This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json) Hash identifier: VLHCDQhwQ/5NRSEOHLOfruJjp0t2TdX5GTcDLxtmQ3Y= Subject key identifier: A2:65:CE:99:F8:62:FC:8E:10:12:30:F4:A2:E9:01:B3:C1:1F:EC:35 Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb Certificate serial: 019B2B53DD38E1F9A46A8278C6C199B0F948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 08:01:14 +0000 Manifest this update: Wed 17 Dec 2025 08:01:14 +0000 Manifest next update: Thu 18 Dec 2025 08:01:14 +0000 Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: KnHGEZkufiQoxCmesvUf/rHMatIP1eXUV4TUhu2LSUE=) 2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:dd:38:e1:f9:a4:6a:82:78:c6:c1:99:b0:f9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb Validity Not Before: Dec 17 08:01:14 2025 GMT Not After : Dec 18 08:01:14 2025 GMT Subject: CN=a265ce99f862fc8e101230f4a2e901b3c11fec35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:ae:66:da:ad:da:97:fa:fd:72:58:a4:f9: de:70:3a:92:fe:d8:c0:9d:b5:5e:15:90:48:3e:2c: 9e:d7:b9:55:8e:05:57:77:2a:05:89:2e:00:5b:91: 53:44:ae:a7:04:ef:9a:4f:c1:be:0a:11:eb:fb:e7: 03:ed:1d:27:d4:7c:34:af:a6:41:5a:f3:14:d5:11: 03:99:a4:75:7c:2d:a7:6b:ba:92:f1:1c:df:ca:f0: 3c:e6:09:67:5b:1e:9e:a1:19:1d:2e:e7:13:20:85: 8e:79:fe:6d:d8:c7:5a:35:9c:b7:d1:55:99:0c:7a: b8:44:e2:ad:dc:3f:f9:5a:0f:41:df:3b:81:9a:e8: 5c:9c:bc:44:3f:ef:be:07:ba:f6:a4:39:03:b4:b3: fd:76:6f:d2:02:95:eb:ed:b1:3b:f4:bd:ac:cd:b5: d4:3b:78:8e:a3:1f:bd:65:57:c6:85:4c:3a:a0:5e: a6:67:8d:d2:8b:5d:19:36:6d:b2:69:f5:ab:54:6f: ed:7f:f3:b6:5e:9a:b7:d7:c8:85:82:cb:c1:e3:9e: e7:d1:92:98:b2:b9:9c:bc:db:48:ba:66:e6:c3:a0: bc:ff:8b:cc:f8:98:d9:a1:a0:43:5d:da:47:aa:aa: 6b:cc:79:fa:ed:cd:fa:8b:30:0a:22:9b:ca:19:6f: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:65:CE:99:F8:62:FC:8E:10:12:30:F4:A2:E9:01:B3:C1:1F:EC:35 X509v3 Authority Key Identifier: keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9c:12:4e:e7:aa:62:a3:a4:be:f5:ce:a7:74:3d:42:b5:0d: 33:d1:4f:54:be:70:ef:6d:a8:8e:5e:f5:27:5b:49:ce:76:58: fc:de:db:07:50:92:a9:6d:0b:26:95:06:37:0a:12:d4:fc:4d: 8e:18:e6:b3:80:db:1f:fa:e6:e9:23:3a:48:80:98:61:82:5c: 01:69:65:30:f5:87:c8:c5:42:53:07:4d:ed:04:a0:0d:dc:fa: 0d:d7:22:12:3a:9b:07:3a:aa:44:8e:8d:5a:e0:2f:43:1a:f4: db:3f:cb:ee:9f:03:06:b0:d1:32:bb:d6:dc:16:a2:ed:0b:6b: 18:16:6c:3b:90:61:f3:cc:56:65:af:c5:ab:ab:e8:1a:92:bf: d9:15:b2:90:12:2d:6a:a1:a9:74:4c:8d:db:a5:aa:93:a4:b6: 5e:c4:59:bf:00:58:d2:ba:4b:56:da:b9:34:94:90:a0:1e:a5: a7:37:63:94:8a:86:43:ab:31:7b:6a:4c:5f:85:d2:03:7a:d6: 4f:ae:3b:07:03:b6:b7:5c:60:fc:25:c7:57:55:39:28:e7:a1: b5:18:4d:e5:ef:da:f0:d7:64:5c:e2:e2:55:6e:45:88:fd:89: 63:17:fd:95:9f:de:ed:24:d2:1b:51:07:54:dd:f2:7d:75:70: 58:9f:9c:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU9044fmkaoJ4xsGZsPlIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGQyNDc5YmFkY2I0MGEyNGE0MzZiMWVkY2MzNjFjM2Zh NjJhZmIwHhcNMjUxMjE3MDgwMTE0WhcNMjUxMjE4MDgwMTE0WjAzMTEwLwYDVQQD EyhhMjY1Y2U5OWY4NjJmYzhlMTAxMjMwZjRhMmU5MDFiM2MxMWZlYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDmuZtqt2pf6/XJYpPnecDqS/tjA nbVeFZBIPiye17lVjgVXdyoFiS4AW5FTRK6nBO+aT8G+ChHr++cD7R0n1Hw0r6ZB WvMU1REDmaR1fC2na7qS8RzfyvA85glnWx6eoRkdLucTIIWOef5t2MdaNZy30VWZ DHq4ROKt3D/5Wg9B3zuBmuhcnLxEP+++B7r2pDkDtLP9dm/SApXr7bE79L2szbXU O3iOox+9ZVfGhUw6oF6mZ43Si10ZNm2yafWrVG/tf/O2Xpq318iFgsvB457n0ZKY srmcvNtIumbmw6C8/4vM+JjZoaBDXdpHqqprzHn67c36izAKIpvKGW+ZdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJlzpn4YvyOEBIw9KLpAbPBH+w1MB8GA1UdIwQY MBaAFCfdJHm63LQKJKQ2se3MNhw/pir7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEt YmMyYzQ1M2MwZWM4LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEtYmMyYzQ1M2MwZWM4 LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5wSTueq YqOkvvXOp3Q9QrUNM9FPVL5w722ojl71J1tJznZY/N7bB1CSqW0LJpUGNwoS1PxN jhjms4DbH/rm6SM6SICYYYJcAWllMPWHyMVCUwdN7QSgDdz6DdciEjqbBzqqRI6N WuAvQxr02z/L7p8DBrDRMrvW3Bai7QtrGBZsO5Bh88xWZa/Fq6voGpK/2RWykBIt aqGpdEyN26Wqk6S2XsRZvwBY0rpLVtq5NJSQoB6lpzdjlIqGQ6sxe2pMX4XSA3rW T647BwO2t1xg/CXHV1U5KOehtRhN5e/a8NdkXOLiVW5FiP2JYxf9lZ/e7STSG1EH VN3yfXVwWJ+c3w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:38:29 2025 by rpki-client