This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft (raw, json) Hash identifier: PjKwsPO4eIxfcIpOPmqFEzgOje//5gUx1HaBSoze1+M= Subject key identifier: E6:49:38:51:E2:77:43:25:73:B8:FE:B0:81:8C:34:2A:12:D2:27:7B Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64 Certificate issuer: /CN=27fca5b7a77d887649f68a45c90d667c76500164 Certificate serial: 019B5A88D325555B766457285140F50AA601 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft Manifest number: F4 Signing time: Fri 26 Dec 2025 12:01:14 +0000 Manifest this update: Fri 26 Dec 2025 12:01:14 +0000 Manifest next update: Sat 27 Dec 2025 12:01:14 +0000 Files and hashes: 1: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl (hash: jH9POI+YnHzi9EBMLDRmrZM2vpC9SXtjRuUbwBxFvMc=) 2: g6KZdG6GOmFS1EyUyMBY8rDGjCw.roa (hash: tD7PjxVbS569hHWyN1mFiCS5hizATSbPnq85D7KgzB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d3:25:55:5b:76:64:57:28:51:40:f5:0a:a6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164 Validity Not Before: Dec 26 12:01:14 2025 GMT Not After : Dec 27 12:01:14 2025 GMT Subject: CN=e6493851e277432573b8feb0818c342a12d2277b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:92:a0:4c:1a:04:77:7a:3a:30:68:7a:c5: b4:e9:c4:a1:41:a2:02:14:f3:f9:69:b8:af:17:5f: ab:ee:13:11:3a:5c:75:4b:e4:0a:3d:d5:f7:78:42: 55:28:e3:cc:c0:f7:f4:65:74:13:8b:ca:37:03:ff: 3c:ed:60:fc:75:0d:3a:ab:6c:a5:d0:4e:6d:8c:ee: b1:b6:42:48:c0:11:e1:3a:be:76:48:61:89:f7:e4: da:60:58:72:44:89:a6:08:e8:b8:8b:fb:2b:6a:11: e6:45:15:dd:ec:4d:85:3c:ed:2b:e5:bf:6d:54:35: 76:97:df:bc:6f:7e:4a:72:d8:a5:04:b4:c4:14:30: f6:1d:d2:8d:6f:dc:8b:68:b5:9c:35:13:1b:8f:4b: 95:fd:1f:2e:1d:02:75:5c:ba:f1:9f:b9:b2:e1:b6: 8e:84:a7:0f:07:99:10:c0:de:92:1f:44:7c:8e:c6: 70:56:3a:04:bc:16:7d:42:d6:70:5b:96:91:ca:0e: 21:b7:6a:b4:6b:0c:af:5e:87:23:b7:a9:81:de:1b: cb:90:46:be:cf:2d:b6:3e:7e:8a:a0:ae:0e:86:8c: ff:28:9f:28:74:46:8c:7a:0e:a9:1c:ee:c0:fe:06: ed:89:8b:99:8d:f3:42:c1:43:92:8f:4c:ac:39:80: 64:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:49:38:51:E2:77:43:25:73:B8:FE:B0:81:8C:34:2A:12:D2:27:7B X509v3 Authority Key Identifier: keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cb:ee:3a:63:70:1b:62:82:be:fc:d2:5c:f2:ac:e0:25:16: 9c:9e:96:d3:19:57:d1:7c:39:83:c8:27:bf:a7:64:b5:80:ed: 11:a0:d5:70:96:79:82:63:ee:37:63:86:6d:40:9f:d8:bf:12: a7:15:78:ed:7f:64:2e:e0:dc:2c:f7:a1:b6:2a:2b:54:aa:e6: 28:07:5f:ae:5c:1f:e8:03:6d:47:1b:a0:48:5e:7d:21:04:aa: ea:3e:18:94:24:bc:cd:ba:f8:03:0e:42:a1:a2:0e:45:1d:6d: 88:2a:a9:61:ff:94:95:f1:fd:b3:1e:00:25:f3:a1:0d:eb:b0: 54:21:33:28:89:93:32:da:83:46:fa:c3:c2:94:86:dd:50:00: ee:c6:88:82:c2:db:0e:1a:2a:e3:f8:a4:3e:39:4b:3a:58:33: fb:5f:f7:dc:45:55:7d:e2:6b:07:3f:7f:2c:5d:e6:24:27:ef: 7a:b5:2d:ea:24:18:ba:ad:55:82:1a:bd:d6:85:87:15:25:a4: 3b:ec:6d:15:4c:24:f0:07:3a:fb:3f:bd:66:cf:dd:57:17:8f: 36:ee:6e:16:97:b2:9e:20:29:07:2d:ee:3d:09:f1:82:0b:1f: 0d:1a:5d:88:bf:68:59:22:c7:e4:b6:6f:12:59:dd:98:10:07: 70:14:78:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNMlVVt2ZFcoUUD1CqYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZmNhNWI3YTc3ZDg4NzY0OWY2OGE0NWM5MGQ2NjdjNzY1 MDAxNjQwHhcNMjUxMjI2MTIwMTE0WhcNMjUxMjI3MTIwMTE0WjAzMTEwLwYDVQQD EyhlNjQ5Mzg1MWUyNzc0MzI1NzNiOGZlYjA4MThjMzQyYTEyZDIyNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/6SoEwaBHd6OjBoesW06cShQaIC FPP5abivF1+r7hMROlx1S+QKPdX3eEJVKOPMwPf0ZXQTi8o3A/887WD8dQ06q2yl 0E5tjO6xtkJIwBHhOr52SGGJ9+TaYFhyRImmCOi4i/srahHmRRXd7E2FPO0r5b9t VDV2l9+8b35KctilBLTEFDD2HdKNb9yLaLWcNRMbj0uV/R8uHQJ1XLrxn7my4baO hKcPB5kQwN6SH0R8jsZwVjoEvBZ9QtZwW5aRyg4ht2q0awyvXocjt6mB3hvLkEa+ zy22Pn6KoK4Ohoz/KJ8odEaMeg6pHO7A/gbtiYuZjfNCwUOSj0ysOYBkCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZJOFHid0Mlc7j+sIGMNCoS0id7MB8GA1UdIwQY MBaAFCf8pbenfYh2SfaKRckNZnx2UAFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjct YzFmYWUwMDg4OWRiLzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjctYzFmYWUwMDg4OWRi LzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8vuOmNw G2KCvvzSXPKs4CUWnJ6W0xlX0Xw5g8gnv6dktYDtEaDVcJZ5gmPuN2OGbUCf2L8S pxV47X9kLuDcLPehtiorVKrmKAdfrlwf6ANtRxugSF59IQSq6j4YlCS8zbr4Aw5C oaIORR1tiCqpYf+UlfH9sx4AJfOhDeuwVCEzKImTMtqDRvrDwpSG3VAA7saIgsLb Dhoq4/ikPjlLOlgz+1/33EVVfeJrBz9/LF3mJCfverUt6iQYuq1Vghq91oWHFSWk O+xtFUwk8Ac6+z+9Zs/dVxePNu5uFpeyniApBy3uPQnxggsfDRpdiL9oWSLH5LZv ElndmBAHcBR4YA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:24 2025 by rpki-client