This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json) Hash identifier: DBMLZ5u+i5KpZXTyP4QCFedMKRAo9pkgHHhDI7DHuA0= Subject key identifier: 7D:59:C9:15:48:C4:54:9A:5C:40:8E:D5:9F:C2:F8:C8:71:EE:E9:22 Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49 Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249 Certificate serial: 019B3E6DC902445B1F42419DAACD712D9105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft Manifest number: 15E3 Signing time: Sun 21 Dec 2025 01:02:20 +0000 Manifest this update: Sun 21 Dec 2025 01:02:20 +0000 Manifest next update: Mon 22 Dec 2025 01:02:20 +0000 Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: Czzuz3M7HkzjS1fb6FT6nmaVfl8LCUb3G+9/ky47Etw=) 2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=) 3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:c9:02:44:5b:1f:42:41:9d:aa:cd:71:2d:91:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249 Validity Not Before: Dec 21 01:02:20 2025 GMT Not After : Dec 22 01:02:20 2025 GMT Subject: CN=7d59c91548c4549a5c408ed59fc2f8c871eee922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:ce:00:ab:4d:3a:24:41:74:41:90:c1:df: 97:ff:b4:4b:6d:7b:d0:01:1f:99:31:50:1b:f9:62: f8:9e:a0:1f:9c:d7:58:cb:86:c5:9c:df:3b:05:8b: fa:51:8b:59:05:83:8d:73:8a:4b:bd:06:0d:51:f5: 9a:93:d5:bd:b9:8d:79:cf:3e:3d:a9:62:6d:e0:4a: f2:f8:1b:47:1c:a1:96:84:38:17:fb:14:f0:dc:15: 69:b6:1f:47:5d:a6:6d:3a:d0:7c:45:85:1d:f9:1e: cc:7e:72:2e:d3:8e:3b:35:9a:b5:2b:13:31:5c:f3: 52:b5:0c:df:5d:dd:05:6e:2e:27:5d:e9:62:d1:84: 85:3d:74:ca:76:c5:e4:3f:70:f0:cb:0e:9b:6d:48: d5:77:81:1a:5d:84:59:85:58:2a:52:a0:5f:17:ca: 70:c8:13:81:b9:84:8d:6f:06:2f:19:66:3f:8e:cb: 29:83:c0:5a:01:d0:88:c1:99:bd:cd:4b:92:5a:e6: ff:cb:c8:0c:8e:0e:44:51:69:62:88:db:d7:a6:41: 83:15:0d:fa:13:1f:df:49:c2:08:e6:74:49:44:ff: 2d:ce:8c:0e:07:59:3d:c2:5d:cf:bf:cd:8b:fd:0d: 5d:99:8a:c4:76:4d:da:f4:3d:aa:56:e0:fa:91:5d: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:59:C9:15:48:C4:54:9A:5C:40:8E:D5:9F:C2:F8:C8:71:EE:E9:22 X509v3 Authority Key Identifier: keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f6:7e:66:57:9d:62:f6:af:bd:cc:2c:bd:c4:8f:22:f8:28: 49:02:10:f5:e7:34:a6:b1:f5:e5:72:36:01:cb:5b:f2:ab:af: 12:9e:6c:14:51:90:d9:04:45:80:72:8d:00:ef:c8:64:6f:dc: 3e:e5:64:93:36:6e:dc:c4:be:e6:c6:bc:54:02:76:42:52:66: 71:d0:36:e8:96:47:ba:24:30:64:7d:69:fc:23:76:9d:43:d8: 71:e4:98:ac:93:55:cc:52:21:c2:a7:6a:54:48:50:f4:06:a0: 37:78:60:6f:d8:65:26:61:4b:15:5f:40:16:58:41:46:71:13: 44:3c:5c:9a:1a:d6:00:c2:6c:4b:11:33:d0:12:cf:aa:2e:04: a3:9d:e4:ad:45:95:ed:ae:ea:f9:54:67:d6:98:b3:93:97:5c: 45:f2:03:1d:3d:8a:2e:76:c1:ed:fd:21:62:84:cf:c0:9d:36: aa:a3:c1:ef:84:9a:05:fc:df:b7:86:14:a9:e9:ae:da:69:70: a9:65:c9:0d:8f:b6:cf:b4:32:f5:49:b8:ed:47:e3:16:4c:07: 42:68:87:68:41:f5:d1:11:83:de:37:61:e6:5f:ff:a0:25:20: b9:7a:e0:e9:e3:0b:26:50:22:a8:78:58:8a:9a:97:3f:69:a4: a8:02:d5:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bckCRFsfQkGdqs1xLZEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDg2NDBjMzA1MTA3NzY2YTY0NmZiZjhlYzgxZGI0NWNl MWYyNDkwHhcNMjUxMjIxMDEwMjIwWhcNMjUxMjIyMDEwMjIwWjAzMTEwLwYDVQQD Eyg3ZDU5YzkxNTQ4YzQ1NDlhNWM0MDhlZDU5ZmMyZjhjODcxZWVlOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDnOAKtNOiRBdEGQwd+X/7RLbXvQ AR+ZMVAb+WL4nqAfnNdYy4bFnN87BYv6UYtZBYONc4pLvQYNUfWak9W9uY15zz49 qWJt4Ery+BtHHKGWhDgX+xTw3BVpth9HXaZtOtB8RYUd+R7MfnIu0447NZq1KxMx XPNStQzfXd0Fbi4nXeli0YSFPXTKdsXkP3Dwyw6bbUjVd4EaXYRZhVgqUqBfF8pw yBOBuYSNbwYvGWY/jsspg8BaAdCIwZm9zUuSWub/y8gMjg5EUWliiNvXpkGDFQ36 Ex/fScII5nRJRP8tzowOB1k9wl3Pv82L/Q1dmYrEdk3a9D2qVuD6kV1a9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1ZyRVIxFSaXECO1Z/C+Mhx7ukiMB8GA1UdIwQY MBaAFCfYZAwwUQd2amRvv47IHbRc4fJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAt M2M2Zjg4YzkxNGIxLzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAtM2M2Zjg4YzkxNGIx LzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvZ+Zled YvavvcwsvcSPIvgoSQIQ9ec0prH15XI2Actb8quvEp5sFFGQ2QRFgHKNAO/IZG/c PuVkkzZu3MS+5sa8VAJ2QlJmcdA26JZHuiQwZH1p/CN2nUPYceSYrJNVzFIhwqdq VEhQ9AagN3hgb9hlJmFLFV9AFlhBRnETRDxcmhrWAMJsSxEz0BLPqi4Eo53krUWV 7a7q+VRn1pizk5dcRfIDHT2KLnbB7f0hYoTPwJ02qqPB74SaBfzft4YUqemu2mlw qWXJDY+2z7Qy9Um47UfjFkwHQmiHaEH10RGD3jdh5l//oCUguXrg6eMLJlAiqHhY ipqXP2mkqALVdA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:03 2025 by rpki-client