This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft File: J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft (raw, json) Hash identifier: 2y8swsiazdDiawPF6Zls6dRzbC6kuzKNYD2bq3dmokU= Subject key identifier: 3D:C2:F0:EF:18:43:4F:9E:4D:BF:CD:FA:5A:43:67:65:74:06:7F:FD Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75 Certificate issuer: /CN=27618505d3b4c000217590f7b7b59bf61ff2f375 Certificate serial: 019B48830292AA72BD9B48A9DAC110351F77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 00:01:43 +0000 Manifest this update: Tue 23 Dec 2025 00:01:43 +0000 Manifest next update: Wed 24 Dec 2025 00:01:43 +0000 Files and hashes: 1: 5K6nIVbP5K11dvspcfl4G-MfJZw.roa (hash: 1GirTU1av48FvuHpXhFOsW26MgpLG9B9BqlLOufNX8M=) 2: J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl (hash: Lp7GvrT82H+dII/DqHgcveCcJ/TLaSs0iU1c50xG7gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:83:02:92:aa:72:bd:9b:48:a9:da:c1:10:35:1f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375 Validity Not Before: Dec 23 00:01:43 2025 GMT Not After : Dec 24 00:01:43 2025 GMT Subject: CN=3dc2f0ef18434f9e4dbfcdfa5a43676574067ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:a7:6d:4a:bb:e8:dc:ed:d8:ef:2c:0a:a2: 94:44:a8:ae:4d:12:c3:41:51:25:f0:be:87:d6:e5: fd:03:c4:07:80:f1:8a:1c:8a:40:b9:e9:91:68:4e: a4:0e:4b:52:f0:9d:75:a1:81:95:ba:21:57:ce:86: 11:38:b6:41:72:9d:a7:ff:a4:7d:5f:2c:01:42:48: 0e:f0:d4:06:d9:5b:95:f3:f2:47:82:4a:86:55:3a: 23:46:ef:a7:a5:3d:19:7a:04:45:08:0e:2e:83:20: ba:e1:13:d5:10:aa:35:44:94:56:54:b1:fd:13:5a: 70:f2:5d:f1:86:bb:aa:a4:5a:4e:02:77:74:a5:b3: c5:c5:e7:73:2a:73:81:89:f1:b0:b1:cd:83:94:50: 9a:95:8e:44:ad:17:8b:ac:be:f7:da:72:35:7c:d7: 94:d1:9e:53:06:b8:13:70:d6:32:c7:69:cb:f6:a7: de:2f:58:da:77:9a:a6:9e:2c:f6:63:ae:69:66:eb: 1e:08:3d:07:ce:43:24:7c:53:47:e5:b1:68:c6:17: 0f:43:49:d7:fa:9d:3e:13:dc:e8:f0:90:fe:f9:bc: fc:fc:43:68:28:bf:04:57:04:25:9c:48:0b:7d:2b: 6f:a4:64:4a:0b:a8:1d:b3:2d:b8:e5:cb:74:91:25: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C2:F0:EF:18:43:4F:9E:4D:BF:CD:FA:5A:43:67:65:74:06:7F:FD X509v3 Authority Key Identifier: keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:63:03:85:9a:d2:d5:c3:20:ac:0d:9b:b0:b1:c1:fe:b7:f8: 4a:f6:75:7d:89:59:9b:fb:b2:8d:27:83:34:b7:e6:eb:23:a5: 52:ce:c7:ab:c3:3c:30:02:bd:1c:c4:ef:ad:95:1c:bf:e8:a9: e9:5d:2c:ca:bc:81:b6:60:5d:85:ed:b1:80:10:d3:f2:bd:f0: 5d:7a:98:af:d8:1d:fb:ea:1e:97:cc:c3:c3:8c:d8:e7:50:ba: 46:e9:3f:84:59:2f:38:0d:97:0e:89:3d:6e:d6:60:ae:43:f4: 51:5f:e8:06:cf:7a:8c:33:c3:1f:39:f2:bb:a7:91:96:dc:8c: 30:dc:75:f1:50:eb:be:d2:00:7d:44:ed:9d:49:94:0c:b9:59: d8:35:26:66:f4:d8:d4:3c:63:27:4a:bc:66:32:75:59:e9:6c: f3:22:e2:b3:a7:14:a8:ac:56:25:8e:54:25:62:86:6a:c1:17: 5b:9e:96:9e:00:01:87:70:ad:5f:a8:a5:33:6f:82:19:fb:bd: 5c:14:5b:a5:b0:e6:8d:a0:a8:da:6b:11:7f:69:25:67:52:64: 66:70:10:94:74:f0:a1:ed:aa:e2:80:a9:33:d8:30:7c:fd:b8: c1:6e:ef:41:b7:a9:5c:8d:ec:5b:1a:ca:65:79:50:0b:40:52: 06:d7:28:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgwKSqnK9m0ip2sEQNR93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NjE4NTA1ZDNiNGMwMDAyMTc1OTBmN2I3YjU5YmY2MWZm MmYzNzUwHhcNMjUxMjIzMDAwMTQzWhcNMjUxMjI0MDAwMTQzWjAzMTEwLwYDVQQD EygzZGMyZjBlZjE4NDM0ZjllNGRiZmNkZmE1YTQzNjc2NTc0MDY3ZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlSnbUq76Nzt2O8sCqKURKiuTRLD QVEl8L6H1uX9A8QHgPGKHIpAuemRaE6kDktS8J11oYGVuiFXzoYROLZBcp2n/6R9 XywBQkgO8NQG2VuV8/JHgkqGVTojRu+npT0ZegRFCA4ugyC64RPVEKo1RJRWVLH9 E1pw8l3xhruqpFpOAnd0pbPFxedzKnOBifGwsc2DlFCalY5ErReLrL732nI1fNeU 0Z5TBrgTcNYyx2nL9qfeL1jad5qmniz2Y65pZuseCD0HzkMkfFNH5bFoxhcPQ0nX +p0+E9zo8JD++bz8/ENoKL8EVwQlnEgLfStvpGRKC6gdsy245ct0kSXwwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3C8O8YQ0+eTb/N+lpDZ2V0Bn/9MB8GA1UdIwQY MBaAFCdhhQXTtMAAIXWQ97e1m/Yf8vN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYt OWQ1ZTU5Zjc2ZTZiLzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYtOWQ1ZTU5Zjc2ZTZi LzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2MDhZrS 1cMgrA2bsLHB/rf4SvZ1fYlZm/uyjSeDNLfm6yOlUs7Hq8M8MAK9HMTvrZUcv+ip 6V0syryBtmBdhe2xgBDT8r3wXXqYr9gd++oel8zDw4zY51C6Ruk/hFkvOA2XDok9 btZgrkP0UV/oBs96jDPDHznyu6eRltyMMNx18VDrvtIAfUTtnUmUDLlZ2DUmZvTY 1DxjJ0q8ZjJ1Wels8yLis6cUqKxWJY5UJWKGasEXW56WngABh3CtX6ilM2+CGfu9 XBRbpbDmjaCo2msRf2klZ1JkZnAQlHTwoe2q4oCpM9gwfP24wW7vQbepXI3sWxrK ZXlQC0BSBtcoGQ== -----END CERTIFICATE-----Generated at Tue Dec 23 04:29:51 2025 by rpki-client