0:40:7c:58:78:2e:ae:17:fc:0c: ef:f8:81:de:3e:62:5b:59:90:ce:fa:ec:3b:1c:b6:0e:e1:e3: c0:49:ab:dd:aa:3b:2d:9e:c8:83:43:1c:18:41:73:ba:8c:04: f6:65:e4:9d:49:e9:53:53:5a:c5:42:c5:22:8f:3b:34:88:5c: 08:35:0f:ae:ec:67:ea:35:fe:6e:b4:46:35:ce:96:61:d7:52: d2:40:53:e5:e9:e0:6c:e6:cc:0f:b9:d7:24:7a:3e:d9:8e:c3: aa:1c:72:8c:0e:6c:a2:5c:53:a1:b7:f0:52:1b:19:4a:b4:29: 0d:4d:77:b7:f9:7f:e2:5c:e6:43:50:b0:f8:2d:68:bc:d9:17: 6c:ee:77:8e:15:42:c4:ce:25:59:44:76:ed:bc:c9:d1:d6:9c: f3:84:44:02:e5:0f:1b:44:f5:32:4b:31:68:bf:c8:2f:42:07: 2b:8e:bc:24:9e:0f:82:ab:f6:83:9e:77:5a:64:79:9b:08:45: de:58:1d:8b:c3:f1:f5:1a:62:1a:9f:c5:6d:52:33:7c:9a:08: 04:dc:a8:d4:49:80:5b:6a:cb:d3:77:92:33:3f:1b:c6:c7:11: 38:6d:6b:99:21:8e:57:52:3a:c2:a4:78:da:b8:cc:70:ce:18: 95:31:81:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeyTlS+B4HIuZ2QPyP+qAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NWFhYjdkZmJiMTUyYTY0NmFkZjMyNzNiMzFhYTVkZGU2 NGExZGYwHhcNMjUxMjE4MjIwMTA2WhcNMjUxMjE5MjIwMTA2WjAzMTEwLwYDVQQD Eyg5Yzg3ZWI2YmU4MjA0OTcxMWU5ZmJjM2I4NTRkNDc1MDQ2ZDRkMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmYAOU6Zed6G78aVJJhlnNytuyyS Im5GdQc2cmi0XddM9O6kDULSn6rMLl7aVptn6seD1D0kON8QEVafL3yGSW9eGu49 ouL9HduXnM1ESKiSQIAjLk/hbIUwrfFmPhiDk9nfpEZgo3qdjyWCmGkl+2A3ke7o 3t79HGIZyFYCtV0VSUc6K42Cn5EAyFWZZhMp91J83yAisL1tlL8fAegQI9CJWlZt nMmZIHX5+4OFaxCdRgf2DquT+gmptotxkTVxiH/xFcEYV0az6T+ZKczRRGsJBM88 C9ismJfXRs4QOVPXzXRmfwU2frOC80EsTuu1fdOiQuiKZ2WQo63fzXjNiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyH62voIElxHp+8O4VNR1BG1NKfMB8GA1UdIwQY MBaAFCdaq337sVKmRq3zJzsxql3eZKHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUt MGQwZDdjMDE4OWFkLzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUtMGQwZDdjMDE4OWFk LzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETgiAtS6 zurAQHxYeC6uF/wM7/iB3j5iW1mQzvrsOxy2DuHjwEmr3ao7LZ7Ig0McGEFzuowE 9mXknUnpU1NaxULFIo87NIhcCDUPruxn6jX+brRGNc6WYddS0kBT5engbObMD7nX JHo+2Y7DqhxyjA5solxTobfwUhsZSrQpDU13t/l/4lzmQ1Cw+C1ovNkXbO53jhVC xM4lWUR27bzJ0dac84REAuUPG0T1MksxaL/IL0IHK468JJ4Pgqv2g553WmR5mwhF 3lgdi8Px9RpiGp/FbVIzfJoIBNyo1EmAW2rL03eSMz8bxscROG1rmSGOV1I6wqR4 2rjMcM4YlTGBBA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:13:50 2025 by rpki-client