This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft File: J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft (raw, json) Hash identifier: m3uNiiY0BpKbnXMEMvOVELEUm1/ihehWB6wox1+RGIc= Subject key identifier: 9D:D2:4A:62:5D:7B:4A:7D:B1:9B:21:FA:6A:9F:98:27:13:67:FD:AC Authority key identifier: 27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E Certificate issuer: /CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e Certificate serial: 019B4FCE2579946244C4CCE286B1F40F8592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft Manifest number: 1470 Signing time: Wed 24 Dec 2025 10:01:08 +0000 Manifest this update: Wed 24 Dec 2025 10:01:08 +0000 Manifest next update: Thu 25 Dec 2025 10:01:08 +0000 Files and hashes: 1: J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl (hash: q9wxDgitxlYDk/bpVrvU1K9M0PUvNYvzcZ8JhC7RxRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:25:79:94:62:44:c4:cc:e2:86:b1:f4:0f:85:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e Validity Not Before: Dec 24 10:01:08 2025 GMT Not After : Dec 25 10:01:08 2025 GMT Subject: CN=9dd24a625d7b4a7db19b21fa6a9f98271367fdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:bf:b1:4f:94:59:a3:96:a9:03:4f:5b:8c: a8:e0:59:e5:4d:e9:f2:0e:9c:b5:7a:7b:a2:88:6b: 93:76:93:93:d4:f6:d3:35:fe:77:3f:3d:f2:6e:41: d2:36:2f:86:52:97:cb:1d:df:14:fd:6b:8c:35:d8: 73:05:bb:7a:c8:9d:1d:b3:15:87:05:4a:93:a7:07: 2c:97:a3:fc:a8:ce:7e:07:e3:b6:d7:f4:e5:d2:3b: 16:de:dc:cc:1e:59:ef:9f:bc:44:12:e0:dd:a3:61: 01:95:65:1b:d7:4d:a4:14:27:67:9a:17:0c:fe:12: 69:92:ee:54:ec:11:1d:f7:bf:76:3f:44:f8:33:07: d0:16:8e:62:64:28:be:63:92:4d:de:38:cd:fc:ad: 69:99:80:49:c4:d6:3e:8b:8e:25:30:ae:5f:b6:4e: da:68:da:1f:13:a9:59:ae:be:08:a2:c1:35:96:36: 62:fa:04:48:9c:f5:ea:22:45:bc:87:f7:47:c9:87: 01:6a:bc:22:58:d2:01:b8:b2:46:80:99:a2:a0:ab: 26:5a:bd:7f:01:6a:2a:96:7e:ae:aa:19:6c:30:56: f8:d1:1b:63:4f:16:f8:42:b2:97:db:7a:7f:c7:d3: 20:6e:d8:b2:f5:3c:dc:9a:79:59:32:9b:d6:78:f5: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D2:4A:62:5D:7B:4A:7D:B1:9B:21:FA:6A:9F:98:27:13:67:FD:AC X509v3 Authority Key Identifier: keyid:27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d8:d6:a6:8e:4d:87:32:40:a5:10:fd:0e:f9:ed:f7:2a:27: c0:31:fc:50:c1:e4:9f:72:61:12:6b:6f:61:3b:f5:91:82:7f: 39:07:66:5b:b1:3f:ef:38:57:b3:d3:43:f5:f0:ad:1a:c6:77: 20:e3:cc:00:9c:3a:5c:2b:26:74:4b:4b:08:5c:9d:87:17:6d: 9e:d7:81:e8:25:6a:29:6b:a0:14:57:88:d8:58:e8:da:db:57: 8e:b9:20:38:9b:50:ca:5d:dc:e1:59:1c:17:3e:e9:61:ae:00: 2d:cf:96:7c:23:1c:31:3f:21:49:8c:4c:5f:d0:66:c4:51:7b: 7c:c5:9c:ec:9c:33:6c:da:5a:40:40:35:87:c7:2c:76:9a:06: 3c:55:2e:4c:7e:38:49:29:9a:25:98:5c:9a:3e:b3:1e:f6:2b: 17:d4:8c:13:d9:5b:dc:de:2d:ba:02:d5:6b:7d:1b:8c:d6:74: 75:8d:6c:d1:47:ea:e2:2f:e7:f8:16:de:af:b8:2e:f6:a3:fb: f1:eb:e2:6a:d2:92:ce:86:41:1c:2f:86:14:38:ca:7f:9b:d8: aa:78:bf:41:6d:b7:23:a8:b7:1a:24:35:f2:90:10:b8:a1:59: 3f:11:e1:27:7f:1a:2c:a6:25:00:f8:06:63:2d:43:e7:fb:75: d0:db:ce:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPziV5lGJExMzihrH0D4WSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjQ4Yzg1YTQyYjAwYjM5ZDE4MDNlNjNjOWZkNWFkZWJm N2Y5NWUwHhcNMjUxMjI0MTAwMTA4WhcNMjUxMjI1MTAwMTA4WjAzMTEwLwYDVQQD Eyg5ZGQyNGE2MjVkN2I0YTdkYjE5YjIxZmE2YTlmOTgyNzEzNjdmZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0S/sU+UWaOWqQNPW4yo4FnlTeny Dpy1enuiiGuTdpOT1PbTNf53Pz3ybkHSNi+GUpfLHd8U/WuMNdhzBbt6yJ0dsxWH BUqTpwcsl6P8qM5+B+O21/Tl0jsW3tzMHlnvn7xEEuDdo2EBlWUb102kFCdnmhcM /hJpku5U7BEd9792P0T4MwfQFo5iZCi+Y5JN3jjN/K1pmYBJxNY+i44lMK5ftk7a aNofE6lZrr4IosE1ljZi+gRInPXqIkW8h/dHyYcBarwiWNIBuLJGgJmioKsmWr1/ AWoqln6uqhlsMFb40RtjTxb4QrKX23p/x9Mgbtiy9TzcmnlZMpvWePUuhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3SSmJde0p9sZsh+mqfmCcTZ/2sMB8GA1UdIwQY MBaAFCf0jIWkKwCznRgD5jyf1a3r9/leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDRiMjQtOWI1OC00ZTNjLWE1MTUt ZTMyNTYyMWU4NmRkLzEvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZDRiMjQtOWI1OC00ZTNjLWE1MTUtZTMyNTYyMWU4NmRk LzEvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdjWpo5N hzJApRD9Dvnt9yonwDH8UMHkn3JhEmtvYTv1kYJ/OQdmW7E/7zhXs9ND9fCtGsZ3 IOPMAJw6XCsmdEtLCFydhxdtnteB6CVqKWugFFeI2Fjo2ttXjrkgOJtQyl3c4Vkc Fz7pYa4ALc+WfCMcMT8hSYxMX9BmxFF7fMWc7JwzbNpaQEA1h8csdpoGPFUuTH44 SSmaJZhcmj6zHvYrF9SME9lb3N4tugLVa30bjNZ0dY1s0Ufq4i/n+Bber7gu9qP7 8eviatKSzoZBHC+GFDjKf5vYqni/QW23I6i3GiQ18pAQuKFZPxHhJ38aLKYlAPgG Yy1D5/t10NvOrw== -----END CERTIFICATE-----Generated at Wed Dec 24 12:29:00 2025 by rpki-client