This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json) Hash identifier: PmAQ+KkjOoZzSlNQO0daBMYxwbXVJ8C1k/BV0uOjXd0= Subject key identifier: 00:B9:69:A5:71:09:B2:F4:6E:B7:BA:44:7F:94:EF:31:55:29:8B:AA Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8 Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8 Certificate serial: 019B717E5744FCDE2D47E8F339FB18AAC802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft Manifest number: 082A Signing time: Tue 30 Dec 2025 23:01:03 +0000 Manifest this update: Tue 30 Dec 2025 23:01:03 +0000 Manifest next update: Wed 31 Dec 2025 23:01:03 +0000 Files and hashes: 1: EOZUjXctaYMkRcyyMQLguIWxilg.roa (hash: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=) 2: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: ddXRulBZgXWA2Oh9oboXGV2+DXRbO7qRv+OPMxt6ZnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:57:44:fc:de:2d:47:e8:f3:39:fb:18:aa:c8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8 Validity Not Before: Dec 30 23:01:03 2025 GMT Not After : Dec 31 23:01:03 2025 GMT Subject: CN=00b969a57109b2f46eb7ba447f94ef3155298baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e0:d0:8b:ca:08:f0:2d:94:bd:b7:17:04:89: c2:22:3d:97:ef:6e:86:79:0c:ad:9d:e5:cd:91:90: c7:42:1a:c7:19:77:fe:0e:70:8f:f4:c0:5d:b1:27: 56:d7:60:7e:aa:0c:64:38:1c:78:a2:18:20:65:a2: bc:16:07:c3:5a:57:66:f0:ea:89:5a:c3:d9:3d:a2: b9:05:af:94:ff:dc:56:22:a6:89:c3:46:81:2e:49: cc:a5:0d:0c:64:cd:95:b6:a7:0c:c2:45:f9:2a:5c: b4:c8:17:d8:8d:1c:62:33:22:7b:ad:fc:d8:44:dd: 17:21:fd:81:65:04:8c:17:eb:78:b2:e7:7b:1d:4b: 43:42:7c:6d:b6:61:4e:69:dc:44:04:5c:c9:9c:fb: 82:69:76:39:b3:21:af:70:03:50:68:ab:37:87:f4: 5f:c4:40:01:b2:c9:b0:82:4e:7d:71:52:63:f0:33: 4b:87:3a:52:25:92:b3:2a:d3:4a:40:70:a4:59:d7: eb:c7:a4:72:33:28:23:12:f7:3b:a8:d1:96:01:14: d1:ab:f1:7b:29:61:3a:1f:5c:25:f2:1a:d6:82:52: 9a:d4:f5:cf:18:ee:9b:2b:0a:ce:11:ca:30:ca:47: ec:5c:09:a4:c1:a9:48:0e:66:65:ed:d2:a6:b2:7e: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B9:69:A5:71:09:B2:F4:6E:B7:BA:44:7F:94:EF:31:55:29:8B:AA X509v3 Authority Key Identifier: keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1b:84:37:0b:1b:84:17:2a:0f:d9:20:0b:a0:0e:06:1a:22: 09:00:67:62:50:14:78:0e:7f:49:dc:a5:e6:50:76:0a:b2:c3: d5:b6:3c:59:f2:c9:7a:5a:05:f1:93:b1:21:85:c8:3d:2e:ad: 03:03:c8:64:8b:82:79:6a:f2:3f:30:8a:c6:6c:dc:8d:16:02: 47:10:65:50:22:22:e8:bb:6c:54:c1:51:a4:fa:00:06:8d:47: 0d:96:e3:12:c7:5a:f8:39:cb:41:99:d7:3c:47:8a:72:b1:71: 09:aa:ee:8e:ba:f2:ed:04:ae:ba:85:28:23:e3:0b:31:6b:6b: f0:5e:97:ec:15:46:91:3a:cd:ff:ff:5b:4b:03:86:16:57:0b: 9a:23:43:33:15:11:85:f9:20:be:c9:ad:6c:36:cd:84:ce:26: e6:d2:52:07:64:80:a3:b3:8f:e5:90:54:0f:56:72:a9:a9:98: d4:d8:5e:22:b6:2d:62:9a:3c:b9:65:37:0c:ee:2e:2a:e3:03: 9c:c7:d7:71:c8:d7:26:4e:36:2a:48:7e:b6:a6:30:a2:c1:05: 56:f5:12:7b:95:22:0e:31:08:a3:e4:ff:9c:e0:37:7e:d1:27: ac:fb:5d:47:44:53:f3:04:8d:1e:9c:b0:84:21:97:d1:63:f7: f0:fb:6f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfldE/N4tR+jzOfsYqsgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzVmMzY0MTNlN2FmNDcyODEzZmUzYTcxNGUyZWNkYWEy MWYyZTgwHhcNMjUxMjMwMjMwMTAzWhcNMjUxMjMxMjMwMTAzWjAzMTEwLwYDVQQD EygwMGI5NjlhNTcxMDliMmY0NmViN2JhNDQ3Zjk0ZWYzMTU1Mjk4YmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ODQi8oI8C2UvbcXBInCIj2X726G eQytneXNkZDHQhrHGXf+DnCP9MBdsSdW12B+qgxkOBx4ohggZaK8FgfDWldm8OqJ WsPZPaK5Ba+U/9xWIqaJw0aBLknMpQ0MZM2VtqcMwkX5Kly0yBfYjRxiMyJ7rfzY RN0XIf2BZQSMF+t4sud7HUtDQnxttmFOadxEBFzJnPuCaXY5syGvcANQaKs3h/Rf xEABssmwgk59cVJj8DNLhzpSJZKzKtNKQHCkWdfrx6RyMygjEvc7qNGWARTRq/F7 KWE6H1wl8hrWglKa1PXPGO6bKwrOEcowykfsXAmkwalIDmZl7dKmsn4QFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC5aaVxCbL0bre6RH+U7zFVKYuqMB8GA1UdIwQY MBaAFCfF82QT569HKBP+OnFOLs2qIfLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMt NzkxMzI5NDZiNjk5LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMtNzkxMzI5NDZiNjk5 LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxuENwsb hBcqD9kgC6AOBhoiCQBnYlAUeA5/Sdyl5lB2CrLD1bY8WfLJeloF8ZOxIYXIPS6t AwPIZIuCeWryPzCKxmzcjRYCRxBlUCIi6LtsVMFRpPoABo1HDZbjEsda+DnLQZnX PEeKcrFxCarujrry7QSuuoUoI+MLMWtr8F6X7BVGkTrN//9bSwOGFlcLmiNDMxUR hfkgvsmtbDbNhM4m5tJSB2SAo7OP5ZBUD1ZyqamY1NheIrYtYpo8uWU3DO4uKuMD nMfXccjXJk42Kkh+tqYwosEFVvUSe5UiDjEIo+T/nOA3ftEnrPtdR0RT8wSNHpyw hCGX0WP38PtvVQ== -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:43 2025 by rpki-client