This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json) Hash identifier: XdXC4F6mEOx+bwYRQPBSYVuBm3gXyImv7eDMB+80YBw= Subject key identifier: A6:5D:CC:84:81:A3:A5:9B:14:88:DA:CC:FA:C4:9C:05:E2:CE:41:DA Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Certificate serial: 019B4100209717B6C56D6AA7D72438AC9E3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 13:01:25 +0000 Manifest this update: Sun 21 Dec 2025 13:01:25 +0000 Manifest next update: Mon 22 Dec 2025 13:01:25 +0000 Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=) 2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: Pm+M8N+sMLLrKYisUPc0R224asta+Bn5Rykx9y2sld8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:20:97:17:b6:c5:6d:6a:a7:d7:24:38:ac:9e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Validity Not Before: Dec 21 13:01:25 2025 GMT Not After : Dec 22 13:01:25 2025 GMT Subject: CN=a65dcc8481a3a59b1488daccfac49c05e2ce41da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:03:24:94:e4:10:8b:0c:b8:a3:87:86:b7: 1f:f3:5e:31:34:d2:37:33:a3:c2:42:a3:64:80:1a: 34:d9:5f:d3:17:98:b4:bb:09:9a:bf:d0:30:68:ec: 69:e1:24:85:f8:ba:c6:2a:a8:19:d9:36:54:86:50: da:42:01:1e:3b:0c:76:57:69:bc:24:b8:88:e6:77: 69:68:28:9d:47:1b:20:2d:a9:1d:43:bf:4e:ec:b3: ff:d5:a7:d5:ed:e6:f6:78:3d:fa:a3:f3:fa:8b:05: ed:e1:23:7b:b2:ee:68:a5:1f:1a:00:78:05:e4:72: e7:71:54:07:ad:7f:d0:b3:2c:2e:4f:47:78:03:85: 0c:b3:e2:74:1b:83:79:b3:63:f2:12:09:73:47:5b: 46:5e:e7:d6:ef:72:7e:89:4d:e0:bc:92:42:e0:33: 57:17:b0:bf:5b:78:58:56:d9:7f:73:a8:20:a1:b5: 47:bb:23:40:ed:3a:2b:87:e4:5a:e6:9d:8b:a5:da: f5:8d:a4:77:77:71:23:cd:7c:a5:37:69:d6:73:99: e3:ca:47:ef:6f:20:a9:62:37:93:9e:57:d5:d5:30: ae:0f:ba:d2:ef:c2:8b:f6:4b:5a:51:db:d9:f6:ff: 1d:7d:f1:2c:da:4f:6c:a4:8f:e5:b8:c2:fc:4b:2c: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5D:CC:84:81:A3:A5:9B:14:88:DA:CC:FA:C4:9C:05:E2:CE:41:DA X509v3 Authority Key Identifier: keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f4:67:aa:a2:5a:90:99:64:1c:46:15:81:6d:fd:f7:87:14: 2e:e4:74:bf:4a:dc:d4:51:ea:eb:6e:54:c4:5f:ce:77:8f:2a: 1b:17:d5:6e:30:a3:c2:c9:6d:ed:99:09:38:ab:56:1e:38:46: c6:60:eb:34:41:d0:a3:74:76:e3:20:b8:b2:a7:6d:f0:e6:3d: f2:89:0a:c1:ad:fd:eb:f5:3c:ff:66:95:52:9d:a3:35:34:87: de:b8:22:da:5e:59:74:ec:da:3a:5d:73:f6:a2:04:53:92:2c: a4:ea:0d:82:b9:da:65:72:05:cf:50:51:92:25:eb:9c:ef:ce: 77:b8:6a:f4:78:2c:25:a6:ed:dd:be:9e:8d:b9:fd:a3:45:30: f8:cf:d6:ab:55:21:0a:8d:34:0a:00:56:be:09:d1:41:32:68: 2c:39:de:58:b5:9f:f1:f5:74:11:d2:84:4e:4c:8c:7e:03:d0: 35:8e:6b:c7:36:9c:e3:44:16:28:cb:f2:e0:d0:05:c0:49:65: c3:9b:50:db:bc:fb:c5:f5:57:73:2e:50:a0:c4:2e:c2:d7:51: 9f:a8:4f:d3:d7:4b:b4:33:35:88:25:28:3e:0a:51:0a:ec:16: 4e:aa:62:9f:84:64:9d:4b:6d:e9:e6:69:b6:fb:39:46:9e:4e: e0:11:26:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBACCXF7bFbWqn1yQ4rJ4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2I0OTZlYTdjZjc2M2QwNTgzMDgzNzFlMWJmNjdlNTNi YzdiYTMwHhcNMjUxMjIxMTMwMTI1WhcNMjUxMjIyMTMwMTI1WjAzMTEwLwYDVQQD EyhhNjVkY2M4NDgxYTNhNTliMTQ4OGRhY2NmYWM0OWMwNWUyY2U0MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVsDJJTkEIsMuKOHhrcf814xNNI3 M6PCQqNkgBo02V/TF5i0uwmav9AwaOxp4SSF+LrGKqgZ2TZUhlDaQgEeOwx2V2m8 JLiI5ndpaCidRxsgLakdQ79O7LP/1afV7eb2eD36o/P6iwXt4SN7su5opR8aAHgF 5HLncVQHrX/QsywuT0d4A4UMs+J0G4N5s2PyEglzR1tGXufW73J+iU3gvJJC4DNX F7C/W3hYVtl/c6ggobVHuyNA7Torh+Ra5p2Lpdr1jaR3d3EjzXylN2nWc5njykfv byCpYjeTnlfV1TCuD7rS78KL9ktaUdvZ9v8dffEs2k9spI/luML8SywblQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZdzISBo6WbFIjazPrEnAXizkHaMB8GA1UdIwQY MBaAFI97SW6nz3Y9BYMINx4b9n5TvHujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUt MjUxYjAxOWQ1MWE4LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUtMjUxYjAxOWQ1MWE4 LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/RnqqJa kJlkHEYVgW3994cULuR0v0rc1FHq625UxF/Od48qGxfVbjCjwslt7ZkJOKtWHjhG xmDrNEHQo3R24yC4sqdt8OY98okKwa396/U8/2aVUp2jNTSH3rgi2l5ZdOzaOl1z 9qIEU5IspOoNgrnaZXIFz1BRkiXrnO/Od7hq9HgsJabt3b6ejbn9o0Uw+M/Wq1Uh Co00CgBWvgnRQTJoLDneWLWf8fV0EdKETkyMfgPQNY5rxzac40QWKMvy4NAFwEll w5tQ27z7xfVXcy5QoMQuwtdRn6hP09dLtDM1iCUoPgpRCuwWTqpin4RknUtt6eZp tvs5Rp5O4BEmfw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:16:38 2025 by rpki-client