This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft File: J7JQwAtGuhgF8v5fanfo_-X-J3g.mft (raw, json) Hash identifier: HitNJH7qHbegA3ekRWSnb5CjcUeJDv5UrLJfbRqBDvY= Subject key identifier: DD:8B:9E:01:50:8D:A8:36:8F:74:F7:76:28:0F:56:68:05:61:5A:2C Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78 Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778 Certificate serial: 019B446E8F6B798B8413881C53D69D63F3E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft Manifest number: 0299 Signing time: Mon 22 Dec 2025 05:00:54 +0000 Manifest this update: Mon 22 Dec 2025 05:00:54 +0000 Manifest next update: Tue 23 Dec 2025 05:00:54 +0000 Files and hashes: 1: 2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa (hash: 4cAudEOa7B6QV2XVnZGGI65WlCpgsFSmPdilxFuHyN8=) 2: J7JQwAtGuhgF8v5fanfo_-X-J3g.crl (hash: wllwijPg7dKasfgJIwgdYbyIyzx4Q8q3I8kqttXNQ9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:8f:6b:79:8b:84:13:88:1c:53:d6:9d:63:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778 Validity Not Before: Dec 22 05:00:54 2025 GMT Not After : Dec 23 05:00:54 2025 GMT Subject: CN=dd8b9e01508da8368f74f776280f566805615a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:e4:a4:ac:8f:5d:75:92:2a:b7:5c:1c:f5: 51:08:12:0a:5b:63:38:20:f5:ce:ab:a3:30:74:b4: 2e:88:84:7a:4f:41:98:e3:e5:e3:c3:2e:9b:a5:5b: 02:2e:e6:4c:52:ce:94:af:38:75:04:5d:b0:7e:95: 9a:ca:87:c3:16:83:7f:4c:cf:41:ab:cb:8b:97:6e: 37:d8:27:e6:84:d2:f4:be:90:98:28:39:fe:59:2a: a3:72:f3:82:f6:50:ec:d6:7a:09:a0:fb:14:a2:39: 82:90:e1:30:c0:bf:4d:c2:cb:2e:5d:23:c8:13:f6: ce:0a:ae:45:58:ca:56:08:12:f8:3c:87:1b:2e:1e: 02:a0:82:98:d7:e9:25:04:6f:25:23:44:8f:07:5f: d2:82:e4:de:9e:e0:28:95:8b:ba:fb:7e:7c:af:84: 82:b5:99:f7:d3:d4:45:83:b8:1a:9f:c0:ff:8e:4f: c4:6c:08:27:c8:1c:48:27:40:2e:62:45:79:5e:76: c8:55:8c:b6:91:dc:63:c2:e1:7c:61:ef:80:f2:00: 50:10:8f:8b:72:35:0e:47:73:89:f4:43:fd:ee:8c: f7:03:10:e5:92:bc:5d:6c:e1:5c:dd:93:b6:1c:2a: 0a:ee:1b:da:67:04:28:b6:7c:5f:41:70:a2:13:c7: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8B:9E:01:50:8D:A8:36:8F:74:F7:76:28:0F:56:68:05:61:5A:2C X509v3 Authority Key Identifier: keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:97:43:33:a1:a0:63:af:5d:a6:99:02:b2:b1:cd:22:78:95: db:d1:43:75:e2:f7:a1:61:d8:88:da:ef:1c:32:c5:3e:65:79: 5f:7c:da:c4:8e:6d:21:2a:a3:53:2d:4c:70:dd:a5:87:51:d2: 0e:93:4b:8f:d2:4d:d8:41:6a:5a:9d:a5:87:bc:bf:f3:46:88: 32:30:20:db:34:b1:7f:4e:cd:29:ec:2e:52:c3:7a:ed:d5:1e: e5:13:73:3b:88:f6:40:12:ef:46:27:83:d4:1c:47:60:12:ee: 68:f1:ca:15:3c:1a:8b:84:49:67:55:28:09:84:0d:e5:12:ce: 96:6d:a7:7e:e3:da:eb:04:4c:58:85:a6:59:02:05:33:78:2f: 4f:0c:e1:94:cd:3d:65:ea:0d:06:76:55:90:bf:9b:4e:98:93: 20:14:34:56:da:71:4a:e8:33:81:6d:fe:b2:7e:96:d9:0e:ed: 13:2d:76:3f:33:b5:f3:51:ce:cb:cf:7a:56:33:3b:2a:62:91: d8:5b:08:9a:0a:9c:bb:4f:e8:00:c1:db:99:4c:81:08:f2:d2: ee:10:ef:75:a4:25:2b:bf:e7:e7:aa:d0:df:98:80:f5:cb:04: 89:8b:8d:5c:3d:45:16:25:fd:65:1d:34:58:02:47:5a:98:49: 0e:0f:8c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbo9reYuEE4gcU9adY/PgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI1MGMwMGI0NmJhMTgwNWYyZmU1ZjZhNzdlOGZmZTVm ZTI3NzgwHhcNMjUxMjIyMDUwMDU0WhcNMjUxMjIzMDUwMDU0WjAzMTEwLwYDVQQD EyhkZDhiOWUwMTUwOGRhODM2OGY3NGY3NzYyODBmNTY2ODA1NjE1YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj3kpKyPXXWSKrdcHPVRCBIKW2M4 IPXOq6MwdLQuiIR6T0GY4+Xjwy6bpVsCLuZMUs6Urzh1BF2wfpWayofDFoN/TM9B q8uLl2432CfmhNL0vpCYKDn+WSqjcvOC9lDs1noJoPsUojmCkOEwwL9NwssuXSPI E/bOCq5FWMpWCBL4PIcbLh4CoIKY1+klBG8lI0SPB1/SguTenuAolYu6+358r4SC tZn309RFg7gan8D/jk/EbAgnyBxIJ0AuYkV5XnbIVYy2kdxjwuF8Ye+A8gBQEI+L cjUOR3OJ9EP97oz3AxDlkrxdbOFc3ZO2HCoK7hvaZwQotnxfQXCiE8e9xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2LngFQjag2j3T3digPVmgFYVosMB8GA1UdIwQY MBaAFCeyUMALRroYBfL+X2p36P/l/id4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZjMyNTktYzIxZi00YmY2LWIwN2Mt MTYwNzIyMTRlNjAyLzEvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hZjMyNTktYzIxZi00YmY2LWIwN2MtMTYwNzIyMTRlNjAy LzEvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZdDM6Gg Y69dppkCsrHNIniV29FDdeL3oWHYiNrvHDLFPmV5X3zaxI5tISqjUy1McN2lh1HS DpNLj9JN2EFqWp2lh7y/80aIMjAg2zSxf07NKewuUsN67dUe5RNzO4j2QBLvRieD 1BxHYBLuaPHKFTwai4RJZ1UoCYQN5RLOlm2nfuPa6wRMWIWmWQIFM3gvTwzhlM09 ZeoNBnZVkL+bTpiTIBQ0VtpxSugzgW3+sn6W2Q7tEy12PzO181HOy896VjM7KmKR 2FsImgqcu0/oAMHbmUyBCPLS7hDvdaQlK7/n56rQ35iA9csEiYuNXD1FFiX9ZR00 WAJHWphJDg+MaQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:25:19 2025 by rpki-client