This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json) Hash identifier: 4HAXnEqPkuhK+KVGr5NxhC/AMnGBXevPxObqCqFMzwI= Subject key identifier: C2:C0:23:CC:E4:11:2D:E6:22:2D:87:2B:81:C8:23:EC:A0:26:FF:3D Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53 Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53 Certificate serial: 019B5E2EF020AA875AE147DA73D7AD3BCD42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft Manifest number: 08F4 Signing time: Sat 27 Dec 2025 05:01:32 +0000 Manifest this update: Sat 27 Dec 2025 05:01:32 +0000 Manifest next update: Sun 28 Dec 2025 05:01:32 +0000 Files and hashes: 1: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: ONkLZWIKdJzvMiMJtLCk994Rb6bc/ybX2/3Sdcwh6w0=) 2: X5HOJfJgZ9gpdrkuyaZ8bcQBeU8.roa (hash: 8gUQn4rNjhTT1oopDBGy8vh7Nj8nuTOrGV1MdMp4VZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:f0:20:aa:87:5a:e1:47:da:73:d7:ad:3b:cd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53 Validity Not Before: Dec 27 05:01:32 2025 GMT Not After : Dec 28 05:01:32 2025 GMT Subject: CN=c2c023cce4112de6222d872b81c823eca026ff3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:48:29:e2:4b:96:f9:bb:83:14:ff:cb:7f: 32:d3:a2:36:2b:25:26:d8:6b:2c:3a:d5:5f:d3:aa: 1a:33:0a:63:d7:cb:dc:e1:4e:5c:6b:e8:4a:d5:57: d8:da:aa:66:d1:81:c2:3a:97:19:a0:18:a1:00:72: 16:c4:49:7e:34:2b:60:bb:eb:1e:94:32:88:a4:ef: fc:08:f9:7c:8a:34:c2:85:ef:b8:66:7f:c3:af:d1: ee:15:7a:a5:af:6d:7d:02:36:60:f0:45:da:95:f7: 2b:1b:0f:8f:66:38:ce:93:e6:ba:dc:46:65:a0:00: 34:7c:e1:85:74:9c:0f:5f:cd:d0:27:41:d0:d0:66: 76:db:00:dd:d5:ac:af:13:4f:dd:05:4d:8d:5d:8f: 3a:47:31:02:69:27:53:7e:64:9b:93:fd:c5:00:5c: 5f:19:5a:97:fb:b7:53:9c:47:0e:60:30:c4:2a:e1: 3b:0a:48:c1:83:6d:c9:a7:20:8a:42:4d:b8:4c:dc: 27:27:9f:2c:96:a8:34:b8:5b:47:43:27:56:88:b6: 68:05:6c:35:67:31:12:24:65:1e:a5:5c:ca:7e:b4: 0b:03:15:25:15:bb:bc:8f:38:24:8f:00:40:cb:db: 37:b2:aa:cc:80:5b:46:97:de:00:63:9b:9d:be:fb: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C0:23:CC:E4:11:2D:E6:22:2D:87:2B:81:C8:23:EC:A0:26:FF:3D X509v3 Authority Key Identifier: keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c0:dc:e4:28:ed:e7:a6:7b:b6:ad:e2:c5:fb:1d:86:50:43: 3d:af:dd:3b:96:ed:33:65:d7:0f:23:73:17:1c:76:9b:57:07: 27:f2:a2:a8:b4:29:c1:9c:de:8a:35:9b:9f:0b:5f:6c:ac:26: 3d:b0:2f:1b:1d:bd:78:2c:db:f4:f5:59:fe:5f:22:bb:c4:93: b1:c6:b3:49:a1:1c:8b:cb:94:b0:15:02:e6:d4:07:62:24:93: 6b:fe:12:ee:95:15:0b:dc:ad:72:dc:e9:dc:88:fc:4e:cc:d2: 79:36:19:ac:33:e4:6d:78:b8:45:b0:f9:93:61:01:56:0f:1c: 22:19:67:00:c7:83:f5:d9:f6:2a:15:61:4a:e5:08:a4:5a:0a: b3:05:5a:6f:a5:c3:63:58:82:21:71:2c:7f:98:29:7b:34:5e: d6:02:ed:d5:59:9d:1d:cc:16:f1:e6:1e:88:7b:85:b8:5d:b4: 8c:54:8d:10:11:6f:5c:e5:4d:76:cf:2b:27:0c:b7:48:f8:63: 6d:75:19:7e:72:0c:49:e9:ec:6d:7f:2a:fc:4f:1f:db:2f:00: 14:27:ac:52:04:88:73:35:4c:cb:f1:90:c5:77:8e:b1:5d:af: 51:e6:93:32:32:5e:98:fa:b1:e2:d7:a7:f7:20:6b:90:48:3c: c7:8a:9b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLvAgqoda4Ufac9etO81CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OTQ2OTY4ZjJmN2RkOTUwZWE0OWI4NzczN2RmMWY2YWVi ZGJiNTMwHhcNMjUxMjI3MDUwMTMyWhcNMjUxMjI4MDUwMTMyWjAzMTEwLwYDVQQD EyhjMmMwMjNjY2U0MTEyZGU2MjIyZDg3MmI4MWM4MjNlY2EwMjZmZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYVIKeJLlvm7gxT/y38y06I2KyUm 2GssOtVf06oaMwpj18vc4U5ca+hK1VfY2qpm0YHCOpcZoBihAHIWxEl+NCtgu+se lDKIpO/8CPl8ijTChe+4Zn/Dr9HuFXqlr219AjZg8EXalfcrGw+PZjjOk+a63EZl oAA0fOGFdJwPX83QJ0HQ0GZ22wDd1ayvE0/dBU2NXY86RzECaSdTfmSbk/3FAFxf GVqX+7dTnEcOYDDEKuE7CkjBg23JpyCKQk24TNwnJ58slqg0uFtHQydWiLZoBWw1 ZzESJGUepVzKfrQLAxUlFbu8jzgkjwBAy9s3sqrMgFtGl94AY5udvvvPawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLAI8zkES3mIi2HK4HII+ygJv89MB8GA1UdIwQY MBaAFESUaWjy992VDqSbh3N98fauvbtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkpScGFQTDMzWlVPcEp1SGMzM3g5cTY5dTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lODFlOWEtNzRkOS00Y2E0LTlmNDYt OGYwZjRkNmI4OTM5LzEvUkpScGFQTDMzWlVPcEp1SGMzM3g5cTY5dTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lODFlOWEtNzRkOS00Y2E0LTlmNDYtOGYwZjRkNmI4OTM5 LzEvUkpScGFQTDMzWlVPcEp1SGMzM3g5cTY5dTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMDc5Cjt 56Z7tq3ixfsdhlBDPa/dO5btM2XXDyNzFxx2m1cHJ/KiqLQpwZzeijWbnwtfbKwm PbAvGx29eCzb9PVZ/l8iu8STscazSaEci8uUsBUC5tQHYiSTa/4S7pUVC9ytctzp 3Ij8TszSeTYZrDPkbXi4RbD5k2EBVg8cIhlnAMeD9dn2KhVhSuUIpFoKswVab6XD Y1iCIXEsf5gpezRe1gLt1VmdHcwW8eYeiHuFuF20jFSNEBFvXOVNds8rJwy3SPhj bXUZfnIMSensbX8q/E8f2y8AFCesUgSIczVMy/GQxXeOsV2vUeaTMjJemPqx4ten 9yBrkEg8x4qbLA== -----END CERTIFICATE-----Generated at Sat Dec 27 11:26:53 2025 by rpki-client