This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json) Hash identifier: NJvGeIYYsM4mk1I+dAvOZvZQSr3u9snzGz4HYjMj+Ng= Subject key identifier: DF:EE:9E:E2:85:37:74:EB:26:97:6B:02:5F:40:FA:01:71:FE:19:D1 Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Certificate serial: 019AF49BAB0AF7A4F112C9B1F86ED5703F00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft Manifest number: 11C7 Signing time: Sat 06 Dec 2025 17:00:33 +0000 Manifest this update: Sat 06 Dec 2025 17:00:33 +0000 Manifest next update: Sun 07 Dec 2025 17:00:33 +0000 Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: tSjyOY3vhr4pBAvPHjXPO0MlpOTp4hihS6cAeg5ZUd4=) 2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ab:0a:f7:a4:f1:12:c9:b1:f8:6e:d5:70:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Validity Not Before: Dec 6 17:00:33 2025 GMT Not After : Dec 7 17:00:33 2025 GMT Subject: CN=dfee9ee2853774eb26976b025f40fa0171fe19d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:8f:2c:77:2b:1d:52:c9:5a:fe:e1:4d:7d: 74:00:f3:2d:27:22:6e:00:fe:a2:22:10:c2:72:76: 2e:15:00:97:8d:b0:71:37:c9:3f:b0:c1:4a:7d:3b: 92:23:1c:c7:c0:58:1b:bd:7b:a7:9f:27:1a:c9:ca: 8e:20:b7:ad:d5:70:74:4c:98:60:a6:20:b7:aa:fd: e5:da:5b:ed:f0:37:1e:39:d1:46:c4:85:57:7c:90: 81:e1:4d:08:32:28:4b:61:0d:2f:20:51:3e:5c:41: 23:12:e8:1e:ed:44:66:df:b0:13:69:66:80:cc:4b: 27:b5:2a:b4:26:93:02:dc:42:2b:81:df:12:aa:6d: 8b:9b:03:ab:bf:05:69:71:01:2d:0a:86:62:61:75: d2:cc:20:ce:08:f7:00:ae:fc:12:a8:19:38:ed:c7: a7:f0:c8:17:50:7c:54:55:e4:e8:dc:b9:12:cd:4a: 9d:06:9a:a7:93:15:7b:2c:f0:a9:84:d7:7b:e3:a2: b0:40:4b:14:bd:ef:f2:fe:f2:ab:5e:d9:51:37:89: 0d:01:61:af:aa:41:42:a3:11:6c:19:fa:06:ee:2b: 59:cb:f6:8e:2a:3d:a7:59:e9:b1:b5:78:f4:4f:47: 85:46:b6:33:56:8d:d8:ea:1c:69:88:cb:3a:59:ad: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EE:9E:E2:85:37:74:EB:26:97:6B:02:5F:40:FA:01:71:FE:19:D1 X509v3 Authority Key Identifier: keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e3:ca:ae:d5:c9:5e:cc:2a:b2:4e:a1:c6:e7:a3:2a:c0:0c: b2:5a:69:b8:d5:58:6e:61:85:9b:86:6a:fe:29:94:7f:f4:16: 65:ac:32:ff:e1:11:3a:b9:c6:e6:d8:bd:f7:28:86:62:d1:10: 65:6f:a9:b4:d5:90:66:91:a8:1a:78:8e:e3:69:21:5c:d1:45: 93:13:5a:55:3e:7b:6a:97:79:38:80:fa:23:72:f8:12:a4:05: 65:d9:e0:d6:ef:d3:00:7a:2e:68:26:74:54:a7:14:df:b4:1b: 18:85:96:70:52:d2:84:2c:b6:80:02:67:71:11:18:39:11:b3: 62:40:2f:5d:9a:99:3a:4e:21:06:42:1b:36:0a:b1:11:0e:e7: 83:0a:14:6c:97:8d:0c:64:4d:e8:7c:ea:27:42:1c:dd:e3:d6: 5e:fe:a2:87:51:e0:69:18:23:41:76:c0:e1:d1:fb:c1:9f:a8: e8:2f:22:42:e5:04:ad:d3:8e:b3:fd:45:f5:46:ce:b1:50:2f: dc:1f:e7:a5:46:46:60:09:92:2f:4c:99:fb:de:46:b8:7f:96: 81:d2:f5:d8:f4:00:e8:31:0f:2e:f2:2a:f5:6d:82:14:1d:1e: 02:a4:50:6a:9d:97:a0:d6:02:42:2a:02:65:44:b8:33:75:17: 04:ca:f5:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6sK96TxEsmx+G7VcD8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI0ZmQ2NmVmZTZkYzVjM2FhYjJlMmU2NTFhNGUyMDdm ZTYyZTcwHhcNMjUxMjA2MTcwMDMzWhcNMjUxMjA3MTcwMDMzWjAzMTEwLwYDVQQD EyhkZmVlOWVlMjg1Mzc3NGViMjY5NzZiMDI1ZjQwZmEwMTcxZmUxOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UCPLHcrHVLJWv7hTX10APMtJyJu AP6iIhDCcnYuFQCXjbBxN8k/sMFKfTuSIxzHwFgbvXunnycaycqOILet1XB0TJhg piC3qv3l2lvt8DceOdFGxIVXfJCB4U0IMihLYQ0vIFE+XEEjEuge7URm37ATaWaA zEsntSq0JpMC3EIrgd8Sqm2LmwOrvwVpcQEtCoZiYXXSzCDOCPcArvwSqBk47cen 8MgXUHxUVeTo3LkSzUqdBpqnkxV7LPCphNd746KwQEsUve/y/vKrXtlRN4kNAWGv qkFCoxFsGfoG7itZy/aOKj2nWemxtXj0T0eFRrYzVo3Y6hxpiMs6Wa3UswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/unuKFN3TrJpdrAl9A+gFx/hnRMB8GA1UdIwQY MBaAFCeyT9Zu/m3Fw6qy4uZRpOIH/mLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAt Mzk0ZjUwZDRiYTM4LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAtMzk0ZjUwZDRiYTM4 LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOPKrtXJ Xswqsk6hxuejKsAMslppuNVYbmGFm4Zq/imUf/QWZawy/+EROrnG5ti99yiGYtEQ ZW+ptNWQZpGoGniO42khXNFFkxNaVT57apd5OID6I3L4EqQFZdng1u/TAHouaCZ0 VKcU37QbGIWWcFLShCy2gAJncREYORGzYkAvXZqZOk4hBkIbNgqxEQ7ngwoUbJeN DGRN6HzqJ0Ic3ePWXv6ih1HgaRgjQXbA4dH7wZ+o6C8iQuUErdOOs/1F9UbOsVAv 3B/npUZGYAmSL0yZ+95GuH+WgdL12PQA6DEPLvIq9W2CFB0eAqRQap2XoNYCQioC ZUS4M3UXBMr1Tw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:53 2025 by rpki-client