This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft File: J7JQwAtGuhgF8v5fanfo_-X-J3g.mft (raw, json) Hash identifier: a3NepKQ1rDp+19bwYQ3dq7ZmBrzn8NyrRidwChmzLU4= Subject key identifier: D1:09:57:F7:98:70:BF:EF:56:D7:58:AB:37:CE:1F:EE:7B:3A:54:5F Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78 Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778 Certificate serial: 019B59ACF863925956FB1D9DA235D49BA803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft Manifest number: 02A4 Signing time: Fri 26 Dec 2025 08:01:06 +0000 Manifest this update: Fri 26 Dec 2025 08:01:06 +0000 Manifest next update: Sat 27 Dec 2025 08:01:06 +0000 Files and hashes: 1: 2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa (hash: 4cAudEOa7B6QV2XVnZGGI65WlCpgsFSmPdilxFuHyN8=) 2: J7JQwAtGuhgF8v5fanfo_-X-J3g.crl (hash: Pl7waJNGewRbuFKI7izZy417zzaD1JoaEsdP49sXg2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:f8:63:92:59:56:fb:1d:9d:a2:35:d4:9b:a8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778 Validity Not Before: Dec 26 08:01:06 2025 GMT Not After : Dec 27 08:01:06 2025 GMT Subject: CN=d10957f79870bfef56d758ab37ce1fee7b3a545f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:1e:6b:8a:fa:1a:89:e0:d4:9b:4e:92:91: ca:6c:3d:57:c4:60:ff:fb:91:d2:2a:f2:16:81:f0: 0e:e7:cc:dc:fb:20:23:ae:5a:90:a7:3a:9a:e0:d7: 63:53:23:17:2e:4a:97:12:78:19:5a:c7:58:ba:7b: 5d:5e:e2:74:87:63:bd:7d:38:18:57:b1:e6:9b:7d: 5d:70:c2:aa:8f:0e:72:9d:5d:12:f9:9e:c9:eb:39: c2:bb:c5:20:c3:00:14:18:af:05:62:db:8c:29:4a: df:8b:69:62:df:fe:f9:d9:d9:ed:d8:c6:56:b9:56: af:83:01:34:d5:68:77:de:2c:21:9d:a5:8c:f4:c9: 75:2e:49:25:33:3a:af:61:67:3a:e8:8a:e3:a4:07: 1b:a7:cc:be:08:fa:0d:25:4d:08:3a:72:8d:27:52: ca:d7:d5:98:a8:b0:b7:9c:e4:16:0c:1c:0b:62:ee: dd:25:73:92:93:6b:88:53:4f:da:32:b5:af:2c:6c: 5b:7e:51:14:27:14:fb:e7:b4:28:5b:95:9e:01:8c: c3:75:ac:32:f7:86:9b:74:c5:84:4e:a4:3e:02:c8: 8c:53:1b:09:76:f0:74:4b:22:a8:cc:2a:54:fe:4f: 11:d7:da:0d:07:a2:75:02:ca:d5:6e:7b:66:14:2f: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:09:57:F7:98:70:BF:EF:56:D7:58:AB:37:CE:1F:EE:7B:3A:54:5F X509v3 Authority Key Identifier: keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a1:8d:55:46:87:f0:f8:b6:4e:4c:45:fe:62:e9:2f:a7:00: 61:1c:55:9a:7a:b6:8d:a1:86:ff:27:65:46:b5:b4:ae:ff:74: 1c:ef:9e:fc:9a:90:23:e2:3d:c8:9e:4a:34:3f:3b:28:c4:1a: e1:e1:61:b6:06:6b:fe:c7:48:02:62:2b:ac:98:ea:a4:6f:e2: b3:55:53:1d:56:91:d8:c8:bf:aa:8b:26:4b:0c:c9:2c:c7:d9: 4c:68:c8:97:c6:11:74:c9:21:8a:38:a8:59:4f:e5:3f:53:37: c8:c2:b5:21:ad:ff:74:d5:55:ea:db:76:b8:d4:d7:a9:fb:af: 34:69:76:ca:07:ab:11:c6:4a:53:4b:9a:89:07:0d:86:50:dc: 3a:b1:c5:6b:d2:ae:0b:7d:90:63:d0:3f:28:3d:6f:70:92:69: 1f:84:c2:a4:ea:89:a8:1e:ce:7d:bc:01:25:73:10:be:cb:2a: b9:6a:b9:39:fe:af:a3:88:74:9e:32:ca:06:77:30:ed:75:1a: b8:06:0f:b7:c6:06:d9:ed:c8:9f:33:55:f2:84:58:e3:c5:a1: a3:2f:c1:00:96:14:52:e1:0b:c1:72:88:39:c1:5c:f2:8e:12: a9:aa:8b:80:2b:0b:96:3b:6d:8c:bd:1e:68:08:8b:02:bf:e2: 94:32:a7:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrPhjkllW+x2dojXUm6gDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI1MGMwMGI0NmJhMTgwNWYyZmU1ZjZhNzdlOGZmZTVm ZTI3NzgwHhcNMjUxMjI2MDgwMTA2WhcNMjUxMjI3MDgwMTA2WjAzMTEwLwYDVQQD EyhkMTA5NTdmNzk4NzBiZmVmNTZkNzU4YWIzN2NlMWZlZTdiM2E1NDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaEea4r6Gong1JtOkpHKbD1XxGD/ +5HSKvIWgfAO58zc+yAjrlqQpzqa4NdjUyMXLkqXEngZWsdYuntdXuJ0h2O9fTgY V7Hmm31dcMKqjw5ynV0S+Z7J6znCu8UgwwAUGK8FYtuMKUrfi2li3/752dnt2MZW uVavgwE01Wh33iwhnaWM9Ml1LkklMzqvYWc66IrjpAcbp8y+CPoNJU0IOnKNJ1LK 19WYqLC3nOQWDBwLYu7dJXOSk2uIU0/aMrWvLGxbflEUJxT757QoW5WeAYzDdawy 94abdMWETqQ+AsiMUxsJdvB0SyKozCpU/k8R19oNB6J1AsrVbntmFC9NxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEJV/eYcL/vVtdYqzfOH+57OlRfMB8GA1UdIwQY MBaAFCeyUMALRroYBfL+X2p36P/l/id4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZjMyNTktYzIxZi00YmY2LWIwN2Mt MTYwNzIyMTRlNjAyLzEvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hZjMyNTktYzIxZi00YmY2LWIwN2MtMTYwNzIyMTRlNjAy LzEvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKGNVUaH 8Pi2TkxF/mLpL6cAYRxVmnq2jaGG/ydlRrW0rv90HO+e/JqQI+I9yJ5KND87KMQa 4eFhtgZr/sdIAmIrrJjqpG/is1VTHVaR2Mi/qosmSwzJLMfZTGjIl8YRdMkhijio WU/lP1M3yMK1Ia3/dNVV6tt2uNTXqfuvNGl2ygerEcZKU0uaiQcNhlDcOrHFa9Ku C32QY9A/KD1vcJJpH4TCpOqJqB7OfbwBJXMQvssquWq5Of6vo4h0njLKBncw7XUa uAYPt8YG2e3InzNV8oRY48Whoy/BAJYUUuELwXKIOcFc8o4SqaqLgCsLljttjL0e aAiLAr/ilDKnTA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:55 2025 by rpki-client