This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json) Hash identifier: 2+uZqAr5rXA1ns5v2Am1xSjwpslJx3YYQP/o99Z5ytc= Subject key identifier: 85:09:01:19:F7:C2:62:93:91:EF:55:55:73:3A:E5:61:09:90:47:87 Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a Certificate serial: 019B57BE8D6D8BFCBEB88548B91683800B71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft Manifest number: 1799 Signing time: Thu 25 Dec 2025 23:01:04 +0000 Manifest this update: Thu 25 Dec 2025 23:01:04 +0000 Manifest next update: Fri 26 Dec 2025 23:01:04 +0000 Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: kvUwkiqkajOCYYxydAlTFG+sNzhsgCOtPz/lajTYYHw=) 2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:be:8d:6d:8b:fc:be:b8:85:48:b9:16:83:80:0b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a Validity Not Before: Dec 25 23:01:04 2025 GMT Not After : Dec 26 23:01:04 2025 GMT Subject: CN=85090119f7c2629391ef5555733ae56109904787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:ba:a7:45:9f:a5:7f:8a:cb:2b:77:ff:64: 45:17:85:80:7d:38:52:28:c8:3a:99:51:82:ed:09: 60:ab:53:4f:eb:e4:44:7a:90:5d:fa:58:22:92:f8: 58:98:f0:00:37:96:fa:0f:08:a6:54:96:7e:7e:e9: a6:5d:41:59:e9:df:b4:78:76:3c:84:f8:99:30:12: 8e:e5:66:15:79:91:a1:42:16:42:24:e5:c2:0c:f2: c0:c7:ea:75:9f:91:91:cf:b3:9d:cc:4a:fa:b6:43: f8:18:ee:60:41:09:26:f1:54:38:77:72:87:72:82: 0d:4e:35:77:6b:83:96:a9:7b:a5:57:a5:6a:16:e7: 62:f3:3c:2a:5a:8c:a5:13:3b:5c:6d:47:b9:33:00: e3:e6:1a:38:29:79:63:65:9c:6b:be:b9:09:9c:97: d4:01:2a:70:a7:9c:e0:b7:cc:3d:5e:64:9c:db:2c: 2f:ec:eb:d4:0c:e3:8c:54:e2:ce:4c:dc:8b:f2:4a: 6b:aa:1d:4e:c6:be:c6:f7:88:b3:39:a6:f8:91:9d: 71:64:29:a0:6e:fe:c2:1b:fb:48:71:d5:2e:b1:e0: f3:0f:bf:24:18:04:70:e5:ed:d7:ad:a6:ed:7a:fe: ee:bc:47:61:e4:1f:75:67:1c:71:ad:bf:88:42:91: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:09:01:19:F7:C2:62:93:91:EF:55:55:73:3A:E5:61:09:90:47:87 X509v3 Authority Key Identifier: keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0c:dc:4e:5c:a7:eb:21:c7:2d:dc:f9:f7:f1:cd:33:eb:81: 60:ec:44:f2:b8:9a:a1:e4:c9:e9:c6:75:99:67:f4:1a:7e:bb: 66:e6:c4:57:95:92:f2:f8:3a:64:f7:7f:d6:b3:00:09:24:3f: cc:63:5d:e0:bb:96:50:63:fc:c1:fe:c8:d0:64:34:05:ae:03: 17:43:b0:84:24:7e:c6:d0:49:cf:47:91:df:9b:34:33:81:45: 33:bb:05:93:59:c0:ed:d6:0b:c3:02:c0:a9:c6:5b:22:ef:fc: be:18:6f:df:f2:48:df:be:dd:23:6a:f6:06:2c:35:da:0b:ac: d2:a9:05:f4:c3:45:71:78:ac:10:c9:1e:05:03:6d:32:16:c7: eb:db:fd:55:98:6e:13:b3:78:62:3c:12:c4:17:8b:e5:b8:75: 79:45:d7:c4:60:ba:d2:52:7f:33:fc:6c:07:d0:92:96:82:73: 0e:b4:a4:f4:0f:b0:d8:57:1c:42:54:16:dc:97:b6:84:fb:be: b8:88:48:49:e2:91:73:3f:d5:cb:c7:b9:05:79:53:44:6f:2d: 0a:e4:e5:7f:96:83:0f:a0:90:71:d5:35:fe:74:c7:37:d6:31: 25:b0:3d:67:9d:46:b8:40:9c:5f:ab:e6:f7:2f:a6:ff:5e:91: d8:c8:b2:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXvo1ti/y+uIVIuRaDgAtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODkwMWMwNjFhMzU1YTNmZGFhY2UwYzgwYjk2N2FkMWNk MzcxN2EwHhcNMjUxMjI1MjMwMTA0WhcNMjUxMjI2MjMwMTA0WjAzMTEwLwYDVQQD Eyg4NTA5MDExOWY3YzI2MjkzOTFlZjU1NTU3MzNhZTU2MTA5OTA0Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTm6p0WfpX+Kyyt3/2RFF4WAfThS KMg6mVGC7Qlgq1NP6+REepBd+lgikvhYmPAAN5b6DwimVJZ+fummXUFZ6d+0eHY8 hPiZMBKO5WYVeZGhQhZCJOXCDPLAx+p1n5GRz7OdzEr6tkP4GO5gQQkm8VQ4d3KH coINTjV3a4OWqXulV6VqFudi8zwqWoylEztcbUe5MwDj5ho4KXljZZxrvrkJnJfU ASpwp5zgt8w9XmSc2ywv7OvUDOOMVOLOTNyL8kprqh1Oxr7G94izOab4kZ1xZCmg bv7CG/tIcdUuseDzD78kGARw5e3Xrabtev7uvEdh5B91Zxxxrb+IQpHUDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUJARn3wmKTke9VVXM65WEJkEeHMB8GA1UdIwQY MBaAFCeJAcBho1Wj/arODIC5Z60c03F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQt OWM3YTdiY2FhZjM2LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQtOWM3YTdiY2FhZjM2 LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwzcTlyn 6yHHLdz59/HNM+uBYOxE8riaoeTJ6cZ1mWf0Gn67ZubEV5WS8vg6ZPd/1rMACSQ/ zGNd4LuWUGP8wf7I0GQ0Ba4DF0OwhCR+xtBJz0eR35s0M4FFM7sFk1nA7dYLwwLA qcZbIu/8vhhv3/JI377dI2r2Biw12gus0qkF9MNFcXisEMkeBQNtMhbH69v9VZhu E7N4YjwSxBeL5bh1eUXXxGC60lJ/M/xsB9CSloJzDrSk9A+w2FccQlQW3Je2hPu+ uIhISeKRcz/Vy8e5BXlTRG8tCuTlf5aDD6CQcdU1/nTHN9YxJbA9Z51GuECcX6vm 9y+m/16R2Miylw== -----END CERTIFICATE-----Generated at Fri Dec 26 00:49:38 2025 by rpki-client