This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json) Hash identifier: 8uQY2GgtQfc6YjP4v/8vH+BPLT642DhLSk4PA4PjNbs= Subject key identifier: E1:0F:21:C7:FF:BB:06:75:11:D1:C7:0A:BB:5E:72:40:F4:C4:29:F3 Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69 Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69 Certificate serial: 019B3DFE7CA2E964526E0F5F2DD9A7FD9E38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft Manifest number: 0C5E Signing time: Sat 20 Dec 2025 23:00:46 +0000 Manifest this update: Sat 20 Dec 2025 23:00:46 +0000 Manifest next update: Sun 21 Dec 2025 23:00:46 +0000 Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: WxuWElUpWKQp5mPDc+JOanRajtfjApw8m2GZ7EHIzOM=) 2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:7c:a2:e9:64:52:6e:0f:5f:2d:d9:a7:fd:9e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69 Validity Not Before: Dec 20 23:00:46 2025 GMT Not After : Dec 21 23:00:46 2025 GMT Subject: CN=e10f21c7ffbb067511d1c70abb5e7240f4c429f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:5d:47:fc:64:21:76:2a:e2:e7:a9:28:2b: af:ba:62:21:62:81:46:01:b4:25:28:f7:03:66:04: 5e:00:f6:a0:c0:fe:be:cc:a0:3f:af:2e:a8:a2:a5: 0f:6a:d8:4d:89:0e:6f:f4:3e:2b:a9:5b:40:a4:24: ae:6d:87:6d:3e:79:c5:f0:92:78:54:4e:4b:e6:73: d3:b3:ca:7d:d2:df:14:af:e7:16:40:5c:9b:05:52: 02:5c:28:4a:c3:c0:62:a6:2c:0e:17:3a:9d:31:a2: 52:e4:b2:86:1e:9a:c7:1b:c2:41:6f:e9:4d:66:71: 8d:fe:e9:3c:ed:55:73:e3:a7:04:88:5a:fc:12:14: 0d:50:0b:ba:c8:9b:99:65:1e:6a:38:87:ba:ee:42: e5:b9:14:2c:5f:70:78:2b:1c:91:f0:df:e6:47:90: bb:64:b2:8b:73:65:4e:14:d4:b4:99:fb:d4:f0:79: 82:ed:32:9c:25:21:fb:1a:91:1b:80:62:74:94:7d: 23:08:c7:d1:18:5c:47:ad:7a:71:9f:73:a3:7c:04: 5f:7c:5f:c9:39:51:7d:4b:7b:79:45:44:dd:3d:1a: f4:83:b8:13:ba:68:51:36:c5:50:33:c8:a8:33:f3: b1:98:f4:f7:84:c0:66:c6:07:37:13:36:09:ce:c0: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0F:21:C7:FF:BB:06:75:11:D1:C7:0A:BB:5E:72:40:F4:C4:29:F3 X509v3 Authority Key Identifier: keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:77:a9:cd:79:e1:6c:03:f6:a5:9c:e0:60:e3:f0:d3:62:fe: 36:eb:d1:17:a5:56:8c:9e:b6:82:56:ee:7c:ec:c5:76:2e:c1: c9:2c:74:6f:15:4a:5f:42:d0:38:4f:c2:ca:22:c3:78:4f:c1: ed:a9:27:59:66:5a:d4:b1:0f:a0:8d:29:aa:2d:09:c0:6b:62: 46:7e:12:0e:41:0a:54:70:62:cb:19:ba:5c:50:11:28:c1:7c: 63:d6:cc:8c:b2:e7:29:00:c4:1b:de:b6:22:3e:99:ec:4d:74: 74:69:9e:fc:6e:de:d7:f7:39:56:56:29:26:d6:da:5c:ee:06: 6a:0d:24:b4:84:86:19:9f:d2:42:34:d8:8c:d6:84:c0:c9:95: 13:64:26:6a:ae:f3:2b:3a:0d:40:70:4b:41:14:e3:69:13:e7: 1d:0b:cd:da:b8:04:99:42:ab:b8:7b:b6:7e:e9:cc:0e:04:0e: 6e:1a:a6:ba:b2:19:f9:5c:a4:89:82:87:1f:00:d4:03:fa:0c: 0b:f3:e5:c1:8c:c9:5a:e1:ff:e4:57:d0:5a:41:b6:41:c2:07: f6:0c:42:f2:f1:47:36:30:bd:cd:df:db:44:d3:11:c6:56:99: 53:ef:2e:88:21:bb:8a:53:9b:aa:0d:55:61:18:45:d6:33:82: ec:bc:ba:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nyi6WRSbg9fLdmn/Z44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMzhmYmZlYTU3Njg0NzljODYzMDA5MDZlNzRlYjI1NGRj YjVjNjkwHhcNMjUxMjIwMjMwMDQ2WhcNMjUxMjIxMjMwMDQ2WjAzMTEwLwYDVQQD EyhlMTBmMjFjN2ZmYmIwNjc1MTFkMWM3MGFiYjVlNzI0MGY0YzQyOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruJdR/xkIXYq4uepKCuvumIhYoFG AbQlKPcDZgReAPagwP6+zKA/ry6ooqUPathNiQ5v9D4rqVtApCSubYdtPnnF8JJ4 VE5L5nPTs8p90t8Ur+cWQFybBVICXChKw8BipiwOFzqdMaJS5LKGHprHG8JBb+lN ZnGN/uk87VVz46cEiFr8EhQNUAu6yJuZZR5qOIe67kLluRQsX3B4KxyR8N/mR5C7 ZLKLc2VOFNS0mfvU8HmC7TKcJSH7GpEbgGJ0lH0jCMfRGFxHrXpxn3OjfARffF/J OVF9S3t5RUTdPRr0g7gTumhRNsVQM8ioM/OxmPT3hMBmxgc3EzYJzsCndQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEPIcf/uwZ1EdHHCrteckD0xCnzMB8GA1UdIwQY MBaAFHI4+/6ldoR5yGMAkG506yVNy1xpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEt YmUxMGU4YjRhMDBlLzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEtYmUxMGU4YjRhMDBl LzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHepzXnh bAP2pZzgYOPw02L+NuvRF6VWjJ62glbufOzFdi7BySx0bxVKX0LQOE/CyiLDeE/B 7aknWWZa1LEPoI0pqi0JwGtiRn4SDkEKVHBiyxm6XFARKMF8Y9bMjLLnKQDEG962 Ij6Z7E10dGme/G7e1/c5VlYpJtbaXO4Gag0ktISGGZ/SQjTYjNaEwMmVE2Qmaq7z KzoNQHBLQRTjaRPnHQvN2rgEmUKruHu2funMDgQObhqmurIZ+VykiYKHHwDUA/oM C/PlwYzJWuH/5FfQWkG2QcIH9gxC8vFHNjC9zd/bRNMRxlaZU+8uiCG7ilObqg1V YRhF1jOC7Ly6HA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:07:28 2025 by rpki-client