This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json) Hash identifier: 922gCIkvCQxUg1wkBearn/jteMPHzS25Gc3rdk4Nh2g= Subject key identifier: 6C:FC:3C:F1:69:D0:6A:AC:E1:D8:9E:62:AA:E7:34:DE:C7:1A:8A:E0 Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57 Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57 Certificate serial: 019B34FB45F189FE79F976759C65F604F457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 05:00:41 +0000 Manifest this update: Fri 19 Dec 2025 05:00:41 +0000 Manifest next update: Sat 20 Dec 2025 05:00:41 +0000 Files and hashes: 1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: Phc2ZaB1dT2DEmst8zjrZtByPhB7UPyeLwJkLZFYlIo=) 2: c8_yE52FicqJDyLTZs83EXz0uyw.roa (hash: dhlDGU7iUlzSklC2rupr+JKl7gpxZEkuve5PU6eqNIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:45:f1:89:fe:79:f9:76:75:9c:65:f6:04:f4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57 Validity Not Before: Dec 19 05:00:41 2025 GMT Not After : Dec 20 05:00:41 2025 GMT Subject: CN=6cfc3cf169d06aace1d89e62aae734dec71a8ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:75:7e:69:64:10:b6:6c:9e:fc:88:14:da: f3:63:14:3a:15:52:0d:1d:e3:31:f4:7d:13:e3:92: f0:9e:da:f3:8f:d3:e8:19:b4:9c:4d:8f:7f:00:06: 5e:c0:90:4a:a2:1c:06:16:33:89:99:64:e3:c0:76: f3:c2:4e:c3:e0:72:a7:b6:7a:e5:93:d2:66:eb:4a: fd:21:a4:88:a4:6e:b1:45:26:dc:05:6d:9f:a0:63: 2f:58:c0:e3:ff:52:4a:aa:ff:2e:51:9f:6a:8b:84: 3c:43:3f:ec:b6:b3:17:f1:58:7f:ec:f3:c4:49:05: 35:d8:65:59:f4:ef:8f:28:4d:ee:46:d5:7d:40:23: 00:cf:5e:52:6b:a7:12:26:ec:16:88:3f:2e:88:e2: 6c:58:a1:b7:35:e9:5d:f9:9c:97:76:2f:82:bf:3c: 87:bf:9d:30:26:c3:b9:3d:c5:c7:eb:92:01:f3:32: 1d:d2:a1:c6:80:2f:04:e2:5f:70:0c:53:96:6e:5c: 1e:3f:b4:3f:14:21:96:90:28:fc:b6:6a:e9:1b:05: 7c:7d:c3:83:b1:c6:34:7e:08:ca:b3:ee:7b:fe:43: 14:c9:2e:7b:53:60:33:e5:a6:33:30:28:2d:3c:53: ea:eb:19:f7:0b:54:a2:fa:fd:d6:e1:03:c1:98:8f: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FC:3C:F1:69:D0:6A:AC:E1:D8:9E:62:AA:E7:34:DE:C7:1A:8A:E0 X509v3 Authority Key Identifier: keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:00:b5:15:ea:d0:0f:44:ef:f4:b8:5e:d1:cc:ba:a3:69:75: 59:b9:da:c7:d6:fb:5a:1a:ea:54:5a:9f:b8:9e:ce:9b:0f:23: 3e:e2:eb:37:dd:a6:97:b7:4a:f3:1f:ac:bc:a4:0c:62:7b:91: d0:f7:5d:bf:87:2a:a3:8a:f3:d7:3f:db:db:ed:14:01:95:72: 9b:3d:7b:55:e9:17:6f:a2:2e:fb:5c:dd:f0:03:c6:b6:bf:7f: cd:0b:7d:18:06:bf:d2:55:6f:26:71:9e:c1:4d:cb:d6:8e:dc: 79:49:4f:ab:fe:a7:0f:bb:36:cf:e2:48:9a:ea:4d:a0:c1:d8: f7:0f:65:3f:54:da:89:93:55:96:dc:f0:c7:00:5f:8d:bd:24: 94:0c:c5:e8:61:8f:9c:c0:68:ec:c3:cf:85:ad:2e:c3:92:50: 2f:54:8c:ef:b8:91:56:90:6b:72:d6:d4:dd:68:54:f1:91:44: 84:39:1f:3b:50:c0:e8:b6:50:3d:6f:e6:5a:80:fc:b7:80:c9: 2e:c6:58:93:63:e9:86:4a:d2:c2:44:ec:f8:0b:c3:57:4d:c9: 5e:0b:8f:88:56:e2:b5:dd:9a:82:ca:27:64:ce:2c:09:24:83: b9:d4:5a:0b:dc:c0:9a:53:ef:8a:53:2d:cd:53:b5:e2:59:a7: 7b:db:93:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+0Xxif55+XZ1nGX2BPRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YmIzMmFhOGM5ZjhkMDVjNTE3YmUyYWQ2NjUyZjY2NTUw YThkNTcwHhcNMjUxMjE5MDUwMDQxWhcNMjUxMjIwMDUwMDQxWjAzMTEwLwYDVQQD Eyg2Y2ZjM2NmMTY5ZDA2YWFjZTFkODllNjJhYWU3MzRkZWM3MWE4YWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvZ1fmlkELZsnvyIFNrzYxQ6FVIN HeMx9H0T45Lwntrzj9PoGbScTY9/AAZewJBKohwGFjOJmWTjwHbzwk7D4HKntnrl k9Jm60r9IaSIpG6xRSbcBW2foGMvWMDj/1JKqv8uUZ9qi4Q8Qz/strMX8Vh/7PPE SQU12GVZ9O+PKE3uRtV9QCMAz15Sa6cSJuwWiD8uiOJsWKG3Neld+ZyXdi+CvzyH v50wJsO5PcXH65IB8zId0qHGgC8E4l9wDFOWblweP7Q/FCGWkCj8tmrpGwV8fcOD scY0fgjKs+57/kMUyS57U2Az5aYzMCgtPFPq6xn3C1Si+v3W4QPBmI80YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz8PPFp0Gqs4dieYqrnNN7HGorgMB8GA1UdIwQY MBaAFCe7MqqMn40FxRe+KtZlL2ZVCo1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUt NDg0MjIxYTFmMjg1LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUtNDg0MjIxYTFmMjg1 LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegC1FerQ D0Tv9Lhe0cy6o2l1Wbnax9b7WhrqVFqfuJ7Omw8jPuLrN92ml7dK8x+svKQMYnuR 0Pddv4cqo4rz1z/b2+0UAZVymz17VekXb6Iu+1zd8APGtr9/zQt9GAa/0lVvJnGe wU3L1o7ceUlPq/6nD7s2z+JImupNoMHY9w9lP1TaiZNVltzwxwBfjb0klAzF6GGP nMBo7MPPha0uw5JQL1SM77iRVpBrctbU3WhU8ZFEhDkfO1DA6LZQPW/mWoD8t4DJ LsZYk2PphkrSwkTs+AvDV03JXguPiFbitd2agsonZM4sCSSDudRaC9zAmlPvilMt zVO14lmne9uTGw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:24:20 2025 by rpki-client