This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft File: J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json) Hash identifier: oFP67FRJvrtMjmq579Y3w2sGhlTUHH+E47KdC6MOcOU= Subject key identifier: AF:52:0F:31:4B:0E:69:28:87:EB:97:76:3E:06:55:A1:AA:33:4F:54 Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4 Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4 Certificate serial: 019B5D89E0F1839A98D82A5BCFFDB896A79B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft Manifest number: 0F57 Signing time: Sat 27 Dec 2025 02:01:15 +0000 Manifest this update: Sat 27 Dec 2025 02:01:15 +0000 Manifest next update: Sun 28 Dec 2025 02:01:15 +0000 Files and hashes: 1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=) 2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: p549HXynBWzcUnmLnuvWsuVjI76a2+alSU0kMd4BR+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:e0:f1:83:9a:98:d8:2a:5b:cf:fd:b8:96:a7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4 Validity Not Before: Dec 27 02:01:15 2025 GMT Not After : Dec 28 02:01:15 2025 GMT Subject: CN=af520f314b0e692887eb97763e0655a1aa334f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:f9:c4:21:c4:d7:38:cc:ea:5f:01:5f:c7: b8:77:a7:20:b3:18:73:86:a0:0e:40:dd:b7:a4:55: b5:3c:66:dd:b0:fd:ff:ab:07:c1:41:3d:c6:66:6e: f7:7f:54:aa:ab:bb:bc:ad:e0:8a:b0:96:85:28:90: 53:38:8b:5b:a8:e3:ad:05:eb:fc:1f:f5:d8:04:7e: 68:f5:ce:a9:fc:87:a5:06:ae:ea:0f:fd:e5:b5:54: 2e:73:79:b5:4d:20:35:54:a8:30:86:7d:1b:fa:da: 30:29:89:0c:e6:02:cb:7a:17:ba:50:1a:e9:c6:8a: c8:ff:73:3a:5a:36:ab:a9:c8:13:ba:de:5b:d4:bd: 70:78:08:79:11:81:1a:bf:91:82:02:11:8b:7f:46: de:b1:65:8e:6a:a8:18:16:4d:da:55:42:4e:94:40: ba:ec:ea:82:04:cb:45:4a:af:2e:d4:00:de:e9:3b: 88:5b:78:af:57:a2:87:d2:88:37:b2:4e:92:78:78: 04:cc:57:f1:1f:fe:76:25:fe:3f:8c:d0:87:94:18: 5a:c3:5f:b8:cb:40:9f:2a:61:0b:c5:a6:64:a5:ed: 5a:70:ef:dc:1e:8b:85:09:3e:47:f9:24:7b:5e:c5: 74:5a:9f:cf:e0:0d:d2:df:af:69:34:59:f8:14:23: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:0F:31:4B:0E:69:28:87:EB:97:76:3E:06:55:A1:AA:33:4F:54 X509v3 Authority Key Identifier: keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0c:5b:10:a3:7f:28:2d:70:5e:24:08:0f:08:0c:5b:f6:c6: e4:e1:3a:34:0b:93:46:f0:76:e7:bd:3d:58:d2:c2:15:74:49: d4:44:2a:99:42:b9:16:ec:f9:83:3b:1e:77:28:2e:36:0a:2d: d6:58:d7:d2:a2:82:ad:da:55:98:0f:96:2f:fe:0e:7a:91:a1: 41:98:ad:ed:b6:6a:22:21:76:42:9c:2b:78:9e:4a:cc:64:b0: 54:d3:98:08:d4:a3:1b:08:1c:07:0b:57:0e:78:54:8a:8f:2e: 12:71:a9:31:da:82:6f:7a:de:33:4f:03:c5:ce:e4:df:9c:0f: 4f:ac:a3:a4:a6:8d:b7:21:3e:31:d1:87:fd:e0:fd:f5:d7:b5: fd:e8:32:b0:00:2e:68:a5:cc:f5:1d:7e:ed:86:9c:b3:a7:ee: c1:00:5d:e3:ab:dd:ed:2e:ae:bf:5a:30:ca:f7:ce:2c:02:4e: fe:5d:71:3e:b4:c8:8d:24:66:89:82:24:06:32:32:16:93:c6: 2f:be:74:e7:23:aa:a4:ce:ea:2b:9b:71:d1:9a:cd:54:b3:62: 91:74:8c:a1:48:f7:f1:12:e0:f1:48:9e:9b:af:00:2f:5a:52: 97:97:77:0a:7a:ac:8e:b7:0f:fe:05:b7:93:6f:b8:fa:c4:60: cc:f7:af:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdieDxg5qY2Cpbz/24lqebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDhhZjdlNTZjODBkMThkYzk2OGY0ZGJjZWM4MTNmODVl YTMwYTQwHhcNMjUxMjI3MDIwMTE1WhcNMjUxMjI4MDIwMTE1WjAzMTEwLwYDVQQD EyhhZjUyMGYzMTRiMGU2OTI4ODdlYjk3NzYzZTA2NTVhMWFhMzM0ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yD5xCHE1zjM6l8BX8e4d6cgsxhz hqAOQN23pFW1PGbdsP3/qwfBQT3GZm73f1Sqq7u8reCKsJaFKJBTOItbqOOtBev8 H/XYBH5o9c6p/IelBq7qD/3ltVQuc3m1TSA1VKgwhn0b+towKYkM5gLLehe6UBrp xorI/3M6WjarqcgTut5b1L1weAh5EYEav5GCAhGLf0besWWOaqgYFk3aVUJOlEC6 7OqCBMtFSq8u1ADe6TuIW3ivV6KH0og3sk6SeHgEzFfxH/52Jf4/jNCHlBhaw1+4 y0CfKmELxaZkpe1acO/cHouFCT5H+SR7XsV0Wp/P4A3S369pNFn4FCPVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9SDzFLDmkoh+uXdj4GVaGqM09UMB8GA1UdIwQY MBaAFCfYr35WyA0Y3JaPTbzsgT+F6jCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUt MDIxNWFjYTFiOTA5LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUtMDIxNWFjYTFiOTA5 LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgxbEKN/ KC1wXiQIDwgMW/bG5OE6NAuTRvB25709WNLCFXRJ1EQqmUK5Fuz5gzsedyguNgot 1ljX0qKCrdpVmA+WL/4OepGhQZit7bZqIiF2QpwreJ5KzGSwVNOYCNSjGwgcBwtX DnhUio8uEnGpMdqCb3reM08Dxc7k35wPT6yjpKaNtyE+MdGH/eD99de1/egysAAu aKXM9R1+7Yacs6fuwQBd46vd7S6uv1owyvfOLAJO/l1xPrTIjSRmiYIkBjIyFpPG L7505yOqpM7qK5tx0ZrNVLNikXSMoUj38RLg8Uiem68AL1pSl5d3CnqsjrcP/gW3 k2+4+sRgzPevmA== -----END CERTIFICATE-----Generated at Sat Dec 27 10:50:00 2025 by rpki-client