This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json) Hash identifier: ExCm8aCN9ygUuk3gsyJQ4IVzsC3OXGqXnf+MwoMZ6Cc= Subject key identifier: 14:AE:F1:79:71:AB:19:38:B0:8F:0E:FC:4D:B1:82:3B:C5:19:4B:D6 Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c Certificate serial: 019B4FCF4F8A37E53DC35F646D73FB9A06E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft Manifest number: 0E88 Signing time: Wed 24 Dec 2025 10:02:24 +0000 Manifest this update: Wed 24 Dec 2025 10:02:24 +0000 Manifest next update: Thu 25 Dec 2025 10:02:24 +0000 Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: dPoMH4CyP7+r7gh4Xj/YvJo99FlJRYHaMBxEv5NZoAM=) 2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:4f:8a:37:e5:3d:c3:5f:64:6d:73:fb:9a:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c Validity Not Before: Dec 24 10:02:24 2025 GMT Not After : Dec 25 10:02:24 2025 GMT Subject: CN=14aef17971ab1938b08f0efc4db1823bc5194bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:a1:8a:a1:1e:17:8f:91:79:5b:53:52:00: 0b:1e:e8:e4:56:27:f0:d1:a3:c9:05:79:0a:4c:47: c1:63:3b:b7:5c:70:b2:0f:93:58:d4:0b:ca:4d:82: 0f:69:ae:cb:27:2e:38:04:53:fb:8b:1c:1d:c4:b8: 89:4b:c4:19:8e:a9:2e:4f:c2:a4:1a:27:0d:af:50: 19:02:35:8c:99:ec:4a:00:a0:39:4b:74:51:02:c7: f0:55:07:7a:4b:34:1e:b9:63:5b:93:11:b6:5c:62: 96:d3:e8:c4:e2:19:78:c8:99:36:92:4d:7a:88:3d: 7d:a6:ee:ff:2e:97:c6:60:9c:32:90:3e:85:b6:77: 92:d7:46:09:f3:b2:dd:4b:35:86:4f:33:05:82:2b: ae:c2:41:72:3c:72:14:89:2c:b6:43:e4:d0:2f:8f: f3:8d:25:70:d2:2c:2e:51:99:e7:e7:20:4e:65:64: bc:40:8b:b2:b4:92:0e:8f:72:87:48:fa:09:20:66: 72:cd:e7:67:30:82:52:ea:3e:a7:a1:f5:33:97:73: 10:5b:18:2b:d3:dd:96:5f:58:a1:57:66:aa:21:43: 5a:81:83:aa:0a:a8:91:9b:6c:6f:0d:15:08:ef:77: c9:af:d0:11:b4:07:e2:5b:99:a0:c3:89:c5:b8:fd: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AE:F1:79:71:AB:19:38:B0:8F:0E:FC:4D:B1:82:3B:C5:19:4B:D6 X509v3 Authority Key Identifier: keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6e:5e:74:48:29:1d:fc:fc:56:ca:45:23:1a:9a:c5:7d:0a: a9:80:ef:b0:36:82:3b:66:5c:e3:36:2d:3f:1e:b6:e5:8a:f4: 50:f9:f4:99:b5:69:c1:39:92:03:33:d1:31:4a:3c:62:9a:19: 34:90:47:13:77:a4:58:c3:db:c9:d8:44:74:ac:8c:68:d8:9f: 27:c3:93:31:62:4f:cf:51:7e:ae:91:86:80:0c:f4:8e:f3:d4: de:59:0a:52:a6:1c:78:75:e2:a2:31:5a:e0:77:e6:ce:10:79: a4:6c:b0:95:ef:9d:1e:96:3e:2e:51:88:ed:2f:4d:e0:b0:d7: b7:c3:51:8a:f2:77:66:d7:3a:bd:52:9d:43:f2:70:78:49:cf: d0:e0:46:6f:7a:96:dc:2f:ae:27:f2:a6:75:56:39:0c:b6:39: be:17:33:8b:35:a9:7a:a6:2d:c8:4c:b8:56:b0:92:b7:eb:c0: 81:b6:69:c5:69:74:02:1f:10:60:b9:7f:9b:cd:27:53:bf:ef: 04:8f:1d:28:d4:de:d6:ea:47:51:ef:91:0e:e5:f9:54:f7:e4: b2:42:a0:20:5a:62:02:d6:c1:64:f1:e0:8c:c8:05:89:8d:7c: 69:ef:ea:c1:d7:25:7e:19:e3:c8:41:71:e1:4e:76:ef:51:27: a0:09:af:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz0+KN+U9w19kbXP7mgbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzYzN2E3MDlkZGJlN2Y2MjM3YWY4ZDViMjkxM2I0MjIz NzE1N2MwHhcNMjUxMjI0MTAwMjI0WhcNMjUxMjI1MTAwMjI0WjAzMTEwLwYDVQQD EygxNGFlZjE3OTcxYWIxOTM4YjA4ZjBlZmM0ZGIxODIzYmM1MTk0YmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh6hiqEeF4+ReVtTUgALHujkVifw 0aPJBXkKTEfBYzu3XHCyD5NY1AvKTYIPaa7LJy44BFP7ixwdxLiJS8QZjqkuT8Kk GicNr1AZAjWMmexKAKA5S3RRAsfwVQd6SzQeuWNbkxG2XGKW0+jE4hl4yJk2kk16 iD19pu7/LpfGYJwykD6FtneS10YJ87LdSzWGTzMFgiuuwkFyPHIUiSy2Q+TQL4/z jSVw0iwuUZnn5yBOZWS8QIuytJIOj3KHSPoJIGZyzednMIJS6j6nofUzl3MQWxgr 092WX1ihV2aqIUNagYOqCqiRm2xvDRUI73fJr9ARtAfiW5mgw4nFuP3aLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSu8Xlxqxk4sI8O/E2xgjvFGUvWMB8GA1UdIwQY MBaAFCfGN6cJ3b5/YjevjVspE7QiNxV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMt Y2JhZGI2NDM0MGUwLzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMtY2JhZGI2NDM0MGUw LzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW5edEgp Hfz8VspFIxqaxX0KqYDvsDaCO2Zc4zYtPx625Yr0UPn0mbVpwTmSAzPRMUo8YpoZ NJBHE3ekWMPbydhEdKyMaNifJ8OTMWJPz1F+rpGGgAz0jvPU3lkKUqYceHXiojFa 4HfmzhB5pGywle+dHpY+LlGI7S9N4LDXt8NRivJ3Ztc6vVKdQ/JweEnP0OBGb3qW 3C+uJ/KmdVY5DLY5vhczizWpeqYtyEy4VrCSt+vAgbZpxWl0Ah8QYLl/m80nU7/v BI8dKNTe1upHUe+RDuX5VPfkskKgIFpiAtbBZPHgjMgFiY18ae/qwdclfhnjyEFx 4U5271EnoAmvow== -----END CERTIFICATE-----Generated at Wed Dec 24 18:30:12 2025 by rpki-client