This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json) Hash identifier: iHqDqPPGc+rwgX+KRKEj4DwPjh1h/amFimAnS/T36gc= Subject key identifier: 22:EE:8C:38:B2:1B:41:3A:A4:64:CA:59:33:51:6B:E7:57:35:6F:A0 Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc Certificate serial: 019B4100341FE1335785E9011CACC3EFF798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 13:01:30 +0000 Manifest this update: Sun 21 Dec 2025 13:01:30 +0000 Manifest next update: Mon 22 Dec 2025 13:01:30 +0000 Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: wWe1ALZlBgxD+1Nh9GqWH6SvUUCJf/t/b7i3rp7iKQU=) 2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=) 3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:34:1f:e1:33:57:85:e9:01:1c:ac:c3:ef:f7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc Validity Not Before: Dec 21 13:01:30 2025 GMT Not After : Dec 22 13:01:30 2025 GMT Subject: CN=22ee8c38b21b413aa464ca5933516be757356fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:e4:5e:5d:9f:95:22:19:e9:0d:40:ad:db: 89:b0:ed:65:96:c4:44:30:c9:01:f0:c7:23:41:49: 1b:16:7e:4f:f4:cd:8e:d8:25:9d:32:1f:cc:51:d5: 57:95:d6:3e:37:65:8b:dc:6b:c5:05:ce:7f:f9:5e: a4:25:9f:e8:bb:06:ff:e6:e6:a2:7d:bb:7b:83:fe: 9b:4b:8f:fb:de:f9:cf:6c:7f:c5:8f:a2:36:6c:56: 40:53:33:43:8d:40:12:02:17:29:99:6d:48:28:51: 00:5f:d7:4e:39:fe:26:d9:3b:01:c3:04:9f:bf:c5: 5b:d1:c0:48:1b:15:7a:51:6f:98:62:b3:7c:b3:b7: fe:8a:f6:a9:70:c9:d8:1f:2e:ea:b6:b3:24:ea:be: ac:f1:89:a4:2a:52:1c:25:16:fe:0e:da:e6:40:d8: fe:82:a4:a2:f5:dd:08:1c:34:bb:77:f4:7f:eb:a8: b8:63:3a:6b:4e:b8:19:35:67:d1:11:63:c7:8e:70: 55:a0:0c:37:21:18:8b:ff:b6:7a:17:1a:4f:0e:13: b6:33:8e:b6:51:52:17:d1:81:59:c6:10:39:16:6a: 6c:e9:ee:12:a9:73:ed:f2:e3:b2:26:1b:55:67:19: ca:de:26:f6:16:3b:5f:f5:06:b7:4a:91:57:11:d6: 05:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EE:8C:38:B2:1B:41:3A:A4:64:CA:59:33:51:6B:E7:57:35:6F:A0 X509v3 Authority Key Identifier: keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6d:a2:eb:2e:81:46:1d:e1:9c:1b:a5:5f:99:19:c6:52:1b: 07:28:48:1f:bd:89:f5:69:ba:d1:67:a0:fe:94:52:e7:f3:06: fa:e1:11:33:d7:34:4e:18:5c:5e:1a:d1:4a:b6:3d:43:d4:87: a8:ad:08:71:54:3c:35:e4:22:82:af:42:03:d8:04:ac:45:34: 79:a6:9d:1f:34:b0:d0:54:d3:3b:05:97:40:9c:d1:7e:8b:89: de:8d:c1:d2:d1:14:cc:83:5e:83:0e:7f:93:e2:c5:40:89:11: 52:dd:5e:9e:9a:1f:01:59:8b:d2:c5:a8:2c:6c:d7:da:0a:b5: 6c:32:42:2b:3a:4b:42:7d:76:0b:a9:75:82:a3:a9:c8:38:85: ae:56:24:ed:65:fb:a2:8d:59:f3:24:81:07:47:36:b0:1e:b4: 91:b7:f9:ae:13:51:8c:17:d2:7f:26:fa:2a:49:03:fc:97:00: 1a:08:ca:48:7e:78:16:c7:a7:d9:50:74:1a:76:f0:f2:f6:2c: 50:b6:70:9c:65:3f:99:39:53:6a:98:27:88:01:06:98:95:40: 99:49:87:82:ed:c8:94:81:09:bd:9e:4a:41:cc:ea:79:01:0a: 32:bd:2b:13:c9:50:98:66:a6:0a:ac:21:9d:ad:b3:9a:c0:3e: 33:3e:0c:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBADQf4TNXhekBHKzD7/eYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZTcxMWNlMzQwMjZlNTdhZjMyOTBjN2RlMmNkMjFkYzY3 MWUwZmMwHhcNMjUxMjIxMTMwMTMwWhcNMjUxMjIyMTMwMTMwWjAzMTEwLwYDVQQD EygyMmVlOGMzOGIyMWI0MTNhYTQ2NGNhNTkzMzUxNmJlNzU3MzU2ZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHnkXl2flSIZ6Q1ArduJsO1llsRE MMkB8McjQUkbFn5P9M2O2CWdMh/MUdVXldY+N2WL3GvFBc5/+V6kJZ/ouwb/5uai fbt7g/6bS4/73vnPbH/Fj6I2bFZAUzNDjUASAhcpmW1IKFEAX9dOOf4m2TsBwwSf v8Vb0cBIGxV6UW+YYrN8s7f+ivapcMnYHy7qtrMk6r6s8YmkKlIcJRb+DtrmQNj+ gqSi9d0IHDS7d/R/66i4YzprTrgZNWfREWPHjnBVoAw3IRiL/7Z6FxpPDhO2M462 UVIX0YFZxhA5Fmps6e4SqXPt8uOyJhtVZxnK3ib2Fjtf9Qa3SpFXEdYFWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLujDiyG0E6pGTKWTNRa+dXNW+gMB8GA1UdIwQY MBaAFCfnEc40Am5XrzKQx94s0h3GceD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDIt YjcyZTVmZWY4ODZhLzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDItYjcyZTVmZWY4ODZh LzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFG2i6y6B Rh3hnBulX5kZxlIbByhIH72J9Wm60Weg/pRS5/MG+uERM9c0ThhcXhrRSrY9Q9SH qK0IcVQ8NeQigq9CA9gErEU0eaadHzSw0FTTOwWXQJzRfouJ3o3B0tEUzINegw5/ k+LFQIkRUt1enpofAVmL0sWoLGzX2gq1bDJCKzpLQn12C6l1gqOpyDiFrlYk7WX7 oo1Z8ySBB0c2sB60kbf5rhNRjBfSfyb6KkkD/JcAGgjKSH54Fsen2VB0Gnbw8vYs ULZwnGU/mTlTapgniAEGmJVAmUmHgu3IlIEJvZ5KQczqeQEKMr0rE8lQmGamCqwh na2zmsA+Mz4Mxg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:14:12 2025 by rpki-client