This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json) Hash identifier: o9jUIBUN+ubSE0rTDNNzLz/dY3xD9gRv8EQs7zHeZSk= Subject key identifier: F6:43:FA:94:8E:98:F8:A6:A6:C4:26:4F:7C:0B:31:B2:B4:61:15:8A Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3 Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3 Certificate serial: 019B5BD22E2C33D71F7637F63C322F2797F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft Manifest number: 1072 Signing time: Fri 26 Dec 2025 18:00:59 +0000 Manifest this update: Fri 26 Dec 2025 18:00:59 +0000 Manifest next update: Sat 27 Dec 2025 18:00:59 +0000 Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=) 2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=) 3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: bS612k7OIBzGjPC0w4DvSI6wyPXdDS38PvCTZNq17JA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:2e:2c:33:d7:1f:76:37:f6:3c:32:2f:27:97:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3 Validity Not Before: Dec 26 18:00:59 2025 GMT Not After : Dec 27 18:00:59 2025 GMT Subject: CN=f643fa948e98f8a6a6c4264f7c0b31b2b461158a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:01:22:34:55:b7:70:63:a6:7a:07:be:b2: de:14:30:8b:d3:62:ff:af:d8:31:e3:64:35:ff:b6: 17:11:b5:aa:9c:d5:84:10:93:13:50:c8:b4:2b:77: 78:cc:56:71:38:b7:74:0d:b5:67:0c:f3:ab:a8:4a: 8d:df:5f:77:e9:65:64:d4:e4:1a:10:8d:64:52:c2: 7a:72:9d:e8:2e:9b:89:64:37:c9:6a:29:0b:bb:f1: 9c:17:25:69:05:49:85:b7:49:e3:33:03:7d:2a:f2: ae:fc:c1:f6:fa:b1:d4:20:1a:51:33:d6:58:18:55: 1e:ae:2f:38:fd:02:6c:90:51:f1:32:dc:75:bc:a1: 7b:29:dd:3c:47:76:0a:fa:57:e8:bf:7d:9c:5e:59: 1a:0c:cb:78:62:cd:35:a3:e1:4d:0e:97:28:54:25: 4e:45:06:1d:c3:d2:ab:c7:e5:4f:68:27:5e:90:5f: ec:2b:f3:87:6a:85:6f:09:ff:3b:8f:14:67:d0:74: e8:86:51:9b:c6:ec:0a:84:a2:90:df:02:81:d8:3e: d6:c3:c2:bb:43:68:5d:27:09:6b:62:38:66:a3:cd: a0:71:37:f8:95:81:31:e0:ec:b8:23:30:7f:dc:63: b3:cc:59:e9:ce:2a:08:b9:4d:0a:7f:6b:de:1a:92: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:43:FA:94:8E:98:F8:A6:A6:C4:26:4F:7C:0B:31:B2:B4:61:15:8A X509v3 Authority Key Identifier: keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:72:0e:01:50:1c:08:7a:27:f8:1a:e3:7f:2f:88:bc:24:51: 37:6d:2c:c7:a4:24:76:9a:56:12:44:e3:c4:cf:eb:f1:d0:ae: 9c:cb:d5:60:11:23:70:b4:7a:36:ea:e8:f8:1e:5f:39:4f:91: f9:10:9b:e1:39:52:7e:45:e3:98:09:f6:21:6e:f6:9e:9d:e9: fe:95:56:ab:c4:5b:02:79:02:d1:ec:5d:60:36:b6:66:a1:7a: 9a:b9:a2:58:e3:4a:4b:46:47:d2:25:97:1d:a6:fd:8d:8e:37: c8:18:44:4e:28:71:3e:ea:98:ff:b0:a3:af:62:2c:3c:9a:18: fa:c5:dd:f5:43:d8:60:60:e2:e9:42:d3:15:38:ee:73:f0:1e: 95:b5:f4:3a:cc:82:bc:db:23:4d:69:f8:d9:bc:e2:df:26:03: 54:6e:d3:e9:c9:92:2a:29:e4:f3:96:84:0b:9f:3e:5d:d8:20: 96:2b:cd:42:8b:e5:ca:83:1d:a4:a1:d4:b1:d0:8f:a0:95:05: dd:cb:8e:4c:b8:e6:14:60:36:d5:7b:bb:7d:b6:d9:7a:0b:f1: b1:cb:ef:fa:67:39:a0:1c:25:d3:44:c0:9e:93:dc:6b:d0:45: 3e:51:b6:05:41:67:c1:0a:34:14:20:95:fd:74:6e:0e:a5:05: ca:0a:e3:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0i4sM9cfdjf2PDIvJ5fyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx YTMyYjMwHhcNMjUxMjI2MTgwMDU5WhcNMjUxMjI3MTgwMDU5WjAzMTEwLwYDVQQD EyhmNjQzZmE5NDhlOThmOGE2YTZjNDI2NGY3YzBiMzFiMmI0NjExNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LQBIjRVt3BjpnoHvrLeFDCL02L/ r9gx42Q1/7YXEbWqnNWEEJMTUMi0K3d4zFZxOLd0DbVnDPOrqEqN31936WVk1OQa EI1kUsJ6cp3oLpuJZDfJaikLu/GcFyVpBUmFt0njMwN9KvKu/MH2+rHUIBpRM9ZY GFUeri84/QJskFHxMtx1vKF7Kd08R3YK+lfov32cXlkaDMt4Ys01o+FNDpcoVCVO RQYdw9Krx+VPaCdekF/sK/OHaoVvCf87jxRn0HTohlGbxuwKhKKQ3wKB2D7Ww8K7 Q2hdJwlrYjhmo82gcTf4lYEx4Oy4IzB/3GOzzFnpzioIuU0Kf2veGpLEJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZD+pSOmPimpsQmT3wLMbK0YRWKMB8GA1UdIwQY MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXIOAVAc CHon+Brjfy+IvCRRN20sx6QkdppWEkTjxM/r8dCunMvVYBEjcLR6Nuro+B5fOU+R +RCb4TlSfkXjmAn2IW72np3p/pVWq8RbAnkC0exdYDa2ZqF6mrmiWONKS0ZH0iWX Hab9jY43yBhETihxPuqY/7Cjr2IsPJoY+sXd9UPYYGDi6ULTFTjuc/AelbX0OsyC vNsjTWn42bzi3yYDVG7T6cmSKink85aEC58+XdgglivNQovlyoMdpKHUsdCPoJUF 3cuOTLjmFGA21Xu7fbbZegvxscvv+mc5oBwl00TAnpPca9BFPlG2BUFnwQo0FCCV /XRuDqUFygrjvQ== -----END CERTIFICATE-----Generated at Sat Dec 27 02:19:34 2025 by rpki-client