This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json) Hash identifier: 9bZaeEyOEK8Q1UMCLAy2ioY+UZQ/O5vPYkgJjn7ndxU= Subject key identifier: 0A:B7:F9:1B:AE:C9:D9:CD:65:DF:52:56:AE:31:5A:C8:89:18:AF:98 Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c Certificate serial: 019B3AFE2F3D1AB64BFC11AD7DF2FCF42A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft Manifest number: 02D2 Signing time: Sat 20 Dec 2025 09:01:35 +0000 Manifest this update: Sat 20 Dec 2025 09:01:35 +0000 Manifest next update: Sun 21 Dec 2025 09:01:35 +0000 Files and hashes: 1: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: FDk258MRgSzkOc6JkR9nYIQaTsbokKrcejJ1AqAlvAA=) 2: dDAgjd5fwQ3cte1EAxZ7pLJLl0U.roa (hash: 2txr4+GD0XgpxhSLLq5aM5yNR187eckG+kO4tKZmm3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:2f:3d:1a:b6:4b:fc:11:ad:7d:f2:fc:f4:2a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c Validity Not Before: Dec 20 09:01:35 2025 GMT Not After : Dec 21 09:01:35 2025 GMT Subject: CN=0ab7f91baec9d9cd65df5256ae315ac88918af98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:8f:c4:fd:0a:fe:a7:55:02:82:2b:50:7f: 02:9a:af:3e:03:53:7d:64:60:99:80:dc:dc:a4:81: 57:ca:9a:b6:33:4f:0b:e7:26:d7:1c:ae:f4:5d:32: 37:ed:06:5b:58:92:46:87:82:a0:d7:51:51:80:e8: 79:6c:d9:41:c0:95:62:41:7c:95:08:b7:7b:c2:85: ab:e5:ff:1b:06:50:29:51:60:f6:40:7b:b0:c4:fb: 93:49:58:70:0b:53:1c:b3:30:3b:c5:1d:9b:3c:66: 7a:6e:e2:7b:ce:9b:e8:02:f3:5e:46:7a:8f:f3:d1: 7d:48:9b:9a:fc:19:57:dc:bd:5c:84:c4:76:c6:f5: 95:5c:31:ea:3f:f6:3d:72:58:1e:c6:b9:bc:09:27: 27:1c:9f:c0:62:76:2b:56:00:e5:94:fb:e2:d9:a5: 85:9f:b5:b8:d2:fb:5d:ed:e9:78:e3:80:82:20:cc: bd:88:a9:d5:e2:51:ef:c6:0e:01:8c:e1:02:88:b3: c4:54:6b:97:12:c3:9f:d2:36:f8:25:ce:d3:ef:dd: 95:69:ce:29:03:62:71:b7:30:bb:cd:c7:a9:bd:38: 2f:b7:e2:11:cb:c3:3a:2e:72:ab:27:8c:de:f9:1a: 31:72:42:ff:d6:ca:06:14:b9:39:85:49:3b:79:84: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B7:F9:1B:AE:C9:D9:CD:65:DF:52:56:AE:31:5A:C8:89:18:AF:98 X509v3 Authority Key Identifier: keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:68:0c:06:6c:86:a1:19:94:8b:1a:e3:3f:72:ed:c1:d2:50: 8a:f5:d8:8f:a9:e3:b5:f7:4b:31:34:1f:e4:cf:46:a8:13:88: 86:b4:a7:08:f0:37:31:67:8c:9e:83:d6:0a:ad:d2:0e:19:08: 15:0f:55:ab:fe:44:8a:be:c7:ac:5f:34:1f:36:4b:d0:7c:d5: 04:83:08:5d:4a:bb:7e:1d:81:a4:a2:89:36:aa:2d:ac:02:a1: 91:86:fe:ed:71:fa:89:99:ef:41:39:0e:99:cb:7a:3f:c0:a0: 26:65:03:8b:0f:43:de:75:bd:88:ab:08:07:64:5b:7b:cb:8d: c6:00:fd:c6:2d:4b:ee:6c:ea:4a:99:d0:97:04:4d:b3:82:7d: 46:c9:79:be:9a:8d:8d:f1:6d:3c:7a:c7:78:76:b8:7a:aa:cb: b2:61:72:e5:a1:d7:b9:49:ac:42:33:e4:97:dc:88:d6:b3:44: 83:4d:db:24:7c:d2:b6:85:e6:32:82:75:01:e6:f3:87:83:94: 47:4c:e3:6f:a4:22:f8:79:a8:f0:f3:bd:78:97:c2:e9:eb:bc: ae:8d:52:de:2c:0f:9e:d6:64:9d:42:e0:3e:83:8f:15:52:d4: 58:a8:d9:43:c6:6b:3d:c1:25:b8:ec:35:02:df:a9:b7:ce:d2: 2e:d5:0b:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/i89GrZL/BGtffL89CpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDNkYjdlZTM0YWMyZDRlZDU3OGY0OTVlMDA5NmNiOThh ZmY3MWMwHhcNMjUxMjIwMDkwMTM1WhcNMjUxMjIxMDkwMTM1WjAzMTEwLwYDVQQD EygwYWI3ZjkxYmFlYzlkOWNkNjVkZjUyNTZhZTMxNWFjODg5MThhZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXSPxP0K/qdVAoIrUH8Cmq8+A1N9 ZGCZgNzcpIFXypq2M08L5ybXHK70XTI37QZbWJJGh4Kg11FRgOh5bNlBwJViQXyV CLd7woWr5f8bBlApUWD2QHuwxPuTSVhwC1McszA7xR2bPGZ6buJ7zpvoAvNeRnqP 89F9SJua/BlX3L1chMR2xvWVXDHqP/Y9clgexrm8CScnHJ/AYnYrVgDllPvi2aWF n7W40vtd7el444CCIMy9iKnV4lHvxg4BjOECiLPEVGuXEsOf0jb4Jc7T792Vac4p A2JxtzC7zcepvTgvt+IRy8M6LnKrJ4ze+RoxckL/1soGFLk5hUk7eYSCVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq3+RuuydnNZd9SVq4xWsiJGK+YMB8GA1UdIwQY MBaAFCdD237jSsLU7VePSV4AlsuYr/ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yZmJjNjctZDZmOC00ZWE0LWJkZTMt NTNiMzEwNDRlZDViLzEvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8yZmJjNjctZDZmOC00ZWE0LWJkZTMtNTNiMzEwNDRlZDVi LzEvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGgMBmyG oRmUixrjP3LtwdJQivXYj6njtfdLMTQf5M9GqBOIhrSnCPA3MWeMnoPWCq3SDhkI FQ9Vq/5Eir7HrF80HzZL0HzVBIMIXUq7fh2BpKKJNqotrAKhkYb+7XH6iZnvQTkO mct6P8CgJmUDiw9D3nW9iKsIB2Rbe8uNxgD9xi1L7mzqSpnQlwRNs4J9Rsl5vpqN jfFtPHrHeHa4eqrLsmFy5aHXuUmsQjPkl9yI1rNEg03bJHzStoXmMoJ1Aebzh4OU R0zjb6Qi+Hmo8PO9eJfC6eu8ro1S3iwPntZknULgPoOPFVLUWKjZQ8ZrPcEluOw1 At+pt87SLtUL6w== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:25 2025 by rpki-client