This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json) Hash identifier: 1jxX2GTEgraUAEvhl644n/NDLf/I7kgjlzkqeDoNgqY= Subject key identifier: EE:13:66:25:BE:B8:17:DF:8C:88:D6:D8:2E:C1:07:59:7A:BF:D7:58 Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae Certificate serial: 019B5ABF43E4E0AAB52C70538A1CDEE302C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft Manifest number: 1366 Signing time: Fri 26 Dec 2025 13:00:42 +0000 Manifest this update: Fri 26 Dec 2025 13:00:42 +0000 Manifest next update: Sat 27 Dec 2025 13:00:42 +0000 Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: jepQnwlhkSJ8me6FFFy23rO7CA4h5EeZkEt5c6tgQDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:43:e4:e0:aa:b5:2c:70:53:8a:1c:de:e3:02:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae Validity Not Before: Dec 26 13:00:42 2025 GMT Not After : Dec 27 13:00:42 2025 GMT Subject: CN=ee136625beb817df8c88d6d82ec107597abfd758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:89:f7:ad:d0:48:b8:37:b8:d9:7c:69:d1:bb: 49:ef:8c:ce:1a:a6:e2:ac:9a:15:b9:f6:54:21:9b: 35:08:72:73:97:95:1d:a4:38:1d:ea:d3:51:44:d4: 8b:4b:96:60:ff:22:da:27:cb:16:74:fd:79:bb:1e: 84:06:61:d1:4e:f9:14:91:4d:77:8e:43:58:89:3b: 99:68:56:bf:b6:70:80:92:2f:5f:33:b9:a2:9b:a9: e3:68:72:8a:94:f3:ba:e7:dc:77:cb:e8:c1:bb:d4: a8:81:a2:fe:94:0f:3d:f4:2c:3f:28:ee:96:a6:54: 2a:1e:09:c2:95:25:47:60:b3:c3:73:ed:03:59:9e: f2:bc:12:31:73:30:65:85:a2:58:e6:07:15:84:30: 54:9e:f0:ba:2e:8c:bc:21:55:62:1f:31:b0:24:9b: 91:7b:54:8d:29:15:c7:4e:50:a9:bb:81:ca:61:2d: d0:06:ae:6d:4b:7f:33:2a:26:ff:b8:56:d5:fc:a9: a6:88:c8:aa:6f:6e:d0:f6:9d:d5:5e:b0:07:30:03: 2b:0a:0c:ff:20:c5:4d:31:0f:ba:cb:b4:69:e6:68: 3e:9c:8b:86:a7:af:14:82:10:51:c8:13:c3:85:1f: 38:70:f6:dc:96:52:ab:22:57:d1:57:e9:47:fb:c4: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:13:66:25:BE:B8:17:DF:8C:88:D6:D8:2E:C1:07:59:7A:BF:D7:58 X509v3 Authority Key Identifier: keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e8:7b:4a:5b:e1:0b:38:d7:02:78:ef:70:f5:09:c8:61:ab: f1:16:be:cc:4f:4a:39:d3:b8:26:f6:e6:a3:4f:c4:3c:b5:b3: 00:67:0b:11:89:2a:6d:a3:5e:2e:d9:ff:19:39:73:76:8e:50: 32:1a:a7:14:04:9f:3d:a6:95:09:83:01:7a:69:67:cf:8d:14: d2:a0:34:97:6f:d4:d3:91:76:e6:e3:ef:a3:5e:4b:71:e1:ce: 1a:02:bd:1d:36:dc:15:07:05:b8:8a:5e:5c:86:18:82:f3:17: 83:e3:71:7f:8a:26:51:61:62:5c:51:a2:67:06:8d:6d:e6:ea: b4:72:e2:93:56:5c:1c:5a:f2:ac:96:ad:d5:4c:e3:79:20:02: 13:4b:3c:2a:15:a2:ec:a8:34:6f:5d:7f:7a:81:61:29:62:11: ac:93:77:cf:9c:18:6f:33:b3:95:02:e5:8f:4d:fb:03:3b:63: d5:d9:29:0f:25:d5:98:24:ef:40:60:33:8e:8d:b5:8a:e0:60: ac:ac:5e:75:06:36:e1:06:fe:d0:6c:cd:f2:77:96:c4:d6:ff: 89:72:5b:64:1b:d3:7a:b2:ee:56:98:70:fb:0e:61:67:d7:69: e8:41:4e:6d:b8:26:74:09:5e:d6:84:8e:7e:87:cd:70:e6:76: 21:dd:a7:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav0Pk4Kq1LHBTihze4wLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3N2IzNjgzMzA3YzZmY2MzMmJlZDE3NzIzMmYxZDQ3NDU0 MWZiYWUwHhcNMjUxMjI2MTMwMDQyWhcNMjUxMjI3MTMwMDQyWjAzMTEwLwYDVQQD EyhlZTEzNjYyNWJlYjgxN2RmOGM4OGQ2ZDgyZWMxMDc1OTdhYmZkNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4n3rdBIuDe42Xxp0btJ74zOGqbi rJoVufZUIZs1CHJzl5UdpDgd6tNRRNSLS5Zg/yLaJ8sWdP15ux6EBmHRTvkUkU13 jkNYiTuZaFa/tnCAki9fM7mim6njaHKKlPO659x3y+jBu9SogaL+lA899Cw/KO6W plQqHgnClSVHYLPDc+0DWZ7yvBIxczBlhaJY5gcVhDBUnvC6Loy8IVViHzGwJJuR e1SNKRXHTlCpu4HKYS3QBq5tS38zKib/uFbV/KmmiMiqb27Q9p3VXrAHMAMrCgz/ IMVNMQ+6y7Rp5mg+nIuGp68UghBRyBPDhR84cPbcllKrIlfRV+lH+8QEkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4TZiW+uBffjIjW2C7BB1l6v9dYMB8GA1UdIwQY MBaAFCd7NoMwfG/MMr7RdyMvHUdFQfuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzkt YWM1MjJmOTU3NTRmLzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzktYWM1MjJmOTU3NTRm LzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+h7Slvh CzjXAnjvcPUJyGGr8Ra+zE9KOdO4Jvbmo0/EPLWzAGcLEYkqbaNeLtn/GTlzdo5Q MhqnFASfPaaVCYMBemlnz40U0qA0l2/U05F25uPvo15LceHOGgK9HTbcFQcFuIpe XIYYgvMXg+Nxf4omUWFiXFGiZwaNbebqtHLik1ZcHFryrJat1UzjeSACE0s8KhWi 7Kg0b11/eoFhKWIRrJN3z5wYbzOzlQLlj037Aztj1dkpDyXVmCTvQGAzjo21iuBg rKxedQY24Qb+0GzN8neWxNb/iXJbZBvTerLuVphw+w5hZ9dp6EFObbgmdAle1oSO fofNcOZ2Id2n5g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:00 2025 by rpki-client