This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json) Hash identifier: PBuQNzsAxijStbDIAeeaG1r2VR/OkhH33D22xu4cYkY= Subject key identifier: 12:99:09:DC:24:59:6D:11:D7:66:49:72:DA:FD:4D:EB:E3:14:F0:36 Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a Certificate serial: 019B4D03B08245910B6F559184A7DE38FA3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft Manifest number: 0C6C Signing time: Tue 23 Dec 2025 21:00:45 +0000 Manifest this update: Tue 23 Dec 2025 21:00:45 +0000 Manifest next update: Wed 24 Dec 2025 21:00:45 +0000 Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: y4PlDasXz9IhrqgHQaSV1UuGdSbAdRD8XooaGLrPvqQ=) 2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:03:b0:82:45:91:0b:6f:55:91:84:a7:de:38:fa:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a Validity Not Before: Dec 23 21:00:45 2025 GMT Not After : Dec 24 21:00:45 2025 GMT Subject: CN=129909dc24596d11d7664972dafd4debe314f036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:8c:a9:9c:9b:6a:ab:06:57:de:13:12:e4: d5:3c:42:e3:5b:94:8d:d6:e4:e2:8d:cc:88:96:cb: c4:79:70:ad:d0:58:9e:1d:bb:ec:1b:b3:94:b9:89: d0:b6:41:22:8c:6e:48:40:62:ca:83:f7:83:8f:65: 52:10:d8:08:ce:93:74:14:57:0e:ba:c6:dc:88:0d: 4a:77:04:1b:a9:1b:eb:da:2e:ab:c9:16:45:6a:e0: 5c:20:72:36:1a:7d:6e:7b:09:27:e4:55:b2:ae:44: b7:16:d6:54:84:87:30:03:75:16:24:6f:ee:f1:a0: 61:62:db:fb:a7:31:6f:f1:5e:a4:de:6e:4d:3a:1d: 23:8a:02:d7:1a:27:ff:ff:30:a2:e0:ca:58:48:ae: 09:f5:ed:81:6b:c2:95:e4:fe:e7:a9:3b:b7:5e:7b: dd:1a:31:09:bb:52:85:38:13:42:7f:6c:85:60:64: 2a:b8:2f:f7:32:04:c7:ce:31:ad:71:40:e0:82:43: a0:56:3c:69:7e:ac:cd:ad:cc:b5:0f:5a:b9:87:a6: 0b:6b:9c:1c:3c:8c:cd:21:6c:3f:2f:6a:6b:2f:49: 19:9d:ab:35:27:55:09:cd:91:de:d1:76:97:88:94: 93:3a:d0:cd:e1:37:c1:24:12:0a:c6:d8:f2:c9:42: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:09:DC:24:59:6D:11:D7:66:49:72:DA:FD:4D:EB:E3:14:F0:36 X509v3 Authority Key Identifier: keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0c:90:3b:3a:68:a3:15:5e:a3:10:54:f9:db:f4:60:e5:3d: a3:26:fe:4d:9f:a8:f8:fb:7a:80:fb:a9:1a:5a:86:83:f8:3f: 4a:21:d6:04:18:4b:11:74:0a:ff:f2:7b:28:0f:06:ca:d7:54: c0:92:2a:93:6a:e9:66:f3:f9:36:2b:31:91:61:03:11:96:f6: 64:d7:e8:bb:8d:ad:28:46:5d:94:ad:72:38:15:0d:8c:77:89: 91:89:e4:ae:9e:af:a0:7e:80:78:9b:60:77:7b:15:40:fe:e7: ea:b7:a4:71:a4:49:4d:4f:62:44:11:3e:09:c9:6b:da:9d:ba: 90:96:9a:35:26:34:85:c2:c2:71:39:55:50:ce:56:56:12:bc: 8f:13:29:87:2c:9b:b4:30:2d:5d:a3:83:6a:ac:66:16:5c:b9: 00:d0:08:36:db:f8:68:e9:c8:c3:79:15:4c:cc:08:1a:ff:04: 10:84:29:42:40:0e:4b:7f:68:ee:ce:a5:4f:48:3d:16:c0:7e: 02:85:19:46:c8:14:b1:24:24:cf:97:d2:89:cc:b3:84:b4:5b: 08:7a:dd:12:25:e8:ed:ee:8c:fe:95:97:ce:86:16:9f:46:cf: a8:23:8c:31:8f:73:a3:70:5a:4d:84:cb:49:ef:f8:25:67:16: 98:9f:fc:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNA7CCRZELb1WRhKfeOPo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1 ODY5MWEwHhcNMjUxMjIzMjEwMDQ1WhcNMjUxMjI0MjEwMDQ1WjAzMTEwLwYDVQQD EygxMjk5MDlkYzI0NTk2ZDExZDc2NjQ5NzJkYWZkNGRlYmUzMTRmMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFCMqZybaqsGV94TEuTVPELjW5SN 1uTijcyIlsvEeXCt0FieHbvsG7OUuYnQtkEijG5IQGLKg/eDj2VSENgIzpN0FFcO usbciA1KdwQbqRvr2i6ryRZFauBcIHI2Gn1uewkn5FWyrkS3FtZUhIcwA3UWJG/u 8aBhYtv7pzFv8V6k3m5NOh0jigLXGif//zCi4MpYSK4J9e2Ba8KV5P7nqTu3Xnvd GjEJu1KFOBNCf2yFYGQquC/3MgTHzjGtcUDggkOgVjxpfqzNrcy1D1q5h6YLa5wc PIzNIWw/L2prL0kZnas1J1UJzZHe0XaXiJSTOtDN4TfBJBIKxtjyyUJa2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKZCdwkWW0R12ZJctr9TevjFPA2MB8GA1UdIwQY MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt NzkwMjQ0NTA4ZGY0LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0 LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQyQOzpo oxVeoxBU+dv0YOU9oyb+TZ+o+Pt6gPupGlqGg/g/SiHWBBhLEXQK//J7KA8GytdU wJIqk2rpZvP5NisxkWEDEZb2ZNfou42tKEZdlK1yOBUNjHeJkYnkrp6voH6AeJtg d3sVQP7n6rekcaRJTU9iRBE+Cclr2p26kJaaNSY0hcLCcTlVUM5WVhK8jxMphyyb tDAtXaODaqxmFly5ANAINtv4aOnIw3kVTMwIGv8EEIQpQkAOS39o7s6lT0g9FsB+ AoUZRsgUsSQkz5fSicyzhLRbCHrdEiXo7e6M/pWXzoYWn0bPqCOMMY9zo3BaTYTL Se/4JWcWmJ/8QA== -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:37 2025 by rpki-client