This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json) Hash identifier: PD/Tl21V4z8oIiG1l2LNY+AxzZVYmHKRdx0Lza/t+e0= Subject key identifier: 65:05:A6:AA:BC:D9:B2:1D:00:5B:D8:16:D3:B5:66:67:D2:91:44:C7 Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Certificate serial: 019B3BD93CF89F682B7A062B910D931DD12B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft Manifest number: 0FB5 Signing time: Sat 20 Dec 2025 13:00:51 +0000 Manifest this update: Sat 20 Dec 2025 13:00:51 +0000 Manifest next update: Sun 21 Dec 2025 13:00:51 +0000 Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: oogeGezi7emUX66Fiz849M88CJ/NbuKdHm/XhzCEtaE=) 2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=) 3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=) 4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:3c:f8:9f:68:2b:7a:06:2b:91:0d:93:1d:d1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Validity Not Before: Dec 20 13:00:51 2025 GMT Not After : Dec 21 13:00:51 2025 GMT Subject: CN=6505a6aabcd9b21d005bd816d3b56667d29144c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:af:8b:d5:06:86:02:c1:65:e4:9b:6d:f5: 0a:5a:ef:c7:45:11:25:79:81:7c:85:a1:be:4e:8e: ac:d7:e5:2c:99:80:b2:93:71:a2:c2:2a:a5:0d:5d: 53:ed:87:8e:84:f2:b0:ba:3e:28:30:5f:55:13:de: c8:ba:3f:79:c4:0e:b9:b0:03:40:80:89:47:da:e4: c7:48:39:86:19:03:70:f5:10:16:62:ee:c0:5a:58: 92:98:31:a3:2a:fa:0d:87:b3:81:f2:1a:68:90:92: 4b:d0:6c:6e:f8:71:48:1d:4b:8e:65:51:96:c1:56: 82:bb:96:ff:15:86:18:77:c4:da:9c:dd:63:db:1f: ee:1b:8f:e9:c5:13:34:41:e7:86:61:cd:bc:f1:22: c6:ef:1a:5f:45:cd:fe:14:c8:04:16:b7:6b:49:49: 2c:50:ad:0c:d8:81:81:3f:97:ea:7f:d2:eb:e7:67: cf:a6:d6:80:7b:7b:c0:36:f2:54:41:25:c6:26:70: 87:23:73:69:90:23:a1:d5:65:fd:ac:04:ef:9b:7f: d9:52:12:01:32:8e:05:07:f5:e6:63:04:2c:90:3f: d2:49:cf:48:ff:ea:25:3a:c1:6e:4b:0b:d9:bf:95: cd:44:66:9a:ed:0d:cb:b6:76:c5:ce:1e:d7:62:98: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:05:A6:AA:BC:D9:B2:1D:00:5B:D8:16:D3:B5:66:67:D2:91:44:C7 X509v3 Authority Key Identifier: keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:88:1e:b5:d5:54:7a:31:44:04:3f:3d:90:ac:8f:67:09:9f: bf:82:db:94:e3:91:74:44:a6:6e:33:b1:6d:eb:09:78:b1:46: 6a:79:19:ff:e3:9e:94:d6:fe:4d:19:68:f8:c3:0c:e5:87:ad: 2f:1a:52:57:9c:3e:54:bb:0c:df:8a:a9:c5:72:1e:2e:c0:99: 3b:fd:ba:a6:44:cc:23:14:39:72:7d:7c:63:05:2f:b9:c9:64: 76:8f:63:8b:7d:87:23:6e:9d:35:aa:a1:2a:c8:97:94:36:19: 37:25:4c:db:b2:e7:a7:62:01:b2:51:2f:f5:82:e3:c2:a1:cf: 5a:a4:07:1b:13:09:9c:67:99:a0:67:e1:b5:01:9c:56:0c:81: 7a:ff:41:4a:94:fa:6f:66:79:38:2b:ad:f4:56:97:ce:bb:0d: 1e:11:63:7a:d8:ef:e7:a1:02:73:7b:15:6e:78:ff:ed:23:19: 52:49:c7:20:e7:ba:d7:8b:cf:a7:00:98:55:a4:27:f2:8b:cb: b3:6b:7d:68:57:7d:f7:d4:26:75:78:1a:42:6c:63:f5:ff:d6: a3:42:89:1d:a3:dd:f8:d8:75:ef:33:ae:8e:04:6e:3c:90:e5: 8a:fe:27:5c:2b:b4:73:c1:a2:75:bb:22:b7:d7:ea:71:4b:07: d0:14:02:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Tz4n2gregYrkQ2THdErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3Zjk1OGMzYjc1OWIyYzc4OTZmNWVkNjYzZTgwNzc4MWYz ZmY1YTIwHhcNMjUxMjIwMTMwMDUxWhcNMjUxMjIxMTMwMDUxWjAzMTEwLwYDVQQD Eyg2NTA1YTZhYWJjZDliMjFkMDA1YmQ4MTZkM2I1NjY2N2QyOTE0NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ6vi9UGhgLBZeSbbfUKWu/HRREl eYF8haG+To6s1+UsmYCyk3GiwiqlDV1T7YeOhPKwuj4oMF9VE97Iuj95xA65sANA gIlH2uTHSDmGGQNw9RAWYu7AWliSmDGjKvoNh7OB8hpokJJL0Gxu+HFIHUuOZVGW wVaCu5b/FYYYd8TanN1j2x/uG4/pxRM0QeeGYc288SLG7xpfRc3+FMgEFrdrSUks UK0M2IGBP5fqf9Lr52fPptaAe3vANvJUQSXGJnCHI3NpkCOh1WX9rATvm3/ZUhIB Mo4FB/XmYwQskD/SSc9I/+olOsFuSwvZv5XNRGaa7Q3LtnbFzh7XYphQgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUFpqq82bIdAFvYFtO1ZmfSkUTHMB8GA1UdIwQY MBaAFCf5WMO3WbLHiW9e1mPoB3gfP/WiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYt YjI5MTA3Yjk4YWNjLzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYtYjI5MTA3Yjk4YWNj LzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIgetdVU ejFEBD89kKyPZwmfv4LblOORdESmbjOxbesJeLFGankZ/+OelNb+TRlo+MMM5Yet LxpSV5w+VLsM34qpxXIeLsCZO/26pkTMIxQ5cn18YwUvuclkdo9ji32HI26dNaqh KsiXlDYZNyVM27Lnp2IBslEv9YLjwqHPWqQHGxMJnGeZoGfhtQGcVgyBev9BSpT6 b2Z5OCut9FaXzrsNHhFjetjv56ECc3sVbnj/7SMZUknHIOe614vPpwCYVaQn8ovL s2t9aFd999QmdXgaQmxj9f/Wo0KJHaPd+Nh17zOujgRuPJDliv4nXCu0c8Gidbsi t9fqcUsH0BQCYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:12:23 2025 by rpki-client