This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json) Hash identifier: 23+rehKi3Tz8KLxMq2XnW9kzgJz3JM+HRYphTWboKqQ= Subject key identifier: 94:1B:8F:9F:66:98:C9:E0:C4:EF:7B:4D:0C:5E:44:35:A1:36:C0:0C Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Certificate serial: 019B3A21993D1360B4E8349F7F2A1230AABF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft Manifest number: 11EB Signing time: Sat 20 Dec 2025 05:00:38 +0000 Manifest this update: Sat 20 Dec 2025 05:00:38 +0000 Manifest next update: Sun 21 Dec 2025 05:00:38 +0000 Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: uapwVUvA92jGYdYZi/FKKg4eBFheYBSvJXAPgJqdcG0=) 2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:99:3d:13:60:b4:e8:34:9f:7f:2a:12:30:aa:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Validity Not Before: Dec 20 05:00:38 2025 GMT Not After : Dec 21 05:00:38 2025 GMT Subject: CN=941b8f9f6698c9e0c4ef7b4d0c5e4435a136c00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:e1:8d:0e:c0:10:72:16:8c:0d:03:34:6d: a9:c7:ba:03:3d:5e:d6:3d:3d:be:55:28:f9:91:ba: 40:8f:4c:ec:92:fe:d4:01:12:fe:db:b5:00:41:4b: 5f:7a:58:59:e6:f7:b4:25:0f:8a:3f:cd:8c:5b:f6: 46:d5:3c:4b:6e:4f:dd:58:3d:13:e5:e7:5d:52:6d: 1e:74:3f:d3:d0:d4:77:c7:a6:8f:51:83:03:64:45: 21:a5:bc:cb:3f:74:f9:cd:54:61:70:b8:5d:ae:87: 19:34:89:29:dc:42:7d:cb:54:0c:69:04:e8:0e:ff: bb:cf:de:eb:1d:a0:f2:89:71:af:aa:34:64:dd:02: e9:55:21:75:7f:5e:d8:04:15:ec:64:e1:cf:92:e5: f4:24:6f:51:e5:86:0d:10:44:a1:32:12:a6:74:ba: 69:a8:85:a6:1e:6a:ae:d9:c1:ea:61:e8:30:e8:31: 77:1d:a7:28:75:69:28:f7:e8:66:b9:31:e9:18:7c: c1:fd:df:ee:a7:9c:f4:e0:d9:d5:94:b1:ac:d9:ca: b2:37:78:7b:ea:e8:4d:12:08:b3:e0:ea:a0:32:7d: 5f:bd:40:54:51:ec:c8:ed:50:5b:4d:fe:cf:db:1e: e6:7f:a6:74:17:46:3d:a6:91:71:9a:a8:ab:ee:ea: 3f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1B:8F:9F:66:98:C9:E0:C4:EF:7B:4D:0C:5E:44:35:A1:36:C0:0C X509v3 Authority Key Identifier: keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:68:a5:16:b7:31:96:b5:93:b0:d5:5d:e2:42:24:b0:7a:9e: ca:b1:e2:15:77:8d:ed:48:e8:93:d2:03:d8:b1:11:ba:34:2e: 7e:9b:4c:e8:8d:40:fa:a7:81:12:6f:f3:18:24:93:35:88:17: 0b:d0:20:79:5a:a0:d6:34:f1:6c:01:9f:cb:42:cb:ca:f3:b7: d0:ae:c1:a9:de:ea:4b:00:5c:61:5b:c1:83:90:f3:64:01:45: e9:ce:0f:84:b7:96:24:46:0e:38:40:d6:b2:8e:05:91:36:63: 87:40:b5:8b:16:d0:fc:e9:1e:a5:31:50:9c:60:ad:e4:52:53: 3f:df:e6:73:e3:97:e0:96:a5:68:3b:ed:6d:8f:f7:23:b9:09: 5e:d2:0c:b2:1f:80:3b:14:c3:f6:fe:33:21:b1:3f:3c:e3:55: 2a:c0:23:88:d6:9d:1d:2f:c7:ed:16:59:2a:e9:0e:6b:58:48: ad:24:6b:15:49:cc:cd:08:10:e5:96:0c:ee:cc:4c:34:e9:5c: 77:82:5c:6e:93:ab:d2:4e:bd:53:f1:36:e7:66:f3:bb:88:68: 3a:46:86:7c:a2:54:f5:36:1f:85:70:91:16:53:43:17:c2:f7: bf:8d:b5:0f:52:ea:d1:c1:10:09:ef:b4:57:85:a1:75:cb:13: 87:e0:7b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZk9E2C06DSffyoSMKq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI0ZmQ2NmVmZTZkYzVjM2FhYjJlMmU2NTFhNGUyMDdm ZTYyZTcwHhcNMjUxMjIwMDUwMDM4WhcNMjUxMjIxMDUwMDM4WjAzMTEwLwYDVQQD Eyg5NDFiOGY5ZjY2OThjOWUwYzRlZjdiNGQwYzVlNDQzNWExMzZjMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYDhjQ7AEHIWjA0DNG2px7oDPV7W PT2+VSj5kbpAj0zskv7UARL+27UAQUtfelhZ5ve0JQ+KP82MW/ZG1TxLbk/dWD0T 5eddUm0edD/T0NR3x6aPUYMDZEUhpbzLP3T5zVRhcLhdrocZNIkp3EJ9y1QMaQTo Dv+7z97rHaDyiXGvqjRk3QLpVSF1f17YBBXsZOHPkuX0JG9R5YYNEEShMhKmdLpp qIWmHmqu2cHqYegw6DF3HacodWko9+hmuTHpGHzB/d/up5z04NnVlLGs2cqyN3h7 6uhNEgiz4OqgMn1fvUBUUezI7VBbTf7P2x7mf6Z0F0Y9ppFxmqir7uo/gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQbj59mmMngxO97TQxeRDWhNsAMMB8GA1UdIwQY MBaAFCeyT9Zu/m3Fw6qy4uZRpOIH/mLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAt Mzk0ZjUwZDRiYTM4LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAtMzk0ZjUwZDRiYTM4 LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGilFrcx lrWTsNVd4kIksHqeyrHiFXeN7Ujok9ID2LERujQufptM6I1A+qeBEm/zGCSTNYgX C9AgeVqg1jTxbAGfy0LLyvO30K7Bqd7qSwBcYVvBg5DzZAFF6c4PhLeWJEYOOEDW so4FkTZjh0C1ixbQ/OkepTFQnGCt5FJTP9/mc+OX4JalaDvtbY/3I7kJXtIMsh+A OxTD9v4zIbE/PONVKsAjiNadHS/H7RZZKukOa1hIrSRrFUnMzQgQ5ZYM7sxMNOlc d4JcbpOr0k69U/E252bzu4hoOkaGfKJU9TYfhXCRFlNDF8L3v421D1Lq0cEQCe+0 V4WhdcsTh+B7AQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:20 2025 by rpki-client