This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft File: J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json) Hash identifier: eHMWF7V+5oxlGRXv0liO1Ic+GaZwE0E2d+WclNQbH8M= Subject key identifier: 14:E1:10:36:DF:76:51:64:7A:76:BB:F7:3C:52:52:65:43:ED:CA:03 Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F Certificate issuer: /CN=27b2133219989e6a32d71158d0852a516eb6f79f Certificate serial: 019B43C980B1A8DBDDE40EB385B029E16B05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft Manifest number: 1411 Signing time: Mon 22 Dec 2025 02:00:37 +0000 Manifest this update: Mon 22 Dec 2025 02:00:37 +0000 Manifest next update: Tue 23 Dec 2025 02:00:37 +0000 Files and hashes: 1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=) 2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: Y1MLEtL3nWPrxAyNqd0SjCcw9k5YrvP8m6zji65qmMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:80:b1:a8:db:dd:e4:0e:b3:85:b0:29:e1:6b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f Validity Not Before: Dec 22 02:00:37 2025 GMT Not After : Dec 23 02:00:37 2025 GMT Subject: CN=14e11036df7651647a76bbf73c52526543edca03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:a7:36:22:10:d9:e1:b3:8b:79:36:8f:94: 9f:72:c5:4b:d1:66:9c:f9:e4:fa:5d:40:1a:d0:34: 3f:33:7a:1d:a5:5d:ca:04:0d:98:0a:fe:68:c2:41: 1e:02:b5:35:a7:d6:40:d3:52:7b:72:25:ff:b9:5a: 86:ee:b6:a7:a8:57:85:a1:9c:73:ac:56:80:7e:a7: 1a:70:91:c5:a5:28:16:ab:8a:1c:34:ef:72:95:18: 30:92:f5:8c:f4:6f:ee:6f:a5:15:e1:f4:0a:c8:bf: ab:e1:66:6b:de:af:dd:ce:e3:b3:b1:90:ed:17:dd: 24:4d:b0:4e:d2:43:07:72:7a:75:9c:c8:60:98:a6: ca:1d:7f:3b:55:e9:75:3f:af:89:ed:cd:37:5e:d1: ef:99:de:d6:bc:e6:19:0f:98:c4:90:4d:aa:87:2a: 5e:bb:1f:7b:a7:b5:59:d0:74:82:8e:49:28:8c:00: 82:02:d2:66:03:d6:25:b4:d3:ef:dc:4e:60:f4:7d: eb:d5:6b:d3:16:ca:75:78:5c:48:59:c3:d5:de:52: ac:1c:02:4d:ad:cd:af:54:a0:07:d7:6b:0c:13:34: 17:b6:21:1f:f6:a4:f8:2c:92:d4:1c:68:67:f0:c6: c7:03:d7:d8:51:19:1f:e4:85:f0:da:bd:41:ac:85: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E1:10:36:DF:76:51:64:7A:76:BB:F7:3C:52:52:65:43:ED:CA:03 X509v3 Authority Key Identifier: keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:af:df:c2:54:fd:79:cb:9a:37:c5:2f:b6:07:85:2f:34:ec: 62:71:9b:fe:ab:1f:47:e7:c9:58:21:9b:71:3e:1b:55:c1:ff: ce:c9:62:01:11:1c:7b:01:3b:a9:bc:38:50:e9:fc:4c:5e:44: db:3f:72:7d:99:12:cd:41:50:e4:df:d9:31:bd:3e:47:97:40: b3:97:0e:dd:7d:14:96:c0:bc:0c:5f:88:6f:18:2a:87:33:1f: 3a:40:8d:24:da:3c:93:a0:01:32:4a:0a:a7:4b:43:35:d8:7a: d3:f3:d7:cd:93:1f:63:e5:c1:74:6f:61:56:a6:da:3a:a2:2b: d9:00:93:c6:6b:47:34:93:aa:c7:c4:f9:7b:a9:37:3f:cc:b6: 51:b0:b2:03:17:25:b5:d1:e9:7a:8c:3f:2b:1b:9c:99:9d:4a: cb:20:03:c6:fd:0c:d7:5a:e9:6f:cb:bb:72:79:33:d9:6b:ff: 66:cc:e0:8c:04:9f:fa:09:c0:9a:09:ba:13:43:cf:b2:8b:74: 3e:7c:75:19:b6:5b:ee:d8:b3:12:e3:cd:f7:4f:f7:87:08:70: ed:23:82:e6:22:b0:78:d2:d0:2f:2b:fc:e0:8c:9e:09:63:1d: 15:40:a5:5a:7d:78:f3:a7:8c:d5:f2:28:73:9b:4f:24:7b:97: 22:17:7a:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyYCxqNvd5A6zhbAp4WsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjIxMzMyMTk5ODllNmEzMmQ3MTE1OGQwODUyYTUxNmVi NmY3OWYwHhcNMjUxMjIyMDIwMDM3WhcNMjUxMjIzMDIwMDM3WjAzMTEwLwYDVQQD EygxNGUxMTAzNmRmNzY1MTY0N2E3NmJiZjczYzUyNTI2NTQzZWRjYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsWnNiIQ2eGzi3k2j5SfcsVL0Wac +eT6XUAa0DQ/M3odpV3KBA2YCv5owkEeArU1p9ZA01J7ciX/uVqG7ranqFeFoZxz rFaAfqcacJHFpSgWq4ocNO9ylRgwkvWM9G/ub6UV4fQKyL+r4WZr3q/dzuOzsZDt F90kTbBO0kMHcnp1nMhgmKbKHX87Vel1P6+J7c03XtHvmd7WvOYZD5jEkE2qhype ux97p7VZ0HSCjkkojACCAtJmA9YltNPv3E5g9H3r1WvTFsp1eFxIWcPV3lKsHAJN rc2vVKAH12sMEzQXtiEf9qT4LJLUHGhn8MbHA9fYURkf5IXw2r1BrIXd6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBThEDbfdlFkena79zxSUmVD7coDMB8GA1UdIwQY MBaAFCeyEzIZmJ5qMtcRWNCFKlFutvefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jNjY2MDYtMmFlOC00YWRhLWIzNWIt YzJlOGEwMzAzZmMzLzEvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jNjY2MDYtMmFlOC00YWRhLWIzNWItYzJlOGEwMzAzZmMz LzEvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6/fwlT9 ecuaN8UvtgeFLzTsYnGb/qsfR+fJWCGbcT4bVcH/zsliAREcewE7qbw4UOn8TF5E 2z9yfZkSzUFQ5N/ZMb0+R5dAs5cO3X0UlsC8DF+IbxgqhzMfOkCNJNo8k6ABMkoK p0tDNdh60/PXzZMfY+XBdG9hVqbaOqIr2QCTxmtHNJOqx8T5e6k3P8y2UbCyAxcl tdHpeow/KxucmZ1KyyADxv0M11rpb8u7cnkz2Wv/ZszgjASf+gnAmgm6E0PPsot0 Pnx1GbZb7tizEuPN90/3hwhw7SOC5iKweNLQLyv84IyeCWMdFUClWn1486eM1fIo c5tPJHuXIhd6XQ== -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:19 2025 by rpki-client