This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json) Hash identifier: T5yZN8jhXnowFDM/oz+kNMJR9KK03mCF3oh3R/nJvdk= Subject key identifier: 63:4D:95:79:4A:69:E7:3B:6F:97:9F:03:62:23:1F:B1:D8:4D:90:EF Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05 Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905 Certificate serial: 019B2EF94545891ABC3EE923B5910C91B059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft Manifest number: 0642 Signing time: Thu 18 Dec 2025 01:00:46 +0000 Manifest this update: Thu 18 Dec 2025 01:00:46 +0000 Manifest next update: Fri 19 Dec 2025 01:00:46 +0000 Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: qDEjVrBTHZoXF++ykWKOL81YyXL2hvB+0RtwTROPMPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:45:45:89:1a:bc:3e:e9:23:b5:91:0c:91:b0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27486002469951b6800704c8f02cac74b5f82905 Validity Not Before: Dec 18 01:00:46 2025 GMT Not After : Dec 19 01:00:46 2025 GMT Subject: CN=634d95794a69e73b6f979f0362231fb1d84d90ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:20:71:b9:b9:8e:f8:a2:23:04:47:d3:45: 84:07:63:16:87:83:dc:44:fa:d3:3d:8d:dd:0b:1d: 44:29:1b:3b:fa:f7:79:e9:dd:d4:05:ee:79:c5:09: 60:58:fd:5d:44:ae:d6:dc:7e:80:af:de:f9:42:f9: 4a:89:e2:bb:3b:e7:45:28:fe:b4:b9:ee:fc:8f:01: a9:9e:89:33:3d:99:87:10:39:90:16:2b:5b:6d:a6: cb:d0:99:78:da:02:84:39:7d:fc:85:76:4c:58:8e: 06:e9:32:a9:bc:b2:48:22:3f:17:fa:c1:91:70:8a: 8f:89:5f:2a:5f:e1:20:2a:ac:24:7b:d5:d2:a6:0f: 91:e3:57:49:1f:e1:6d:dd:a3:02:3e:25:8b:e3:bc: ac:0a:50:24:f6:e3:9c:ae:72:2a:56:e8:31:24:8e: 1e:49:96:09:ef:43:6b:71:6d:6a:f7:54:75:f5:e8: 95:20:d8:b9:ae:db:18:7e:71:3a:ee:1c:67:e0:eb: 8d:6f:2a:11:dd:1a:a4:3a:70:01:1f:a1:e5:fc:d3: ae:f4:ac:0c:5f:b9:ae:4e:e5:98:eb:24:ef:41:49: f9:3b:03:45:de:d2:39:a6:20:2b:82:4e:dd:23:20: e3:9d:9b:c1:cc:60:8c:6b:5e:2e:d6:0c:5c:dc:65: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4D:95:79:4A:69:E7:3B:6F:97:9F:03:62:23:1F:B1:D8:4D:90:EF X509v3 Authority Key Identifier: keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9d:ab:58:58:1d:7d:a2:d1:ca:75:17:8f:d6:24:81:81:00: 34:fb:cd:28:c8:7b:c1:de:55:00:29:00:42:92:16:b4:a2:82: 47:49:8a:28:92:bf:ee:f3:aa:cc:2d:6d:a5:61:aa:df:6f:1d: af:36:03:20:5e:32:1c:a0:5a:9d:d3:cb:07:44:e8:38:34:15: e3:3a:40:66:17:8c:a6:4a:46:06:61:5b:1f:59:43:6b:98:74: 84:1d:ce:2b:58:c2:f4:bc:c8:b3:11:c6:52:49:02:00:e4:b2: 6b:14:b9:cf:ce:96:b3:6c:45:54:27:96:a0:17:f1:59:31:cf: 5b:60:2b:88:ea:1f:4d:c2:cb:d5:17:0e:bc:70:eb:d6:52:32: fb:33:09:54:1b:e7:b7:d6:dc:d5:d1:9a:87:c5:43:a0:05:eb: 0e:6f:c0:f1:be:06:f4:ea:e2:5b:9b:31:ed:3b:01:f3:ce:76: 6c:fd:90:18:93:10:85:1d:17:ca:fb:a5:01:0e:bf:9b:1a:de: 1d:12:08:54:96:7e:31:83:82:53:bd:c2:ce:4b:49:0b:ec:2a: 8d:fd:4d:d8:71:83:63:c9:92:27:79:ea:ab:87:ce:22:ad:f7: 35:c7:74:d9:36:68:0b:b5:f1:d2:cc:f4:91:b7:48:95:47:61: 58:7a:ca:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+UVFiRq8PukjtZEMkbBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDg2MDAyNDY5OTUxYjY4MDA3MDRjOGYwMmNhYzc0YjVm ODI5MDUwHhcNMjUxMjE4MDEwMDQ2WhcNMjUxMjE5MDEwMDQ2WjAzMTEwLwYDVQQD Eyg2MzRkOTU3OTRhNjllNzNiNmY5NzlmMDM2MjIzMWZiMWQ4NGQ5MGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rsgcbm5jviiIwRH00WEB2MWh4Pc RPrTPY3dCx1EKRs7+vd56d3UBe55xQlgWP1dRK7W3H6Ar975QvlKieK7O+dFKP60 ue78jwGpnokzPZmHEDmQFitbbabL0Jl42gKEOX38hXZMWI4G6TKpvLJIIj8X+sGR cIqPiV8qX+EgKqwke9XSpg+R41dJH+Ft3aMCPiWL47ysClAk9uOcrnIqVugxJI4e SZYJ70NrcW1q91R19eiVINi5rtsYfnE67hxn4OuNbyoR3RqkOnABH6Hl/NOu9KwM X7muTuWY6yTvQUn5OwNF3tI5piArgk7dIyDjnZvBzGCMa14u1gxc3GV5qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNNlXlKaec7b5efA2IjH7HYTZDvMB8GA1UdIwQY MBaAFCdIYAJGmVG2gAcEyPAsrHS1+CkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2Mt YzRlYjZkZjk3NGFkLzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2MtYzRlYjZkZjk3NGFk LzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAp2rWFgd faLRynUXj9YkgYEANPvNKMh7wd5VACkAQpIWtKKCR0mKKJK/7vOqzC1tpWGq328d rzYDIF4yHKBandPLB0ToODQV4zpAZheMpkpGBmFbH1lDa5h0hB3OK1jC9LzIsxHG UkkCAOSyaxS5z86Ws2xFVCeWoBfxWTHPW2AriOofTcLL1RcOvHDr1lIy+zMJVBvn t9bc1dGah8VDoAXrDm/A8b4G9OriW5sx7TsB8852bP2QGJMQhR0XyvulAQ6/mxre HRIIVJZ+MYOCU73CzktJC+wqjf1N2HGDY8mSJ3nqq4fOIq33Ncd02TZoC7Xx0sz0 kbdIlUdhWHrKDA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:28:21 2025 by rpki-client