This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json) Hash identifier: 4bZyfKnQoys1TawZfKJ5PFaId7+ElVBvNEHVYR706Dg= Subject key identifier: F2:86:B8:03:E6:B2:B8:E7:8E:06:3E:2B:5D:4F:40:29:14:16:3E:0E Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Certificate serial: 019B3DFED5870468265EC3363E32DD4550BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft Manifest number: 11ED Signing time: Sat 20 Dec 2025 23:01:09 +0000 Manifest this update: Sat 20 Dec 2025 23:01:09 +0000 Manifest next update: Sun 21 Dec 2025 23:01:09 +0000 Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: K7ox5pDraXtphPCJT8VwKKbi/mU/Vt4nbrbluHLYjRE=) 2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d5:87:04:68:26:5e:c3:36:3e:32:dd:45:50:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Validity Not Before: Dec 20 23:01:09 2025 GMT Not After : Dec 21 23:01:09 2025 GMT Subject: CN=f286b803e6b2b8e78e063e2b5d4f402914163e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:79:ce:0e:b4:b3:d8:f9:5a:e4:4f:ca:74:02: f2:46:a8:09:83:a2:20:49:18:0e:70:0a:5a:56:50: 1e:f1:52:56:48:1d:5b:7e:49:f8:e0:93:d3:c7:ce: f2:5a:36:f4:fa:07:e9:11:e1:4f:d7:00:01:f2:ff: 82:d7:5b:06:99:90:9e:81:41:9d:00:27:7a:30:e6: 1e:fd:a9:59:06:b9:85:b9:2d:65:df:be:a5:74:76: 58:47:7b:47:1c:37:22:50:d9:62:77:ee:7e:1a:c4: 33:d5:40:37:fc:f0:54:04:7f:3c:c2:e0:cd:2f:e4: 04:49:c5:47:88:08:d6:2c:47:1e:e7:6d:db:ea:2f: 90:9f:a9:52:ac:8b:67:19:8f:d6:fb:dc:4f:90:51: 39:9d:ff:d8:3f:5c:cc:44:8c:a0:15:45:fe:78:d2: 41:5a:99:5f:8c:5b:28:4c:08:14:1c:ef:f2:0c:b4: 3a:88:2a:60:84:6f:d9:7b:eb:39:db:05:2a:3a:ca: 15:36:ed:67:53:dd:8d:aa:a2:30:f7:6c:27:f5:ce: 55:00:b9:14:02:77:c1:6d:d3:71:47:0e:d1:63:45: 1b:38:5e:70:16:1d:ba:a3:f1:b5:fb:0b:40:ec:4f: aa:ab:c7:ed:c0:8a:3f:c5:62:8d:cf:5b:f9:48:d2: 96:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:86:B8:03:E6:B2:B8:E7:8E:06:3E:2B:5D:4F:40:29:14:16:3E:0E X509v3 Authority Key Identifier: keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9a:25:9a:a3:fc:c6:fb:07:65:36:a6:21:a4:a4:83:80:d0: a3:61:53:5c:51:f3:3f:9e:01:c7:ce:1a:01:aa:3c:dd:9b:22: 88:e4:6d:68:60:bc:b5:67:59:ef:79:54:50:eb:14:0a:b5:26: 14:e5:8d:23:da:9d:f4:52:32:2b:d8:23:72:5f:01:d5:82:ea: ab:b6:29:60:df:35:d4:d5:b0:2e:22:2d:54:2b:43:dd:a8:e1: 23:b9:f4:64:aa:22:6b:16:05:ad:8a:c0:ac:2c:3e:06:5e:4b: 72:c9:ae:2b:22:9f:e1:aa:4d:50:bf:3c:b5:e4:ee:ee:26:0f: 14:9d:5f:32:e4:03:b6:3b:e4:76:7c:85:56:59:39:e6:94:64: 8f:6b:dc:55:f4:eb:e2:2d:40:dc:d1:95:7f:e2:0a:88:64:51: bc:bf:28:b2:b9:36:2d:7a:0d:4d:29:cd:79:8c:a8:9b:27:d3: df:c4:1b:4a:b7:47:68:77:5f:75:72:75:ce:cd:78:45:1f:bf: 95:d0:0f:b1:00:b9:fc:14:53:df:b2:84:81:4e:f4:d6:c5:e3: 78:8e:45:07:b2:76:f9:6c:cd:9d:32:27:68:19:ba:fb:cb:f3: 4f:62:0e:e4:24:9b:04:6b:c0:36:79:06:1d:5a:21:de:be:7e: 0b:3e:d7:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tWHBGgmXsM2PjLdRVC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI0ZmQ2NmVmZTZkYzVjM2FhYjJlMmU2NTFhNGUyMDdm ZTYyZTcwHhcNMjUxMjIwMjMwMTA5WhcNMjUxMjIxMjMwMTA5WjAzMTEwLwYDVQQD EyhmMjg2YjgwM2U2YjJiOGU3OGUwNjNlMmI1ZDRmNDAyOTE0MTYzZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3nODrSz2Pla5E/KdALyRqgJg6Ig SRgOcApaVlAe8VJWSB1bfkn44JPTx87yWjb0+gfpEeFP1wAB8v+C11sGmZCegUGd ACd6MOYe/alZBrmFuS1l376ldHZYR3tHHDciUNlid+5+GsQz1UA3/PBUBH88wuDN L+QEScVHiAjWLEce523b6i+Qn6lSrItnGY/W+9xPkFE5nf/YP1zMRIygFUX+eNJB WplfjFsoTAgUHO/yDLQ6iCpghG/Ze+s52wUqOsoVNu1nU92NqqIw92wn9c5VALkU AnfBbdNxRw7RY0UbOF5wFh26o/G1+wtA7E+qq8ftwIo/xWKNz1v5SNKWIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKGuAPmsrjnjgY+K11PQCkUFj4OMB8GA1UdIwQY MBaAFCeyT9Zu/m3Fw6qy4uZRpOIH/mLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAt Mzk0ZjUwZDRiYTM4LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAtMzk0ZjUwZDRiYTM4 LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJolmqP8 xvsHZTamIaSkg4DQo2FTXFHzP54Bx84aAao83ZsiiORtaGC8tWdZ73lUUOsUCrUm FOWNI9qd9FIyK9gjcl8B1YLqq7YpYN811NWwLiItVCtD3ajhI7n0ZKoiaxYFrYrA rCw+Bl5LcsmuKyKf4apNUL88teTu7iYPFJ1fMuQDtjvkdnyFVlk55pRkj2vcVfTr 4i1A3NGVf+IKiGRRvL8osrk2LXoNTSnNeYyomyfT38QbSrdHaHdfdXJ1zs14RR+/ ldAPsQC5/BRT37KEgU701sXjeI5FB7J2+WzNnTInaBm6+8vzT2IO5CSbBGvANnkG HVoh3r5+Cz7XsQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:17 2025 by rpki-client