This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json) Hash identifier: hrT7IfwgCga4tRUrnwD6L2SiPcKxWWdbWYOpVUIY71Y= Subject key identifier: 3B:7D:15:F3:DE:51:CC:59:34:04:60:EA:73:86:DD:52:07:63:80:E3 Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928 Certificate serial: 019B6D6A27361F570D61598425243EC99A03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft Manifest number: 14BA Signing time: Tue 30 Dec 2025 04:00:31 +0000 Manifest this update: Tue 30 Dec 2025 04:00:31 +0000 Manifest next update: Wed 31 Dec 2025 04:00:31 +0000 Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: BOY62iX3z9vdf46JVo1xRh0LNUhCF1uxiNIxX9o3Ncg=) 2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=) 3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:27:36:1f:57:0d:61:59:84:25:24:3e:c9:9a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928 Validity Not Before: Dec 30 04:00:31 2025 GMT Not After : Dec 31 04:00:31 2025 GMT Subject: CN=3b7d15f3de51cc59340460ea7386dd52076380e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:60:47:3a:8d:b8:c9:d8:3e:3e:fa:c1:2a: cc:ac:ed:5a:3d:88:3d:51:47:f1:92:3c:a8:00:dd: 24:1c:33:5f:86:dc:ca:18:a6:db:0e:b3:61:57:2b: 66:82:9d:a0:da:17:b7:49:e3:93:ab:dc:49:d6:b2: 13:85:7b:c4:d3:14:02:6f:77:28:5e:26:dc:44:0e: 68:85:39:63:23:25:ad:76:d2:b5:5b:9a:ad:87:e5: 47:8a:e9:a5:33:ea:10:97:1c:7a:a0:ff:03:f2:2f: c5:6f:fd:c7:45:e2:83:d2:d2:76:af:a4:c6:aa:ac: 65:63:ee:fa:6e:06:06:eb:3e:6c:c9:2c:65:4e:c9: 77:8e:4d:47:27:3d:6d:a3:0a:ee:d1:81:fe:d8:99: 2a:ca:ac:86:97:c4:89:3b:ea:e0:8f:af:3f:72:6b: 0f:0d:15:bb:5e:e4:c1:9f:be:ed:47:67:ac:7a:d9: c8:aa:aa:e1:29:bf:95:e5:7b:61:2b:df:0b:72:00: 58:a7:40:84:cb:2b:05:75:17:1e:f8:64:9c:04:cd: df:21:85:43:cd:a3:51:f1:88:2d:ab:e2:d0:dc:7a: b1:d7:d7:97:e9:01:55:c9:79:7e:b7:5c:43:4a:d7: c1:92:3f:79:27:f0:19:a0:28:5a:18:5e:fa:0b:56: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7D:15:F3:DE:51:CC:59:34:04:60:EA:73:86:DD:52:07:63:80:E3 X509v3 Authority Key Identifier: keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7d:83:4f:81:46:47:6b:97:58:9c:64:75:4e:82:2b:b0:52: da:19:e7:24:51:a4:b7:2d:39:6a:65:62:86:32:a9:d5:f6:0b: e1:bb:16:aa:60:0a:1e:97:a1:e3:45:36:9a:4c:c4:39:a5:48: c6:84:52:c4:3d:65:be:a5:49:87:6f:ce:34:b8:fc:73:aa:a4: c7:c0:5a:46:d8:17:13:e4:b1:e6:f7:01:61:d0:d4:86:25:65: 85:ff:66:c5:80:3a:b8:b9:97:74:dc:f4:b8:95:a8:fd:7c:86: 16:07:da:76:69:62:b8:62:6c:e8:d0:21:ba:8c:07:e0:0c:25: 8d:a5:eb:4e:55:72:07:25:ab:44:2f:1b:c3:e3:78:60:f8:fd: 08:69:62:36:9c:8f:35:97:bb:fa:6c:4a:65:0b:d4:7b:1e:25: 0f:ce:45:22:c3:fd:93:79:32:e1:b4:db:60:2d:04:c0:be:e5: 56:c8:11:d5:fe:44:b2:a5:50:88:b8:2c:23:16:ff:3c:1c:ae: f5:b8:6b:d3:12:82:da:7e:32:0a:a3:d4:c4:41:1b:80:f6:a5: d0:0b:a8:c2:ca:53:ed:f6:1d:86:e3:00:cc:c3:50:8c:6c:61: 05:de:df:de:e5:4b:49:f8:61:53:a6:97:08:c6:1e:a3:38:0c: a9:8d:70:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttaic2H1cNYVmEJSQ+yZoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5 MTE5MjgwHhcNMjUxMjMwMDQwMDMxWhcNMjUxMjMxMDQwMDMxWjAzMTEwLwYDVQQD EygzYjdkMTVmM2RlNTFjYzU5MzQwNDYwZWE3Mzg2ZGQ1MjA3NjM4MGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29ZgRzqNuMnYPj76wSrMrO1aPYg9 UUfxkjyoAN0kHDNfhtzKGKbbDrNhVytmgp2g2he3SeOTq9xJ1rIThXvE0xQCb3co XibcRA5ohTljIyWtdtK1W5qth+VHiumlM+oQlxx6oP8D8i/Fb/3HReKD0tJ2r6TG qqxlY+76bgYG6z5sySxlTsl3jk1HJz1towru0YH+2JkqyqyGl8SJO+rgj68/cmsP DRW7XuTBn77tR2esetnIqqrhKb+V5XthK98LcgBYp0CEyysFdRce+GScBM3fIYVD zaNR8Ygtq+LQ3Hqx19eX6QFVyXl+t1xDStfBkj95J/AZoChaGF76C1Zk5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDt9FfPeUcxZNARg6nOG3VIHY4DjMB8GA1UdIwQY MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt MTIzYTg2ZDk0ODE4LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4 LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAen2DT4FG R2uXWJxkdU6CK7BS2hnnJFGkty05amVihjKp1fYL4bsWqmAKHpeh40U2mkzEOaVI xoRSxD1lvqVJh2/ONLj8c6qkx8BaRtgXE+Sx5vcBYdDUhiVlhf9mxYA6uLmXdNz0 uJWo/XyGFgfadmliuGJs6NAhuowH4AwljaXrTlVyByWrRC8bw+N4YPj9CGliNpyP NZe7+mxKZQvUex4lD85FIsP9k3ky4bTbYC0EwL7lVsgR1f5EsqVQiLgsIxb/PByu 9bhr0xKC2n4yCqPUxEEbgPal0AuowspT7fYdhuMAzMNQjGxhBd7f3uVLSfhhU6aX CMYeozgMqY1wGQ== -----END CERTIFICATE-----Generated at Tue Dec 30 09:53:58 2025 by rpki-client