This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft File: j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json) Hash identifier: pNxcjPP9zNLWfWTtarleUWFmofUfLUata+iqWG/QfzQ= Subject key identifier: CB:37:E2:2B:BA:AC:E6:20:EA:7E:0C:DB:9A:96:23:BB:F9:60:B0:42 Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3 Certificate issuer: /CN=8feee94a0e3b22809764aee1e28f078fad636bc3 Certificate serial: 019B5A1AA9DE1970125A51D1D663B992ADCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 10:00:55 +0000 Manifest this update: Fri 26 Dec 2025 10:00:55 +0000 Manifest next update: Sat 27 Dec 2025 10:00:55 +0000 Files and hashes: 1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: F2wLyUsyR5R/Vc4uHCPnVTBXJVpyVDr1iSe72rOTNvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a9:de:19:70:12:5a:51:d1:d6:63:b9:92:ad:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3 Validity Not Before: Dec 26 10:00:55 2025 GMT Not After : Dec 27 10:00:55 2025 GMT Subject: CN=cb37e22bbaace620ea7e0cdb9a9623bbf960b042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:e4:04:c4:c4:32:e0:86:da:63:c6:82:4d: 40:22:93:a8:d4:36:f8:03:d6:de:6d:72:10:eb:71: c8:e1:ae:0b:cf:46:0d:2d:63:d1:30:15:49:e8:76: 48:3b:04:dc:06:40:94:41:c4:c2:ee:ab:47:e9:50: 6d:c0:6a:23:09:d6:a1:7a:3c:b6:7d:f8:fe:77:c5: e2:bb:e1:34:f3:0b:88:03:26:83:b5:ce:77:94:a8: a5:95:6e:97:94:4f:12:90:0a:67:6a:ff:7f:75:3d: 23:8d:77:ce:71:7f:70:22:b7:e3:eb:77:5d:da:6d: 93:ef:4c:1b:1a:a7:4d:3d:75:b8:24:66:3b:9d:41: 9c:fb:4d:6c:d5:cd:8d:3f:a9:5e:4a:18:24:f2:83: 17:57:90:31:1e:e1:0a:60:e8:d5:db:f8:38:d2:a8: a7:dd:4f:02:5b:d7:10:59:d9:e6:e8:37:b0:77:77: cd:b9:2a:02:14:cb:99:73:d4:ff:4a:32:af:07:02: 79:b9:69:04:5d:9a:d9:c4:86:66:b6:9d:4a:ca:9d: 0a:2c:bb:af:e6:cc:4d:6f:6a:33:b1:b7:72:1e:5c: 9b:24:0b:9f:e4:61:32:ba:c1:27:15:50:ad:a2:24: 0d:19:b6:07:16:ec:be:4a:de:10:c7:40:f6:d4:69: a1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:E2:2B:BA:AC:E6:20:EA:7E:0C:DB:9A:96:23:BB:F9:60:B0:42 X509v3 Authority Key Identifier: keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9d:66:07:0a:53:63:10:ad:da:96:16:fc:fe:e8:49:6f:14: 5e:15:9c:7c:f0:d5:21:bd:83:78:02:6f:0a:d0:e5:e8:ef:df: cc:a2:53:b6:9e:e2:da:9e:87:eb:ac:b1:9d:53:da:bc:72:f6: 34:a7:30:a0:cf:cb:41:6c:71:dd:09:a5:46:4a:5a:46:7b:85: bf:b3:01:70:7d:69:3c:51:04:fd:65:e1:e9:ff:08:6c:80:aa: d1:cf:7e:05:fb:66:22:e1:41:8c:03:54:c6:6b:c4:f9:5d:5f: 41:d9:0e:ff:7d:39:21:95:16:37:bc:dc:be:04:a4:99:9d:34: 8e:3a:dc:e6:21:79:73:72:05:e5:d9:ea:33:b5:e9:e1:7f:16: 2b:45:d0:08:a9:ea:12:c2:38:ba:30:51:e9:65:f6:27:62:a9: 5f:76:af:09:67:ff:fc:b9:bf:ab:31:6a:20:97:33:82:f6:4b: 06:a8:00:61:e4:4c:2a:e5:0d:db:a3:dc:fb:d8:15:f5:31:b4: e0:a5:b5:d1:3a:9d:c9:da:f1:95:32:68:1a:19:7b:0a:25:40: d4:98:e8:fa:d7:fd:ad:71:9e:00:f0:97:f2:ed:30:6b:ef:bc: 5b:86:27:e9:a9:1d:d4:ce:e9:04:9c:ad:57:b4:f9:45:e7:d5: 47:01:bd:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqneGXASWlHR1mO5kq3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZWVlOTRhMGUzYjIyODA5NzY0YWVlMWUyOGYwNzhmYWQ2 MzZiYzMwHhcNMjUxMjI2MTAwMDU1WhcNMjUxMjI3MTAwMDU1WjAzMTEwLwYDVQQD EyhjYjM3ZTIyYmJhYWNlNjIwZWE3ZTBjZGI5YTk2MjNiYmY5NjBiMDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+DkBMTEMuCG2mPGgk1AIpOo1Db4 A9bebXIQ63HI4a4Lz0YNLWPRMBVJ6HZIOwTcBkCUQcTC7qtH6VBtwGojCdahejy2 ffj+d8Xiu+E08wuIAyaDtc53lKillW6XlE8SkApnav9/dT0jjXfOcX9wIrfj63dd 2m2T70wbGqdNPXW4JGY7nUGc+01s1c2NP6leShgk8oMXV5AxHuEKYOjV2/g40qin 3U8CW9cQWdnm6Dewd3fNuSoCFMuZc9T/SjKvBwJ5uWkEXZrZxIZmtp1Kyp0KLLuv 5sxNb2ozsbdyHlybJAuf5GEyusEnFVCtoiQNGbYHFuy+St4Qx0D21GmhZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs34iu6rOYg6n4M25qWI7v5YLBCMB8GA1UdIwQY MBaAFI/u6UoOOyKAl2Su4eKPB4+tY2vDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYjkyZmEtNWU0Zi00MDJmLTk1Mzkt YTRiOTYxODA4MjAxLzEvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYjkyZmEtNWU0Zi00MDJmLTk1MzktYTRiOTYxODA4MjAx LzEvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFp1mBwpT YxCt2pYW/P7oSW8UXhWcfPDVIb2DeAJvCtDl6O/fzKJTtp7i2p6H66yxnVPavHL2 NKcwoM/LQWxx3QmlRkpaRnuFv7MBcH1pPFEE/WXh6f8IbICq0c9+BftmIuFBjANU xmvE+V1fQdkO/305IZUWN7zcvgSkmZ00jjrc5iF5c3IF5dnqM7Xp4X8WK0XQCKnq EsI4ujBR6WX2J2KpX3avCWf//Lm/qzFqIJczgvZLBqgAYeRMKuUN26Pc+9gV9TG0 4KW10TqdydrxlTJoGhl7CiVA1Jjo+tf9rXGeAPCX8u0wa++8W4Yn6akd1M7pBJyt V7T5RefVRwG92w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:28 2025 by rpki-client