This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json) Hash identifier: AES+Ia1pcGqedI44pwO+ZWJTc3goChFmioKz8P0RwhM= Subject key identifier: B6:DB:1F:FF:48:1C:A3:C1:A8:3B:6C:AC:E8:DA:A4:47:CA:D2:CD:D6 Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Certificate serial: 019B22BE3445EBDC1AECBFBDB0E5E1CA3066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft Manifest number: 0FA8 Signing time: Mon 15 Dec 2025 16:00:49 +0000 Manifest this update: Mon 15 Dec 2025 16:00:49 +0000 Manifest next update: Tue 16 Dec 2025 16:00:49 +0000 Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: tPH65vOcHETMaFskGTNV6wN+Y+duda05wfEECaGxfVY=) 2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=) 3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=) 4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:34:45:eb:dc:1a:ec:bf:bd:b0:e5:e1:ca:30:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Validity Not Before: Dec 15 16:00:49 2025 GMT Not After : Dec 16 16:00:49 2025 GMT Subject: CN=b6db1fff481ca3c1a83b6cace8daa447cad2cdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:f8:29:ec:7a:48:9b:45:05:c7:01:50:e8: 13:4b:c8:94:1a:99:ec:28:b6:0a:c3:14:2a:69:b4: b9:20:a2:f4:96:61:8d:dc:27:69:65:11:1b:57:6a: 79:20:f8:ea:f4:13:08:8e:79:c1:10:20:36:a0:90: d7:7d:64:07:fa:e1:93:42:77:cb:e2:42:e6:02:af: 2f:71:5a:18:a9:98:bf:9f:c3:20:8e:2f:e4:c6:91: 6d:84:a7:33:89:0d:b9:ca:27:6c:e2:57:cb:98:49: 69:5c:a6:ca:ac:93:86:49:76:25:b2:8c:ca:c1:62: 03:f2:3c:85:27:f2:58:31:86:90:86:45:e4:aa:3f: f4:83:32:af:00:05:5d:7f:91:f9:4c:18:15:da:de: 4f:97:d4:e3:92:e5:85:87:44:f9:0f:d0:bc:16:d0: 7b:33:55:28:0b:4c:30:5e:f2:d5:ff:6c:67:4d:78: d1:df:17:c5:4c:11:b1:51:12:c0:47:be:e8:45:ee: d1:24:01:64:4d:ae:6b:0f:2a:b0:df:72:82:30:a4: 65:1c:f8:8d:53:95:6c:0b:a3:56:52:2e:87:81:63: df:e6:a4:ea:98:b0:7b:95:c8:07:47:bd:e7:c1:3f: c4:4a:94:ca:44:07:27:13:82:5f:ca:67:88:3a:16: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DB:1F:FF:48:1C:A3:C1:A8:3B:6C:AC:E8:DA:A4:47:CA:D2:CD:D6 X509v3 Authority Key Identifier: keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4a:d4:54:ca:bf:17:6f:91:a6:7a:29:62:f5:ca:45:e3:2b: 7f:35:20:f8:3a:71:e0:15:fb:c9:6e:bd:bc:3a:d0:dc:54:88: 46:bc:05:3b:f7:8b:7f:f0:09:a6:bc:4a:62:be:7d:2c:04:14: 0e:e2:56:26:d2:ea:f5:8a:c7:69:57:91:d9:c3:40:92:eb:62: 2c:5b:18:a0:0d:46:0b:3f:3d:0d:74:08:62:8e:cb:2c:76:ae: f5:42:04:db:69:97:de:1d:5e:43:56:b8:6b:24:b0:49:18:e1: 48:65:be:ba:44:0e:b8:73:0d:72:77:4e:c7:d3:bd:c3:a7:70: b4:e0:52:59:a9:07:29:4b:9a:07:1a:8b:ef:36:6d:8f:79:2e: 9e:2b:50:50:e9:37:44:f8:98:35:44:ee:0a:85:6f:ce:77:74: 94:00:0c:6c:c5:3d:09:6a:56:da:d5:85:9b:54:25:be:50:a6: 5b:7d:c9:09:aa:e4:81:f0:38:5b:e1:20:34:10:ca:7d:71:d8: 27:c8:e6:e7:83:7e:e9:17:8d:fb:34:ef:06:4f:bf:89:60:1c: 97:4a:f2:1d:0e:f9:1d:4a:8d:79:ff:47:67:c7:25:c4:e4:42: a2:78:3a:a6:65:d5:8e:45:2a:54:91:57:05:c0:92:26:eb:15: 0c:a2:fb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivjRF69wa7L+9sOXhyjBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3Zjk1OGMzYjc1OWIyYzc4OTZmNWVkNjYzZTgwNzc4MWYz ZmY1YTIwHhcNMjUxMjE1MTYwMDQ5WhcNMjUxMjE2MTYwMDQ5WjAzMTEwLwYDVQQD EyhiNmRiMWZmZjQ4MWNhM2MxYTgzYjZjYWNlOGRhYTQ0N2NhZDJjZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAv4Kex6SJtFBccBUOgTS8iUGpns KLYKwxQqabS5IKL0lmGN3CdpZREbV2p5IPjq9BMIjnnBECA2oJDXfWQH+uGTQnfL 4kLmAq8vcVoYqZi/n8Mgji/kxpFthKcziQ25yids4lfLmElpXKbKrJOGSXYlsozK wWID8jyFJ/JYMYaQhkXkqj/0gzKvAAVdf5H5TBgV2t5Pl9TjkuWFh0T5D9C8FtB7 M1UoC0wwXvLV/2xnTXjR3xfFTBGxURLAR77oRe7RJAFkTa5rDyqw33KCMKRlHPiN U5VsC6NWUi6HgWPf5qTqmLB7lcgHR73nwT/ESpTKRAcnE4JfymeIOhaevQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbbH/9IHKPBqDtsrOjapEfK0s3WMB8GA1UdIwQY MBaAFCf5WMO3WbLHiW9e1mPoB3gfP/WiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYt YjI5MTA3Yjk4YWNjLzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYtYjI5MTA3Yjk4YWNj LzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALErUVMq/ F2+RpnopYvXKReMrfzUg+Dpx4BX7yW69vDrQ3FSIRrwFO/eLf/AJprxKYr59LAQU DuJWJtLq9YrHaVeR2cNAkutiLFsYoA1GCz89DXQIYo7LLHau9UIE22mX3h1eQ1a4 aySwSRjhSGW+ukQOuHMNcndOx9O9w6dwtOBSWakHKUuaBxqL7zZtj3kunitQUOk3 RPiYNUTuCoVvznd0lAAMbMU9CWpW2tWFm1QlvlCmW33JCarkgfA4W+EgNBDKfXHY J8jm54N+6ReN+zTvBk+/iWAcl0ryHQ75HUqNef9HZ8clxORCong6pmXVjkUqVJFX BcCSJusVDKL73w== -----END CERTIFICATE-----Generated at Tue Dec 16 00:09:37 2025 by rpki-client