This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json) Hash identifier: fMaKhY2+WNuUzrOEdlEtUrlPD+bxW3d3wmMZAh5WmB8= Subject key identifier: E1:39:E0:90:C6:58:D0:92:C8:F3:A5:AD:9B:51:02:E0:58:AC:7F:3D Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Certificate serial: 019B2E8B7F66E238B0334565EE21230B1425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft Manifest number: 0209 Signing time: Wed 17 Dec 2025 23:00:52 +0000 Manifest this update: Wed 17 Dec 2025 23:00:52 +0000 Manifest next update: Thu 18 Dec 2025 23:00:52 +0000 Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: R1vE+T49mPax+7WU7hLzHISYy+huuma5BvL6kBgN+W8=) 2: tSgs3XUIsHh7rxyC6KI4dfFcjtI.roa (hash: aP/8w3eyX9ywh3RSZ1FyfaCe/EGfUTND1DeYuxP49kA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:7f:66:e2:38:b0:33:45:65:ee:21:23:0b:14:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Validity Not Before: Dec 17 23:00:52 2025 GMT Not After : Dec 18 23:00:52 2025 GMT Subject: CN=e139e090c658d092c8f3a5ad9b5102e058ac7f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:4d:44:76:0a:5b:b5:52:a8:a1:5d:ed:85: 9c:38:f3:54:fd:7c:59:e3:ef:37:55:20:72:ef:0b: 97:2a:57:05:c3:ca:ed:51:a2:18:89:4f:eb:f4:03: 72:7a:7b:f5:53:67:27:a2:1c:5a:86:55:e0:63:40: 07:3c:e6:58:f7:dc:6a:4a:f7:7e:01:77:e5:69:e6: 34:5e:f5:e9:ca:eb:1b:a4:c4:d9:39:a4:b9:ed:e1: 3d:8a:c1:2f:97:b6:33:74:42:d4:88:44:35:a9:25: 3f:19:da:a3:dd:81:9e:bb:c4:eb:85:7c:2c:39:ba: d7:8c:7e:d3:15:40:7f:2f:25:30:ce:bb:18:0d:2c: ed:b4:79:40:69:29:bf:3d:05:b1:e0:b0:42:5e:b2: 42:b8:a1:e2:52:f1:e1:37:71:3e:90:04:7f:4d:17: 38:94:0e:71:d8:7e:2c:11:b8:e0:7b:ab:b4:0a:77: 5d:e5:90:9f:94:d3:9c:eb:97:66:17:48:70:dd:6b: 9e:94:3a:fd:00:d6:7a:e9:a1:c3:47:39:cb:31:ae: b9:52:2f:a1:f9:43:86:93:cc:f4:f2:25:49:ef:58: d4:ce:23:43:bd:09:37:d6:41:e3:b2:57:19:79:57: 3b:c8:90:6a:df:a1:46:b5:ce:fd:4e:a6:84:48:42: b5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:39:E0:90:C6:58:D0:92:C8:F3:A5:AD:9B:51:02:E0:58:AC:7F:3D X509v3 Authority Key Identifier: keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c9:a4:26:a2:b3:41:87:be:b3:f6:12:ae:c3:21:5c:e7:a3: 4d:c6:51:aa:84:0b:3b:09:c7:e4:c8:7a:35:ea:d1:08:73:5c: 85:ce:c6:9a:57:7a:00:87:5a:f4:88:b9:be:ea:09:a4:97:2d: fb:51:f5:5e:20:7b:33:e9:06:0c:1f:2e:58:bb:4d:bb:21:5b: 63:0c:f1:65:b2:77:56:70:2d:7c:b2:8b:87:23:a8:13:04:91: cf:d2:ca:7c:34:1a:5e:f9:d6:09:e2:f7:35:b5:76:09:de:aa: 0b:20:48:aa:84:c8:49:df:69:81:02:a0:19:9a:6e:44:f0:83: 16:1b:7c:46:e4:3b:e8:33:db:52:a2:6e:df:37:5c:f2:02:be: 93:5d:70:ab:39:62:96:24:f9:76:ac:8b:06:99:78:cb:8a:86: 3f:15:78:aa:e6:e8:8e:11:0a:a4:3e:ea:01:52:8e:6f:c5:a4: b9:d0:2c:24:3c:d3:f2:f8:d1:9d:03:dc:73:c0:9c:1a:59:b7: 68:a9:f5:c9:4c:e4:59:33:43:7a:2f:a4:91:ee:38:d6:67:75: 23:f0:59:1a:46:7f:d1:55:95:77:8b:34:90:81:79:82:45:03: 1e:e4:77:cb:09:e3:ab:e4:86:f2:52:9a:ad:21:27:fe:53:98: fd:93:8e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui39m4jiwM0Vl7iEjCxQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDY5ZjE4ODNkY2NjOTNhNzg2OWM0MWVjM2U5NzJmZjVm ZDRiMDEwHhcNMjUxMjE3MjMwMDUyWhcNMjUxMjE4MjMwMDUyWjAzMTEwLwYDVQQD EyhlMTM5ZTA5MGM2NThkMDkyYzhmM2E1YWQ5YjUxMDJlMDU4YWM3ZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpxNRHYKW7VSqKFd7YWcOPNU/XxZ 4+83VSBy7wuXKlcFw8rtUaIYiU/r9ANyenv1U2cnohxahlXgY0AHPOZY99xqSvd+ AXflaeY0XvXpyusbpMTZOaS57eE9isEvl7YzdELUiEQ1qSU/Gdqj3YGeu8TrhXws ObrXjH7TFUB/LyUwzrsYDSzttHlAaSm/PQWx4LBCXrJCuKHiUvHhN3E+kAR/TRc4 lA5x2H4sEbjge6u0Cndd5ZCflNOc65dmF0hw3WuelDr9ANZ66aHDRznLMa65Ui+h +UOGk8z08iVJ71jUziNDvQk31kHjslcZeVc7yJBq36FGtc79TqaESEK1nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOE54JDGWNCSyPOlrZtRAuBYrH89MB8GA1UdIwQY MBaAFCcGnxiD3MyTp4acQew+ly/1/UsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgt MDQ2MmI2NDg0ZDYwLzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgtMDQ2MmI2NDg0ZDYw LzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMmkJqKz QYe+s/YSrsMhXOejTcZRqoQLOwnH5Mh6NerRCHNchc7Gmld6AIda9Ii5vuoJpJct +1H1XiB7M+kGDB8uWLtNuyFbYwzxZbJ3VnAtfLKLhyOoEwSRz9LKfDQaXvnWCeL3 NbV2Cd6qCyBIqoTISd9pgQKgGZpuRPCDFht8RuQ76DPbUqJu3zdc8gK+k11wqzli liT5dqyLBpl4y4qGPxV4qubojhEKpD7qAVKOb8WkudAsJDzT8vjRnQPcc8CcGlm3 aKn1yUzkWTNDei+kke441md1I/BZGkZ/0VWVd4s0kIF5gkUDHuR3ywnjq+SG8lKa rSEn/lOY/ZOObA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:05:04 2025 by rpki-client