This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json) Hash identifier: XnZFb5NqsfJu57cROEEbBAR314bKmwvDpAtC9Bsyu0s= Subject key identifier: 59:0E:04:68:B2:80:FC:E6:D7:A0:E7:9C:6A:8C:52:DB:8A:27:9C:00 Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05 Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905 Certificate serial: 019B1F87492966CA8EBC1E6F93DC7FD42A44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft Manifest number: 063A Signing time: Mon 15 Dec 2025 01:01:58 +0000 Manifest this update: Mon 15 Dec 2025 01:01:58 +0000 Manifest next update: Tue 16 Dec 2025 01:01:58 +0000 Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: AcfvTXET5irAos2wAGh4LBrvI6nYX6H61vzzkkVzLDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:49:29:66:ca:8e:bc:1e:6f:93:dc:7f:d4:2a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27486002469951b6800704c8f02cac74b5f82905 Validity Not Before: Dec 15 01:01:58 2025 GMT Not After : Dec 16 01:01:58 2025 GMT Subject: CN=590e0468b280fce6d7a0e79c6a8c52db8a279c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:ed:14:c4:5d:ec:6e:09:d1:f7:7c:56:40: 8e:27:5e:c4:bd:d3:bf:e1:c7:f5:6e:db:c3:68:ac: 8d:e7:e1:03:6f:bb:1a:c4:0c:00:c2:99:28:6d:4d: d9:e8:61:6b:85:d1:a7:b3:ff:06:2f:54:da:7b:a5: ec:65:4a:f8:a1:a1:0f:32:26:5b:0f:d5:07:2b:35: 1a:ea:0a:de:5a:dd:e7:f5:72:61:41:3a:9e:db:f9: e5:89:42:7d:ac:fc:c3:8c:53:9a:25:34:55:16:04: 5c:ef:7c:46:f1:5c:32:cd:db:d9:9d:e5:7e:ac:6c: 49:93:c7:b1:c0:05:70:16:7a:6c:4a:04:0b:05:66: cb:5a:1e:8b:17:ec:31:ef:b8:88:b8:83:98:0a:b3: 57:46:e7:51:1a:d9:6e:ae:46:61:b4:d3:5f:b1:e8: 09:4a:c0:fc:a2:1e:ee:15:85:40:c2:5a:cc:72:64: 3f:2d:e7:be:73:70:31:c8:64:5f:67:1f:2a:4a:e9: d4:2f:00:d8:5f:90:3d:6b:2f:21:35:ac:74:14:6a: 18:39:37:7d:f6:0f:b8:40:81:35:ac:46:82:5b:55: 0a:d6:79:37:d4:b3:cc:44:9e:12:ce:ea:d3:56:a1: 9d:45:9a:fa:f9:cf:fa:86:2a:df:dd:e2:bf:6e:94: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0E:04:68:B2:80:FC:E6:D7:A0:E7:9C:6A:8C:52:DB:8A:27:9C:00 X509v3 Authority Key Identifier: keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:74:a9:85:fe:4f:a2:60:11:55:3c:f8:d9:79:0c:e3:5c:27: 08:dc:79:23:71:2a:e5:7a:65:6f:9c:b7:8b:79:1a:0f:bd:0b: 47:c6:aa:b7:b0:75:96:0f:2b:b3:70:68:5d:a0:da:17:43:67: 78:4d:4e:57:cc:eb:10:c2:b9:fb:f1:5e:dc:cb:f6:fc:aa:fc: 70:32:8c:38:e1:9d:ea:72:a2:53:d9:01:19:87:53:fa:bc:e7: 78:21:89:77:81:15:2c:1a:ea:3e:27:e2:17:2d:d0:10:65:f3: a2:b3:41:7f:5d:cd:a2:7c:cc:ec:07:d3:7e:fe:ac:f3:e1:86: 2b:8e:6f:d0:3c:5e:7a:22:5a:36:14:b7:e6:45:f7:b5:b8:84: d6:27:21:7b:e6:a6:39:41:ea:fb:42:90:b6:f4:0f:21:ce:e1: 78:d1:29:3a:d9:2f:3b:dc:c2:6d:bd:80:c8:f6:ac:6a:9a:94: 75:ba:14:29:1f:58:0e:4e:da:cc:16:12:13:e4:68:55:e6:48: c1:a2:cd:8a:8f:f0:e3:a3:d8:d4:fb:8c:48:09:f9:b7:e8:51: b7:42:a9:db:96:70:c0:a1:d2:95:5c:86:bc:ae:f7:2e:4d:46: 78:30:12:74:b6:49:95:e4:30:60:ab:37:5d:e8:6e:c9:7e:59: b4:5f:51:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh0kpZsqOvB5vk9x/1CpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDg2MDAyNDY5OTUxYjY4MDA3MDRjOGYwMmNhYzc0YjVm ODI5MDUwHhcNMjUxMjE1MDEwMTU4WhcNMjUxMjE2MDEwMTU4WjAzMTEwLwYDVQQD Eyg1OTBlMDQ2OGIyODBmY2U2ZDdhMGU3OWM2YThjNTJkYjhhMjc5YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWLtFMRd7G4J0fd8VkCOJ17EvdO/ 4cf1btvDaKyN5+EDb7saxAwAwpkobU3Z6GFrhdGns/8GL1Tae6XsZUr4oaEPMiZb D9UHKzUa6greWt3n9XJhQTqe2/nliUJ9rPzDjFOaJTRVFgRc73xG8VwyzdvZneV+ rGxJk8exwAVwFnpsSgQLBWbLWh6LF+wx77iIuIOYCrNXRudRGtlurkZhtNNfsegJ SsD8oh7uFYVAwlrMcmQ/Lee+c3AxyGRfZx8qSunULwDYX5A9ay8hNax0FGoYOTd9 9g+4QIE1rEaCW1UK1nk31LPMRJ4SzurTVqGdRZr6+c/6hirf3eK/bpRitwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkOBGiygPzm16DnnGqMUtuKJ5wAMB8GA1UdIwQY MBaAFCdIYAJGmVG2gAcEyPAsrHS1+CkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2Mt YzRlYjZkZjk3NGFkLzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2MtYzRlYjZkZjk3NGFk LzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA63Sphf5P omARVTz42XkM41wnCNx5I3Eq5Xplb5y3i3kaD70LR8aqt7B1lg8rs3BoXaDaF0Nn eE1OV8zrEMK5+/Fe3Mv2/Kr8cDKMOOGd6nKiU9kBGYdT+rzneCGJd4EVLBrqPifi Fy3QEGXzorNBf13NonzM7AfTfv6s8+GGK45v0DxeeiJaNhS35kX3tbiE1iche+am OUHq+0KQtvQPIc7heNEpOtkvO9zCbb2AyPasapqUdboUKR9YDk7azBYSE+RoVeZI waLNio/w46PY1PuMSAn5t+hRt0Kp25ZwwKHSlVyGvK73Lk1GeDASdLZJleQwYKs3 XehuyX5ZtF9RnQ== -----END CERTIFICATE-----Generated at Mon Dec 15 05:00:21 2025 by rpki-client