This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json) Hash identifier: cG0ifSO6MGVYM8XX/Jeiq6Z8wA1Rgc2tes+/i86Onoc= Subject key identifier: 7A:2E:72:74:12:A0:EA:9E:0F:9C:E4:58:B9:91:C7:04:43:43:0A:1E Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1 Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1 Certificate serial: 019B3E6D3552F93B97F1FBF255F40EC1C422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft Manifest number: 1401 Signing time: Sun 21 Dec 2025 01:01:43 +0000 Manifest this update: Sun 21 Dec 2025 01:01:43 +0000 Manifest next update: Mon 22 Dec 2025 01:01:43 +0000 Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: yHIk3Ie9U90hhf8hn/bitbxaW43xRqYN1onVPcCfIsw=) 2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:35:52:f9:3b:97:f1:fb:f2:55:f4:0e:c1:c4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1 Validity Not Before: Dec 21 01:01:43 2025 GMT Not After : Dec 22 01:01:43 2025 GMT Subject: CN=7a2e727412a0ea9e0f9ce458b991c70443430a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:8d:69:01:98:0b:b4:68:5c:b1:35:76:aa: 2f:af:2d:b2:e0:71:fd:3a:a0:b4:d5:a8:d0:db:cc: cb:b7:de:47:e7:5d:94:30:50:96:c3:6a:d7:63:9d: 0d:77:a4:fe:d8:02:6f:c4:6b:bb:a5:2c:85:1a:a2: a7:8a:ad:86:d7:02:ac:5d:3e:3a:1a:76:66:e6:80: 70:12:db:48:10:2a:cc:e9:39:52:07:f1:3b:8c:9b: 9f:ae:47:17:18:68:58:45:bd:3c:89:9f:75:8b:fc: 3e:fe:93:de:d7:cb:4b:bd:58:c8:3c:22:31:e7:9b: 8d:e1:63:b3:b6:23:b8:96:d1:b3:6e:7d:37:e0:36: 6f:56:92:e9:79:27:f1:cd:08:b3:b4:a8:63:18:8c: a4:9b:f7:23:73:c8:26:be:96:76:58:0b:b2:71:4f: 46:90:4c:dd:0b:63:32:f1:40:43:6f:27:d5:ab:78: a8:97:7b:89:10:bd:d7:de:2c:e1:a5:39:65:2c:32: c5:94:1f:4f:b1:85:93:15:b8:ff:12:76:41:93:b7: c4:3d:db:92:b7:d9:79:64:3c:4b:ab:16:bb:e8:42: 1f:5f:66:7b:61:45:2b:82:d0:1c:5f:3b:f9:f5:3a: 3c:11:a0:eb:18:a0:fe:14:f3:d0:3d:9a:6d:74:dd: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2E:72:74:12:A0:EA:9E:0F:9C:E4:58:B9:91:C7:04:43:43:0A:1E X509v3 Authority Key Identifier: keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c1:f6:c5:fe:16:1b:a9:42:69:77:5a:2d:d9:7e:bd:89:27: ac:fe:32:e5:66:6f:46:72:f2:86:99:3c:66:9a:50:bc:89:f6: f7:9a:6f:ed:11:85:3e:f8:8e:34:08:96:ec:79:d1:f8:1a:76: 48:2f:75:81:cf:1e:e8:7a:d7:f6:81:e7:95:ee:fa:5c:1c:3b: 9a:99:2f:29:78:0b:28:56:b5:59:ca:f9:13:a4:2f:d5:ec:9e: e2:5b:a6:f5:2c:d0:98:df:d7:4f:f7:43:e5:13:2c:b8:4e:b0: d5:65:dc:9b:a6:64:89:21:2b:c2:66:73:92:e4:3e:a3:ab:e0: 5a:3c:a3:43:42:3d:9b:11:2a:d7:ba:89:bd:1c:49:17:73:c7: 3f:ec:f1:88:60:89:0e:d9:87:78:34:91:98:89:d7:fe:07:03: 74:40:c7:23:b1:92:e8:09:a8:72:3d:cb:52:b9:d6:e9:ef:22: 6f:72:38:1d:ae:34:c8:66:92:53:2a:2a:5d:1f:eb:17:6e:4d: 5b:0f:af:60:17:c1:0a:f3:50:5b:9a:9c:21:80:a9:31:5e:40: ab:d3:f0:07:70:e0:6f:7a:55:50:50:3f:98:e2:3a:43:8d:09: 7b:48:4c:10:76:08:ea:04:c9:2a:3a:38:03:dc:e1:b0:57:6e: 6a:a3:78:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTVS+TuX8fvyVfQOwcQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWYzNjUyZTQ0NThmYTAwMWM2NzM4YTQxNDI1YjA3ZTcw YzkxYTEwHhcNMjUxMjIxMDEwMTQzWhcNMjUxMjIyMDEwMTQzWjAzMTEwLwYDVQQD Eyg3YTJlNzI3NDEyYTBlYTllMGY5Y2U0NThiOTkxYzcwNDQzNDMwYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9uNaQGYC7RoXLE1dqovry2y4HH9 OqC01ajQ28zLt95H512UMFCWw2rXY50Nd6T+2AJvxGu7pSyFGqKniq2G1wKsXT46 GnZm5oBwEttIECrM6TlSB/E7jJufrkcXGGhYRb08iZ91i/w+/pPe18tLvVjIPCIx 55uN4WOztiO4ltGzbn034DZvVpLpeSfxzQiztKhjGIykm/cjc8gmvpZ2WAuycU9G kEzdC2My8UBDbyfVq3iol3uJEL3X3izhpTllLDLFlB9PsYWTFbj/EnZBk7fEPduS t9l5ZDxLqxa76EIfX2Z7YUUrgtAcXzv59To8EaDrGKD+FPPQPZptdN2zDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoucnQSoOqeD5zkWLmRxwRDQwoeMB8GA1UdIwQY MBaAFCefNlLkRY+gAcZzikFCWwfnDJGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEt ZjhlNmJmZTFhZGZiLzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEtZjhlNmJmZTFhZGZi LzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcH2xf4W G6lCaXdaLdl+vYknrP4y5WZvRnLyhpk8ZppQvIn295pv7RGFPviONAiW7HnR+Bp2 SC91gc8e6HrX9oHnle76XBw7mpkvKXgLKFa1Wcr5E6Qv1eye4lum9SzQmN/XT/dD 5RMsuE6w1WXcm6ZkiSErwmZzkuQ+o6vgWjyjQ0I9mxEq17qJvRxJF3PHP+zxiGCJ DtmHeDSRmInX/gcDdEDHI7GS6Amocj3LUrnW6e8ib3I4Ha40yGaSUyoqXR/rF25N Ww+vYBfBCvNQW5qcIYCpMV5Aq9PwB3Dgb3pVUFA/mOI6Q40Je0hMEHYI6gTJKjo4 A9zhsFduaqN4qg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:07:06 2025 by rpki-client