This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft File: J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft (raw, json) Hash identifier: DXHZEO1DWDPSkL8nCSmcBmTTL+3rEGMb6BCubUh8d8o= Subject key identifier: 5B:F6:CF:58:85:20:3F:EE:B2:74:93:F5:CD:BF:C2:40:1D:3D:FE:95 Authority key identifier: 27:66:2B:59:67:84:BA:E8:33:CF:FB:39:A8:48:37:C8:06:F6:4B:44 Certificate issuer: /CN=27662b596784bae833cffb39a84837c806f64b44 Certificate serial: 019B5AF6763821F89103941FC85A34331524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2YrWWeEuugzz_s5qEg3yAb2S0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft Manifest number: 14 Signing time: Fri 26 Dec 2025 14:01:00 +0000 Manifest this update: Fri 26 Dec 2025 14:01:00 +0000 Manifest next update: Sat 27 Dec 2025 14:01:00 +0000 Files and hashes: 1: J2YrWWeEuugzz_s5qEg3yAb2S0Q.crl (hash: o3zfes3ruB1GUXUtCff0sp6AJufvBpP6APfN1PN2Kq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/J2YrWWeEuugzz_s5qEg3yAb2S0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:76:38:21:f8:91:03:94:1f:c8:5a:34:33:15:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27662b596784bae833cffb39a84837c806f64b44 Validity Not Before: Dec 26 14:01:00 2025 GMT Not After : Dec 27 14:01:00 2025 GMT Subject: CN=5bf6cf5885203feeb27493f5cdbfc2401d3dfe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:fd:99:a9:02:f1:73:97:ab:92:9c:4e:9e: 06:70:7a:57:ce:c8:92:fb:cd:90:8e:ee:ff:23:fc: b8:40:7b:92:5b:9e:38:86:dd:22:04:ae:7e:f0:45: 9a:7f:47:87:ca:86:03:c3:15:27:84:ff:99:77:3c: 18:b4:0b:f9:41:e3:55:c8:7a:45:df:9b:43:9b:1d: 41:25:58:49:f5:5f:8b:31:05:2f:da:3c:f3:24:0a: ff:27:17:ce:65:75:9a:fd:68:e9:e8:c9:5e:4e:a3: 0f:7e:a9:0e:6f:3a:96:51:33:58:cf:94:45:f6:03: 30:1d:5d:96:a6:54:5c:47:fb:bc:ae:68:44:3c:77: fc:a3:f1:73:94:76:22:d2:f2:74:cc:b3:0b:fc:d5: 64:92:e8:f2:e1:f1:29:81:23:5c:b7:53:1c:85:25: 22:18:3f:89:8b:24:a6:52:d2:0f:88:94:d7:75:ce: ef:fe:23:79:59:44:11:4c:8c:6b:f2:22:bc:e0:48: 43:5a:c0:a3:f8:06:5e:2b:9a:96:85:96:a2:dc:ae: 55:9f:da:5e:1b:31:41:1f:1a:7a:80:0b:5d:18:2c: dd:e4:eb:9d:2a:88:83:12:e3:36:47:73:52:4a:f1: 25:21:bb:18:0e:3a:fd:d3:1e:5b:04:9b:0a:ec:e8: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:CF:58:85:20:3F:EE:B2:74:93:F5:CD:BF:C2:40:1D:3D:FE:95 X509v3 Authority Key Identifier: keyid:27:66:2B:59:67:84:BA:E8:33:CF:FB:39:A8:48:37:C8:06:F6:4B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2YrWWeEuugzz_s5qEg3yAb2S0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:67:bd:c3:2c:f8:5b:62:7f:ef:de:17:24:56:6d:7e:1b:e7: 05:e2:81:a8:97:3c:c6:6e:35:78:58:1c:f6:0c:5e:8d:e3:1c: a4:f2:02:04:2f:4f:8a:d5:30:94:1c:63:2a:44:3a:12:3e:43: a9:a6:dd:df:9d:06:f9:bf:11:da:da:22:17:3c:50:68:dd:23: a1:07:4b:a3:a4:91:b9:41:cb:84:f9:ce:03:05:08:63:51:01: 2d:69:87:e6:8f:d1:46:38:c5:0a:5d:21:6c:b6:cc:26:8f:88: 35:45:ed:36:75:6c:21:8b:c5:db:26:e1:4c:5b:46:07:97:55: 83:a6:70:dc:c8:2c:f2:8e:4f:d2:d8:16:78:f6:75:6f:59:67: 6d:72:8b:c6:ce:25:1b:b9:02:17:76:6d:78:9f:be:cf:26:94: 22:06:a1:3e:a0:fa:02:bb:9c:25:dd:84:74:c6:9a:7f:ac:f6: 78:6d:5d:2e:96:50:02:11:d8:28:0e:37:e5:c3:76:1e:61:56: a2:ac:b2:99:b5:96:65:d4:01:a0:7d:0d:20:fa:02:35:e9:55: 43:9a:1e:7c:fb:62:c9:5b:1c:9f:9b:66:03:33:38:52:eb:d9: 55:a2:c5:16:a4:2c:28:0e:ac:47:af:14:cd:0a:7f:c5:f0:5c: f2:c4:03:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9nY4IfiRA5QfyFo0MxUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NjYyYjU5Njc4NGJhZTgzM2NmZmIzOWE4NDgzN2M4MDZm NjRiNDQwHhcNMjUxMjI2MTQwMTAwWhcNMjUxMjI3MTQwMTAwWjAzMTEwLwYDVQQD Eyg1YmY2Y2Y1ODg1MjAzZmVlYjI3NDkzZjVjZGJmYzI0MDFkM2RmZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2er9makC8XOXq5KcTp4GcHpXzsiS +82Qju7/I/y4QHuSW544ht0iBK5+8EWaf0eHyoYDwxUnhP+ZdzwYtAv5QeNVyHpF 35tDmx1BJVhJ9V+LMQUv2jzzJAr/JxfOZXWa/Wjp6MleTqMPfqkObzqWUTNYz5RF 9gMwHV2WplRcR/u8rmhEPHf8o/FzlHYi0vJ0zLML/NVkkujy4fEpgSNct1MchSUi GD+JiySmUtIPiJTXdc7v/iN5WUQRTIxr8iK84EhDWsCj+AZeK5qWhZai3K5Vn9pe GzFBHxp6gAtdGCzd5OudKoiDEuM2R3NSSvElIbsYDjr90x5bBJsK7OizSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv2z1iFID/usnST9c2/wkAdPf6VMB8GA1UdIwQY MBaAFCdmK1lnhLroM8/7OahIN8gG9ktEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJZcldXZUV1dWd6el9zNXFFZzN5QWIyUzBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NWMyODUtMGZmNy00NzQ4LWEzOGQt NjI3NjM2MTJiZjQ2LzEvSjJZcldXZUV1dWd6el9zNXFFZzN5QWIyUzBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NWMyODUtMGZmNy00NzQ4LWEzOGQtNjI3NjM2MTJiZjQ2 LzEvSjJZcldXZUV1dWd6el9zNXFFZzN5QWIyUzBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGe9wyz4 W2J/794XJFZtfhvnBeKBqJc8xm41eFgc9gxejeMcpPICBC9PitUwlBxjKkQ6Ej5D qabd350G+b8R2toiFzxQaN0joQdLo6SRuUHLhPnOAwUIY1EBLWmH5o/RRjjFCl0h bLbMJo+INUXtNnVsIYvF2ybhTFtGB5dVg6Zw3Mgs8o5P0tgWePZ1b1lnbXKLxs4l G7kCF3ZteJ++zyaUIgahPqD6ArucJd2EdMaaf6z2eG1dLpZQAhHYKA435cN2HmFW oqyymbWWZdQBoH0NIPoCNelVQ5oefPtiyVscn5tmAzM4UuvZVaLFFqQsKA6sR68U zQp/xfBc8sQDeA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:37 2025 by rpki-client