This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json) Hash identifier: vI+4Nx+uWxmHgVSKjcySDUV7C1tekyWROGXGE1MDbow= Subject key identifier: AE:FE:F2:0B:57:47:37:7F:49:88:30:67:69:72:7C:E8:AD:54:A8:40 Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb Certificate serial: 019B3C7EF8AE6B6E4B94F105AF7D13CD3070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft Manifest number: 0D49 Signing time: Sat 20 Dec 2025 16:01:52 +0000 Manifest this update: Sat 20 Dec 2025 16:01:52 +0000 Manifest next update: Sun 21 Dec 2025 16:01:52 +0000 Files and hashes: 1: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: 30YSqHcrcHdWfyXS8P4Fkh4zspa+cC5aFXmQprAW5w8=) 2: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (hash: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f8:ae:6b:6e:4b:94:f1:05:af:7d:13:cd:30:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb Validity Not Before: Dec 20 16:01:52 2025 GMT Not After : Dec 21 16:01:52 2025 GMT Subject: CN=aefef20b5747377f4988306769727ce8ad54a840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:7a:db:e3:78:27:15:85:b8:02:1e:51:c7: 8a:45:66:bf:c2:cc:be:c4:62:79:49:22:6f:3c:39: b0:1b:bf:c4:d5:b4:e3:f0:9e:7b:fc:28:2a:f2:d4: 77:3c:c9:e4:3a:35:5b:4b:76:be:c3:2b:4b:f1:74: 85:85:a6:f8:82:92:8a:d7:88:b0:f8:5c:2b:e5:a1: ad:84:4e:01:00:7b:e8:2e:4f:bf:07:4a:b1:7a:ab: 10:cd:62:db:d8:77:b9:48:37:12:01:8f:35:97:7c: f7:f1:0c:4f:02:b4:b6:90:f4:6d:a6:67:6f:80:cc: 0b:f3:b8:b9:ea:5e:fd:71:40:b9:36:8c:0c:48:81: 54:d1:8a:b1:e3:87:01:7b:49:11:9f:3f:0b:50:f5: 72:03:ae:1f:a5:80:78:d1:0e:62:b9:e6:fc:6c:e1: 5c:b2:4d:f8:66:78:57:62:4f:56:55:76:14:5b:e5: 36:10:1d:aa:1b:e0:74:92:eb:91:15:cc:2d:e8:7d: a8:27:ce:0e:95:6c:24:e6:5a:a0:13:10:8a:fc:d6: 1e:db:21:4b:c2:80:68:73:8a:7d:b9:4b:03:dc:7c: 86:17:b0:d8:5e:5e:81:35:73:96:5b:a5:53:42:99: 60:4a:73:b1:27:21:93:ab:68:a1:04:c8:4a:4c:af: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FE:F2:0B:57:47:37:7F:49:88:30:67:69:72:7C:E8:AD:54:A8:40 X509v3 Authority Key Identifier: keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9b:78:d9:11:95:71:50:29:2d:79:83:8c:61:41:66:4a:ff: b8:41:e8:f9:58:25:5b:5d:3e:ca:08:0f:0c:57:87:8e:55:b1: 65:6f:e2:c5:9d:b5:18:94:33:b9:d8:d4:f5:9b:fb:18:67:ee: 77:b1:65:94:a2:45:6e:94:74:ac:1b:35:4c:76:2a:7e:45:0b: cf:e0:17:62:f6:85:2c:d9:62:f4:51:8a:26:67:0f:e4:33:b1: 1e:8a:a6:00:39:37:5b:4d:31:51:e1:f7:ba:5b:17:aa:d3:3a: 81:5b:f1:69:9d:f6:b6:4e:a7:59:fb:ac:1f:c6:d2:58:d4:b2: e2:f2:67:55:d7:f5:04:92:6d:a2:24:66:74:49:ab:27:a7:58: 82:28:58:5b:5d:56:70:f7:b3:42:8e:ec:21:33:d0:13:ff:a5: fb:c7:75:ca:b4:c8:1f:13:b5:20:3f:4a:82:c3:e8:09:f8:dc: 03:a4:66:9a:cc:e7:c2:6f:13:9c:5e:b3:59:8e:ac:4b:e1:75: 3e:83:5a:18:92:45:16:c8:53:0d:75:be:80:e3:20:63:7e:84: 5e:29:56:00:82:46:32:09:d5:54:2a:ce:da:d3:85:7c:a6:09: 36:65:c4:e6:f5:ce:48:85:7d:9f:b9:36:c4:36:9b:fe:32:13: b0:7c:c8:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fviua25LlPEFr30TzTBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZGVkMWQ5MGM0ZDUyYjY4NzEwMjNiYzcxMjk2ZDA4YTk4 YzRjZGIwHhcNMjUxMjIwMTYwMTUyWhcNMjUxMjIxMTYwMTUyWjAzMTEwLwYDVQQD EyhhZWZlZjIwYjU3NDczNzdmNDk4ODMwNjc2OTcyN2NlOGFkNTRhODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw962+N4JxWFuAIeUceKRWa/wsy+ xGJ5SSJvPDmwG7/E1bTj8J57/Cgq8tR3PMnkOjVbS3a+wytL8XSFhab4gpKK14iw +Fwr5aGthE4BAHvoLk+/B0qxeqsQzWLb2He5SDcSAY81l3z38QxPArS2kPRtpmdv gMwL87i56l79cUC5NowMSIFU0Yqx44cBe0kRnz8LUPVyA64fpYB40Q5iueb8bOFc sk34ZnhXYk9WVXYUW+U2EB2qG+B0kuuRFcwt6H2oJ84OlWwk5lqgExCK/NYe2yFL woBoc4p9uUsD3HyGF7DYXl6BNXOWW6VTQplgSnOxJyGTq2ihBMhKTK+85QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7+8gtXRzd/SYgwZ2lyfOitVKhAMB8GA1UdIwQY MBaAFCfe0dkMTVK2hxAjvHEpbQipjEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMzgyMTItMzhhNy00NjhkLWI4NzQt MzUxYWI5ZjIzNmIwLzEvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMzgyMTItMzhhNy00NjhkLWI4NzQtMzUxYWI5ZjIzNmIw LzEvSjk3UjJReE5VcmFIRUNPOGNTbHRDS21NVE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJt42RGV cVApLXmDjGFBZkr/uEHo+VglW10+yggPDFeHjlWxZW/ixZ21GJQzudjU9Zv7GGfu d7FllKJFbpR0rBs1THYqfkULz+AXYvaFLNli9FGKJmcP5DOxHoqmADk3W00xUeH3 ulsXqtM6gVvxaZ32tk6nWfusH8bSWNSy4vJnVdf1BJJtoiRmdEmrJ6dYgihYW11W cPezQo7sITPQE/+l+8d1yrTIHxO1ID9KgsPoCfjcA6Rmmsznwm8TnF6zWY6sS+F1 PoNaGJJFFshTDXW+gOMgY36EXilWAIJGMgnVVCrO2tOFfKYJNmXE5vXOSIV9n7k2 xDab/jITsHzIfA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:48:21 2025 by rpki-client