This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json) Hash identifier: G2maueVcYUNltlV2HZYSCMpr7Ks0qHCyTxRPAjt60UQ= Subject key identifier: 7B:FF:A0:FA:E0:B2:C6:9C:42:FE:3E:B2:92:B7:AE:FE:24:66:54:6A Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3 Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3 Certificate serial: 019B3EDAD8977F3410282FDC281868789D79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft Manifest number: 1063 Signing time: Sun 21 Dec 2025 03:01:28 +0000 Manifest this update: Sun 21 Dec 2025 03:01:28 +0000 Manifest next update: Mon 22 Dec 2025 03:01:28 +0000 Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=) 2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=) 3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: iDBguflMvx13/4s/65ZpuAKFWkNGv6zvgoBW+rkdtT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:d8:97:7f:34:10:28:2f:dc:28:18:68:78:9d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3 Validity Not Before: Dec 21 03:01:28 2025 GMT Not After : Dec 22 03:01:28 2025 GMT Subject: CN=7bffa0fae0b2c69c42fe3eb292b7aefe2466546a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:1e:ed:99:61:08:fa:7f:fc:94:56:a7:e2: ac:0c:5b:39:78:fe:37:8b:b5:47:d6:bd:e3:f3:90: 70:bd:ed:dc:b1:21:41:d9:6e:92:42:f5:92:3c:f4: 42:fe:bd:ac:ee:04:6c:45:d5:13:3b:44:4e:6a:08: 09:f3:c8:88:e7:50:37:a5:15:bd:09:d7:25:8e:33: c2:58:8e:4b:5e:2a:85:7a:5a:7d:17:cb:cc:ca:8d: 0a:25:8c:9f:86:1e:8a:8e:25:45:b1:ad:a9:82:bf: 62:cd:4c:31:36:0b:73:3e:35:9c:30:de:e2:78:15: f6:f0:d8:39:0b:e5:9c:27:9c:b6:00:a7:bb:56:fe: b2:59:6e:73:ce:52:b7:3d:9a:4e:0c:03:0b:10:47: 12:1a:23:50:aa:b5:49:c8:a0:88:88:0d:c9:e5:72: 0b:12:d8:b0:7a:77:a6:24:b9:e0:53:3d:fd:d9:8d: c3:d2:17:11:cb:5d:e0:8f:98:71:d9:40:29:a6:46: 2e:ae:60:a8:67:1c:c2:05:8d:c1:fe:9d:33:db:b7: ac:55:fa:16:ae:3c:3b:94:5c:b4:52:9f:d8:c6:76: 07:fc:4d:98:a7:93:81:39:b1:db:5a:a6:a0:82:85: 84:76:2c:9e:68:8b:50:5d:2a:6f:cf:a3:37:b7:e7: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FF:A0:FA:E0:B2:C6:9C:42:FE:3E:B2:92:B7:AE:FE:24:66:54:6A X509v3 Authority Key Identifier: keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e0:69:7a:40:6b:01:8d:03:33:37:87:0d:e1:32:d2:30:8c: 99:00:b5:bb:41:43:bc:6a:42:d8:47:06:2b:18:5f:ab:ff:77: 30:5f:f5:a6:19:8c:be:a0:d7:97:4e:f5:8f:5f:76:ab:9e:4f: ce:47:69:c9:a9:f2:70:55:f7:ac:58:4f:f1:c8:6d:d3:8f:44: 98:90:34:8f:08:fa:84:66:d0:24:d7:92:a7:e8:88:8c:a4:43: 56:1c:bf:d5:a8:17:87:25:ae:b2:68:c1:bc:f7:22:1e:2a:3c: a6:2c:5f:1e:19:88:99:32:d9:3c:b3:70:45:7d:fa:1a:5c:46: c3:7c:9d:7d:f7:b5:df:1a:c9:ca:cb:d4:28:e6:f2:07:2d:3e: 59:8c:51:cc:3c:53:5c:c2:f2:47:d8:a4:73:a8:0c:0b:b2:86: a8:13:9c:9c:ba:0e:85:e6:8f:bb:cb:c1:fe:a1:45:c5:75:8e: d5:6a:de:d8:d2:78:cd:50:46:ab:55:56:ee:9a:fe:ae:d9:62: bc:bf:1f:84:31:53:23:7d:07:bd:e9:26:16:04:87:de:b1:78: db:22:07:00:eb:7f:64:b9:c1:dc:d2:da:6d:3d:23:12:10:19: a8:c9:b8:3f:fb:d0:61:03:0c:63:fa:28:76:4d:57:fb:75:13: 1f:46:62:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2tiXfzQQKC/cKBhoeJ15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx YTMyYjMwHhcNMjUxMjIxMDMwMTI4WhcNMjUxMjIyMDMwMTI4WjAzMTEwLwYDVQQD Eyg3YmZmYTBmYWUwYjJjNjljNDJmZTNlYjI5MmI3YWVmZTI0NjY1NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizge7ZlhCPp//JRWp+KsDFs5eP43 i7VH1r3j85Bwve3csSFB2W6SQvWSPPRC/r2s7gRsRdUTO0ROaggJ88iI51A3pRW9 CdcljjPCWI5LXiqFelp9F8vMyo0KJYyfhh6KjiVFsa2pgr9izUwxNgtzPjWcMN7i eBX28Ng5C+WcJ5y2AKe7Vv6yWW5zzlK3PZpODAMLEEcSGiNQqrVJyKCIiA3J5XIL EtiwenemJLngUz392Y3D0hcRy13gj5hx2UAppkYurmCoZxzCBY3B/p0z27esVfoW rjw7lFy0Up/YxnYH/E2Yp5OBObHbWqaggoWEdiyeaItQXSpvz6M3t+fgqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv/oPrgssacQv4+spK3rv4kZlRqMB8GA1UdIwQY MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguBpekBr AY0DMzeHDeEy0jCMmQC1u0FDvGpC2EcGKxhfq/93MF/1phmMvqDXl071j192q55P zkdpyanycFX3rFhP8cht049EmJA0jwj6hGbQJNeSp+iIjKRDVhy/1agXhyWusmjB vPciHio8pixfHhmImTLZPLNwRX36GlxGw3ydffe13xrJysvUKObyBy0+WYxRzDxT XMLyR9ikc6gMC7KGqBOcnLoOheaPu8vB/qFFxXWO1Wre2NJ4zVBGq1VW7pr+rtli vL8fhDFTI30HvekmFgSH3rF42yIHAOt/ZLnB3NLabT0jEhAZqMm4P/vQYQMMY/oo dk1X+3UTH0Zihw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:13:38 2025 by rpki-client