This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json) Hash identifier: culG2NmZEB9+CYxMdJqb9K9rDutjHQcNeZg9EQxcCLU= Subject key identifier: FC:9C:FC:C0:D6:66:E8:30:D4:D3:08:D4:0B:13:2E:9D:62:DB:F5:31 Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Certificate serial: 019B45B8119211F43A821B0047B749066F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft Manifest number: 11F1 Signing time: Mon 22 Dec 2025 11:00:49 +0000 Manifest this update: Mon 22 Dec 2025 11:00:49 +0000 Manifest next update: Tue 23 Dec 2025 11:00:49 +0000 Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: qqlJUsfYCuIJQ23JbiW9NKB7uHDMnc/AJtreeS5yXMQ=) 2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:11:92:11:f4:3a:82:1b:00:47:b7:49:06:6f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Validity Not Before: Dec 22 11:00:49 2025 GMT Not After : Dec 23 11:00:49 2025 GMT Subject: CN=fc9cfcc0d666e830d4d308d40b132e9d62dbf531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:3c:09:00:da:57:d7:6c:34:c1:46:9d:3d: 27:03:20:b6:53:43:86:ef:df:2b:60:ea:29:bf:f7: 18:35:0a:27:c3:13:2a:42:9d:a7:40:90:5d:32:d0: c9:6e:04:eb:89:43:ea:6b:79:8d:dd:df:66:f1:7e: 81:3c:63:a5:db:2f:5a:85:4c:f9:78:86:4c:e3:24: f3:ef:96:1e:ba:4b:de:f2:81:2d:4b:7a:1c:53:de: 87:3f:b7:bc:ba:44:3a:3a:ce:88:b2:ee:72:cd:68: f0:cd:f2:dc:de:d3:d8:41:1f:60:c8:bd:2c:5a:8e: fb:68:05:8c:61:ca:1e:6b:25:1f:a9:31:2c:cf:45: 15:9f:9d:f7:35:43:3e:7e:c9:3d:0b:97:04:aa:ac: fa:d1:ab:8e:8a:eb:51:26:ba:97:56:10:51:1e:45: bf:d7:05:80:bc:e4:6b:de:a7:c7:37:7d:71:ef:c5: b2:79:94:b9:ec:a8:41:4d:2e:8d:04:c8:1a:07:13: 5a:2d:96:96:a4:14:95:05:3f:e6:33:99:65:32:84: 1a:33:23:b7:95:c9:b7:c0:3d:72:5f:83:43:eb:d6: 18:42:fb:0b:a3:ef:de:c4:15:80:a8:39:f8:18:98: 90:49:7e:cf:d7:1e:c4:ce:dd:04:fb:b2:1c:34:fe: 9f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9C:FC:C0:D6:66:E8:30:D4:D3:08:D4:0B:13:2E:9D:62:DB:F5:31 X509v3 Authority Key Identifier: keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4e:bb:d8:f4:d8:6d:99:c4:00:c3:4c:bf:df:c2:03:15:58: a2:b0:56:f1:10:e0:5d:db:51:8a:32:8b:e9:39:22:86:f8:32: 75:20:72:23:6f:4c:1a:58:ac:0c:05:00:bf:d8:d0:9c:59:34: 7c:66:ca:84:32:c5:37:17:35:9d:2a:f4:6a:47:61:b1:74:7a: 83:d3:0e:25:b7:53:dd:d0:6a:ef:2f:80:55:10:d6:28:7a:d0: 1a:f1:8b:c2:1d:ce:3f:bd:93:b4:69:66:b0:5e:e8:41:d9:8a: 6d:2a:77:da:1c:d5:06:af:ab:a3:d8:7e:2a:38:29:f1:8a:84: 8c:a8:36:82:8a:ca:cc:d6:ea:a3:d1:20:cf:20:71:e6:fa:46: 5a:c3:8a:c5:55:8a:5c:eb:e3:52:ac:83:30:ff:2c:14:cd:04: c2:e9:f8:dd:1f:7e:74:36:4c:e6:6c:b9:ae:94:5d:ab:6a:c3: 7d:f1:f9:11:ad:c4:13:16:1a:2c:12:2a:3c:51:25:a1:99:af: 59:1f:a4:28:3f:21:64:4b:60:c8:6e:53:80:80:92:18:da:61: 98:c4:c0:df:cd:74:1a:75:14:a7:f3:77:33:21:ef:cb:3c:eb: b3:c2:ac:71:f8:47:2c:60:68:de:88:d5:19:93:83:01:04:13: 1b:98:09:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuBGSEfQ6ghsAR7dJBm+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI0ZmQ2NmVmZTZkYzVjM2FhYjJlMmU2NTFhNGUyMDdm ZTYyZTcwHhcNMjUxMjIyMTEwMDQ5WhcNMjUxMjIzMTEwMDQ5WjAzMTEwLwYDVQQD EyhmYzljZmNjMGQ2NjZlODMwZDRkMzA4ZDQwYjEzMmU5ZDYyZGJmNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAs8CQDaV9dsNMFGnT0nAyC2U0OG 798rYOopv/cYNQonwxMqQp2nQJBdMtDJbgTriUPqa3mN3d9m8X6BPGOl2y9ahUz5 eIZM4yTz75Yeukve8oEtS3ocU96HP7e8ukQ6Os6Isu5yzWjwzfLc3tPYQR9gyL0s Wo77aAWMYcoeayUfqTEsz0UVn533NUM+fsk9C5cEqqz60auOiutRJrqXVhBRHkW/ 1wWAvORr3qfHN31x78WyeZS57KhBTS6NBMgaBxNaLZaWpBSVBT/mM5llMoQaMyO3 lcm3wD1yX4ND69YYQvsLo+/exBWAqDn4GJiQSX7P1x7Ezt0E+7IcNP6fRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyc/MDWZugw1NMI1AsTLp1i2/UxMB8GA1UdIwQY MBaAFCeyT9Zu/m3Fw6qy4uZRpOIH/mLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAt Mzk0ZjUwZDRiYTM4LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAtMzk0ZjUwZDRiYTM4 LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE672PTY bZnEAMNMv9/CAxVYorBW8RDgXdtRijKL6TkihvgydSByI29MGlisDAUAv9jQnFk0 fGbKhDLFNxc1nSr0akdhsXR6g9MOJbdT3dBq7y+AVRDWKHrQGvGLwh3OP72TtGlm sF7oQdmKbSp32hzVBq+ro9h+Kjgp8YqEjKg2gorKzNbqo9EgzyBx5vpGWsOKxVWK XOvjUqyDMP8sFM0Ewun43R9+dDZM5my5rpRdq2rDffH5Ea3EExYaLBIqPFEloZmv WR+kKD8hZEtgyG5TgICSGNphmMTA3810GnUUp/N3MyHvyzzrs8KscfhHLGBo3ojV GZODAQQTG5gJzg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:51 2025 by rpki-client