This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json) Hash identifier: k3UA4Av+WJHmbAC2ZhuUGl46Hs2oUB8Ei/opKC94qK8= Subject key identifier: F3:4E:2A:14:24:9C:7B:9E:86:3F:15:99:6A:71:F7:74:14:B5:16:14 Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc Certificate serial: 019B36E9CE50755C303D64F8063FE5DA4A8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 14:00:50 +0000 Manifest this update: Fri 19 Dec 2025 14:00:50 +0000 Manifest next update: Sat 20 Dec 2025 14:00:50 +0000 Files and hashes: 1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=) 2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: Tsg/EKcOF1s7ZEswf2lj0gDEcOKLho0oKgd+m9ZkLWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:ce:50:75:5c:30:3d:64:f8:06:3f:e5:da:4a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc Validity Not Before: Dec 19 14:00:50 2025 GMT Not After : Dec 20 14:00:50 2025 GMT Subject: CN=f34e2a14249c7b9e863f15996a71f77414b51614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:ac:3f:51:6c:16:05:20:11:ae:5a:86:d3: 09:b9:7d:5a:c2:92:57:20:70:83:e7:b9:e4:ba:28: 6d:a6:8a:a0:a5:ce:68:45:db:31:4c:49:45:f2:4e: 37:bc:59:1a:53:31:f5:9c:55:41:02:44:ff:97:34: 39:21:11:28:52:2d:14:9e:2b:b7:0d:76:33:f1:3d: 82:eb:4e:e4:cb:55:33:0c:fb:e9:b2:cd:5c:2b:6d: 5d:13:78:38:8a:69:d1:0d:05:9e:42:22:62:4c:2f: 94:46:72:36:53:4d:b7:92:89:12:e6:6d:81:7b:c5: 25:f6:e7:47:74:97:93:79:15:ab:5b:4a:be:1b:cb: 6b:a6:9f:a7:83:8a:d5:b7:e7:11:a0:35:a9:d6:34: fb:93:d7:8d:43:0a:d2:c6:27:cd:64:ec:58:ac:06: 14:aa:6d:5a:18:17:36:68:17:f9:51:01:f3:3f:b4: d1:15:ae:8b:2a:3b:39:b8:9a:e3:3e:44:a2:13:de: 57:cf:f0:2c:68:c8:66:a6:4a:36:5e:e0:b2:b6:53: 6d:82:1a:f5:95:3e:a2:ec:a5:35:bc:c2:5f:2e:80: 93:78:63:14:67:83:94:9f:11:9b:0e:d4:e5:67:29: 84:90:41:cb:84:ba:15:26:b9:21:80:6a:c8:1e:c9: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4E:2A:14:24:9C:7B:9E:86:3F:15:99:6A:71:F7:74:14:B5:16:14 X509v3 Authority Key Identifier: keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9f:2b:58:3b:c0:bb:3f:68:f7:1c:7e:41:6e:50:7e:0c:77: 81:5f:88:bc:4e:5d:87:8a:02:38:b8:ec:07:95:cb:4d:dd:df: af:97:69:1b:79:25:63:39:2c:94:c2:8b:a8:23:b8:65:f0:51: 98:76:06:0b:7c:fa:28:9e:e3:20:12:ea:e7:9f:03:35:55:fb: 85:ba:fd:ee:e0:eb:66:3d:64:87:66:d4:da:01:f9:54:b6:70: e9:25:a4:35:c3:4e:85:94:32:f3:76:cc:04:b4:89:96:ee:f4: 27:b0:4e:8d:77:98:1f:9f:21:57:26:9c:37:ab:b7:af:20:8b: 95:64:48:77:b8:6e:32:ad:1f:94:e8:6d:12:f6:83:36:15:18: 7a:9f:1a:c8:07:30:d1:5d:58:c3:49:0f:e5:33:6c:60:20:55: 06:10:2a:89:ed:7a:d6:ee:b9:b9:b1:7d:a2:ea:85:dc:11:02: 23:0d:19:9c:5d:5c:9a:4b:47:02:c0:7b:1c:6a:ff:5b:83:23: b2:8b:ea:9b:28:e0:4d:8a:71:b9:44:91:a3:3e:5a:0c:a0:79: eb:28:7b:74:fa:5e:5a:78:b7:ee:26:da:49:99:31:0d:51:b6: 52:07:9c:f3:3a:52:47:b0:15:5c:ff:90:fa:be:17:96:19:66: f2:0f:8f:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26c5QdVwwPWT4Bj/l2kqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjEzMGI2ZjQ1ZjAwZjdjMWQxMzViNmM5M2IyMGU2OTA0 MTJjZmMwHhcNMjUxMjE5MTQwMDUwWhcNMjUxMjIwMTQwMDUwWjAzMTEwLwYDVQQD EyhmMzRlMmExNDI0OWM3YjllODYzZjE1OTk2YTcxZjc3NDE0YjUxNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx62sP1FsFgUgEa5ahtMJuX1awpJX IHCD57nkuihtpoqgpc5oRdsxTElF8k43vFkaUzH1nFVBAkT/lzQ5IREoUi0Uniu3 DXYz8T2C607ky1UzDPvpss1cK21dE3g4imnRDQWeQiJiTC+URnI2U023kokS5m2B e8Ul9udHdJeTeRWrW0q+G8trpp+ng4rVt+cRoDWp1jT7k9eNQwrSxifNZOxYrAYU qm1aGBc2aBf5UQHzP7TRFa6LKjs5uJrjPkSiE95Xz/AsaMhmpko2XuCytlNtghr1 lT6i7KU1vMJfLoCTeGMUZ4OUnxGbDtTlZymEkEHLhLoVJrkhgGrIHslSUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNOKhQknHuehj8VmWpx93QUtRYUMB8GA1UdIwQY MBaAFCfxMLb0XwD3wdE1tsk7IOaQQSz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQt MDdkYmQ5MDBjNGFkLzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQtMDdkYmQ5MDBjNGFk LzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABp8rWDvA uz9o9xx+QW5Qfgx3gV+IvE5dh4oCOLjsB5XLTd3fr5dpG3klYzkslMKLqCO4ZfBR mHYGC3z6KJ7jIBLq558DNVX7hbr97uDrZj1kh2bU2gH5VLZw6SWkNcNOhZQy83bM BLSJlu70J7BOjXeYH58hVyacN6u3ryCLlWRId7huMq0flOhtEvaDNhUYep8ayAcw 0V1Yw0kP5TNsYCBVBhAqie161u65ubF9ouqF3BECIw0ZnF1cmktHAsB7HGr/W4Mj sovqmyjgTYpxuUSRoz5aDKB56yh7dPpeWni37ibaSZkxDVG2Ugec8zpSR7AVXP+Q +r4Xlhlm8g+PNw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:31 2025 by rpki-client