This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json) Hash identifier: 8EHBydgEu7joD8UIo+TleXCsRFSKTcj/+5eazdRj5yg= Subject key identifier: 2F:02:19:1E:A6:75:AE:F6:72:D4:D7:7A:DF:0F:66:54:96:4E:4B:92 Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Certificate serial: 019AF19B7F900FF7EB0AE2F36C3193EB5B1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft Manifest number: 10D6 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: ifEf8CbLboHCxWm7utYaFh5KXvmdp5rnk6cD8UEJDg8=) 2: vdjx6mVJjB2A5HRAp4zCXF1WOmI.roa (hash: nZy4/J4/xAAVv0Nm8r/1Dh/36Nz5IhwHl0WfPkQGlFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7f:90:0f:f7:eb:0a:e2:f3:6c:31:93:eb:5b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=2f02191ea675aef672d4d77adf0f6654964e4b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:44:db:a9:ed:f7:9a:5a:d3:0f:3c:cd:04: ad:be:b9:21:fa:82:44:50:01:a7:17:92:19:36:e0: 7d:1a:5b:bf:08:73:26:93:b3:69:75:69:d9:45:e3: c6:25:f9:b0:b9:66:83:72:00:c2:10:d6:9f:d5:28: dd:5a:c4:fc:30:3e:be:44:2b:b6:d7:62:46:ff:27: e5:60:ca:af:62:75:2a:a0:1f:67:d5:5f:e8:19:55: 4c:dd:95:44:80:f0:dc:cd:9c:d6:27:90:22:ec:6e: 1b:b2:b2:51:25:7e:7a:02:b0:68:ff:3e:84:25:d9: 17:7e:3f:9f:dc:60:d3:7f:39:a6:b3:23:f7:0d:4f: 36:c5:00:b1:3f:17:0a:fb:b3:d8:a9:90:d0:ed:32: 4a:55:c2:98:ce:56:7c:07:28:99:4d:26:37:8f:42: 3c:67:0f:60:a3:35:6c:d6:da:2b:c8:e1:1b:f9:c0: a2:73:05:17:a6:84:ed:b6:68:61:85:bd:20:d2:92: 2c:c4:ec:74:c5:82:45:e1:4b:a6:89:98:1a:66:6a: a5:34:f7:da:64:d0:75:14:ff:13:1d:cb:53:e7:ef: fb:80:61:9d:ba:b1:90:70:de:22:ca:03:61:49:e8: 05:fa:5c:57:c2:32:61:9c:dc:b4:ff:91:c3:47:59: 16:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:19:1E:A6:75:AE:F6:72:D4:D7:7A:DF:0F:66:54:96:4E:4B:92 X509v3 Authority Key Identifier: keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b6:3d:74:8a:4d:29:4e:ef:7e:7c:a3:06:08:e5:13:a6:dc: a3:09:0e:34:99:1f:53:93:39:f3:f5:4c:ff:da:77:92:fd:a1: ad:8e:bf:0d:fc:38:26:79:bd:ba:52:65:c6:1f:0c:b9:85:3a: c9:9c:a9:fb:42:d1:47:15:e1:f3:0a:e2:1f:f5:5b:e5:fb:27: ca:0a:31:14:dc:2c:fc:89:f3:17:26:b5:c5:c9:7d:c3:42:c8: 1b:61:63:93:4a:fe:6d:cf:2e:09:b8:4c:1e:62:95:33:20:ef: ca:10:81:5d:bb:ae:5d:b6:7d:a6:7b:21:8f:f7:e5:46:d0:46: 19:fa:79:56:7e:25:fe:0b:fd:8e:82:c4:3e:9c:98:11:72:9d: 7b:7d:3b:42:0c:f8:ab:dc:30:0a:57:11:97:98:d1:a2:b4:ad: 24:9d:8a:cb:c5:60:cf:b4:d1:24:64:55:6f:86:23:ae:30:e0: 8c:67:40:81:68:06:20:00:c3:05:5f:da:33:ab:33:0f:cd:e6: cf:37:bc:61:db:95:0e:12:5b:78:b9:05:43:ef:b5:e5:b9:ba: 14:58:bc:50:53:86:43:a4:c1:eb:22:ad:e5:1e:30:95:47:fe: 15:bc:69:e0:2e:9b:91:9c:b0:89:65:c1:92:c1:7c:d0:8b:26: 8d:ef:af:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3+QD/frCuLzbDGT61sfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjhhYmFjMjBhNTk4Y2NhNGIxMmY1ZDc1NWQ4ZTg5MzIx ZjRlYzkwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EygyZjAyMTkxZWE2NzVhZWY2NzJkNGQ3N2FkZjBmNjY1NDk2NGU0YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoodE26nt95pa0w88zQStvrkh+oJE UAGnF5IZNuB9Glu/CHMmk7NpdWnZRePGJfmwuWaDcgDCENaf1SjdWsT8MD6+RCu2 12JG/yflYMqvYnUqoB9n1V/oGVVM3ZVEgPDczZzWJ5Ai7G4bsrJRJX56ArBo/z6E JdkXfj+f3GDTfzmmsyP3DU82xQCxPxcK+7PYqZDQ7TJKVcKYzlZ8ByiZTSY3j0I8 Zw9gozVs1toryOEb+cCicwUXpoTttmhhhb0g0pIsxOx0xYJF4UumiZgaZmqlNPfa ZNB1FP8THctT5+/7gGGdurGQcN4iygNhSegF+lxXwjJhnNy0/5HDR1kWXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8CGR6mda72ctTXet8PZlSWTkuSMB8GA1UdIwQY MBaAFCe4q6wgpZjMpLEvXXVdjokyH07JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAt NGI2ZmM3YzA2YWU1LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAtNGI2ZmM3YzA2YWU1 LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbY9dIpN KU7vfnyjBgjlE6bcowkONJkfU5M58/VM/9p3kv2hrY6/Dfw4Jnm9ulJlxh8MuYU6 yZyp+0LRRxXh8wriH/Vb5fsnygoxFNws/InzFya1xcl9w0LIG2Fjk0r+bc8uCbhM HmKVMyDvyhCBXbuuXbZ9pnshj/flRtBGGfp5Vn4l/gv9joLEPpyYEXKde307Qgz4 q9wwClcRl5jRorStJJ2Ky8Vgz7TRJGRVb4YjrjDgjGdAgWgGIADDBV/aM6szD83m zze8YduVDhJbeLkFQ++15bm6FFi8UFOGQ6TB6yKt5R4wlUf+Fbxp4C6bkZywiWXB ksF80Ismje+vhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:09 2025 by rpki-client