This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json) Hash identifier: N8HG9Cl33WxxqAFT6XAHknulQm5rZ/Gri5HtjEkqt70= Subject key identifier: D8:B0:B3:91:46:F1:26:FC:C2:BB:07:64:1E:5E:24:62:DD:EE:8C:42 Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0 Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0 Certificate serial: 019B668C994716CBEF50EE0379E8C26498F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft Manifest number: 0A7E Signing time: Sun 28 Dec 2025 20:00:48 +0000 Manifest this update: Sun 28 Dec 2025 20:00:48 +0000 Manifest next update: Mon 29 Dec 2025 20:00:48 +0000 Files and hashes: 1: B0B4Y6WmKTSsGtgiy_GaSYzTEw4.roa (hash: fz9V9BUWuOk2Mh3Jcg5jFOYmVDkKnHhcxn1Jkrdsy98=) 2: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: vMH0VGxunvRoLmP83F995Yt4dNzgKSlj4gRF0QGDNCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:99:47:16:cb:ef:50:ee:03:79:e8:c2:64:98:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0 Validity Not Before: Dec 28 20:00:48 2025 GMT Not After : Dec 29 20:00:48 2025 GMT Subject: CN=d8b0b39146f126fcc2bb07641e5e2462ddee8c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bd:0f:eb:9d:2a:20:b7:83:3b:86:11:a6:e4: c3:a4:d9:2b:0c:6e:ec:0b:e1:0a:6f:b9:97:fa:80: 4f:42:eb:15:67:14:a6:47:fa:2e:4e:f0:c2:ba:c0: c8:bf:8a:77:88:6f:86:84:fe:54:91:cb:13:7c:23: dd:13:42:89:b3:ea:6a:58:2b:bd:b2:e2:4b:9a:a0: 2f:03:93:d1:28:80:f1:ae:8e:32:2d:a9:7f:af:1f: 96:38:a4:bd:e0:f2:d7:60:68:35:61:27:cb:eb:3a: 5c:2e:a2:38:fe:f9:8d:38:29:81:e6:23:fa:4f:76: 5f:12:5a:f0:4a:82:5b:6c:e3:df:87:41:5f:99:dc: c7:19:72:48:18:69:0b:9c:cd:ef:fd:91:c8:59:f1: eb:c4:e2:22:58:5e:eb:f3:23:fb:b7:29:80:1b:4c: a5:8b:eb:84:dc:47:f2:05:e0:b9:83:3e:55:b4:a7: 16:6a:cf:84:a3:97:b8:1f:51:97:71:74:ee:60:de: e9:b3:1a:e1:69:86:e9:5d:ac:8b:cd:d3:1a:55:d1: 9e:f5:f7:ac:c1:4f:18:b0:0d:05:b1:e7:82:d0:e2: d6:cb:7c:e0:ef:f4:2b:ea:33:39:6e:44:4c:8e:ae: 9f:51:29:f9:5a:6e:a8:17:1d:e4:1e:00:55:21:3f: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B0:B3:91:46:F1:26:FC:C2:BB:07:64:1E:5E:24:62:DD:EE:8C:42 X509v3 Authority Key Identifier: keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:60:82:ca:5a:b1:4d:81:c6:99:3d:8a:05:9d:e5:46:4c:0b: 39:0e:ba:2b:5e:55:32:1f:cf:cc:be:17:fa:9d:7a:a0:6e:7d: 94:72:c8:3e:41:89:e7:9d:66:85:c7:a9:b4:c1:e9:de:36:d3: b5:c7:7f:7c:33:85:87:af:bc:f8:5b:c7:b8:c5:f2:79:0d:b3: 41:03:3e:76:b3:88:10:e9:58:58:53:eb:1a:52:15:ba:81:53: 39:a6:70:16:e0:6c:50:2e:f1:5a:73:cd:5a:c1:0b:b6:f5:e3: e3:8c:2e:20:b6:40:6d:4d:8b:23:40:af:8c:6b:b4:c1:7f:ed: 8f:3a:23:be:5e:ec:08:c7:30:8e:88:e7:10:f2:e2:b0:b0:b4: 22:99:4c:e6:55:a2:20:91:3e:5e:04:03:c3:18:3d:49:c3:9c: 97:e0:4c:21:70:55:3c:b8:3a:7d:2c:e1:99:4d:45:cf:9d:e8: be:09:c6:89:76:aa:30:f9:53:17:35:3f:1a:5c:fa:92:4f:b7: 7d:98:10:17:f8:4d:2d:ac:86:20:78:63:2c:03:51:4d:95:83: 42:11:8b:ec:55:09:05:d3:72:75:1d:89:b9:70:44:5f:4d:2f: 06:84:0e:08:30:3c:c9:66:27:1e:f1:77:33:8c:d8:3f:25:5a: 5f:c0:84:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjJlHFsvvUO4DeejCZJj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OGY2MmYzYTVmODQ3MjI4NTJmYzcwZjA1MmNmMTNkZWEy Mzc0ZDAwHhcNMjUxMjI4MjAwMDQ4WhcNMjUxMjI5MjAwMDQ4WjAzMTEwLwYDVQQD EyhkOGIwYjM5MTQ2ZjEyNmZjYzJiYjA3NjQxZTVlMjQ2MmRkZWU4YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r0P650qILeDO4YRpuTDpNkrDG7s C+EKb7mX+oBPQusVZxSmR/ouTvDCusDIv4p3iG+GhP5UkcsTfCPdE0KJs+pqWCu9 suJLmqAvA5PRKIDxro4yLal/rx+WOKS94PLXYGg1YSfL6zpcLqI4/vmNOCmB5iP6 T3ZfElrwSoJbbOPfh0FfmdzHGXJIGGkLnM3v/ZHIWfHrxOIiWF7r8yP7tymAG0yl i+uE3EfyBeC5gz5VtKcWas+Eo5e4H1GXcXTuYN7psxrhaYbpXayLzdMaVdGe9fes wU8YsA0FseeC0OLWy3zg7/Qr6jM5bkRMjq6fUSn5Wm6oFx3kHgBVIT+7swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiws5FG8Sb8wrsHZB5eJGLd7oxCMB8GA1UdIwQY MBaAFCePYvOl+EcihS/HDwUs8T3qI3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3Njgt NTM1YmY5YjFlOGI3LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3NjgtNTM1YmY5YjFlOGI3 LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2CCylqx TYHGmT2KBZ3lRkwLOQ66K15VMh/PzL4X+p16oG59lHLIPkGJ551mhceptMHp3jbT tcd/fDOFh6+8+FvHuMXyeQ2zQQM+drOIEOlYWFPrGlIVuoFTOaZwFuBsUC7xWnPN WsELtvXj44wuILZAbU2LI0CvjGu0wX/tjzojvl7sCMcwjojnEPLisLC0IplM5lWi IJE+XgQDwxg9ScOcl+BMIXBVPLg6fSzhmU1Fz53ovgnGiXaqMPlTFzU/Glz6kk+3 fZgQF/hNLayGIHhjLANRTZWDQhGL7FUJBdNydR2JuXBEX00vBoQOCDA8yWYnHvF3 M4zYPyVaX8CEGw== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:58 2025 by rpki-client