This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json) Hash identifier: esgOm8z6ZDiluA3HgbkU8ABORsMnPmbGo5ROrqHnBo0= Subject key identifier: 66:F5:E0:99:5F:B3:05:60:45:BA:62:9A:D0:63:7A:83:ED:27:7B:4D Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Certificate serial: 019B4A719756A973F4E7C69F8B59932E8DCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft Manifest number: 1104 Signing time: Tue 23 Dec 2025 09:01:56 +0000 Manifest this update: Tue 23 Dec 2025 09:01:56 +0000 Manifest next update: Wed 24 Dec 2025 09:01:56 +0000 Files and hashes: 1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: DpRmml8DncpeSLYpK7kSWcva0jYW9GWB2dbVeAl2lio=) 2: vdjx6mVJjB2A5HRAp4zCXF1WOmI.roa (hash: nZy4/J4/xAAVv0Nm8r/1Dh/36Nz5IhwHl0WfPkQGlFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:97:56:a9:73:f4:e7:c6:9f:8b:59:93:2e:8d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Validity Not Before: Dec 23 09:01:56 2025 GMT Not After : Dec 24 09:01:56 2025 GMT Subject: CN=66f5e0995fb3056045ba629ad0637a83ed277b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:ab:4a:fe:ea:d2:85:13:87:af:0c:f3:d3: c0:41:cb:a1:d0:58:51:ca:b3:93:8c:a7:28:97:3c: fd:46:41:a3:2e:e9:cd:d7:7c:dd:a8:63:4a:bb:19: cf:34:93:9a:6a:a5:58:10:0c:ad:ec:91:18:a6:40: 0f:c9:02:3d:42:20:2b:18:f5:5e:00:ee:8a:5f:c1: 2d:76:cd:7d:7a:97:46:17:ec:45:d2:45:1a:a8:5d: 07:97:70:e0:bc:d6:47:ae:3e:83:d0:a3:56:8a:d2: c0:b0:99:99:2a:e2:3a:29:50:a3:a6:91:c0:dc:c6: 3c:09:9b:e8:47:eb:c7:51:e6:dd:0d:3f:b4:cc:da: fb:7e:d2:42:e5:53:ea:24:60:e2:72:e2:b1:1f:fc: 19:24:28:84:54:cd:64:49:48:ec:9e:dc:d0:a1:e3: c6:66:40:f2:24:86:d0:5d:5b:b2:8c:03:3c:eb:b4: 1f:4e:9a:a7:19:74:87:bb:34:8c:51:b7:7b:05:8a: e3:1a:eb:3e:20:19:54:7c:f1:cc:0d:8e:31:17:a8: 5c:dd:07:47:91:b8:ca:ab:38:2f:42:3e:78:eb:be: 99:96:f2:3c:8c:b5:9d:25:b7:7e:c5:ce:a5:06:28: 4b:78:c0:c6:0f:84:b3:18:b3:2d:d3:f9:b1:2b:69: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F5:E0:99:5F:B3:05:60:45:BA:62:9A:D0:63:7A:83:ED:27:7B:4D X509v3 Authority Key Identifier: keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:16:8c:3c:c8:eb:f4:1a:86:9a:74:1b:93:04:9a:92:ab:56: 51:04:a0:bd:0c:f0:cb:c3:fe:1b:a1:3f:a5:8e:3b:63:6c:91: 1b:b5:67:ca:47:2d:c9:93:e5:76:a7:22:0d:1f:50:41:f8:0c: 6d:46:a6:68:82:fd:80:7e:2f:0e:3b:6e:c9:8b:89:08:d2:6a: ac:f4:55:c7:64:4c:6b:b3:4a:0a:a1:81:1b:3b:ae:f2:a1:fd: 88:7d:39:76:38:d9:e8:b1:ac:cb:88:8e:13:f0:9a:3d:d4:24: ce:a2:5b:4b:9a:1d:3e:2c:8b:31:9f:f9:d6:41:7b:56:51:b0: ba:58:ff:b7:ae:03:1b:94:0d:78:e7:34:21:ce:e6:a0:a0:25: d3:9d:ab:30:8a:06:45:1b:d9:f6:d5:03:a8:3d:65:1a:3a:bf: a3:71:92:b0:b9:42:08:d3:dd:2d:e6:6e:1f:b9:b9:35:90:95: 62:34:1a:91:22:cd:68:85:ed:d3:19:16:1b:b7:12:ce:a8:3e: e7:ea:19:64:4d:df:f0:7c:d8:55:b4:d7:27:08:e1:8c:74:1d: ff:8e:b9:7b:91:fb:a7:d6:71:71:e3:98:78:9d:ce:3a:aa:ef: c1:8b:35:ef:12:50:34:f5:a4:07:dc:76:0b:d4:f9:71:0b:63: ae:a5:42:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcZdWqXP058afi1mTLo3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjhhYmFjMjBhNTk4Y2NhNGIxMmY1ZDc1NWQ4ZTg5MzIx ZjRlYzkwHhcNMjUxMjIzMDkwMTU2WhcNMjUxMjI0MDkwMTU2WjAzMTEwLwYDVQQD Eyg2NmY1ZTA5OTVmYjMwNTYwNDViYTYyOWFkMDYzN2E4M2VkMjc3YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeurSv7q0oUTh68M89PAQcuh0FhR yrOTjKcolzz9RkGjLunN13zdqGNKuxnPNJOaaqVYEAyt7JEYpkAPyQI9QiArGPVe AO6KX8Etds19epdGF+xF0kUaqF0Hl3DgvNZHrj6D0KNWitLAsJmZKuI6KVCjppHA 3MY8CZvoR+vHUebdDT+0zNr7ftJC5VPqJGDicuKxH/wZJCiEVM1kSUjsntzQoePG ZkDyJIbQXVuyjAM867QfTpqnGXSHuzSMUbd7BYrjGus+IBlUfPHMDY4xF6hc3QdH kbjKqzgvQj54676ZlvI8jLWdJbd+xc6lBihLeMDGD4SzGLMt0/mxK2mELQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb14JlfswVgRbpimtBjeoPtJ3tNMB8GA1UdIwQY MBaAFCe4q6wgpZjMpLEvXXVdjokyH07JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAt NGI2ZmM3YzA2YWU1LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAtNGI2ZmM3YzA2YWU1 LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhaMPMjr 9BqGmnQbkwSakqtWUQSgvQzwy8P+G6E/pY47Y2yRG7VnykctyZPldqciDR9QQfgM bUamaIL9gH4vDjtuyYuJCNJqrPRVx2RMa7NKCqGBGzuu8qH9iH05djjZ6LGsy4iO E/CaPdQkzqJbS5odPiyLMZ/51kF7VlGwulj/t64DG5QNeOc0Ic7moKAl052rMIoG RRvZ9tUDqD1lGjq/o3GSsLlCCNPdLeZuH7m5NZCVYjQakSLNaIXt0xkWG7cSzqg+ 5+oZZE3f8HzYVbTXJwjhjHQd/465e5H7p9ZxceOYeJ3OOqrvwYs17xJQNPWkB9x2 C9T5cQtjrqVC3Q== -----END CERTIFICATE-----Generated at Tue Dec 23 12:36:55 2025 by rpki-client