This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json) Hash identifier: p2cy6eARBKe3i+EumeMYYldouktIJQ1bBeOaB7xm+JE= Subject key identifier: 08:38:19:75:8B:90:F2:BF:6B:B3:CF:D5:DA:CB:49:2C:F4:6A:70:2C Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05 Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905 Certificate serial: 019B36B3D7A9F98659F5026A280C6953D05D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft Manifest number: 0646 Signing time: Fri 19 Dec 2025 13:01:54 +0000 Manifest this update: Fri 19 Dec 2025 13:01:54 +0000 Manifest next update: Sat 20 Dec 2025 13:01:54 +0000 Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: rka64U5emx4lM7dRyKG3Db5aVTGyTqC5dDvAMPkXnQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:d7:a9:f9:86:59:f5:02:6a:28:0c:69:53:d0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27486002469951b6800704c8f02cac74b5f82905 Validity Not Before: Dec 19 13:01:54 2025 GMT Not After : Dec 20 13:01:54 2025 GMT Subject: CN=083819758b90f2bf6bb3cfd5dacb492cf46a702c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bf:9c:51:7e:2c:1b:23:74:ad:48:f7:1b:c9: d8:e0:ec:c6:09:41:77:4a:9c:1a:f9:92:56:7c:0d: b7:d2:5b:16:9e:ff:31:65:a4:8b:15:15:ee:f8:e1: 08:db:96:00:62:36:68:13:23:cf:b7:d1:f4:02:88: e3:00:80:9c:88:b3:0b:19:0e:32:b2:1a:4a:df:f0: 98:44:7c:9a:e9:20:e6:1e:b5:96:bf:45:a6:e2:30: fa:0f:85:99:c6:ba:21:43:e8:6d:86:78:41:70:06: 83:2d:72:96:91:1d:87:0d:d4:ab:ed:2d:e8:c2:12: 26:0b:5b:3f:81:f9:93:aa:0c:bc:fa:f0:2f:e1:85: 98:30:54:79:f7:c1:a2:68:c1:fc:4c:36:d9:c6:83: 86:14:b2:c9:84:46:e7:72:96:55:c4:32:e8:91:41: 58:91:96:53:9a:58:c5:25:46:00:dd:9f:23:0c:39: eb:b7:67:30:f0:a6:a9:d9:3b:e2:2a:62:ff:26:8d: 45:cf:ea:24:73:7b:a4:bd:d6:9f:ad:ba:6c:2a:d6: ac:fa:06:02:c2:c4:82:a4:fa:75:13:47:43:5d:e7: d3:51:59:c2:3e:eb:ec:58:34:1e:c3:3b:0d:bd:9b: 31:77:22:11:c6:3c:bc:c8:20:b1:74:1d:57:92:7a: c1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:38:19:75:8B:90:F2:BF:6B:B3:CF:D5:DA:CB:49:2C:F4:6A:70:2C X509v3 Authority Key Identifier: keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8f:93:2b:e3:4d:d0:36:23:65:51:0f:85:82:54:30:36:99: 32:fe:0a:a7:09:5e:6d:79:55:bc:75:79:9f:b9:e7:9c:25:94: dc:ae:36:d4:3f:a2:74:0e:c1:aa:08:6f:ac:ef:08:25:b8:10: 91:02:a9:85:bb:29:db:7d:9e:5d:90:0b:8e:41:7c:92:34:7f: 6b:59:3b:83:93:7a:06:23:72:22:9b:34:72:49:af:d4:ed:96: 88:3a:f6:ce:30:60:e0:e8:a3:fe:c5:34:7c:2b:81:a6:50:e8: 9c:65:85:4a:39:e8:87:7d:5a:b7:2a:ee:b0:c7:cb:a9:9b:ee: 17:a6:18:00:ce:f1:52:b3:c2:2d:df:1e:b6:c0:d9:66:7e:d5: aa:18:05:65:53:bd:75:15:8e:b7:cf:65:9c:b0:a8:c5:0b:52: a6:ab:8c:e1:a8:5a:a2:e2:b4:da:11:e8:42:18:59:12:8e:62: 4e:48:62:8d:7c:d5:ba:ed:12:15:83:78:6e:5c:55:f1:76:8f: 88:75:cc:95:e2:f4:51:52:d2:ae:00:5e:99:cb:68:ec:8d:0f: 48:ca:8c:fb:9e:89:ee:47:78:b0:6e:23:e3:f1:47:c6:8f:e8: 68:fc:a0:9d:a3:03:b3:81:05:41:4a:ef:3f:ff:ef:0f:33:42: f7:50:08:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s9ep+YZZ9QJqKAxpU9BdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDg2MDAyNDY5OTUxYjY4MDA3MDRjOGYwMmNhYzc0YjVm ODI5MDUwHhcNMjUxMjE5MTMwMTU0WhcNMjUxMjIwMTMwMTU0WjAzMTEwLwYDVQQD EygwODM4MTk3NThiOTBmMmJmNmJiM2NmZDVkYWNiNDkyY2Y0NmE3MDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L+cUX4sGyN0rUj3G8nY4OzGCUF3 Spwa+ZJWfA230lsWnv8xZaSLFRXu+OEI25YAYjZoEyPPt9H0AojjAICciLMLGQ4y shpK3/CYRHya6SDmHrWWv0Wm4jD6D4WZxrohQ+hthnhBcAaDLXKWkR2HDdSr7S3o whImC1s/gfmTqgy8+vAv4YWYMFR598GiaMH8TDbZxoOGFLLJhEbncpZVxDLokUFY kZZTmljFJUYA3Z8jDDnrt2cw8Kap2TviKmL/Jo1Fz+okc3ukvdafrbpsKtas+gYC wsSCpPp1E0dDXefTUVnCPuvsWDQewzsNvZsxdyIRxjy8yCCxdB1XknrBDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg4GXWLkPK/a7PP1drLSSz0anAsMB8GA1UdIwQY MBaAFCdIYAJGmVG2gAcEyPAsrHS1+CkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2Mt YzRlYjZkZjk3NGFkLzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2MtYzRlYjZkZjk3NGFk LzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYo+TK+NN 0DYjZVEPhYJUMDaZMv4KpwlebXlVvHV5n7nnnCWU3K421D+idA7BqghvrO8IJbgQ kQKphbsp232eXZALjkF8kjR/a1k7g5N6BiNyIps0ckmv1O2WiDr2zjBg4Oij/sU0 fCuBplDonGWFSjnoh31atyrusMfLqZvuF6YYAM7xUrPCLd8etsDZZn7VqhgFZVO9 dRWOt89lnLCoxQtSpquM4ahaouK02hHoQhhZEo5iTkhijXzVuu0SFYN4blxV8XaP iHXMleL0UVLSrgBemcto7I0PSMqM+56J7kd4sG4j4/FHxo/oaPygnaMDs4EFQUrv P//vDzNC91AIHg== -----END CERTIFICATE-----Generated at Fri Dec 19 16:00:03 2025 by rpki-client