This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft File: J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json) Hash identifier: K44tXZW1Eeoibjg6m9ESozrmy8hfLsk4h1Mt5Vif/w8= Subject key identifier: 19:34:7E:76:5E:8B:E6:AE:35:62:94:AB:58:0B:E6:90:F6:81:39:C9 Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14 Certificate issuer: /CN=27b56eb25b05a08826c2648fff1acf36b494d814 Certificate serial: 019B5E2E9B03B663D17B7A648E4BD629953B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft Manifest number: 0455 Signing time: Sat 27 Dec 2025 05:01:11 +0000 Manifest this update: Sat 27 Dec 2025 05:01:11 +0000 Manifest next update: Sun 28 Dec 2025 05:01:11 +0000 Files and hashes: 1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: 7H2cfrKgg7ayEHMSvO+RtqdOR2Gpv4sPau4Zh4tmbcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:9b:03:b6:63:d1:7b:7a:64:8e:4b:d6:29:95:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814 Validity Not Before: Dec 27 05:01:11 2025 GMT Not After : Dec 28 05:01:11 2025 GMT Subject: CN=19347e765e8be6ae356294ab580be690f68139c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:ab:4b:45:d0:90:51:60:e2:b2:2c:c4:27: 06:a6:06:8c:90:9b:9f:52:08:33:b6:5c:a5:69:22: d2:52:81:49:ab:b8:98:3b:55:1e:d4:b8:90:71:70: 9b:b4:48:b6:2a:e9:81:3d:d0:30:91:93:62:d3:9e: 30:57:f0:26:59:2c:01:f4:25:d3:d4:a2:0c:f5:81: c0:9d:ad:16:bf:64:b2:dc:99:b9:d7:b1:4f:7c:c5: b1:9d:68:a2:b0:bb:4e:e1:c6:04:20:96:23:25:a6: 14:5a:aa:28:c7:e5:0e:d7:8b:f4:48:01:6e:8f:1b: 3d:da:77:bf:04:5e:52:3a:86:80:18:27:8b:90:98: 5d:07:da:59:11:7b:2a:7a:8c:93:b1:09:8f:dc:40: e3:bd:c3:5d:2d:ee:09:5b:7a:44:8b:17:84:32:38: 43:3a:c1:9c:fa:12:1e:c4:13:ac:b5:09:e4:67:96: a3:cd:7e:9d:98:0b:ce:5b:25:6f:5a:f8:0d:16:33: ff:25:04:13:b8:8b:44:3e:93:5f:04:68:fd:18:8f: a7:3d:da:74:7a:70:3e:ef:e1:d0:3b:3d:16:b3:ef: 90:b7:b8:5f:6a:6b:00:6d:f3:f2:6d:38:21:a9:60: 2a:cf:a3:82:80:17:fa:d4:7a:fd:57:b8:8d:87:93: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:34:7E:76:5E:8B:E6:AE:35:62:94:AB:58:0B:E6:90:F6:81:39:C9 X509v3 Authority Key Identifier: keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:56:8d:78:f3:83:76:0d:25:18:78:00:fa:7c:3b:c6:9a:08: b1:9f:21:2a:98:ac:cb:66:bd:be:65:90:c1:c1:f9:bf:f5:24: fb:d6:8c:d5:90:55:ec:ac:ef:39:66:00:62:48:d5:38:33:43: f4:39:8b:14:7b:ee:e1:76:82:a5:8d:6a:9b:1d:5c:3a:28:69: 70:60:33:e5:04:74:3c:f4:90:5c:45:a8:43:5d:3c:56:3e:6c: f3:6e:38:d4:31:a7:5c:f5:0a:2f:11:e5:40:4c:f3:82:3b:16: 02:9e:c1:fb:7a:bd:d9:35:f1:58:5e:1b:23:c2:4d:96:0f:ef: c8:ca:a5:85:7b:8d:fc:f8:d7:fe:b9:f6:79:0b:41:b9:c2:08: 55:84:72:ec:40:11:1c:5a:d5:c6:49:8c:b0:6c:d6:59:ad:98: 19:9f:2b:e4:61:86:8c:b9:38:de:78:fc:e6:88:40:79:00:7a: cd:02:93:81:e5:41:aa:60:f3:0b:33:45:6c:53:90:57:51:24: 8a:1e:a8:0b:6d:43:66:8c:ae:75:18:90:fa:88:fb:72:47:b4: 5e:4b:75:fb:8d:14:df:b9:09:17:31:e7:02:9c:57:5d:9b:88: f8:a0:88:40:38:6a:d6:d2:22:bf:cc:46:83:34:ba:a3:0a:1f: 3d:44:34:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLpsDtmPRe3pkjkvWKZU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjU2ZWIyNWIwNWEwODgyNmMyNjQ4ZmZmMWFjZjM2YjQ5 NGQ4MTQwHhcNMjUxMjI3MDUwMTExWhcNMjUxMjI4MDUwMTExWjAzMTEwLwYDVQQD EygxOTM0N2U3NjVlOGJlNmFlMzU2Mjk0YWI1ODBiZTY5MGY2ODEzOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfOrS0XQkFFg4rIsxCcGpgaMkJuf UggztlylaSLSUoFJq7iYO1Ue1LiQcXCbtEi2KumBPdAwkZNi054wV/AmWSwB9CXT 1KIM9YHAna0Wv2Sy3Jm517FPfMWxnWiisLtO4cYEIJYjJaYUWqoox+UO14v0SAFu jxs92ne/BF5SOoaAGCeLkJhdB9pZEXsqeoyTsQmP3EDjvcNdLe4JW3pEixeEMjhD OsGc+hIexBOstQnkZ5ajzX6dmAvOWyVvWvgNFjP/JQQTuItEPpNfBGj9GI+nPdp0 enA+7+HQOz0Ws++Qt7hfamsAbfPybTghqWAqz6OCgBf61Hr9V7iNh5PcrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBk0fnZei+auNWKUq1gL5pD2gTnJMB8GA1UdIwQY MBaAFCe1brJbBaCIJsJkj/8azza0lNgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTct MDM4ZjE1OTU2M2ZmLzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTctMDM4ZjE1OTU2M2Zm LzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVaNePOD dg0lGHgA+nw7xpoIsZ8hKpisy2a9vmWQwcH5v/Uk+9aM1ZBV7KzvOWYAYkjVODND 9DmLFHvu4XaCpY1qmx1cOihpcGAz5QR0PPSQXEWoQ108Vj5s82441DGnXPUKLxHl QEzzgjsWAp7B+3q92TXxWF4bI8JNlg/vyMqlhXuN/PjX/rn2eQtBucIIVYRy7EAR HFrVxkmMsGzWWa2YGZ8r5GGGjLk43nj85ohAeQB6zQKTgeVBqmDzCzNFbFOQV1Ek ih6oC21DZoyudRiQ+oj7cke0Xkt1+40U37kJFzHnApxXXZuI+KCIQDhq1tIiv8xG gzS6owofPUQ0RQ== -----END CERTIFICATE-----Generated at Sat Dec 27 07:25:07 2025 by rpki-client