This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json) Hash identifier: i1/UutXIJhvUU9bji9P6vwzA8LtadakZWeFFNMTLyBA= Subject key identifier: 4D:38:EF:D4:D4:1C:CA:AF:F9:FD:20:48:36:64:7D:63:47:2F:72:8C Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae Certificate serial: 019B3BD9ACB14382E8E2D95359851EE19C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft Manifest number: 1356 Signing time: Sat 20 Dec 2025 13:01:19 +0000 Manifest this update: Sat 20 Dec 2025 13:01:19 +0000 Manifest next update: Sun 21 Dec 2025 13:01:19 +0000 Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: pE9mzjN7mp63kI0+4tbz80qfrpHPiu7ObnD5elaFgSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:ac:b1:43:82:e8:e2:d9:53:59:85:1e:e1:9c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae Validity Not Before: Dec 20 13:01:19 2025 GMT Not After : Dec 21 13:01:19 2025 GMT Subject: CN=4d38efd4d41ccaaff9fd204836647d63472f728c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:28:36:30:43:f5:7d:71:79:f6:3e:5b:c1: 95:df:9e:3a:39:08:a9:6c:eb:9d:18:6e:84:28:b0: 3e:f7:2f:41:e7:9f:21:47:21:5a:b6:22:93:5e:99: 1e:aa:13:b9:1e:a2:ef:07:d5:91:14:ac:ef:6b:29: 06:b1:3d:c0:e3:12:a4:88:3d:eb:07:17:a3:88:23: 6b:84:b6:bb:50:f0:c1:aa:da:bb:72:e4:08:0c:59: c8:c9:f4:a9:ec:a1:90:9f:fc:ee:ad:d7:3a:2e:e9: 59:5d:dd:e2:3d:aa:7f:26:ab:a4:b7:76:b4:f2:3c: 06:2b:72:e5:ae:b4:9a:d7:2c:a5:2c:7d:1b:0c:06: fa:21:c1:d9:23:f4:0d:d5:ef:1f:00:5e:d1:5f:34: d1:0a:b5:b4:e4:bc:4a:21:3a:bc:ca:00:da:90:dc: e0:f5:40:61:20:52:31:35:5d:3a:ba:a7:ca:24:1a: 9d:80:4a:bc:66:7f:1c:30:e8:5a:3c:b5:fb:49:47: 2c:bc:50:cc:02:0d:ab:25:d3:fc:74:51:75:12:19: e8:6e:f7:fb:ed:8d:69:92:b4:74:05:4c:60:d2:23: b7:72:d8:22:77:14:a2:92:31:c9:97:60:4a:d4:0a: f7:88:8d:f3:cb:3e:e9:8f:fc:79:5e:bb:b8:09:95: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:EF:D4:D4:1C:CA:AF:F9:FD:20:48:36:64:7D:63:47:2F:72:8C X509v3 Authority Key Identifier: keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d0:fe:7e:1c:15:fa:4e:95:9d:9a:c9:ee:52:14:8c:29:00: 8d:89:e4:72:3c:bf:8b:1f:6e:86:1e:49:fd:e3:56:9e:48:c9: b5:79:b7:ef:b3:4e:f6:1a:58:6b:d2:44:8c:54:83:0b:09:a9: 0b:5f:44:7a:90:86:90:29:f2:79:dd:04:61:20:08:a5:84:96: 6f:12:82:6f:46:df:d8:94:e1:b1:e1:94:38:41:0a:46:43:85: 3b:ef:b9:ce:22:ca:17:48:20:fb:fd:ec:b6:3e:a5:82:0e:23: 95:87:7b:fb:dd:05:e5:4a:4c:02:e9:ca:87:ca:a6:bd:2c:56: 5e:18:18:6c:95:27:d7:80:15:41:2b:6e:6c:71:6d:a1:ac:76: 73:10:05:c7:06:88:ee:44:26:b5:d0:c1:97:d0:3d:46:3b:69: 47:6a:dc:28:62:20:63:09:84:52:d5:7f:e6:d9:05:8a:9c:d7: f4:50:64:c5:43:3e:99:64:a9:d2:f0:da:35:50:05:82:95:63: 3a:98:a8:22:39:ab:6f:63:02:7a:76:99:6c:8f:c7:fb:fb:bb: 3d:ca:e0:00:41:8c:dd:f9:40:54:4c:73:bd:88:61:85:10:7e: a8:82:c3:a6:bb:cd:6c:b8:47:d6:da:e6:c9:f3:63:fd:1f:f0: 54:50:4b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72ayxQ4Lo4tlTWYUe4ZxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3N2IzNjgzMzA3YzZmY2MzMmJlZDE3NzIzMmYxZDQ3NDU0 MWZiYWUwHhcNMjUxMjIwMTMwMTE5WhcNMjUxMjIxMTMwMTE5WjAzMTEwLwYDVQQD Eyg0ZDM4ZWZkNGQ0MWNjYWFmZjlmZDIwNDgzNjY0N2Q2MzQ3MmY3MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfkoNjBD9X1xefY+W8GV3546OQip bOudGG6EKLA+9y9B558hRyFatiKTXpkeqhO5HqLvB9WRFKzvaykGsT3A4xKkiD3r BxejiCNrhLa7UPDBqtq7cuQIDFnIyfSp7KGQn/zurdc6LulZXd3iPap/Jqukt3a0 8jwGK3LlrrSa1yylLH0bDAb6IcHZI/QN1e8fAF7RXzTRCrW05LxKITq8ygDakNzg 9UBhIFIxNV06uqfKJBqdgEq8Zn8cMOhaPLX7SUcsvFDMAg2rJdP8dFF1Ehnobvf7 7Y1pkrR0BUxg0iO3ctgidxSikjHJl2BK1Ar3iI3zyz7pj/x5Xru4CZUhLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0479TUHMqv+f0gSDZkfWNHL3KMMB8GA1UdIwQY MBaAFCd7NoMwfG/MMr7RdyMvHUdFQfuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzkt YWM1MjJmOTU3NTRmLzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzktYWM1MjJmOTU3NTRm LzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtD+fhwV +k6VnZrJ7lIUjCkAjYnkcjy/ix9uhh5J/eNWnkjJtXm377NO9hpYa9JEjFSDCwmp C19EepCGkCnyed0EYSAIpYSWbxKCb0bf2JThseGUOEEKRkOFO++5ziLKF0gg+/3s tj6lgg4jlYd7+90F5UpMAunKh8qmvSxWXhgYbJUn14AVQStubHFtoax2cxAFxwaI 7kQmtdDBl9A9RjtpR2rcKGIgYwmEUtV/5tkFipzX9FBkxUM+mWSp0vDaNVAFgpVj OpioIjmrb2MCenaZbI/H+/u7PcrgAEGM3flAVExzvYhhhRB+qILDprvNbLhH1trm yfNj/R/wVFBLsg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:34:30 2025 by rpki-client