This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json) Hash identifier: /4kRONSKIqWMnO695Rozoqs0/XNjseBL7xgyxXbd8ps= Subject key identifier: 0E:81:F9:2E:5A:4D:D2:51:C2:6D:E5:D6:5A:0C:14:28:48:2B:0C:72 Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad Certificate serial: 019B424911617C91E41547DCBA7E7B95ACF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft Manifest number: 0CB3 Signing time: Sun 21 Dec 2025 19:00:43 +0000 Manifest this update: Sun 21 Dec 2025 19:00:43 +0000 Manifest next update: Mon 22 Dec 2025 19:00:43 +0000 Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=) 2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: Dl8pe3nB6NrViizIzaqKQDcXTafN4RP0sg9S/JiYcR0=) 3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:11:61:7c:91:e4:15:47:dc:ba:7e:7b:95:ac:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad Validity Not Before: Dec 21 19:00:43 2025 GMT Not After : Dec 22 19:00:43 2025 GMT Subject: CN=0e81f92e5a4dd251c26de5d65a0c1428482b0c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:8c:dd:a9:a7:aa:6c:81:42:c3:bb:9f:7e: d6:04:99:0d:fe:b2:97:9f:a2:81:81:fb:99:f5:27: d2:24:9a:12:7c:5a:24:02:23:fd:d4:66:3d:52:2a: e7:ef:42:09:b7:28:c1:ff:80:f7:e2:20:4b:5c:67: a2:97:61:ea:79:32:72:c8:aa:b2:0c:fa:eb:51:9e: 21:3b:5b:fc:06:83:55:5f:39:71:ad:5e:24:81:57: c6:db:e0:02:78:f7:08:6c:07:4f:06:ad:8a:e4:f1: e8:25:90:6f:a5:e2:28:d8:be:e5:71:fd:12:2d:0e: 40:8a:2c:51:73:c7:e2:8d:1d:97:1d:7b:49:f3:70: 4b:c9:8a:c6:6d:fc:00:39:2d:ef:38:a1:1f:eb:e2: 1b:d2:25:0b:a0:10:4b:96:05:6c:4a:89:c4:24:25: da:74:1c:d0:51:63:45:93:77:52:73:4b:02:59:40: b9:65:c3:2b:70:53:81:39:bd:20:f7:78:23:24:60: 98:13:5b:98:7f:d6:93:d6:3d:bc:bc:66:19:c8:6e: 95:8d:a1:b5:c2:5f:92:c9:af:55:66:f9:48:e1:2a: 20:36:18:7b:d8:19:ac:10:3b:99:59:74:6c:af:6c: 7c:54:26:b2:b6:82:09:ea:bf:b0:f9:88:f6:9e:45: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:81:F9:2E:5A:4D:D2:51:C2:6D:E5:D6:5A:0C:14:28:48:2B:0C:72 X509v3 Authority Key Identifier: keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:27:7f:55:d8:0d:99:1f:0f:db:2c:88:b4:fa:83:11:b7:ac: 7c:21:0f:f3:15:96:8a:23:75:be:8a:e7:8c:9d:8a:dc:f0:98: f4:ea:7e:8b:1e:2a:6e:2c:7a:5b:c7:c7:39:26:4f:74:82:f6: ce:3c:04:36:b6:e0:de:9d:df:48:5c:de:05:21:76:5c:4e:52: a6:dd:5f:53:d7:46:30:63:7c:00:ba:c5:5f:f3:07:57:d3:b8: db:a4:46:e8:ee:c4:be:fe:42:76:92:b0:34:66:74:cb:26:3f: f4:d8:67:3a:91:d0:8d:21:eb:87:80:d3:8e:f1:b7:7d:59:09: 67:21:f7:d9:b1:8c:8e:8e:e8:e7:1a:67:e2:fd:1b:59:40:39: 97:b2:2f:e6:38:83:ae:cc:1d:00:22:9b:ee:9a:4a:1d:86:ee: 93:d3:ba:c2:34:59:99:09:c4:cf:0c:91:31:76:e6:65:2b:e1: 2a:f7:ef:dd:6f:0d:02:f1:48:b3:69:b8:c7:a6:28:a8:9c:a8: 81:ae:5e:22:d0:52:20:ab:1e:b1:19:99:f5:27:c4:e8:84:3b: bf:a2:b2:13:1e:47:e9:42:c0:f6:96:0b:74:5c:70:02:be:b0: 2d:11:c2:c9:46:b5:e3:8c:6d:00:93:a0:d2:4f:06:a4:39:eb: 58:5f:e3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSRFhfJHkFUfcun57laz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDU0ZTRhNzg4ZDY5NjdhMmVlZjNhNjY5MjYyMjYyNmY1 NGVmYWQwHhcNMjUxMjIxMTkwMDQzWhcNMjUxMjIyMTkwMDQzWjAzMTEwLwYDVQQD EygwZTgxZjkyZTVhNGRkMjUxYzI2ZGU1ZDY1YTBjMTQyODQ4MmIwYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunCM3amnqmyBQsO7n37WBJkN/rKX n6KBgfuZ9SfSJJoSfFokAiP91GY9Uirn70IJtyjB/4D34iBLXGeil2HqeTJyyKqy DPrrUZ4hO1v8BoNVXzlxrV4kgVfG2+ACePcIbAdPBq2K5PHoJZBvpeIo2L7lcf0S LQ5AiixRc8fijR2XHXtJ83BLyYrGbfwAOS3vOKEf6+Ib0iULoBBLlgVsSonEJCXa dBzQUWNFk3dSc0sCWUC5ZcMrcFOBOb0g93gjJGCYE1uYf9aT1j28vGYZyG6VjaG1 wl+Sya9VZvlI4SogNhh72BmsEDuZWXRsr2x8VCaytoIJ6r+w+Yj2nkVgjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6B+S5aTdJRwm3l1loMFChIKwxyMB8GA1UdIwQY MBaAFCfVTkp4jWlnou7zpmkmImJvVO+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEt ZTk5YThkYzMwMjU1LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEtZTk5YThkYzMwMjU1 LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSd/VdgN mR8P2yyItPqDEbesfCEP8xWWiiN1vornjJ2K3PCY9Op+ix4qbix6W8fHOSZPdIL2 zjwENrbg3p3fSFzeBSF2XE5Spt1fU9dGMGN8ALrFX/MHV9O426RG6O7Evv5CdpKw NGZ0yyY/9NhnOpHQjSHrh4DTjvG3fVkJZyH32bGMjo7o5xpn4v0bWUA5l7Iv5jiD rswdACKb7ppKHYbuk9O6wjRZmQnEzwyRMXbmZSvhKvfv3W8NAvFIs2m4x6YoqJyo ga5eItBSIKsesRmZ9SfE6IQ7v6KyEx5H6ULA9pYLdFxwAr6wLRHCyUa144xtAJOg 0k8GpDnrWF/jXA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:20:13 2025 by rpki-client