This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json) Hash identifier: uh+9+641BeGsN/6/cVCv7HcsgiKbvc0vyKgPdfSAb5Q= Subject key identifier: 3D:2C:11:72:BE:DF:16:49:E4:8F:AF:90:29:00:5B:21:B9:33:BD:BF Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a Certificate serial: 019B5FE6541AE7D542547474751F1D7ECDBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft Manifest number: 179D Signing time: Sat 27 Dec 2025 13:01:28 +0000 Manifest this update: Sat 27 Dec 2025 13:01:28 +0000 Manifest next update: Sun 28 Dec 2025 13:01:28 +0000 Files and hashes: 1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=) 2: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: adJX2ZGsvfctmNllLRQmXx4aHqEMEfLwNHMb3dlNyMw=) 3: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e6:54:1a:e7:d5:42:54:74:74:75:1f:1d:7e:cd:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a Validity Not Before: Dec 27 13:01:28 2025 GMT Not After : Dec 28 13:01:28 2025 GMT Subject: CN=3d2c1172bedf1649e48faf9029005b21b933bdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:bb:49:bc:2d:16:9f:3d:57:e6:b6:9b:ff: d6:16:25:0c:6f:93:ca:08:8e:12:6b:e7:ae:61:26: 84:b5:25:d5:89:dd:c5:98:97:2c:41:ed:51:07:78: 92:de:29:76:f8:38:4f:16:f5:ba:b0:87:92:c6:4b: 90:54:1b:e6:85:fc:78:60:29:c8:38:00:c1:f4:a0: bb:92:16:12:02:c6:a3:6b:6d:ba:2e:ea:49:4f:9e: 4e:84:dd:28:a9:a0:04:19:d2:3f:4e:74:fa:0a:89: 89:5f:05:72:d6:a6:22:dc:5a:cf:e8:9b:e3:94:dd: d9:90:b9:58:6c:be:4f:f8:44:ee:0a:f2:90:4f:36: e8:98:8b:25:bc:8a:97:02:fe:5c:d4:80:2e:05:70: 80:f4:5c:e7:60:c1:6a:98:69:25:48:62:e2:a7:b9: 7a:2e:37:ab:39:df:48:19:af:e4:f9:ad:af:aa:f5: 96:fd:8b:53:27:9b:39:38:14:a5:f3:a7:1d:8d:85: ff:5e:1f:51:f8:07:a8:bc:2f:ac:d6:58:db:55:78: 8b:3f:0a:35:de:fb:eb:0a:84:ff:ed:77:d4:1b:50: 0e:77:4c:d4:3d:9e:15:cb:8a:c0:da:b8:5c:58:d6: af:bf:3c:b3:c9:95:fc:4e:bb:d8:81:f4:b2:d0:34: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2C:11:72:BE:DF:16:49:E4:8F:AF:90:29:00:5B:21:B9:33:BD:BF X509v3 Authority Key Identifier: keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e4:8f:dc:84:93:e0:f5:b8:76:da:da:14:f6:0c:af:e3:c9: c7:dc:5f:b2:70:ef:75:62:19:cc:46:75:24:8d:c0:7c:74:01: 21:6c:3a:10:0e:b0:af:0f:78:4b:69:37:23:64:8d:3b:0a:ac: f1:76:94:18:2b:f2:79:cb:28:25:aa:54:fc:5a:1c:3f:9b:59: db:e9:e2:6b:a0:7f:99:38:7f:6d:69:d5:f7:c5:b0:22:66:92: 8b:c1:2c:ac:d5:f3:7b:d0:d9:24:2f:29:da:3a:f8:af:86:95: f9:97:e4:dd:66:6c:5e:8d:96:96:55:ad:ab:97:f2:cf:d5:9d: 14:7e:ec:9c:db:a3:f3:05:20:01:65:32:55:aa:4c:67:45:7a: c6:72:ef:0b:7d:46:2f:34:80:c4:2c:4f:ab:42:1a:73:ef:87: 2e:8d:e2:59:c2:4a:e9:50:c4:f7:d8:f7:9c:be:bc:d6:53:86: 4f:09:68:80:11:dd:90:a2:4e:00:53:32:52:99:3a:0c:87:e4: a4:44:05:47:34:4a:48:4d:7c:52:08:d9:e2:af:40:98:55:4f: a1:9c:a9:8d:c6:8a:c8:b6:f6:75:eb:43:62:07:ad:92:00:39: 27:b1:2e:e6:6b:99:e4:d9:c8:0d:c5:a2:56:8e:af:19:ad:c0: d5:f0:1c:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5lQa59VCVHR0dR8dfs26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGYwNDI4MjQyNzNmY2ZmM2YwOTNkMGY5YjFkZWM2OTYw YmFlNmEwHhcNMjUxMjI3MTMwMTI4WhcNMjUxMjI4MTMwMTI4WjAzMTEwLwYDVQQD EygzZDJjMTE3MmJlZGYxNjQ5ZTQ4ZmFmOTAyOTAwNWIyMWI5MzNiZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwS7SbwtFp89V+a2m//WFiUMb5PK CI4Sa+euYSaEtSXVid3FmJcsQe1RB3iS3il2+DhPFvW6sIeSxkuQVBvmhfx4YCnI OADB9KC7khYSAsaja226LupJT55OhN0oqaAEGdI/TnT6ComJXwVy1qYi3FrP6Jvj lN3ZkLlYbL5P+ETuCvKQTzbomIslvIqXAv5c1IAuBXCA9FznYMFqmGklSGLip7l6 LjerOd9IGa/k+a2vqvWW/YtTJ5s5OBSl86cdjYX/Xh9R+AeovC+s1ljbVXiLPwo1 3vvrCoT/7XfUG1AOd0zUPZ4Vy4rA2rhcWNavvzyzyZX8TrvYgfSy0DQYMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0sEXK+3xZJ5I+vkCkAWyG5M72/MB8GA1UdIwQY MBaAFCffBCgkJz/P8/CT0Pmx3saWC65qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUt Y2UyMmQ1ZWFiODJmLzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUtY2UyMmQ1ZWFiODJm LzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuSP3IST 4PW4dtraFPYMr+PJx9xfsnDvdWIZzEZ1JI3AfHQBIWw6EA6wrw94S2k3I2SNOwqs 8XaUGCvyecsoJapU/FocP5tZ2+nia6B/mTh/bWnV98WwImaSi8EsrNXze9DZJC8p 2jr4r4aV+Zfk3WZsXo2WllWtq5fyz9WdFH7snNuj8wUgAWUyVapMZ0V6xnLvC31G LzSAxCxPq0Iac++HLo3iWcJK6VDE99j3nL681lOGTwlogBHdkKJOAFMyUpk6DIfk pEQFRzRKSE18UgjZ4q9AmFVPoZypjcaKyLb2detDYgetkgA5J7Eu5muZ5NnIDcWi Vo6vGa3A1fAcYA== -----END CERTIFICATE-----Generated at Sat Dec 27 20:41:22 2025 by rpki-client