This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json) Hash identifier: OTV2oeIUVOgYT0y36yyEobzmGBw0ahx8Vtmp9Dnu6cM= Subject key identifier: F2:A9:D1:05:C6:63:02:FA:14:AC:E7:3A:12:DD:1C:2A:5A:8A:2C:6E Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c Certificate serial: 019B5A5192A7EAAA4678BF2ECD4F75073E23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 11:00:53 +0000 Manifest this update: Fri 26 Dec 2025 11:00:53 +0000 Manifest next update: Sat 27 Dec 2025 11:00:53 +0000 Files and hashes: 1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=) 2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: zjddS8M7JBtlSgA215RK2IXnvEt53FySrNktQtTT1jI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:92:a7:ea:aa:46:78:bf:2e:cd:4f:75:07:3e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c Validity Not Before: Dec 26 11:00:53 2025 GMT Not After : Dec 27 11:00:53 2025 GMT Subject: CN=f2a9d105c66302fa14ace73a12dd1c2a5a8a2c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6a:8a:d3:a6:78:ca:b9:ae:cb:d3:62:a5:46: da:2d:36:c2:bc:d7:20:00:42:a1:db:79:3a:36:76: b0:f9:9a:b0:b8:58:13:ab:18:61:a8:16:e1:64:cf: b1:08:ae:20:2d:d5:7f:f5:8f:2b:e9:f1:19:a0:df: 6f:eb:0a:68:56:76:f5:ea:25:69:6d:37:34:1b:cd: 91:bc:f3:28:06:90:8e:dc:72:42:7f:50:1e:a6:05: 0d:13:10:8b:b7:4c:89:64:c4:06:ed:9a:34:be:3d: 11:67:b1:d1:79:67:b2:ec:fb:8c:6d:17:13:de:8b: 1b:18:cf:b5:9e:31:ce:db:aa:06:e9:0b:86:c9:a1: 4b:8c:71:7f:91:de:fc:0e:82:04:5c:b1:50:bb:ee: 8b:c0:10:cd:f9:a9:2a:5c:3b:28:2e:d8:b3:ba:52: ea:cd:3b:6a:67:b9:51:6b:42:5d:42:30:2e:a3:d8: 0c:05:95:31:db:fb:2a:94:d0:23:e2:9e:b7:38:e1: cc:f2:1a:54:d0:ad:9a:bf:89:24:99:46:40:65:9c: 79:fe:da:21:53:e5:87:32:cf:5b:7a:68:cd:bf:39: 21:bb:86:d0:d8:f6:b5:0b:d1:91:ea:92:13:0f:13: 0d:1a:6c:49:cb:94:08:a9:20:b4:64:ca:52:d6:18: eb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A9:D1:05:C6:63:02:FA:14:AC:E7:3A:12:DD:1C:2A:5A:8A:2C:6E X509v3 Authority Key Identifier: keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4d:7f:e3:ec:c2:ba:eb:9a:13:13:ef:5b:e3:db:80:8f:19: 03:30:b4:e9:ed:25:b0:8d:17:d1:25:20:3e:ef:50:45:ad:fa: 6f:72:fd:fb:13:ac:f2:79:81:b4:8a:11:57:3e:3f:50:ea:13: 76:68:3c:29:61:85:4f:b4:37:3d:70:a6:f8:17:d9:bf:52:fa: 84:ec:ef:6c:7a:0b:1b:85:88:cc:bf:98:3c:44:61:c3:59:15: 06:0d:0e:41:e2:b7:3e:b3:01:75:be:f2:88:03:07:30:75:4a: 58:22:a6:4f:57:78:4e:be:87:ac:b1:74:84:52:8b:3f:32:e8: 67:6a:bd:00:29:61:5a:d6:13:45:9d:56:9a:29:85:63:c1:d0: d8:c5:58:d5:d6:bb:13:9f:e0:11:df:62:3d:b5:a9:fc:b8:f5: 41:8a:64:24:cb:bd:01:5f:8b:2f:4e:be:58:3d:e6:d8:0f:a3: 64:e6:38:17:43:95:cb:a3:53:45:85:31:6a:88:57:19:4b:14: 55:43:c0:87:dc:06:33:97:6c:a1:a7:1e:e8:38:0e:b4:ca:52: e7:44:29:2f:7b:90:1f:f2:61:85:78:99:6d:6f:7c:df:19:04: 5a:a3:2a:9e:0d:d2:41:68:52:ff:20:ad:aa:ee:b7:a6:4e:cd: 59:d8:b9:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZKn6qpGeL8uzU91Bz4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYjYxMzNkNWMyMTA5ZDhhNmY5YmJjYWE0OTZkYmVhZTM0 Nzk3NWMwHhcNMjUxMjI2MTEwMDUzWhcNMjUxMjI3MTEwMDUzWjAzMTEwLwYDVQQD EyhmMmE5ZDEwNWM2NjMwMmZhMTRhY2U3M2ExMmRkMWMyYTVhOGEyYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WqK06Z4yrmuy9NipUbaLTbCvNcg AEKh23k6Nnaw+ZqwuFgTqxhhqBbhZM+xCK4gLdV/9Y8r6fEZoN9v6wpoVnb16iVp bTc0G82RvPMoBpCO3HJCf1AepgUNExCLt0yJZMQG7Zo0vj0RZ7HReWey7PuMbRcT 3osbGM+1njHO26oG6QuGyaFLjHF/kd78DoIEXLFQu+6LwBDN+akqXDsoLtizulLq zTtqZ7lRa0JdQjAuo9gMBZUx2/sqlNAj4p63OOHM8hpU0K2av4kkmUZAZZx5/toh U+WHMs9bemjNvzkhu4bQ2Pa1C9GR6pITDxMNGmxJy5QIqSC0ZMpS1hjrgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKp0QXGYwL6FKznOhLdHCpaiixuMB8GA1UdIwQY MBaAFI+2Ez1cIQnYpvm7yqSW2+rjR5dcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQt NDUxYTlhZTRjZTUxLzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQtNDUxYTlhZTRjZTUx LzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM01/4+zC uuuaExPvW+PbgI8ZAzC06e0lsI0X0SUgPu9QRa36b3L9+xOs8nmBtIoRVz4/UOoT dmg8KWGFT7Q3PXCm+BfZv1L6hOzvbHoLG4WIzL+YPERhw1kVBg0OQeK3PrMBdb7y iAMHMHVKWCKmT1d4Tr6HrLF0hFKLPzLoZ2q9AClhWtYTRZ1WmimFY8HQ2MVY1da7 E5/gEd9iPbWp/Lj1QYpkJMu9AV+LL06+WD3m2A+jZOY4F0OVy6NTRYUxaohXGUsU VUPAh9wGM5dsoace6DgOtMpS50QpL3uQH/JhhXiZbW983xkEWqMqng3SQWhS/yCt qu63pk7NWdi5bw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:02:40 2025 by rpki-client