This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json) Hash identifier: JNDzPOrIVMnem8iInwS8/AazPhBd0ElZqv8Nc6G5S5E= Subject key identifier: AC:92:46:EC:19:B4:C0:FC:E2:BB:0C:B3:89:FE:59:BA:A1:92:06:65 Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb Certificate serial: 019B2F304CAD7E2AE54F5FDA91A947197E52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 02:00:53 +0000 Manifest this update: Thu 18 Dec 2025 02:00:53 +0000 Manifest next update: Fri 19 Dec 2025 02:00:53 +0000 Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: kqGHt3ppDTMGvWF/VFtXV8ARVaB6qUk4zowP75QAJ2Q=) 2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:4c:ad:7e:2a:e5:4f:5f:da:91:a9:47:19:7e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb Validity Not Before: Dec 18 02:00:53 2025 GMT Not After : Dec 19 02:00:53 2025 GMT Subject: CN=ac9246ec19b4c0fce2bb0cb389fe59baa1920665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:f7:0c:33:91:a8:49:0e:a9:f1:85:34:fc: 39:fb:96:e9:3f:3e:07:ab:a8:4d:4f:0f:f1:42:ab: ad:81:91:3e:db:13:88:7d:31:18:92:25:8e:31:f9: 36:bc:91:d3:02:c0:96:78:04:b1:dc:2f:9a:bb:49: 46:62:5e:0a:a7:bc:e2:1f:a4:83:da:10:0f:ea:36: ee:e2:f6:f7:59:2b:59:86:0d:5d:24:dc:67:c4:72: ed:31:da:8e:e5:f4:33:ef:64:b7:48:8d:e6:4e:02: 85:64:b2:de:c6:f9:2e:11:f9:a4:3a:d9:08:21:17: 67:bf:23:15:42:59:ac:d5:9c:9d:72:d0:16:97:81: ab:28:28:4f:7e:65:12:4d:02:8d:f8:8b:8d:0b:4a: 1f:0e:09:e0:7d:1a:1b:96:3f:f0:3a:f2:92:f7:9c: 2a:f5:f7:ab:c9:4e:72:b4:bb:5c:6c:92:aa:bb:d2: 7f:39:17:14:36:b1:4f:6a:61:d0:78:e9:37:cf:44: aa:5e:e5:48:41:0d:48:72:01:61:a7:42:69:38:11: c1:f4:2a:3f:4a:79:9a:b2:d0:f1:fc:24:8a:19:f3: e9:dc:b6:38:0e:c5:80:76:20:88:9f:76:5d:a8:cc: 34:5f:41:a6:6e:29:ac:53:15:b3:c4:bc:ca:52:dd: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:92:46:EC:19:B4:C0:FC:E2:BB:0C:B3:89:FE:59:BA:A1:92:06:65 X509v3 Authority Key Identifier: keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:98:67:d4:1b:30:55:a0:f8:9f:0b:d8:13:d1:b3:37:4f:59: 8e:f7:6e:32:ca:c0:ad:f2:21:b9:af:e0:af:28:90:12:72:e7: 9f:30:aa:44:26:fd:9b:7b:64:18:b7:ff:1b:01:df:54:2e:e5: e5:38:8c:d6:d2:50:ac:b9:99:c6:d1:5f:c6:80:c7:4d:d6:f1: b9:45:4d:56:fb:6e:1c:01:0e:d7:09:1a:c5:49:3b:37:2d:68: a6:e0:4c:38:ac:74:a4:5e:b0:e2:73:f7:13:ec:a5:1f:22:e8: 58:3d:5e:58:db:fb:db:6b:bd:4c:8c:10:4f:1d:30:2b:8b:1c: ef:0f:1d:c9:6b:26:c3:ac:eb:7a:ea:1f:5f:d3:1d:28:04:95: cc:ca:41:c2:c7:3e:af:fe:e8:ef:09:a6:89:e1:0f:2c:23:b4: 0a:2c:07:2f:6a:46:5e:78:1f:e8:02:44:ee:e2:86:aa:4e:24: 39:c2:53:c6:1c:73:09:b0:72:6c:2d:8b:15:2e:a1:f7:0a:23: bb:80:6c:23:3b:64:4c:c9:f1:46:9a:6f:b2:bf:87:30:81:73: 37:fc:6f:a0:73:1f:c6:79:b8:96:dd:88:36:fd:50:93:f7:f6: 33:73:55:c1:d7:47:82:8f:46:01:79:71:aa:11:7a:ac:12:e9: 0a:6f:c5:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMEytfirlT1/akalHGX5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGQyNDc5YmFkY2I0MGEyNGE0MzZiMWVkY2MzNjFjM2Zh NjJhZmIwHhcNMjUxMjE4MDIwMDUzWhcNMjUxMjE5MDIwMDUzWjAzMTEwLwYDVQQD EyhhYzkyNDZlYzE5YjRjMGZjZTJiYjBjYjM4OWZlNTliYWExOTIwNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupH3DDORqEkOqfGFNPw5+5bpPz4H q6hNTw/xQqutgZE+2xOIfTEYkiWOMfk2vJHTAsCWeASx3C+au0lGYl4Kp7ziH6SD 2hAP6jbu4vb3WStZhg1dJNxnxHLtMdqO5fQz72S3SI3mTgKFZLLexvkuEfmkOtkI IRdnvyMVQlms1ZydctAWl4GrKChPfmUSTQKN+IuNC0ofDgngfRoblj/wOvKS95wq 9feryU5ytLtcbJKqu9J/ORcUNrFPamHQeOk3z0SqXuVIQQ1IcgFhp0JpOBHB9Co/ SnmastDx/CSKGfPp3LY4DsWAdiCIn3ZdqMw0X0GmbimsUxWzxLzKUt2VoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKySRuwZtMD84rsMs4n+WbqhkgZlMB8GA1UdIwQY MBaAFCfdJHm63LQKJKQ2se3MNhw/pir7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEt YmMyYzQ1M2MwZWM4LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEtYmMyYzQ1M2MwZWM4 LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5hn1Bsw VaD4nwvYE9GzN09ZjvduMsrArfIhua/gryiQEnLnnzCqRCb9m3tkGLf/GwHfVC7l 5TiM1tJQrLmZxtFfxoDHTdbxuUVNVvtuHAEO1wkaxUk7Ny1opuBMOKx0pF6w4nP3 E+ylHyLoWD1eWNv722u9TIwQTx0wK4sc7w8dyWsmw6zreuofX9MdKASVzMpBwsc+ r/7o7wmmieEPLCO0CiwHL2pGXngf6AJE7uKGqk4kOcJTxhxzCbBybC2LFS6h9woj u4BsIztkTMnxRppvsr+HMIFzN/xvoHMfxnm4lt2INv1Qk/f2M3NVwddHgo9GAXlx qhF6rBLpCm/Fcg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:48:27 2025 by rpki-client