This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft File: J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json) Hash identifier: GO6c+pgsttbDrW9aLNbyD+9OfAwtYjRnlY9RSGB56oA= Subject key identifier: C8:F0:23:E2:32:DC:96:01:A3:3B:6B:FE:49:9E:C6:D8:61:17:5F:37 Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F Certificate issuer: /CN=27b2133219989e6a32d71158d0852a516eb6f79f Certificate serial: 019B3FECBD06B7427FAD93B7BC2C5B5F3804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft Manifest number: 140F Signing time: Sun 21 Dec 2025 08:00:38 +0000 Manifest this update: Sun 21 Dec 2025 08:00:38 +0000 Manifest next update: Mon 22 Dec 2025 08:00:38 +0000 Files and hashes: 1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=) 2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: 9BFIdWvLMgs+b3Zo7cmHdxvUJYYivd4Y2XTD/qXqlbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:bd:06:b7:42:7f:ad:93:b7:bc:2c:5b:5f:38:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f Validity Not Before: Dec 21 08:00:38 2025 GMT Not After : Dec 22 08:00:38 2025 GMT Subject: CN=c8f023e232dc9601a33b6bfe499ec6d861175f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:b7:35:b4:d1:b6:8d:58:51:4a:58:e4:38: be:81:a4:20:c5:92:44:1c:ad:aa:6a:55:66:83:ff: c6:17:ab:22:96:91:87:92:b9:5a:6f:0a:f3:37:6c: 49:2f:63:70:c5:9d:34:c9:5e:5d:a4:a6:44:49:03: d4:43:a9:f7:66:6f:a2:40:dc:fb:c8:ed:55:95:11: ee:24:3d:92:03:40:31:61:b5:3b:36:6d:64:a4:52: 2e:c0:e7:2d:67:f6:92:32:54:e6:72:c3:b1:5e:74: 9a:89:85:59:26:2b:a1:19:3a:81:7c:34:57:07:77: 51:f9:39:ed:23:22:00:69:90:94:cd:7e:74:1b:17: d8:c5:94:2b:4c:d4:db:72:fc:9b:55:ca:2f:88:af: 80:56:41:42:71:e4:81:5c:e0:72:15:5d:11:49:17: c9:67:a3:72:cf:db:49:e8:a0:87:ac:92:bf:bb:32: c4:86:ff:da:98:9e:7f:80:64:b0:77:f7:0f:15:89: e2:42:88:4b:75:0e:e5:49:69:53:20:95:69:d6:33: 2b:af:c2:15:11:84:04:b7:20:74:02:34:48:8f:f4: 47:a9:a4:c0:54:99:d5:90:f1:0e:92:34:9c:a8:f9: 9e:5b:c9:27:f6:3d:ad:fe:b1:4d:c7:9f:2d:83:6d: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F0:23:E2:32:DC:96:01:A3:3B:6B:FE:49:9E:C6:D8:61:17:5F:37 X509v3 Authority Key Identifier: keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cc:b1:e1:ce:68:50:3e:7d:0a:2a:31:6d:bc:6a:b7:18:fc: a8:a5:f7:d8:05:42:50:4d:17:22:4a:7c:49:ba:32:64:c8:e3: 09:9d:14:7b:cb:e4:36:4a:48:8c:7b:a1:57:38:3c:e7:e4:b7: d3:d5:fb:8f:07:4f:b2:ef:a1:27:e9:c3:61:dc:51:4d:a4:37: 2d:44:3d:9d:81:97:d9:54:d7:30:35:c7:10:ff:e7:8f:41:30: 6b:1a:b7:70:74:e2:e2:78:92:d2:93:0a:27:6b:09:3a:bb:09: 14:87:9a:41:3a:69:f8:99:9a:2b:27:11:c5:58:a4:83:74:6c: ad:17:0e:c8:ef:e1:75:5f:cc:7b:19:2c:c8:c5:e4:46:08:80: 21:ed:90:da:8c:b7:91:37:9e:3c:cf:94:aa:f9:e2:5a:8a:72: 38:b4:22:2b:3b:03:33:ed:cb:b1:f4:e6:6e:e7:23:01:5f:bf: 98:51:aa:2b:04:1d:0c:8d:7d:f4:05:1c:83:fe:24:f4:56:0e: b6:30:f0:ca:ad:d8:3d:a1:16:1c:4e:f0:b6:c2:2f:8b:9a:65: 65:ba:3c:b0:9e:80:de:b8:66:58:dd:52:40:ae:8d:30:bd:9d: 62:8e:ac:41:39:9a:88:dc:8c:6c:ed:3e:3e:a6:0f:0a:01:c7: 11:8e:07:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7L0Gt0J/rZO3vCxbXzgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjIxMzMyMTk5ODllNmEzMmQ3MTE1OGQwODUyYTUxNmVi NmY3OWYwHhcNMjUxMjIxMDgwMDM4WhcNMjUxMjIyMDgwMDM4WjAzMTEwLwYDVQQD EyhjOGYwMjNlMjMyZGM5NjAxYTMzYjZiZmU0OTllYzZkODYxMTc1ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qm3NbTRto1YUUpY5Di+gaQgxZJE HK2qalVmg//GF6silpGHkrlabwrzN2xJL2NwxZ00yV5dpKZESQPUQ6n3Zm+iQNz7 yO1VlRHuJD2SA0AxYbU7Nm1kpFIuwOctZ/aSMlTmcsOxXnSaiYVZJiuhGTqBfDRX B3dR+TntIyIAaZCUzX50GxfYxZQrTNTbcvybVcoviK+AVkFCceSBXOByFV0RSRfJ Z6Nyz9tJ6KCHrJK/uzLEhv/amJ5/gGSwd/cPFYniQohLdQ7lSWlTIJVp1jMrr8IV EYQEtyB0AjRIj/RHqaTAVJnVkPEOkjScqPmeW8kn9j2t/rFNx58tg21mcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjwI+Iy3JYBoztr/kmexthhF183MB8GA1UdIwQY MBaAFCeyEzIZmJ5qMtcRWNCFKlFutvefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jNjY2MDYtMmFlOC00YWRhLWIzNWIt YzJlOGEwMzAzZmMzLzEvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jNjY2MDYtMmFlOC00YWRhLWIzNWItYzJlOGEwMzAzZmMz LzEvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcyx4c5o UD59Cioxbbxqtxj8qKX32AVCUE0XIkp8SboyZMjjCZ0Ue8vkNkpIjHuhVzg85+S3 09X7jwdPsu+hJ+nDYdxRTaQ3LUQ9nYGX2VTXMDXHEP/nj0Ewaxq3cHTi4niS0pMK J2sJOrsJFIeaQTpp+JmaKycRxVikg3RsrRcOyO/hdV/MexksyMXkRgiAIe2Q2oy3 kTeePM+UqvniWopyOLQiKzsDM+3LsfTmbucjAV+/mFGqKwQdDI199AUcg/4k9FYO tjDwyq3YPaEWHE7wtsIvi5plZbo8sJ6A3rhmWN1SQK6NML2dYo6sQTmaiNyMbO0+ PqYPCgHHEY4HjA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:58:52 2025 by rpki-client