This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json) Hash identifier: KAEIrZxIEXtsf/BRKCLTYcXV+q28aWxmfd96oz4yJZs= Subject key identifier: 68:EC:94:13:59:7A:CA:FE:6A:FE:18:5B:B5:C3:7F:5D:53:3F:87:95 Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc Certificate serial: 019B446E800BD62593429FB7D1B436A360D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 05:00:50 +0000 Manifest this update: Mon 22 Dec 2025 05:00:50 +0000 Manifest next update: Tue 23 Dec 2025 05:00:50 +0000 Files and hashes: 1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=) 2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: tpePKPEK8fv33DRMgbqBUVvxYjSgW/W7eblT5YS5aBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:80:0b:d6:25:93:42:9f:b7:d1:b4:36:a3:60:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc Validity Not Before: Dec 22 05:00:50 2025 GMT Not After : Dec 23 05:00:50 2025 GMT Subject: CN=68ec9413597acafe6afe185bb5c37f5d533f8795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:c1:8a:07:61:33:aa:41:0f:a6:a8:7e:b1: 8d:65:7f:43:bc:b4:09:ae:29:ab:0d:80:bc:21:7b: f4:3b:6b:5d:c5:64:cc:ad:94:f9:63:89:df:e9:8a: 94:67:c1:ea:5f:81:26:b0:42:9c:22:67:a6:8b:44: 21:d5:34:f0:b0:31:5d:21:4e:1c:71:21:a1:1e:9b: 0c:5a:1c:6a:ba:b9:f4:ea:14:e4:30:29:00:31:66: 87:dd:ce:61:d9:b4:5c:3b:ce:d2:06:11:40:66:d9: 8c:2c:be:af:69:e0:d1:16:3f:7a:04:fc:25:7a:c8: 6c:79:c7:93:7a:e7:b2:e0:42:01:19:cf:65:3d:10: 5f:0f:e0:28:04:53:66:d8:54:e2:02:d1:30:8f:41: 3f:90:f3:05:e2:91:42:d0:d2:8c:1d:25:ff:8f:8e: e6:ac:5e:1c:99:d2:c5:07:25:f4:ac:9e:ce:fc:3f: 92:87:e0:93:83:b6:3d:96:44:90:f1:3b:72:38:2f: 3f:34:5f:95:be:c4:06:b7:1d:9e:2f:0a:6d:e0:ca: c4:7f:42:2f:b2:1a:3a:6a:31:9c:9e:8c:df:3f:cf: 1b:8c:b7:d8:3d:4c:57:00:7b:32:d4:22:bc:4c:e2: 25:15:cf:6f:2b:82:3e:de:e8:e9:ec:0a:c5:53:b8: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:94:13:59:7A:CA:FE:6A:FE:18:5B:B5:C3:7F:5D:53:3F:87:95 X509v3 Authority Key Identifier: keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e7:56:0b:4c:87:5a:81:14:a9:e0:e7:be:00:1f:04:76:80: 9d:2a:f2:47:96:d1:af:11:3c:39:94:e0:d7:55:f2:ce:b7:54: 73:d3:bb:02:bb:a7:e9:ee:b3:41:6b:65:99:33:f2:dc:25:c5: f3:52:8f:d9:2c:01:c1:c7:cd:e3:fe:b3:09:b7:a2:c3:fa:79: 08:54:3a:f2:85:a8:64:27:2b:e1:b0:ea:f9:91:36:95:ae:15: b4:fd:82:59:eb:dc:4e:87:62:9c:a0:3a:be:0a:8b:c3:cc:c1: 0f:ea:73:17:5a:e7:f9:13:28:4b:91:20:1d:82:4b:0f:d3:f5: 1c:63:72:83:62:bb:78:f1:c6:1a:b8:76:10:f7:f8:e7:db:3f: 33:eb:ab:90:cf:42:bf:3c:14:6c:86:ee:16:29:39:81:f5:59: e5:65:eb:09:0f:c6:0a:ab:23:1f:86:9b:4c:98:08:3d:c7:b6: 6b:86:c8:41:a7:71:b9:bb:40:9e:52:07:bc:53:96:f6:ad:09: 56:54:ea:d7:43:7b:1e:7e:36:91:d7:7e:f4:b9:06:75:97:be: 2b:52:c1:b7:da:46:43:d5:8d:a8:d1:07:f3:2e:ee:5c:c5:d7: 55:98:a3:ec:80:13:d1:27:7c:2d:8b:62:42:cb:5e:83:c1:a6: 98:7f:b4:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEboAL1iWTQp+30bQ2o2DSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjEzMGI2ZjQ1ZjAwZjdjMWQxMzViNmM5M2IyMGU2OTA0 MTJjZmMwHhcNMjUxMjIyMDUwMDUwWhcNMjUxMjIzMDUwMDUwWjAzMTEwLwYDVQQD Eyg2OGVjOTQxMzU5N2FjYWZlNmFmZTE4NWJiNWMzN2Y1ZDUzM2Y4Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bPBigdhM6pBD6aofrGNZX9DvLQJ rimrDYC8IXv0O2tdxWTMrZT5Y4nf6YqUZ8HqX4EmsEKcImemi0Qh1TTwsDFdIU4c cSGhHpsMWhxqurn06hTkMCkAMWaH3c5h2bRcO87SBhFAZtmMLL6vaeDRFj96BPwl eshseceTeuey4EIBGc9lPRBfD+AoBFNm2FTiAtEwj0E/kPMF4pFC0NKMHSX/j47m rF4cmdLFByX0rJ7O/D+Sh+CTg7Y9lkSQ8TtyOC8/NF+VvsQGtx2eLwpt4MrEf0Iv sho6ajGcnozfP88bjLfYPUxXAHsy1CK8TOIlFc9vK4I+3ujp7ArFU7iyEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjslBNZesr+av4YW7XDf11TP4eVMB8GA1UdIwQY MBaAFCfxMLb0XwD3wdE1tsk7IOaQQSz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQt MDdkYmQ5MDBjNGFkLzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQtMDdkYmQ5MDBjNGFk LzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOdWC0yH WoEUqeDnvgAfBHaAnSryR5bRrxE8OZTg11XyzrdUc9O7Arun6e6zQWtlmTPy3CXF 81KP2SwBwcfN4/6zCbeiw/p5CFQ68oWoZCcr4bDq+ZE2la4VtP2CWevcTodinKA6 vgqLw8zBD+pzF1rn+RMoS5EgHYJLD9P1HGNyg2K7ePHGGrh2EPf459s/M+urkM9C vzwUbIbuFik5gfVZ5WXrCQ/GCqsjH4abTJgIPce2a4bIQadxubtAnlIHvFOW9q0J VlTq10N7Hn42kdd+9LkGdZe+K1LBt9pGQ9WNqNEH8y7uXMXXVZij7IAT0Sd8LYti Qsteg8GmmH+09w== -----END CERTIFICATE-----Generated at Mon Dec 22 12:18:21 2025 by rpki-client