This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json) Hash identifier: WqlqadIs19uISMkciQiByzIin3D3TEK53a9/wKXzGUU= Subject key identifier: B5:60:7A:25:11:FE:93:25:59:3F:81:A4:51:C4:47:2E:91:4C:08:AE Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a Certificate serial: 019B6CFC6EA2EF887BFEE820BAD71F7E3465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 02:00:41 +0000 Manifest this update: Tue 30 Dec 2025 02:00:41 +0000 Manifest next update: Wed 31 Dec 2025 02:00:41 +0000 Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: NOvygOHnmbx+mubEQ2l73cCrMPwNg+S8YPWy1QtZLHk=) 2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:6e:a2:ef:88:7b:fe:e8:20:ba:d7:1f:7e:34:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a Validity Not Before: Dec 30 02:00:41 2025 GMT Not After : Dec 31 02:00:41 2025 GMT Subject: CN=b5607a2511fe9325593f81a451c4472e914c08ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:a3:f5:4b:c4:b7:f7:e4:53:3f:91:56:41: 26:8e:7c:c2:e3:c5:25:1d:09:99:90:a9:b6:0e:2b: dc:29:13:e6:22:6e:2d:18:9b:ed:f2:88:eb:ee:32: a7:b4:d4:33:91:2d:a8:b3:13:0b:b0:da:30:bd:02: df:82:56:7d:0d:04:40:ee:85:8c:2b:1a:48:57:40: f6:1e:c0:80:7b:8c:75:72:6d:e9:58:5a:be:30:81: e8:47:23:42:30:30:ea:5b:78:83:f8:09:1f:2e:bf: 5f:a3:33:d4:90:41:0a:d2:4b:df:7e:7b:09:07:af: 7e:74:7a:4f:36:68:71:df:f6:9c:89:fc:a2:c0:f8: 75:3a:83:a3:a8:15:aa:f8:e1:e3:ea:d7:d6:45:51: f9:23:03:a4:bc:29:a6:dc:69:cc:c6:9a:ac:db:5c: 89:c9:b2:18:55:4b:81:3b:b2:dc:3e:02:9b:22:26: 36:85:41:04:a9:e9:ab:2c:ce:54:2d:fb:cb:55:48: 2a:25:b0:ea:ea:aa:a9:6d:ce:16:ae:4d:6c:92:15: 3a:07:1a:bf:86:97:c3:35:e9:cb:9a:0b:b3:ec:d4: 82:f0:1b:19:44:2e:ad:20:61:4c:61:85:5d:13:19: 43:29:5b:05:c8:46:dd:e2:f7:dd:f5:4c:ee:48:ea: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:60:7A:25:11:FE:93:25:59:3F:81:A4:51:C4:47:2E:91:4C:08:AE X509v3 Authority Key Identifier: keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:50:d7:22:ae:18:bb:16:52:f0:c0:fe:c7:5a:9d:de:dd:01: 96:98:ae:50:4f:a5:86:25:95:cc:a7:5e:47:27:f0:a8:27:40: 89:cd:6c:ea:b8:c9:99:e7:b9:6b:0a:df:7e:94:1c:48:01:1d: 47:ae:6f:53:e4:7d:60:09:21:a2:e2:90:44:ac:d8:d3:f3:2d: 9e:71:70:d2:53:89:18:40:5e:ad:fb:03:4c:ff:cf:2c:46:01: f1:f6:12:d5:60:1d:95:2b:7a:39:3b:36:55:05:76:56:60:76: c2:40:8b:de:60:49:66:71:aa:8a:0d:4e:0d:cc:b9:ad:35:1b: 1c:cf:38:2b:a4:99:2d:11:df:ba:ee:41:2f:dd:a0:c1:d1:f5: b3:65:a3:b6:1d:0f:f2:75:1d:50:bb:a2:18:2a:09:0e:7b:cd: 19:0a:98:a1:08:12:be:1b:75:fd:9a:35:2e:08:39:9d:50:95: 64:96:01:09:f6:90:9d:23:8b:e4:87:79:58:46:c6:84:0b:07: 75:9e:e8:a4:25:6f:24:3e:cd:c1:96:15:20:f4:a1:cc:7c:83: 95:68:2d:0e:53:4f:29:a9:23:1b:05:a0:8b:67:da:20:d4:28: 83:d5:f5:ac:9f:d4:5f:10:1e:aa:e9:44:77:a4:7e:26:cb:c5: 93:97:25:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/G6i74h7/uggutcffjRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODkwMWMwNjFhMzU1YTNmZGFhY2UwYzgwYjk2N2FkMWNk MzcxN2EwHhcNMjUxMjMwMDIwMDQxWhcNMjUxMjMxMDIwMDQxWjAzMTEwLwYDVQQD EyhiNTYwN2EyNTExZmU5MzI1NTkzZjgxYTQ1MWM0NDcyZTkxNGMwOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/6j9UvEt/fkUz+RVkEmjnzC48Ul HQmZkKm2DivcKRPmIm4tGJvt8ojr7jKntNQzkS2osxMLsNowvQLfglZ9DQRA7oWM KxpIV0D2HsCAe4x1cm3pWFq+MIHoRyNCMDDqW3iD+AkfLr9fozPUkEEK0kvffnsJ B69+dHpPNmhx3/acifyiwPh1OoOjqBWq+OHj6tfWRVH5IwOkvCmm3GnMxpqs21yJ ybIYVUuBO7LcPgKbIiY2hUEEqemrLM5ULfvLVUgqJbDq6qqpbc4Wrk1skhU6Bxq/ hpfDNenLmguz7NSC8BsZRC6tIGFMYYVdExlDKVsFyEbd4vfd9UzuSOpzAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVgeiUR/pMlWT+BpFHERy6RTAiuMB8GA1UdIwQY MBaAFCeJAcBho1Wj/arODIC5Z60c03F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQt OWM3YTdiY2FhZjM2LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQtOWM3YTdiY2FhZjM2 LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1DXIq4Y uxZS8MD+x1qd3t0BlpiuUE+lhiWVzKdeRyfwqCdAic1s6rjJmee5awrffpQcSAEd R65vU+R9YAkhouKQRKzY0/MtnnFw0lOJGEBerfsDTP/PLEYB8fYS1WAdlSt6OTs2 VQV2VmB2wkCL3mBJZnGqig1ODcy5rTUbHM84K6SZLRHfuu5BL92gwdH1s2Wjth0P 8nUdULuiGCoJDnvNGQqYoQgSvht1/Zo1Lgg5nVCVZJYBCfaQnSOL5Id5WEbGhAsH dZ7opCVvJD7NwZYVIPShzHyDlWgtDlNPKakjGwWgi2faINQog9X1rJ/UXxAequlE d6R+JsvFk5cl+g== -----END CERTIFICATE-----Generated at Tue Dec 30 04:38:13 2025 by rpki-client