This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft File: J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json) Hash identifier: a+Opg7zj/ylacgWuzQGiRPI+v04UKDoyeWuUMxTcpCw= Subject key identifier: FB:A1:6F:A4:22:8D:69:C3:E5:6B:02:E2:28:15:BB:27:3D:97:B7:D9 Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F Certificate issuer: /CN=27b2133219989e6a32d71158d0852a516eb6f79f Certificate serial: 019B24E35EE9FFC674EB9B6CDB8D12267C17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft Manifest number: 1401 Signing time: Tue 16 Dec 2025 02:00:39 +0000 Manifest this update: Tue 16 Dec 2025 02:00:39 +0000 Manifest next update: Wed 17 Dec 2025 02:00:39 +0000 Files and hashes: 1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=) 2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: tUySHqVqNzF4dy0V/quFK7FtypC7JQWvwo7a5Fe0o04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:5e:e9:ff:c6:74:eb:9b:6c:db:8d:12:26:7c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f Validity Not Before: Dec 16 02:00:39 2025 GMT Not After : Dec 17 02:00:39 2025 GMT Subject: CN=fba16fa4228d69c3e56b02e22815bb273d97b7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:78:70:b9:02:66:ef:23:38:d0:65:d2:d4: c7:62:7a:c2:ec:e9:ac:dc:11:e9:b2:84:9a:3c:7f: 1a:9b:6b:94:f6:fa:0e:0d:7e:6c:bc:19:da:cb:09: eb:56:5a:95:3b:58:87:4d:e2:15:d8:70:8f:d4:69: 44:aa:e2:6d:2b:22:39:b1:e0:5f:07:3f:e6:41:4a: e0:95:89:24:8a:a2:92:9c:5a:de:80:6e:f1:82:15: bc:d2:6f:f9:65:b2:0e:6e:34:9a:4d:7f:48:4d:57: 99:db:0e:a8:83:0b:78:a6:8e:56:5d:cb:96:bd:b0: b5:88:67:18:6d:d7:df:22:8c:1e:e5:14:c2:d1:dc: 17:23:59:91:fa:ea:c8:02:34:8c:bf:4d:93:9e:92: bc:80:cb:bd:b6:12:ba:a7:7f:78:dc:ae:f7:2b:26: 46:d1:38:e4:0e:1a:4b:eb:db:63:9b:76:56:58:64: 59:4f:5b:ab:19:ac:47:3e:9c:c0:a3:6f:70:ce:43: 72:fc:9e:bf:bb:fa:43:48:6a:2d:d3:bd:92:41:ca: f1:99:50:b5:ce:f3:12:e8:61:67:54:8c:71:83:66: af:28:c7:2e:1d:cb:de:94:31:c9:94:c4:a0:ff:1b: 4c:73:40:9d:08:c1:e8:8b:f3:94:3c:18:75:8b:0c: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A1:6F:A4:22:8D:69:C3:E5:6B:02:E2:28:15:BB:27:3D:97:B7:D9 X509v3 Authority Key Identifier: keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a6:1e:9f:e0:a6:a5:26:88:94:ea:33:5d:7a:20:ce:b9:0b: 89:08:65:e9:ec:08:15:00:58:48:60:40:fb:ed:b3:61:5b:f9: 98:93:b8:f2:49:1a:c1:3a:ac:7d:79:0b:7c:c8:47:67:25:a8: 7e:e4:a8:ae:c5:c6:4f:de:c5:53:29:3a:47:74:6e:43:d4:ac: 5f:41:3c:9a:2f:16:cb:2d:aa:37:18:e6:31:98:2c:61:31:d0: 9d:b1:24:a3:54:1a:70:58:2a:5f:88:c1:cd:72:02:02:71:ea: 38:c5:cc:80:8f:20:ee:a6:11:fe:c4:e0:07:59:57:7a:08:81: 56:0e:37:61:61:17:fc:33:c4:e5:4d:d4:6e:ac:da:60:94:07: 02:90:59:fe:07:ab:83:42:5a:a2:68:9d:17:6a:bf:d5:00:77: 1d:84:e7:c4:d6:95:2a:7d:ee:d2:b6:43:69:a7:4f:08:7d:1d: 1a:45:f2:db:d1:7f:b8:cd:57:94:b5:b3:4c:1c:fb:7d:d1:41: a5:08:8d:60:8a:f6:b8:21:f8:de:24:70:12:39:2e:47:95:68: 05:2a:00:53:69:45:2b:75:37:22:b8:a8:83:c6:5b:b5:8b:1b: 8a:3d:46:32:b4:58:66:bd:c0:39:3e:62:f5:84:9f:b5:c7:fc: 5e:5c:8e:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk417p/8Z065ts240SJnwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjIxMzMyMTk5ODllNmEzMmQ3MTE1OGQwODUyYTUxNmVi NmY3OWYwHhcNMjUxMjE2MDIwMDM5WhcNMjUxMjE3MDIwMDM5WjAzMTEwLwYDVQQD EyhmYmExNmZhNDIyOGQ2OWMzZTU2YjAyZTIyODE1YmIyNzNkOTdiN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRd4cLkCZu8jONBl0tTHYnrC7Oms 3BHpsoSaPH8am2uU9voODX5svBnaywnrVlqVO1iHTeIV2HCP1GlEquJtKyI5seBf Bz/mQUrglYkkiqKSnFregG7xghW80m/5ZbIObjSaTX9ITVeZ2w6ogwt4po5WXcuW vbC1iGcYbdffIowe5RTC0dwXI1mR+urIAjSMv02TnpK8gMu9thK6p3943K73KyZG 0TjkDhpL69tjm3ZWWGRZT1urGaxHPpzAo29wzkNy/J6/u/pDSGot072SQcrxmVC1 zvMS6GFnVIxxg2avKMcuHcvelDHJlMSg/xtMc0CdCMHoi/OUPBh1iwxDKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuhb6QijWnD5WsC4igVuyc9l7fZMB8GA1UdIwQY MBaAFCeyEzIZmJ5qMtcRWNCFKlFutvefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jNjY2MDYtMmFlOC00YWRhLWIzNWIt YzJlOGEwMzAzZmMzLzEvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jNjY2MDYtMmFlOC00YWRhLWIzNWItYzJlOGEwMzAzZmMz LzEvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKYen+Cm pSaIlOozXXogzrkLiQhl6ewIFQBYSGBA++2zYVv5mJO48kkawTqsfXkLfMhHZyWo fuSorsXGT97FUyk6R3RuQ9SsX0E8mi8Wyy2qNxjmMZgsYTHQnbEko1QacFgqX4jB zXICAnHqOMXMgI8g7qYR/sTgB1lXegiBVg43YWEX/DPE5U3UbqzaYJQHApBZ/ger g0JaomidF2q/1QB3HYTnxNaVKn3u0rZDaadPCH0dGkXy29F/uM1XlLWzTBz7fdFB pQiNYIr2uCH43iRwEjkuR5VoBSoAU2lFK3U3Iriog8ZbtYsbij1GMrRYZr3AOT5i 9YSftcf8XlyORA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:08:54 2025 by rpki-client