This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft File: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json) Hash identifier: sk6deXsniOOE8ztCw9Adg330exUw9dl0IsLWZN0qB04= Subject key identifier: 07:C3:85:20:A2:9F:4D:83:78:55:1B:04:33:C1:3F:3B:1A:47:83:6A Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7 Certificate issuer: /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7 Certificate serial: 019B32D74E3A73BB6E23BDA7F6E3E5B6EA28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 19:02:09 +0000 Manifest this update: Thu 18 Dec 2025 19:02:09 +0000 Manifest next update: Fri 19 Dec 2025 19:02:09 +0000 Files and hashes: 1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: Zj3JyqHt2CA9Q5PXhgiHwYXBER9hT/kVzuHFyedGQRw=) 2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:4e:3a:73:bb:6e:23:bd:a7:f6:e3:e5:b6:ea:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7 Validity Not Before: Dec 18 19:02:09 2025 GMT Not After : Dec 19 19:02:09 2025 GMT Subject: CN=07c38520a29f4d8378551b0433c13f3b1a47836a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:b0:19:e4:7d:95:38:b1:21:c3:61:30:77: ba:7b:dd:d6:0f:90:4d:ad:c1:96:d3:28:a8:61:ec: a4:9e:68:e2:e6:7a:22:41:38:92:60:74:e0:ea:2f: 80:ae:dd:e7:aa:0c:c5:7a:95:ea:8d:6e:cf:f3:e4: fb:e3:ba:a7:0f:90:f0:95:bd:a0:7b:7e:21:72:04: a6:0f:aa:7a:41:27:df:c5:ef:fd:a7:bb:91:33:f1: b5:1c:65:8c:8b:30:07:3d:da:d7:71:a2:8e:42:d6: 1f:7d:f7:bb:33:84:6e:69:78:bd:0f:cd:0a:b9:dd: 86:20:5d:e7:b1:66:bf:15:46:bd:4a:3e:bf:eb:76: 7d:56:78:fe:94:13:eb:ec:82:c8:1c:a3:fa:47:27: 0a:11:cf:77:3e:89:c8:e5:5d:69:20:94:72:d9:e9: b8:a6:69:76:0d:5b:0b:f4:30:64:c2:23:22:6e:72: f1:c1:e7:a2:64:fd:ca:d3:53:33:98:a5:03:c3:1a: 50:35:80:30:e7:87:df:ed:20:6b:60:70:88:6c:88: 86:02:72:0b:4a:e8:bc:91:6c:f7:3a:76:2a:93:6f: 74:9f:e8:b9:63:be:bb:f1:d9:d1:2e:ea:36:70:27: 08:1f:da:2e:c9:44:11:55:b5:0e:84:5f:60:b3:c7: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C3:85:20:A2:9F:4D:83:78:55:1B:04:33:C1:3F:3B:1A:47:83:6A X509v3 Authority Key Identifier: keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1a:31:da:94:db:4b:c0:36:92:21:4d:99:ae:9c:fd:8f:66: e3:27:60:82:fb:44:05:05:8a:dc:cc:86:4d:45:bd:f2:18:ad: 6b:fd:ec:f4:1a:3a:bd:53:3e:eb:81:50:fc:48:3b:24:68:80: 53:a0:4f:3f:ea:8f:2b:cf:0f:c1:26:05:92:52:a1:bd:74:bc: 9c:f6:70:d7:42:bc:50:c3:15:96:19:f7:84:bc:4c:1f:40:fc: d1:ce:2d:49:83:aa:af:ee:37:15:2e:b6:98:1b:06:17:b2:1d: e3:05:f5:f6:26:ec:d9:ba:90:04:4a:b8:2e:74:ab:89:49:e5: bf:e7:3d:ff:76:d1:a3:53:0c:23:1c:12:60:8d:d8:c4:ab:35: 86:9b:0a:ec:a5:1c:52:b5:2c:a5:59:f3:9f:5c:71:9c:8e:85: c4:9f:90:67:e4:72:ef:35:42:52:bf:f9:e8:66:8b:88:1b:b5: 19:d0:54:8f:b2:bf:f5:04:41:cf:b9:b8:e4:f4:2b:72:7e:6b: 6a:0f:bf:5b:42:cf:e6:bc:b4:09:1a:fc:3d:0b:0f:da:9b:45: 6f:1e:af:6e:03:a1:61:c8:4f:12:45:06:c8:84:66:f2:d0:1a: d0:f6:19:45:f9:9f:16:b2:06:90:b5:86:a4:93:df:08:d6:e4: 64:6a:1b:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1046c7tuI72n9uPltuooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjBiNzM3NzE1MTE0ZGVkMjBmNjhlZjAzNDdkOWY3NTJh MGUwYjcwHhcNMjUxMjE4MTkwMjA5WhcNMjUxMjE5MTkwMjA5WjAzMTEwLwYDVQQD EygwN2MzODUyMGEyOWY0ZDgzNzg1NTFiMDQzM2MxM2YzYjFhNDc4MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBiwGeR9lTixIcNhMHe6e93WD5BN rcGW0yioYeyknmji5noiQTiSYHTg6i+Art3nqgzFepXqjW7P8+T747qnD5Dwlb2g e34hcgSmD6p6QSffxe/9p7uRM/G1HGWMizAHPdrXcaKOQtYfffe7M4RuaXi9D80K ud2GIF3nsWa/FUa9Sj6/63Z9Vnj+lBPr7ILIHKP6RycKEc93PonI5V1pIJRy2em4 pml2DVsL9DBkwiMibnLxweeiZP3K01MzmKUDwxpQNYAw54ff7SBrYHCIbIiGAnIL Sui8kWz3OnYqk290n+i5Y7678dnRLuo2cCcIH9ouyUQRVbUOhF9gs8eNEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfDhSCin02DeFUbBDPBPzsaR4NqMB8GA1UdIwQY MBaAFCfwtzdxURTe0g9o7wNH2fdSoOC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNjc5NTMtM2NlMy00YWZlLTlkN2Ut MWVkNjIwNDUyNTA5LzEvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iNjc5NTMtM2NlMy00YWZlLTlkN2UtMWVkNjIwNDUyNTA5 LzEvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxox2pTb S8A2kiFNma6c/Y9m4ydggvtEBQWK3MyGTUW98hita/3s9Bo6vVM+64FQ/Eg7JGiA U6BPP+qPK88PwSYFklKhvXS8nPZw10K8UMMVlhn3hLxMH0D80c4tSYOqr+43FS62 mBsGF7Id4wX19ibs2bqQBEq4LnSriUnlv+c9/3bRo1MMIxwSYI3YxKs1hpsK7KUc UrUspVnzn1xxnI6FxJ+QZ+Ry7zVCUr/56GaLiBu1GdBUj7K/9QRBz7m45PQrcn5r ag+/W0LP5ry0CRr8PQsP2ptFbx6vbgOhYchPEkUGyIRm8tAa0PYZRfmfFrIGkLWG pJPfCNbkZGobxQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:22 2025 by rpki-client