This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft File: J7JQwAtGuhgF8v5fanfo_-X-J3g.mft (raw, json) Hash identifier: bQcqLcmJ+czXUw9fLj7pctKrmqwFc7+Jqk+G2KcpbBk= Subject key identifier: CC:94:DD:80:AA:BE:D6:8D:B8:BF:97:A2:B6:77:A6:DA:B3:2F:2A:CB Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78 Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778 Certificate serial: 019AF163FDB51DE2CBC0BEB945F364B1DB8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft Manifest number: 026E Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: 2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa (hash: 4cAudEOa7B6QV2XVnZGGI65WlCpgsFSmPdilxFuHyN8=) 2: J7JQwAtGuhgF8v5fanfo_-X-J3g.crl (hash: CmxwNpxdcTDND8Nt7qjVC1R1l5FnG7+d/u+Oj8XrM0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fd:b5:1d:e2:cb:c0:be:b9:45:f3:64:b1:db:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778 Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=cc94dd80aabed68db8bf97a2b677a6dab32f2acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:48:8d:36:94:32:e5:84:39:b7:da:71:50: 59:1d:14:0d:3f:13:33:87:86:9c:8c:f8:1b:01:5b: 3a:d1:41:d3:74:88:23:0c:0a:ac:4c:b0:a3:4f:32: e2:fb:22:3f:ae:36:3d:24:55:0d:ee:1a:6e:d4:75: 2f:38:7d:37:15:9c:54:e0:78:39:65:da:36:08:de: 0e:81:49:86:93:13:be:9f:70:29:46:ba:02:70:99: bb:f6:0d:00:b8:0a:fb:bd:24:b1:f2:5c:82:06:b9: c5:53:66:9f:63:12:c9:71:e0:0a:a5:4e:4c:3e:1b: e3:e1:1e:70:49:e5:59:22:d3:8c:2d:4b:f4:d4:03: 5a:2a:de:e4:02:7e:ad:53:79:64:c6:c2:7e:b1:65: 2e:8e:08:7d:35:c2:51:c7:ec:3d:45:21:6d:68:47: 94:07:f6:c1:c7:93:64:f7:ad:80:b2:06:68:48:0a: c5:75:8e:5a:77:2c:c0:6a:80:84:eb:a2:3a:71:be: e9:aa:8d:b4:27:60:81:f7:6f:89:04:8d:7e:ed:55: 7d:5b:ec:69:90:22:b0:6c:66:76:75:4b:eb:eb:f8: 39:ad:cf:af:ad:5b:2a:f8:de:fb:f8:2d:ea:83:b7: 2f:08:e1:ce:4d:8a:29:8c:ce:d9:28:38:6f:11:d0: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:94:DD:80:AA:BE:D6:8D:B8:BF:97:A2:B6:77:A6:DA:B3:2F:2A:CB X509v3 Authority Key Identifier: keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c4:36:a3:9a:2f:ed:50:ce:4a:3b:e1:d7:7a:62:34:4c:1e: b9:f1:f7:cb:47:b9:a1:6a:d3:21:c3:83:a8:b5:35:14:f4:86: 87:db:d4:55:cd:89:7d:62:32:85:f0:88:5e:2c:c0:38:97:b8: 02:b0:40:e5:98:83:60:b0:4d:c4:12:64:45:e3:f7:f1:a8:31: 95:50:87:9b:c5:ac:ec:6d:ea:8c:5f:30:dd:41:07:76:ee:e0: e6:ab:f9:b4:bf:c9:c6:77:5e:75:96:4e:cc:65:14:18:db:ca: 17:e4:6f:27:ff:cb:14:ec:0b:8e:a9:44:4b:2a:d9:bf:55:6a: 27:bb:29:b8:20:0b:90:bb:3b:d6:c1:f6:76:c2:7e:e0:ed:eb: 18:6f:a1:f7:13:10:b2:34:9a:79:06:f8:01:26:b9:7f:a6:8b: 5a:92:6c:a3:67:ed:ec:45:2e:c9:dd:66:27:04:6d:e9:5b:2d: 04:58:75:ad:61:4d:be:c4:2f:92:c3:05:8e:02:08:8d:5a:84: de:4f:e1:60:c2:46:ac:0a:c7:ba:de:e9:d4:2a:40:9c:07:5e: 24:65:90:ea:d5:74:6b:cf:01:47:4f:49:2b:32:07:aa:27:11: 6f:cf:70:04:db:72:9f:4a:cb:69:ff:fb:bb:ef:3a:a6:92:92: fe:3d:c4:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/21HeLLwL65RfNksduOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI1MGMwMGI0NmJhMTgwNWYyZmU1ZjZhNzdlOGZmZTVm ZTI3NzgwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD EyhjYzk0ZGQ4MGFhYmVkNjhkYjhiZjk3YTJiNjc3YTZkYWIzMmYyYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwepIjTaUMuWEObfacVBZHRQNPxMz h4acjPgbAVs60UHTdIgjDAqsTLCjTzLi+yI/rjY9JFUN7hpu1HUvOH03FZxU4Hg5 Zdo2CN4OgUmGkxO+n3ApRroCcJm79g0AuAr7vSSx8lyCBrnFU2afYxLJceAKpU5M Phvj4R5wSeVZItOMLUv01ANaKt7kAn6tU3lkxsJ+sWUujgh9NcJRx+w9RSFtaEeU B/bBx5Nk962AsgZoSArFdY5adyzAaoCE66I6cb7pqo20J2CB92+JBI1+7VV9W+xp kCKwbGZ2dUvr6/g5rc+vrVsq+N77+C3qg7cvCOHOTYopjM7ZKDhvEdCBoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyU3YCqvtaNuL+XorZ3ptqzLyrLMB8GA1UdIwQY MBaAFCeyUMALRroYBfL+X2p36P/l/id4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZjMyNTktYzIxZi00YmY2LWIwN2Mt MTYwNzIyMTRlNjAyLzEvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hZjMyNTktYzIxZi00YmY2LWIwN2MtMTYwNzIyMTRlNjAy LzEvSjdKUXdBdEd1aGdGOHY1ZmFuZm9fLVgtSjNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcQ2o5ov 7VDOSjvh13piNEweufH3y0e5oWrTIcODqLU1FPSGh9vUVc2JfWIyhfCIXizAOJe4 ArBA5ZiDYLBNxBJkReP38agxlVCHm8Ws7G3qjF8w3UEHdu7g5qv5tL/JxndedZZO zGUUGNvKF+RvJ//LFOwLjqlESyrZv1VqJ7spuCALkLs71sH2dsJ+4O3rGG+h9xMQ sjSaeQb4ASa5f6aLWpJso2ft7EUuyd1mJwRt6VstBFh1rWFNvsQvksMFjgIIjVqE 3k/hYMJGrArHut7p1CpAnAdeJGWQ6tV0a88BR09JKzIHqicRb89wBNtyn0rLaf/7 u+86ppKS/j3EyA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:19 2025 by rpki-client