This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json) Hash identifier: aEzU+bdbd1dOxeQ3BUCOcn3JDttShEsEaDGso6R6Kn4= Subject key identifier: 1A:B1:D4:4E:CB:79:0E:6E:6E:B4:9A:D2:39:71:6C:98:25:50:A8:6C Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd Certificate serial: 019B337B460BEFAC2C9455601171A3ED4671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft Manifest number: 0DA2 Signing time: Thu 18 Dec 2025 22:01:15 +0000 Manifest this update: Thu 18 Dec 2025 22:01:15 +0000 Manifest next update: Fri 19 Dec 2025 22:01:15 +0000 Files and hashes: 1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=) 2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: YQ5OjscwRwHfyL9lgmy6oG0412zb5884NXGR5kWNeT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:46:0b:ef:ac:2c:94:55:60:11:71:a3:ed:46:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd Validity Not Before: Dec 18 22:01:15 2025 GMT Not After : Dec 19 22:01:15 2025 GMT Subject: CN=1ab1d44ecb790e6e6eb49ad239716c982550a86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2d:ab:4e:97:2e:10:47:85:e2:7d:59:70:48: 9c:8b:15:71:2e:23:26:5e:7d:a2:f4:9b:af:72:84: ae:4e:0c:2a:dd:d8:4f:4c:ae:1f:6e:07:f7:ae:bd: 80:2b:1f:43:18:61:69:78:5b:d4:a3:3e:94:7f:42: f4:55:56:d3:e9:2a:84:a6:92:11:1d:e8:28:1e:6f: 8f:f7:3f:23:fd:54:34:55:5b:9e:cb:01:3d:2d:5f: 7b:70:3e:86:7c:f0:20:13:be:0a:f0:19:97:d0:1e: f0:26:1c:99:3b:3d:bf:e3:a1:ab:eb:4b:fe:1b:32: 72:5c:1b:2c:f1:a7:8d:6e:9d:91:9d:ef:5e:3f:c9: 94:21:ac:e7:70:09:07:3f:5f:47:05:96:35:cf:e1: 60:d4:56:20:04:76:b7:9b:0f:78:bc:4f:d0:44:69: 9a:91:84:3d:4b:62:8d:f7:10:da:70:da:49:65:10: 52:8f:64:08:5b:05:7c:2c:79:8e:b2:57:8b:ca:1a: 19:6c:c8:e9:52:cd:41:c5:fe:b9:7d:d4:a4:77:36: bb:50:b9:71:af:2d:52:d5:b2:80:85:ad:09:e5:c6: 62:d6:ef:32:ed:b4:ac:ea:7e:3a:39:94:28:b2:d9: 0a:bf:87:cc:ad:59:48:6a:b3:25:30:a9:a6:af:a3: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:D4:4E:CB:79:0E:6E:6E:B4:9A:D2:39:71:6C:98:25:50:A8:6C X509v3 Authority Key Identifier: keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d3:41:42:10:75:dc:f5:06:28:66:44:49:b0:21:35:22:99: 95:17:f5:9e:2d:f3:d5:aa:dc:30:a9:aa:b3:d2:aa:6c:b8:36: 8f:a3:24:ad:8a:3b:24:7f:e9:1a:a1:6f:9d:5e:ee:c0:9b:bb: 2a:c7:95:86:11:81:78:e3:08:ef:04:35:47:cc:b4:b0:a0:9e: be:3b:c9:3b:0a:c9:db:a9:47:2c:d5:51:b1:38:58:34:33:db: 13:46:e5:14:e0:4e:15:bd:4d:b0:99:44:42:3a:0c:02:33:5c: e4:b0:c7:9b:d6:78:cf:f0:ca:f2:42:65:e7:d4:01:cb:a5:62: 89:63:09:bb:72:de:03:c5:d3:29:60:eb:a8:48:0a:21:f0:4f: 96:3c:af:e8:29:78:16:41:bf:28:42:ea:cd:ac:0c:05:48:f4: 3b:17:aa:0b:81:58:a2:0a:93:12:56:4f:8a:b9:c1:78:b0:81: 4c:a4:70:bb:87:60:b2:0d:aa:d6:c9:b7:1d:13:37:63:4e:78: d5:64:42:63:7e:57:0c:99:89:8d:d9:41:17:a3:f2:b6:76:ae: 42:80:eb:a7:08:40:c3:28:eb:97:44:2c:e1:fc:c4:d6:24:cb: 7f:a2:c6:b1:06:d6:8f:31:d0:52:14:fe:5b:ce:4c:f9:69:ce: 9d:ba:d9:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0YL76wslFVgEXGj7UZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NmFiYjFhZDU2N2U1YmIxZTQ3NWE3MmEwYTY4NDUzZTNm YmExY2QwHhcNMjUxMjE4MjIwMTE1WhcNMjUxMjE5MjIwMTE1WjAzMTEwLwYDVQQD EygxYWIxZDQ0ZWNiNzkwZTZlNmViNDlhZDIzOTcxNmM5ODI1NTBhODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8y2rTpcuEEeF4n1ZcEicixVxLiMm Xn2i9JuvcoSuTgwq3dhPTK4fbgf3rr2AKx9DGGFpeFvUoz6Uf0L0VVbT6SqEppIR HegoHm+P9z8j/VQ0VVueywE9LV97cD6GfPAgE74K8BmX0B7wJhyZOz2/46Gr60v+ GzJyXBss8aeNbp2Rne9eP8mUIazncAkHP19HBZY1z+Fg1FYgBHa3mw94vE/QRGma kYQ9S2KN9xDacNpJZRBSj2QIWwV8LHmOsleLyhoZbMjpUs1Bxf65fdSkdza7ULlx ry1S1bKAha0J5cZi1u8y7bSs6n46OZQostkKv4fMrVlIarMlMKmmr6PoXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqx1E7LeQ5ubrSa0jlxbJglUKhsMB8GA1UdIwQY MBaAFCdquxrVZ+W7HkdacqCmhFPj+6HNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYt YmIwZWVkMTNmMjNiLzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYtYmIwZWVkMTNmMjNi LzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdNBQhB1 3PUGKGZESbAhNSKZlRf1ni3z1arcMKmqs9KqbLg2j6MkrYo7JH/pGqFvnV7uwJu7 KseVhhGBeOMI7wQ1R8y0sKCevjvJOwrJ26lHLNVRsThYNDPbE0blFOBOFb1NsJlE QjoMAjNc5LDHm9Z4z/DK8kJl59QBy6ViiWMJu3LeA8XTKWDrqEgKIfBPljyv6Cl4 FkG/KELqzawMBUj0OxeqC4FYogqTElZPirnBeLCBTKRwu4dgsg2q1sm3HRM3Y054 1WRCY35XDJmJjdlBF6PytnauQoDrpwhAwyjrl0Qs4fzE1iTLf6LGsQbWjzHQUhT+ W85M+WnOnbrZ5g== -----END CERTIFICATE-----Generated at Fri Dec 19 02:23:23 2025 by rpki-client