This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json) Hash identifier: gqpSCVampfbTbu2IT92SvOZ13GYw0XL7J7MT8VBndes= Subject key identifier: 2D:3E:97:65:68:46:3D:B7:FA:4D:CB:69:50:AF:EF:C4:66:BB:6A:3D Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Certificate serial: 019B3569CF3CB7D992C2651D1BE44F3D2214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 07:01:25 +0000 Manifest this update: Fri 19 Dec 2025 07:01:25 +0000 Manifest next update: Sat 20 Dec 2025 07:01:25 +0000 Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=) 2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: 8XcT7h8oi2cjSJi6RLq/Jntvex2xaxFGETIABA4/LBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:cf:3c:b7:d9:92:c2:65:1d:1b:e4:4f:3d:22:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Validity Not Before: Dec 19 07:01:25 2025 GMT Not After : Dec 20 07:01:25 2025 GMT Subject: CN=2d3e976568463db7fa4dcb6950afefc466bb6a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:b6:0d:00:46:cf:98:57:13:06:64:b4:76: 8e:f0:6d:53:11:e2:18:0a:db:3c:a2:c9:eb:c2:54: bf:25:ff:d8:e7:8b:9a:ad:b6:bd:ad:30:3e:54:d6: 27:d8:a1:40:b2:eb:0a:3b:f1:42:85:8d:1d:ca:80: 4b:40:5a:a2:9a:c6:a6:31:72:84:ef:ad:1d:08:fd: 9d:bf:5b:ef:7c:ae:59:94:fe:fb:c3:da:d6:c4:f0: 15:d4:51:55:67:f0:38:93:07:07:18:c8:34:c2:de: ad:86:a0:0f:55:83:dc:bd:e8:5f:16:cf:d1:11:29: 7f:b6:87:01:1e:a3:bf:ba:29:53:0f:00:e4:a2:3c: 80:e3:67:1f:09:44:79:b3:d7:4b:30:16:3a:31:8b: 38:30:5a:68:bb:44:f3:4c:95:f2:31:12:9e:79:bd: 42:c3:4d:48:30:f5:7a:04:7e:49:35:8c:94:25:fc: 70:1e:89:d5:48:59:38:6a:5c:5f:14:2b:2b:c3:d1: c1:00:53:eb:39:de:6e:f2:09:c0:64:7c:0c:41:e8: 94:85:43:13:47:ce:60:6e:d5:e0:8b:3c:85:11:1f: d6:a0:f8:d9:e9:01:38:89:5b:3b:83:36:6f:7a:8a: 7e:15:95:f1:99:7e:ff:b1:3a:ce:9c:63:a9:2d:0a: e0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3E:97:65:68:46:3D:B7:FA:4D:CB:69:50:AF:EF:C4:66:BB:6A:3D X509v3 Authority Key Identifier: keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ac:14:22:8a:af:dc:3c:47:02:0b:03:ab:e2:d5:f5:2b:8c: 3d:d5:6a:06:67:2a:92:55:b4:46:ff:31:cd:db:e2:d6:71:bf: c5:3f:00:97:d1:59:77:bb:b1:dc:f6:db:7d:0c:17:fb:22:a9: 30:9f:d5:0c:aa:70:51:dd:ea:13:2f:d5:aa:d7:6a:af:28:19: 24:e1:2f:78:bc:de:e5:03:6d:87:17:7b:5a:b9:a9:39:ce:62: d3:a9:a5:5b:c0:42:48:7a:a0:35:80:00:b3:f9:7a:83:10:9f: 04:5e:1d:ab:be:e1:79:43:dc:44:58:cd:0f:64:3a:39:9d:4b: ba:fd:c2:fb:87:60:03:a3:b5:80:d4:d6:ae:46:7e:19:20:11: b9:24:e4:c0:5f:99:33:d7:17:e1:b1:74:90:46:4e:f0:e8:01: ea:e1:ec:42:c2:dc:92:3e:87:7e:d0:78:55:3a:18:19:f3:1d: 41:4b:7f:fd:0d:e7:f7:0c:9f:19:6d:22:f8:9d:c2:89:26:0c: be:12:ee:a4:09:53:e3:28:0a:7c:d1:54:7c:c3:c2:1e:e9:09: e0:fe:d4:82:c2:da:8d:c1:72:5c:6c:f7:ba:be:a0:55:a5:c9: 1c:18:c9:3d:dd:fe:62:84:ce:62:13:7e:15:63:8c:2f:6d:9d: e6:64:fb:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1ac88t9mSwmUdG+RPPSIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2I0OTZlYTdjZjc2M2QwNTgzMDgzNzFlMWJmNjdlNTNi YzdiYTMwHhcNMjUxMjE5MDcwMTI1WhcNMjUxMjIwMDcwMTI1WjAzMTEwLwYDVQQD EygyZDNlOTc2NTY4NDYzZGI3ZmE0ZGNiNjk1MGFmZWZjNDY2YmI2YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgli2DQBGz5hXEwZktHaO8G1TEeIY Cts8osnrwlS/Jf/Y54uarba9rTA+VNYn2KFAsusKO/FChY0dyoBLQFqimsamMXKE 760dCP2dv1vvfK5ZlP77w9rWxPAV1FFVZ/A4kwcHGMg0wt6thqAPVYPcvehfFs/R ESl/tocBHqO/uilTDwDkojyA42cfCUR5s9dLMBY6MYs4MFpou0TzTJXyMRKeeb1C w01IMPV6BH5JNYyUJfxwHonVSFk4alxfFCsrw9HBAFPrOd5u8gnAZHwMQeiUhUMT R85gbtXgizyFER/WoPjZ6QE4iVs7gzZveop+FZXxmX7/sTrOnGOpLQrgKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0+l2VoRj23+k3LaVCv78Rmu2o9MB8GA1UdIwQY MBaAFI97SW6nz3Y9BYMINx4b9n5TvHujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUt MjUxYjAxOWQ1MWE4LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUtMjUxYjAxOWQ1MWE4 LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6wUIoqv 3DxHAgsDq+LV9SuMPdVqBmcqklW0Rv8xzdvi1nG/xT8Al9FZd7ux3PbbfQwX+yKp MJ/VDKpwUd3qEy/VqtdqrygZJOEveLze5QNthxd7WrmpOc5i06mlW8BCSHqgNYAA s/l6gxCfBF4dq77heUPcRFjND2Q6OZ1Luv3C+4dgA6O1gNTWrkZ+GSARuSTkwF+Z M9cX4bF0kEZO8OgB6uHsQsLckj6HftB4VToYGfMdQUt//Q3n9wyfGW0i+J3CiSYM vhLupAlT4ygKfNFUfMPCHukJ4P7UgsLajcFyXGz3ur6gVaXJHBjJPd3+YoTOYhN+ FWOML22d5mT7Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:55:14 2025 by rpki-client