This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json) Hash identifier: iX3DFpZdv3GQfNc73ydQ1iYDrzOpE6Svko7ri22TcxU= Subject key identifier: 22:FA:49:AF:15:83:8F:43:61:4E:27:8D:BA:04:6E:BD:E8:51:A0:4D Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06 Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06 Certificate serial: 019B3AFE46C6E30D2EEC9F250506ADC6D555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 09:01:41 +0000 Manifest this update: Sat 20 Dec 2025 09:01:41 +0000 Manifest next update: Sun 21 Dec 2025 09:01:41 +0000 Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=) 2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: yXAHiTgDrMscndZBAGkulpC1S4/+K+QpMvLRi9gMgfo=) 3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:46:c6:e3:0d:2e:ec:9f:25:05:06:ad:c6:d5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06 Validity Not Before: Dec 20 09:01:41 2025 GMT Not After : Dec 21 09:01:41 2025 GMT Subject: CN=22fa49af15838f43614e278dba046ebde851a04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:e4:13:11:ed:6f:35:66:6b:c9:3f:0c:f1: d3:e9:cf:07:b4:7f:3d:eb:00:90:b6:95:3b:91:52: 74:0a:c3:80:b5:d2:1b:20:86:21:35:7f:14:db:d2: 97:f0:d8:81:54:8c:d2:11:8f:50:53:1f:db:f8:39: 4e:a2:d8:da:1b:9e:25:d2:e2:e0:14:62:65:32:70: d7:83:3b:d3:27:56:2d:aa:f0:8d:84:f0:31:6e:59: ce:0a:3c:2e:ee:14:5d:0f:23:fc:d0:d5:3d:81:45: ee:a6:24:a3:6a:7f:90:34:68:c3:3e:18:7a:12:cc: 47:04:e7:4d:73:d4:a0:0d:75:38:89:fb:52:ad:96: 2f:1b:b1:f5:f4:e0:6d:8d:7b:9d:b6:9e:04:fa:90: de:c8:70:55:47:2e:20:48:0f:23:3f:b6:b0:fb:88: 9f:f3:4d:79:e9:a6:dc:bb:49:7c:86:80:13:34:ee: d0:2c:50:c1:c8:56:3c:81:cb:d0:ed:60:1e:ca:f5: 21:c7:1a:d6:99:6b:89:2e:7d:1c:24:49:2a:3f:50: b9:0e:16:79:a7:60:6a:57:31:1f:16:ea:15:cd:d0: e4:87:67:45:8d:36:a5:73:01:fd:71:70:ee:9a:ef: a2:32:42:8b:08:ac:d1:04:f1:ab:8b:35:4e:73:9a: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FA:49:AF:15:83:8F:43:61:4E:27:8D:BA:04:6E:BD:E8:51:A0:4D X509v3 Authority Key Identifier: keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3f:53:01:f5:b9:d7:f4:e5:d9:0c:30:62:e3:61:d6:af:d3: 95:57:5c:f5:22:f6:6f:d9:b1:f6:51:b2:98:f5:c5:1b:1f:12: 10:44:fc:06:d5:e3:5e:41:3f:fa:98:93:08:b4:eb:79:a8:9c: 54:a5:01:bb:90:ff:15:d3:d1:d7:81:2c:b9:a0:d7:a2:65:13: ce:88:ba:7c:cd:0e:a3:85:3b:12:0e:46:55:bd:d0:23:c4:4f: 69:93:bc:84:8a:08:f3:8d:11:ad:49:71:b5:0e:44:7c:f7:47: c3:46:36:db:71:80:10:cc:e7:52:a3:8e:f1:e6:8a:ab:75:c1: 88:21:21:0c:f8:70:11:a6:65:56:0a:52:f9:b4:a5:fa:b6:aa: a8:a3:6c:87:3b:df:63:48:dd:6d:76:f4:3c:91:66:51:05:11: 41:9d:b2:5d:c0:51:e9:e8:dd:1b:04:6a:95:6e:55:57:c6:93: a2:ab:76:e2:07:c8:ee:a4:51:31:fe:6b:ca:83:7d:05:6d:0d: da:cf:4d:5f:e9:f0:c0:96:62:ee:a5:00:f1:b0:70:82:47:c0: d7:28:c9:31:ac:db:02:fd:53:f1:9c:06:71:b0:91:c5:8d:9c: 2a:54:6e:b1:fc:ea:01:25:fc:b7:88:36:0f:1a:cc:4a:88:7d: 8d:4b:59:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kbG4w0u7J8lBQatxtVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZTBmN2JiYmU0MDMxYTI0ZWYxYjlkYjE5NmFhYjA2NDJl ODRhMDYwHhcNMjUxMjIwMDkwMTQxWhcNMjUxMjIxMDkwMTQxWjAzMTEwLwYDVQQD EygyMmZhNDlhZjE1ODM4ZjQzNjE0ZTI3OGRiYTA0NmViZGU4NTFhMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0XkExHtbzVma8k/DPHT6c8HtH89 6wCQtpU7kVJ0CsOAtdIbIIYhNX8U29KX8NiBVIzSEY9QUx/b+DlOotjaG54l0uLg FGJlMnDXgzvTJ1YtqvCNhPAxblnOCjwu7hRdDyP80NU9gUXupiSjan+QNGjDPhh6 EsxHBOdNc9SgDXU4iftSrZYvG7H19OBtjXudtp4E+pDeyHBVRy4gSA8jP7aw+4if 80156abcu0l8hoATNO7QLFDByFY8gcvQ7WAeyvUhxxrWmWuJLn0cJEkqP1C5DhZ5 p2BqVzEfFuoVzdDkh2dFjTalcwH9cXDumu+iMkKLCKzRBPGrizVOc5rWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCL6Sa8Vg49DYU4njboEbr3oUaBNMB8GA1UdIwQY MBaAFCfg97u+QDGiTvG52xlqqwZC6EoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYt MzQ2YTNlYzE4NjhjLzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYtMzQ2YTNlYzE4Njhj LzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKz9TAfW5 1/Tl2QwwYuNh1q/TlVdc9SL2b9mx9lGymPXFGx8SEET8BtXjXkE/+piTCLTreaic VKUBu5D/FdPR14EsuaDXomUTzoi6fM0Oo4U7Eg5GVb3QI8RPaZO8hIoI840RrUlx tQ5EfPdHw0Y223GAEMznUqOO8eaKq3XBiCEhDPhwEaZlVgpS+bSl+raqqKNshzvf Y0jdbXb0PJFmUQURQZ2yXcBR6ejdGwRqlW5VV8aToqt24gfI7qRRMf5ryoN9BW0N 2s9NX+nwwJZi7qUA8bBwgkfA1yjJMazbAv1T8ZwGcbCRxY2cKlRusfzqASX8t4g2 DxrMSoh9jUtZ9g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:52:29 2025 by rpki-client