This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json) Hash identifier: BCxX1Z2ZGV77h9qpNpS833jSkKGeG3gosDHlVpopvCE= Subject key identifier: 4C:AB:1A:F7:29:09:B1:F9:37:70:8C:51:49:1C:4D:C8:7A:6D:D2:F5 Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c Certificate serial: 019B454AB8B32FF5555723B480A0AF754BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft Manifest number: 17A2 Signing time: Mon 22 Dec 2025 09:01:23 +0000 Manifest this update: Mon 22 Dec 2025 09:01:23 +0000 Manifest next update: Tue 23 Dec 2025 09:01:23 +0000 Files and hashes: 1: 23bca3VQeIrruEqgH6VNWFAiuWs.roa (hash: AgG1ZxIJ9G4cx9MANuRKQ+cw/0IS8xxAcB1MqAzxpGw=) 2: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=) 3: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: 2cCa+11kijJ9ZTx0Nx+JG4U4Kfoa0dni/j1UGPOmABk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:b8:b3:2f:f5:55:57:23:b4:80:a0:af:75:4b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c Validity Not Before: Dec 22 09:01:23 2025 GMT Not After : Dec 23 09:01:23 2025 GMT Subject: CN=4cab1af72909b1f937708c51491c4dc87a6dd2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:62:2f:21:2e:62:e8:c0:f4:87:9c:b5:23: cc:1c:37:d4:cd:c1:75:62:f0:58:86:96:92:58:b7: 4f:42:0e:75:f3:34:05:1b:1c:d5:bc:27:32:65:4d: 6a:8e:75:cb:8e:7e:d1:e2:66:4a:3e:9c:db:93:5d: b6:78:48:84:ca:76:be:5e:83:24:8d:56:6e:42:7e: 17:53:10:33:8d:3a:92:71:f7:d1:92:e5:7a:61:61: 9a:48:ea:51:bf:0e:98:52:42:44:12:d5:6d:b3:99: 0a:1d:32:e5:a0:93:9c:1e:be:6c:d6:b5:c6:51:07: 96:5b:d8:27:16:18:f4:3f:fe:74:c5:e5:bc:b6:82: 2b:db:a6:3f:f3:33:19:95:70:be:f1:ba:e2:3e:aa: 15:2e:d5:e0:11:8f:ab:7a:66:04:4e:46:6a:c1:9e: 06:b0:6a:58:19:06:d1:4a:14:9a:e7:a2:25:69:77: b3:86:21:2a:d1:d6:85:f9:86:34:89:28:fb:7f:ab: 4b:5c:d7:2e:e7:3d:a9:50:62:e0:d4:50:cf:50:8f: 66:4f:2d:07:de:f1:11:70:cb:45:15:79:d2:23:7e: 38:69:35:5b:cc:4c:6b:97:4d:31:97:94:7e:36:da: 0e:a5:77:2a:e6:3f:44:66:2c:ba:15:7a:f0:0b:7f: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AB:1A:F7:29:09:B1:F9:37:70:8C:51:49:1C:4D:C8:7A:6D:D2:F5 X509v3 Authority Key Identifier: keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:6e:85:6a:7b:83:55:60:41:0d:4c:5f:8a:9c:3f:2c:57:e2: e5:38:11:1f:6b:68:7b:79:74:0c:87:7d:83:0a:fb:5d:c9:1f: a6:c8:50:98:00:6a:a9:74:30:b6:4e:b8:23:e9:6e:87:08:87: 05:9d:b8:da:46:e5:d0:23:dc:fd:8e:6c:9f:08:42:e7:2f:b2: 4b:8a:09:82:c3:72:71:18:9f:47:5e:f1:90:45:a8:ef:b5:db: 2d:f9:f9:22:fe:1e:3f:13:27:90:9b:04:17:ef:75:1a:be:89: 35:e9:33:51:7b:bc:9a:9c:41:dd:85:e5:17:41:2a:5e:98:eb: 07:13:ec:24:ec:16:22:f2:54:27:75:bb:67:f9:0b:9c:67:fe: 06:34:23:fe:b7:c2:5d:c1:01:26:29:33:03:bc:96:51:8e:f4: 94:98:66:d5:d4:28:af:26:a5:06:2c:98:ce:65:55:af:ac:de: 97:52:36:61:76:bf:53:a3:15:d3:56:32:cc:9d:f7:ae:6e:c5: b5:38:cf:32:e1:d6:56:18:31:e4:ce:80:01:f7:58:fc:60:9c: 69:25:48:8e:db:2e:f9:b1:f0:7a:e6:d4:8e:96:1c:b5:06:cc: b3:34:c0:a2:d4:29:46:b7:46:71:ad:57:35:53:d4:ab:e2:cc: 4f:72:e4:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSrizL/VVVyO0gKCvdUveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDczMDRjMWI1OWRjMjI3MzFiYjUzZWZmNWE4NGVkOWEz MDYxNGMwHhcNMjUxMjIyMDkwMTIzWhcNMjUxMjIzMDkwMTIzWjAzMTEwLwYDVQQD Eyg0Y2FiMWFmNzI5MDliMWY5Mzc3MDhjNTE0OTFjNGRjODdhNmRkMmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxRiLyEuYujA9IectSPMHDfUzcF1 YvBYhpaSWLdPQg518zQFGxzVvCcyZU1qjnXLjn7R4mZKPpzbk122eEiEyna+XoMk jVZuQn4XUxAzjTqScffRkuV6YWGaSOpRvw6YUkJEEtVts5kKHTLloJOcHr5s1rXG UQeWW9gnFhj0P/50xeW8toIr26Y/8zMZlXC+8briPqoVLtXgEY+remYETkZqwZ4G sGpYGQbRShSa56IlaXezhiEq0daF+YY0iSj7f6tLXNcu5z2pUGLg1FDPUI9mTy0H 3vERcMtFFXnSI344aTVbzExrl00xl5R+NtoOpXcq5j9EZiy6FXrwC3+WdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyrGvcpCbH5N3CMUUkcTch6bdL1MB8GA1UdIwQY MBaAFCfXMEwbWdwicxu1Pv9ahO2aMGFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt ZmZmYjVhNGU3NjJhLzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh LzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvG6FanuD VWBBDUxfipw/LFfi5TgRH2toe3l0DId9gwr7XckfpshQmABqqXQwtk64I+luhwiH BZ242kbl0CPc/Y5snwhC5y+yS4oJgsNycRifR17xkEWo77XbLfn5Iv4ePxMnkJsE F+91Gr6JNekzUXu8mpxB3YXlF0EqXpjrBxPsJOwWIvJUJ3W7Z/kLnGf+BjQj/rfC XcEBJikzA7yWUY70lJhm1dQoryalBiyYzmVVr6zel1I2YXa/U6MV01YyzJ33rm7F tTjPMuHWVhgx5M6AAfdY/GCcaSVIjtsu+bHweubUjpYctQbMszTAotQpRrdGca1X NVPUq+LMT3Lk5A== -----END CERTIFICATE-----Generated at Mon Dec 22 17:19:39 2025 by rpki-client