This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft File: J_g-VravdgCD61S7W24Z3bQd2Io.mft (raw, json) Hash identifier: SQuSvzzoWaqTmQZQFI4virsP/Z5efGr57vgnWx/W2M4= Subject key identifier: 45:B3:BE:A4:6F:E7:E5:11:C8:C8:1B:3C:89:89:E3:72:E4:0E:B4:BC Authority key identifier: 27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A Certificate issuer: /CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a Certificate serial: 019B101449B1192D26CDC580BB5BB248A581 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft Manifest number: 13C2 Signing time: Fri 12 Dec 2025 01:02:03 +0000 Manifest this update: Fri 12 Dec 2025 01:02:03 +0000 Manifest next update: Sat 13 Dec 2025 01:02:03 +0000 Files and hashes: 1: J_g-VravdgCD61S7W24Z3bQd2Io.crl (hash: p/ls/1UnWwsXp8OLISCNcU+ko+cZtznR+mzbSHZgA1o=) 2: tqiyhAwG9vZGTuCBcB3Ep8Bsk0k.roa (hash: ViHxSsFsnpASXarlQUAHnVHJN7UM7cJ/sEWxYKdVpew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:49:b1:19:2d:26:cd:c5:80:bb:5b:b2:48:a5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a Validity Not Before: Dec 12 01:02:03 2025 GMT Not After : Dec 13 01:02:03 2025 GMT Subject: CN=45b3bea46fe7e511c8c81b3c8989e372e40eb4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:d1:ed:fd:77:6c:a7:47:79:1d:e6:18:33: 44:a6:1e:0f:2f:62:26:da:53:e3:1f:92:20:56:16: 1b:2d:57:06:24:bb:23:5a:9c:90:41:7e:91:ea:fb: ae:10:c9:ca:c3:b7:03:71:a9:ec:7b:d8:89:84:b5: 08:a6:ae:d8:5e:51:8e:53:bb:08:48:44:db:54:31: 69:69:19:3e:70:cd:67:47:51:b0:2a:e1:c8:2f:d9: 65:80:f8:16:c5:98:64:80:21:dd:4d:f7:f4:9e:d7: d8:32:af:4b:07:f3:d3:28:85:e3:ca:f0:82:74:07: b2:40:b7:fc:46:84:3a:f3:06:4b:86:75:2d:4b:7f: 4d:8b:63:0f:ca:05:4d:4f:a9:2a:52:6e:d9:33:44: 41:8e:6e:0f:52:e3:b3:bf:40:06:6a:6a:eb:89:3e: 61:bf:a0:7f:fa:b9:42:f2:41:d5:3e:4d:ac:7d:8f: 20:e6:9a:26:0f:61:ad:c1:70:6d:85:0a:f2:f3:68: 9d:10:5c:18:41:a2:1e:3f:b8:ca:13:a2:b0:00:fc: 69:e8:5f:62:0f:36:6b:95:bc:8b:b7:e4:07:67:b0: 05:9d:d2:e4:cc:24:f2:c4:b2:5a:76:d8:d1:75:5a: 92:bb:9f:6a:b6:ae:7c:1e:e6:11:d7:54:0d:ff:3a: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B3:BE:A4:6F:E7:E5:11:C8:C8:1B:3C:89:89:E3:72:E4:0E:B4:BC X509v3 Authority Key Identifier: keyid:27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:49:29:2f:d1:69:e3:03:88:a4:59:96:93:c3:ba:a2:5f:87: 3a:75:47:27:62:0d:41:5c:01:de:2d:15:c8:7f:ab:49:b3:2d: 78:a0:0d:38:42:4f:35:2b:29:da:7c:66:2d:da:f2:70:d8:95: 2a:7f:ea:17:9b:39:50:8a:60:35:94:99:ed:da:cd:67:95:98: 42:58:59:ca:09:ed:45:60:88:52:19:45:9d:67:3e:d2:aa:60: c6:4e:f0:60:b2:97:c1:4e:c6:ea:96:0c:85:18:66:0f:ab:5e: 38:cc:90:4b:26:e1:d1:c8:d3:66:8f:17:34:c6:e5:a5:98:b3: 47:cf:9c:57:bb:90:a8:46:b4:a0:d3:c2:c7:a7:89:ee:8e:cb: 01:b7:62:51:6f:4c:db:dd:f5:12:59:f9:a5:79:f2:fa:81:d8: 3f:22:84:5d:c3:6b:28:9e:4f:a0:b7:fd:b2:b2:42:37:be:80: 94:d8:d8:50:f6:23:0f:a4:d3:e0:0f:24:1d:da:96:ea:36:2a: 54:ec:ec:59:2a:25:21:93:c0:69:d1:71:15:d5:43:f5:c0:a6: 6b:c6:13:b6:a4:ef:b0:ea:e0:24:10:0e:57:d5:96:05:1a:e7: 7e:75:f0:c3:ab:3e:47:36:c6:75:85:36:1b:ce:1f:bc:a3:b4: 83:78:e6:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFEmxGS0mzcWAu1uySKWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjgzZTU2YjZhZjc2MDA4M2ViNTRiYjViNmUxOWRkYjQx ZGQ4OGEwHhcNMjUxMjEyMDEwMjAzWhcNMjUxMjEzMDEwMjAzWjAzMTEwLwYDVQQD Eyg0NWIzYmVhNDZmZTdlNTExYzhjODFiM2M4OTg5ZTM3MmU0MGViNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzrR7f13bKdHeR3mGDNEph4PL2Im 2lPjH5IgVhYbLVcGJLsjWpyQQX6R6vuuEMnKw7cDcanse9iJhLUIpq7YXlGOU7sI SETbVDFpaRk+cM1nR1GwKuHIL9llgPgWxZhkgCHdTff0ntfYMq9LB/PTKIXjyvCC dAeyQLf8RoQ68wZLhnUtS39Ni2MPygVNT6kqUm7ZM0RBjm4PUuOzv0AGamrriT5h v6B/+rlC8kHVPk2sfY8g5pomD2GtwXBthQry82idEFwYQaIeP7jKE6KwAPxp6F9i DzZrlbyLt+QHZ7AFndLkzCTyxLJadtjRdVqSu59qtq58HuYR11QN/zrgTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWzvqRv5+URyMgbPImJ43LkDrS8MB8GA1UdIwQY MBaAFCf4Pla2r3YAg+tUu1tuGd20HdiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9nLVZyYXZkZ0NENjFTN1cyNFozYlFkMklvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jMDMwNWUtNTlhMS00YjY3LTllNjEt N2M0ZmUzNjEwMzdhLzEvSl9nLVZyYXZkZ0NENjFTN1cyNFozYlFkMklvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jMDMwNWUtNTlhMS00YjY3LTllNjEtN2M0ZmUzNjEwMzdh LzEvSl9nLVZyYXZkZ0NENjFTN1cyNFozYlFkMklvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUkpL9Fp 4wOIpFmWk8O6ol+HOnVHJ2INQVwB3i0VyH+rSbMteKANOEJPNSsp2nxmLdrycNiV Kn/qF5s5UIpgNZSZ7drNZ5WYQlhZygntRWCIUhlFnWc+0qpgxk7wYLKXwU7G6pYM hRhmD6teOMyQSybh0cjTZo8XNMblpZizR8+cV7uQqEa0oNPCx6eJ7o7LAbdiUW9M 2931Eln5pXny+oHYPyKEXcNrKJ5PoLf9srJCN76AlNjYUPYjD6TT4A8kHdqW6jYq VOzsWSolIZPAadFxFdVD9cCma8YTtqTvsOrgJBAOV9WWBRrnfnXww6s+RzbGdYU2 G84fvKO0g3jmng== -----END CERTIFICATE-----Generated at Fri Dec 12 03:19:46 2025 by rpki-client