This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json) Hash identifier: x/WyIJBJ/qx35j0JRNsOHL7K0Pj2x1druAjEcZ4LgRM= Subject key identifier: E9:DF:A1:FA:0B:0E:88:B9:E0:4D:E8:F7:34:CE:F6:A9:31:E5:DD:97 Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3 Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3 Certificate serial: 019B3F7EE524CB93FC4A8F710D355DA2BAAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft Manifest number: 04DA Signing time: Sun 21 Dec 2025 06:00:39 +0000 Manifest this update: Sun 21 Dec 2025 06:00:39 +0000 Manifest next update: Mon 22 Dec 2025 06:00:39 +0000 Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: 9H6Ti/tKXdiSS+TB7yDH4GwiGnPPXp/vg7zjrPOrRac=) 2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e5:24:cb:93:fc:4a:8f:71:0d:35:5d:a2:ba:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3 Validity Not Before: Dec 21 06:00:39 2025 GMT Not After : Dec 22 06:00:39 2025 GMT Subject: CN=e9dfa1fa0b0e88b9e04de8f734cef6a931e5dd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:be:7c:61:9e:36:72:4b:5d:51:83:cb:a0: e4:cf:6b:ba:78:8b:27:5d:47:36:c1:0c:0e:06:60: 78:62:dd:fb:d5:59:84:55:5d:fe:ff:77:f6:6f:f9: 9a:70:6c:5b:6a:d3:08:65:bd:33:ad:14:9c:39:4a: 67:08:40:1f:52:ae:4e:95:c9:ac:d6:50:e2:ea:23: cb:48:5d:c8:28:be:2a:c8:e3:4a:b0:bb:f7:1b:c1: 88:58:2f:7d:cb:ea:1e:5a:59:9f:28:2a:b3:73:42: 5c:d2:00:fa:e4:89:f1:49:8d:20:53:d2:63:c9:09: 87:26:34:f9:a1:e6:fa:22:a3:34:ea:cf:32:02:41: 68:85:6f:f8:ad:91:6e:a8:6f:4a:41:8f:1e:8f:a1: 63:fc:c6:4e:8c:40:15:97:13:1d:12:54:35:cd:f3: fa:93:6a:46:5f:ba:c7:7c:f7:0d:06:be:9e:47:67: dc:a8:f0:15:dc:56:65:1f:8e:53:06:7d:47:54:e8: 61:8c:ec:f2:3c:f7:b8:f8:e5:05:72:e2:97:56:d8: 9e:f2:7a:ec:21:a9:b7:d7:7c:aa:0a:c8:f2:ce:13: 02:30:f7:6e:b2:5b:79:10:a5:da:3d:9a:57:43:9c: b8:f6:a4:cc:42:ed:37:f8:3e:e2:96:2f:2d:be:88: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DF:A1:FA:0B:0E:88:B9:E0:4D:E8:F7:34:CE:F6:A9:31:E5:DD:97 X509v3 Authority Key Identifier: keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:46:67:6a:34:ec:6b:a5:f6:4f:63:21:6c:90:03:a4:67:d2: 01:af:3b:38:36:5d:88:12:75:4d:fd:d4:b1:6d:06:0e:f9:12: 39:67:35:25:b6:8d:60:e4:c2:4a:a3:89:1a:da:27:47:b4:8c: a2:d2:9b:97:12:b4:0d:68:42:a8:40:74:91:48:9b:7f:60:29: 59:e7:59:c1:5b:d2:ca:5b:8d:4c:96:3d:5b:54:65:c7:ae:6b: 9a:12:21:ed:30:a2:f9:d1:10:2b:10:c8:c6:55:6b:99:2a:3c: eb:24:6b:8f:0e:ac:dd:f0:c3:ba:f6:6e:21:10:98:f4:28:28: a8:0d:a4:b2:2a:e3:12:3a:fd:ea:1d:8f:39:42:b4:2a:68:5a: 87:e1:06:06:db:c4:23:76:4b:8c:41:83:5f:b8:a4:88:33:c6: f0:a9:fd:0d:e3:ed:3b:89:d0:dc:08:5e:41:8e:79:60:27:44: b4:18:99:03:97:0b:e9:26:7d:1e:ff:c5:89:97:a3:6f:92:79: 18:61:e6:0e:bb:66:40:81:e7:90:ee:44:62:3e:26:2f:86:f4: 40:02:52:1f:58:35:e0:70:44:db:32:70:68:ac:0c:df:c4:36: a6:d5:23:5d:9b:55:d8:a0:56:23:5b:66:29:ff:67:37:1d:c6: a8:33:95:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuUky5P8So9xDTVdorquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTg5YWI1M2YzMmVmZjY1NzI2ZmQ0OWQwOGQ0MmZmODEy YzZkYjMwHhcNMjUxMjIxMDYwMDM5WhcNMjUxMjIyMDYwMDM5WjAzMTEwLwYDVQQD EyhlOWRmYTFmYTBiMGU4OGI5ZTA0ZGU4ZjczNGNlZjZhOTMxZTVkZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDC+fGGeNnJLXVGDy6Dkz2u6eIsn XUc2wQwOBmB4Yt371VmEVV3+/3f2b/macGxbatMIZb0zrRScOUpnCEAfUq5Olcms 1lDi6iPLSF3IKL4qyONKsLv3G8GIWC99y+oeWlmfKCqzc0Jc0gD65InxSY0gU9Jj yQmHJjT5oeb6IqM06s8yAkFohW/4rZFuqG9KQY8ej6Fj/MZOjEAVlxMdElQ1zfP6 k2pGX7rHfPcNBr6eR2fcqPAV3FZlH45TBn1HVOhhjOzyPPe4+OUFcuKXVtie8nrs Iam313yqCsjyzhMCMPduslt5EKXaPZpXQ5y49qTMQu03+D7ili8tvojCDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnfofoLDoi54E3o9zTO9qkx5d2XMB8GA1UdIwQY MBaAFCcYmrU/Mu/2Vyb9SdCNQv+BLG2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hMzRjMWUtMTg4MS00ZDZjLWFhZDYt NTA3MDI1OGRiZjJmLzEvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hMzRjMWUtMTg4MS00ZDZjLWFhZDYtNTA3MDI1OGRiZjJm LzEvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkZnajTs a6X2T2MhbJADpGfSAa87ODZdiBJ1Tf3UsW0GDvkSOWc1JbaNYOTCSqOJGtonR7SM otKblxK0DWhCqEB0kUibf2ApWedZwVvSyluNTJY9W1Rlx65rmhIh7TCi+dEQKxDI xlVrmSo86yRrjw6s3fDDuvZuIRCY9CgoqA2ksirjEjr96h2POUK0Kmhah+EGBtvE I3ZLjEGDX7ikiDPG8Kn9DePtO4nQ3AheQY55YCdEtBiZA5cL6SZ9Hv/FiZejb5J5 GGHmDrtmQIHnkO5EYj4mL4b0QAJSH1g14HBE2zJwaKwM38Q2ptUjXZtV2KBWI1tm Kf9nNx3GqDOVzg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:56:01 2025 by rpki-client