This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft File: J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json) Hash identifier: CInXiBAwAG6oFUaFqphtP9GW/f4oJjNMS5xQxvqztXU= Subject key identifier: B9:D3:2F:27:A3:C6:D3:94:BC:49:DF:2E:3B:14:13:29:AD:D1:54:7C Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b Certificate serial: 019B5A51AC17DF10F62BDCC7506F0296738E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft Manifest number: 1340 Signing time: Fri 26 Dec 2025 11:01:00 +0000 Manifest this update: Fri 26 Dec 2025 11:01:00 +0000 Manifest next update: Sat 27 Dec 2025 11:01:00 +0000 Files and hashes: 1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: 0k98MWo7m/4BZ6LapxjebT/5buPpr4d3l2REyjkKVbA=) 2: hmlDPtU43ODpSbSwKm7b72QgfNg.roa (hash: yhUDh7b541QuzocbLv67rZZ0JwDcRkg1md4GPfBmUpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ac:17:df:10:f6:2b:dc:c7:50:6f:02:96:73:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b Validity Not Before: Dec 26 11:01:00 2025 GMT Not After : Dec 27 11:01:00 2025 GMT Subject: CN=b9d32f27a3c6d394bc49df2e3b141329add1547c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:5f:bb:48:ee:9b:94:c9:ff:73:93:5b:95: fd:8d:c8:a8:67:76:ad:7d:9a:bb:e0:83:96:e4:69: 06:a3:1f:7b:32:83:4d:03:e8:f4:7c:01:01:09:be: 14:d2:b6:37:e0:8f:8b:5c:20:f2:81:8a:7a:01:03: 3c:ea:ea:1f:43:15:33:04:4c:54:59:c3:85:0f:a4: 7a:6e:c2:47:9a:03:4c:63:8a:aa:35:c2:32:f0:73: 85:0d:f1:8a:b7:2f:37:46:5b:dc:f4:90:36:00:ff: b0:80:cc:5b:96:c3:12:3f:73:c1:08:1b:af:e0:54: d5:d1:45:d0:dd:2d:41:5b:16:7d:b0:d8:73:e8:b2: 4f:e9:a6:46:11:2a:d9:d1:95:49:d7:0a:a6:53:78: b3:3d:38:19:ee:e1:96:10:9d:4b:83:a3:96:7c:6d: 5d:2e:61:9d:85:41:b9:15:12:07:6d:02:48:e3:55: ce:1f:a9:1c:d9:91:a8:6a:f4:1d:39:5f:49:40:41: ae:1f:1b:00:d1:30:32:af:0b:a2:03:f6:14:a9:ac: df:af:b4:ca:50:67:84:b2:b5:31:2b:50:d1:33:ac: 48:ae:cc:f1:a1:bd:1e:ba:5f:45:33:b4:ad:23:da: d7:6b:be:63:b1:40:65:e7:36:1f:09:e0:25:7a:f6: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D3:2F:27:A3:C6:D3:94:BC:49:DF:2E:3B:14:13:29:AD:D1:54:7C X509v3 Authority Key Identifier: keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a1:64:e4:6b:c8:a6:80:46:94:ea:17:cd:23:ac:0c:b4:9f: e3:d8:a1:78:a9:7e:37:eb:04:12:64:34:63:29:a6:ec:2c:ee: e9:b3:99:e8:23:80:87:5d:68:ef:fa:c9:41:14:df:35:04:f2: e4:48:82:a2:2c:b9:01:df:ff:47:04:6a:ba:2a:5a:9f:e4:aa: a0:41:6a:27:fa:46:84:54:22:1c:4b:6c:a4:f7:f0:2d:fe:bb: 9d:66:ce:90:77:d4:c0:29:36:f0:60:36:25:6e:7d:5f:29:0c: 18:aa:83:a5:39:00:72:5a:27:d3:11:84:2f:51:55:3d:96:f2: 78:48:ab:de:79:00:2c:08:db:9c:b3:70:60:67:ae:6f:17:db: ab:5c:5d:b1:47:7e:54:d3:61:7c:95:5f:08:70:14:9e:61:8e: 83:a5:88:68:db:f4:6e:e0:31:e3:0b:f4:45:d2:a5:be:cc:61: bf:63:ce:ca:07:c3:56:85:ee:22:b9:74:47:4a:d2:30:58:48: b6:c3:fa:58:af:19:98:78:26:69:ea:c2:ec:9c:38:7d:b8:c2: 84:fc:f5:85:ba:cb:c9:61:2a:00:ef:d5:28:66:77:02:76:d5: bd:fb:ca:f8:7e:64:4d:1a:be:09:14:09:27:c8:8e:e1:cf:6f: 4a:89:5d:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUawX3xD2K9zHUG8ClnOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODYxNzc0MGVjZDk1YjcwNGRhOTdhNWY5ZTUzYzAzMTE0 NDQyNmIwHhcNMjUxMjI2MTEwMTAwWhcNMjUxMjI3MTEwMTAwWjAzMTEwLwYDVQQD EyhiOWQzMmYyN2EzYzZkMzk0YmM0OWRmMmUzYjE0MTMyOWFkZDE1NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gpfu0jum5TJ/3OTW5X9jcioZ3at fZq74IOW5GkGox97MoNNA+j0fAEBCb4U0rY34I+LXCDygYp6AQM86uofQxUzBExU WcOFD6R6bsJHmgNMY4qqNcIy8HOFDfGKty83Rlvc9JA2AP+wgMxblsMSP3PBCBuv 4FTV0UXQ3S1BWxZ9sNhz6LJP6aZGESrZ0ZVJ1wqmU3izPTgZ7uGWEJ1Lg6OWfG1d LmGdhUG5FRIHbQJI41XOH6kc2ZGoavQdOV9JQEGuHxsA0TAyrwuiA/YUqazfr7TK UGeEsrUxK1DRM6xIrszxob0eul9FM7StI9rXa75jsUBl5zYfCeAlevYXiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnTLyejxtOUvEnfLjsUEymt0VR8MB8GA1UdIwQY MBaAFCeGF3QOzZW3BNqXpfnlPAMRREJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNzhhYjQtMzQ5MC00MDBiLTkwMTkt OWVkZDAxZDA3MjNjLzEvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNzhhYjQtMzQ5MC00MDBiLTkwMTktOWVkZDAxZDA3MjNj LzEvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaFk5GvI poBGlOoXzSOsDLSf49iheKl+N+sEEmQ0Yymm7Czu6bOZ6COAh11o7/rJQRTfNQTy 5EiCoiy5Ad//RwRquipan+SqoEFqJ/pGhFQiHEtspPfwLf67nWbOkHfUwCk28GA2 JW59XykMGKqDpTkAclon0xGEL1FVPZbyeEir3nkALAjbnLNwYGeubxfbq1xdsUd+ VNNhfJVfCHAUnmGOg6WIaNv0buAx4wv0RdKlvsxhv2POygfDVoXuIrl0R0rSMFhI tsP6WK8ZmHgmaerC7Jw4fbjChPz1hbrLyWEqAO/VKGZ3AnbVvfvK+H5kTRq+CRQJ J8iO4c9vSold9g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:04 2025 by rpki-client