This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json) Hash identifier: rTzIPYzz5JcorJcrqT2ptHhftPhQ46mKiQOboZGzODA= Subject key identifier: 70:80:D5:F8:E4:DC:2E:AE:20:45:3B:CB:9A:B9:7F:17:63:2A:08:2C Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3 Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3 Certificate serial: 019B40C8B90AE7A3CEDDDE77D3F766D3FC1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft Manifest number: 1064 Signing time: Sun 21 Dec 2025 12:00:54 +0000 Manifest this update: Sun 21 Dec 2025 12:00:54 +0000 Manifest next update: Mon 22 Dec 2025 12:00:54 +0000 Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=) 2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=) 3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: g1qvG0QhqctBkw20Vs6J4o+XXYKcp/OcnybcIFwp6as=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:b9:0a:e7:a3:ce:dd:de:77:d3:f7:66:d3:fc:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3 Validity Not Before: Dec 21 12:00:54 2025 GMT Not After : Dec 22 12:00:54 2025 GMT Subject: CN=7080d5f8e4dc2eae20453bcb9ab97f17632a082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0f:4f:d1:41:e8:a2:34:72:83:11:e0:4f:88: 8b:11:3d:d4:75:07:58:50:68:36:d0:f8:e6:d7:54: 67:d8:a6:9c:70:70:1a:0b:8a:df:de:23:0b:4d:cb: 6a:56:08:c8:0e:ec:b1:45:99:19:e0:e9:6d:bf:94: fd:bb:bb:88:4d:38:c8:e8:6a:1d:64:21:17:df:98: 92:f2:3e:27:79:52:6f:a8:56:7c:72:d7:64:1f:27: d2:a1:d2:a9:90:28:8d:10:9f:5f:51:37:74:fd:38: 09:fe:f7:03:83:2e:eb:ee:71:e3:d1:01:73:25:f2: 3a:69:4e:44:e6:0b:06:28:fa:c8:eb:25:17:7f:f1: ee:fb:bf:96:c5:b0:6c:03:3c:99:ff:13:35:bd:4c: 85:fa:f8:ad:72:69:a9:77:37:26:69:57:90:29:59: 6a:44:86:5f:a2:93:68:7d:65:e2:ea:34:62:6f:65: aa:30:64:b1:e0:70:9b:0c:fc:bc:70:da:db:00:3b: 64:df:1c:83:92:f5:c6:79:c8:21:91:dd:55:62:a7: 5f:1f:e0:19:eb:e1:d6:c0:38:a7:a1:c3:d2:df:15: e9:10:69:e9:4e:c6:e9:8b:0a:be:d7:e7:f4:de:3b: c7:32:1d:87:6d:e3:de:2f:da:95:fe:c8:bc:73:e9: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:D5:F8:E4:DC:2E:AE:20:45:3B:CB:9A:B9:7F:17:63:2A:08:2C X509v3 Authority Key Identifier: keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:78:a0:74:d4:c3:ba:3d:e3:20:dc:d3:73:7e:93:83:94:cc: 0f:5c:d2:e9:a4:e4:e3:20:63:df:79:db:e1:8f:7b:51:2c:13: b8:86:b8:81:2c:6b:fe:80:bc:4b:94:88:6b:64:8a:58:07:f0: 22:1f:af:95:57:32:53:ef:2f:96:34:b4:32:3a:3e:2c:1e:6b: 28:a9:fe:fb:67:1c:5e:c8:ba:44:62:b0:e3:dc:5e:3d:4a:78: 66:22:51:b5:24:74:c6:f6:35:01:7d:68:e5:dd:9e:f6:15:79: aa:de:30:9e:8c:89:00:35:8b:d6:fd:05:d1:36:6a:aa:cd:7e: cc:ad:d4:24:66:8d:dd:e3:69:a0:73:97:9f:7d:8d:55:34:1a: 87:67:bc:16:53:0d:eb:e3:a7:6f:e4:6e:c5:93:76:6b:59:ab: e4:01:61:26:41:bc:b8:c1:24:e5:ae:04:7f:18:af:1a:8b:96: 13:0f:7c:80:80:9a:c0:92:79:34:1f:cb:8b:37:fc:4f:6d:94: 36:8d:81:34:d2:7a:a2:2f:24:da:ef:f2:6e:4b:02:29:f3:e9: 4c:fc:2a:b0:5b:7f:bf:93:4f:4a:22:2c:85:cf:16:ad:2b:d8: 58:41:5d:71:e2:c1:e7:8b:84:cc:04:ab:0e:9f:4c:8c:11:db: dc:c3:90:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyLkK56PO3d530/dm0/wfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx YTMyYjMwHhcNMjUxMjIxMTIwMDU0WhcNMjUxMjIyMTIwMDU0WjAzMTEwLwYDVQQD Eyg3MDgwZDVmOGU0ZGMyZWFlMjA0NTNiY2I5YWI5N2YxNzYzMmEwODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g9P0UHoojRygxHgT4iLET3UdQdY UGg20Pjm11Rn2KaccHAaC4rf3iMLTctqVgjIDuyxRZkZ4Oltv5T9u7uITTjI6God ZCEX35iS8j4neVJvqFZ8ctdkHyfSodKpkCiNEJ9fUTd0/TgJ/vcDgy7r7nHj0QFz JfI6aU5E5gsGKPrI6yUXf/Hu+7+WxbBsAzyZ/xM1vUyF+vitcmmpdzcmaVeQKVlq RIZfopNofWXi6jRib2WqMGSx4HCbDPy8cNrbADtk3xyDkvXGecghkd1VYqdfH+AZ 6+HWwDinocPS3xXpEGnpTsbpiwq+1+f03jvHMh2HbePeL9qV/si8c+lANwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCA1fjk3C6uIEU7y5q5fxdjKggsMB8GA1UdIwQY MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3igdNTD uj3jINzTc36Tg5TMD1zS6aTk4yBj33nb4Y97USwTuIa4gSxr/oC8S5SIa2SKWAfw Ih+vlVcyU+8vljS0Mjo+LB5rKKn++2ccXsi6RGKw49xePUp4ZiJRtSR0xvY1AX1o 5d2e9hV5qt4wnoyJADWL1v0F0TZqqs1+zK3UJGaN3eNpoHOXn32NVTQah2e8FlMN 6+Onb+RuxZN2a1mr5AFhJkG8uMEk5a4EfxivGouWEw98gICawJJ5NB/Lizf8T22U No2BNNJ6oi8k2u/ybksCKfPpTPwqsFt/v5NPSiIshc8WrSvYWEFdceLB54uEzASr Dp9MjBHb3MOQfw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:19:53 2025 by rpki-client