This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft File: J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft (raw, json) Hash identifier: oS47qABEkJcxF14ncS5VrAPRKAcy0jDPW0beL3ImRHg= Subject key identifier: E3:E0:D8:EC:B8:61:8E:CC:B0:71:A4:8D:D2:B0:85:EB:59:77:05:DA Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75 Certificate issuer: /CN=27618505d3b4c000217590f7b7b59bf61ff2f375 Certificate serial: 019B4E4E1825AA2CD3F6954861BEDE26D51B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 03:01:39 +0000 Manifest this update: Wed 24 Dec 2025 03:01:39 +0000 Manifest next update: Thu 25 Dec 2025 03:01:39 +0000 Files and hashes: 1: 5K6nIVbP5K11dvspcfl4G-MfJZw.roa (hash: 1GirTU1av48FvuHpXhFOsW26MgpLG9B9BqlLOufNX8M=) 2: J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl (hash: +zmBs8/EZ0tMDZ9S5E/D8Ge3EA3XjeY6IiDgSAfPD0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4e:18:25:aa:2c:d3:f6:95:48:61:be:de:26:d5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375 Validity Not Before: Dec 24 03:01:39 2025 GMT Not After : Dec 25 03:01:39 2025 GMT Subject: CN=e3e0d8ecb8618eccb071a48dd2b085eb597705da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:a8:6f:93:7c:45:ee:c5:7d:e4:28:8b:f5: 05:85:b9:32:2b:1f:e1:27:0d:92:07:c1:c2:91:f5: f4:a9:7e:e3:46:b8:90:e4:ba:c1:4a:45:ff:d9:35: 24:ff:0d:7a:59:7c:cd:de:21:71:db:f9:b0:34:5d: df:81:59:67:a8:2b:4d:85:46:5d:79:a7:19:bc:80: b1:7f:cf:9e:8c:78:8f:56:b4:42:d0:ca:f1:8b:e9: 02:5b:1e:c0:ea:4c:15:9a:17:38:d2:63:b9:23:43: 30:ba:75:8a:1e:9d:c2:d4:01:e9:a8:10:2c:d5:13: 81:ae:0e:a2:fe:0e:41:e5:29:8e:ed:65:19:c8:1e: 3f:15:4d:2c:60:6c:2a:d6:4b:95:7b:78:51:e9:3a: 2c:20:ee:46:b0:70:f6:ab:37:6b:37:13:39:00:68: 6e:08:c9:4c:f1:a1:47:03:49:aa:2c:63:36:59:63: b8:b9:ce:f3:2d:e7:19:32:5b:e3:2a:12:7a:c4:50: ef:0a:57:04:0d:97:a6:0b:6b:25:d4:b7:81:d6:00: 62:61:09:62:1a:a3:d6:c6:1d:ae:f4:74:e2:92:1f: a9:26:a5:3d:54:03:12:8d:6e:3a:c4:e9:2b:ea:ee: 83:c3:65:d0:8e:06:2d:8a:25:0f:16:30:34:04:6e: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E0:D8:EC:B8:61:8E:CC:B0:71:A4:8D:D2:B0:85:EB:59:77:05:DA X509v3 Authority Key Identifier: keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f8:93:3a:ea:23:91:04:66:30:b3:b6:78:fd:99:f3:de:07: de:dc:b8:10:7e:7b:f1:de:20:e3:76:dc:12:29:c6:42:28:6d: 8f:d0:cd:f6:f4:62:78:00:f0:de:64:f5:e9:0c:49:4a:14:5d: 70:eb:b6:88:eb:b4:e1:a3:80:a4:b4:39:d8:53:28:6c:e7:82: 1e:7f:7a:a7:1f:90:d6:04:d3:09:60:a5:ac:39:55:9e:0a:5d: f6:e0:9a:a9:7b:36:a1:ee:ae:f1:de:a8:d8:d7:88:0a:ca:1a: 8f:97:46:6d:f3:d8:86:8d:35:93:67:7b:ca:29:ca:46:93:d1: 54:96:e1:98:3b:c0:a5:05:f7:72:2b:e1:32:e2:53:92:98:69: c8:c2:51:69:f3:f2:54:e8:7b:32:69:d8:68:53:7b:3d:63:7f: e1:9f:51:1d:52:a7:df:8f:10:0b:e2:da:06:29:59:bc:7d:b7: ad:2a:15:9c:73:28:97:04:12:7f:2d:c8:12:50:b5:a4:6d:9e: a8:b3:67:c7:f5:b5:46:5e:f5:7c:47:44:2c:b2:33:72:3f:36: 7f:f2:c8:18:0b:80:a0:e1:0f:74:5e:58:45:8a:ba:ab:a1:96: 22:ba:4d:b5:66:bc:2a:45:57:6f:65:56:ee:2f:79:d9:2c:a7: 16:f3:5a:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOThglqizT9pVIYb7eJtUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NjE4NTA1ZDNiNGMwMDAyMTc1OTBmN2I3YjU5YmY2MWZm MmYzNzUwHhcNMjUxMjI0MDMwMTM5WhcNMjUxMjI1MDMwMTM5WjAzMTEwLwYDVQQD EyhlM2UwZDhlY2I4NjE4ZWNjYjA3MWE0OGRkMmIwODVlYjU5NzcwNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r+ob5N8Re7FfeQoi/UFhbkyKx/h Jw2SB8HCkfX0qX7jRriQ5LrBSkX/2TUk/w16WXzN3iFx2/mwNF3fgVlnqCtNhUZd eacZvICxf8+ejHiPVrRC0Mrxi+kCWx7A6kwVmhc40mO5I0MwunWKHp3C1AHpqBAs 1ROBrg6i/g5B5SmO7WUZyB4/FU0sYGwq1kuVe3hR6TosIO5GsHD2qzdrNxM5AGhu CMlM8aFHA0mqLGM2WWO4uc7zLecZMlvjKhJ6xFDvClcEDZemC2sl1LeB1gBiYQli GqPWxh2u9HTikh+pJqU9VAMSjW46xOkr6u6Dw2XQjgYtiiUPFjA0BG45yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPg2Oy4YY7MsHGkjdKwhetZdwXaMB8GA1UdIwQY MBaAFCdhhQXTtMAAIXWQ97e1m/Yf8vN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYt OWQ1ZTU5Zjc2ZTZiLzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYtOWQ1ZTU5Zjc2ZTZi LzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEviTOuoj kQRmMLO2eP2Z894H3ty4EH578d4g43bcEinGQihtj9DN9vRieADw3mT16QxJShRd cOu2iOu04aOApLQ52FMobOeCHn96px+Q1gTTCWClrDlVngpd9uCaqXs2oe6u8d6o 2NeICsoaj5dGbfPYho01k2d7yinKRpPRVJbhmDvApQX3civhMuJTkphpyMJRafPy VOh7MmnYaFN7PWN/4Z9RHVKn348QC+LaBilZvH23rSoVnHMolwQSfy3IElC1pG2e qLNnx/W1Rl71fEdELLIzcj82f/LIGAuAoOEPdF5YRYq6q6GWIrpNtWa8KkVXb2VW 7i952SynFvNawQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:41:20 2025 by rpki-client