This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json) Hash identifier: tBm9k5HH37alFUkiNS8H/a7nitMjC0SToH95UhbymL8= Subject key identifier: CD:E4:64:A9:FF:46:60:7E:BC:F0:EF:1D:93:C2:04:95:AD:EB:E6:29 Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69 Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69 Certificate serial: 019AF0BF126C6E31D34DFE9E01C901E90F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft Manifest number: 0C36 Signing time: Fri 05 Dec 2025 23:00:45 +0000 Manifest this update: Fri 05 Dec 2025 23:00:45 +0000 Manifest next update: Sat 06 Dec 2025 23:00:45 +0000 Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: h+S/3+wOtoeJOrI3jHAOGyY8bMrCI81vu0ZXWxyMuxw=) 2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:12:6c:6e:31:d3:4d:fe:9e:01:c9:01:e9:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69 Validity Not Before: Dec 5 23:00:45 2025 GMT Not After : Dec 6 23:00:45 2025 GMT Subject: CN=cde464a9ff46607ebcf0ef1d93c20495adebe629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:ff:b7:54:71:f0:92:d1:6f:3e:ac:cd:0d: 5c:7a:82:3b:34:6a:05:33:98:ba:46:a5:84:05:ba: 59:e5:53:c0:77:43:ff:b8:35:e7:b6:58:fb:1d:c2: 91:c3:5d:b3:ff:3a:63:de:1a:5a:99:67:36:37:97: 57:13:3b:59:cb:00:0a:e2:3b:1d:dc:dc:71:64:b4: ae:1f:e3:25:f2:5e:e2:63:cd:11:fe:a5:99:20:d0: 30:d8:29:6e:0d:85:25:d9:48:a2:9a:31:f7:e2:a1: e8:d9:b4:cf:73:bc:00:66:de:67:5a:77:6c:47:7d: 86:37:d4:d9:1c:de:be:42:8a:49:96:4a:c4:ad:f4: 3b:d1:2a:1c:20:29:57:3e:ff:1f:60:12:b5:a1:94: 34:0b:bc:b3:1a:44:8a:ea:47:b8:7f:bb:75:fb:d9: 6c:f5:9f:63:4e:55:1c:41:68:7a:64:4b:f0:9e:49: 11:67:62:f4:fe:92:ed:a2:e5:e9:a2:de:d7:6e:97: 4c:6d:a1:8a:89:26:05:aa:de:f3:89:fa:fd:9d:57: b9:1e:81:2d:9e:43:44:fc:2e:cf:49:67:0b:3b:c5: 17:a6:0a:22:4c:96:c8:9e:6d:61:f2:6c:b0:08:95: e7:52:6e:03:19:3f:a8:69:ca:32:b2:e4:99:50:e4: 6f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E4:64:A9:FF:46:60:7E:BC:F0:EF:1D:93:C2:04:95:AD:EB:E6:29 X509v3 Authority Key Identifier: keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5e:4b:49:b2:3b:56:60:e6:db:b5:26:18:e2:76:77:90:b6: 7c:aa:10:35:01:37:44:f3:bc:37:f2:2d:c4:b6:c7:ef:c5:24: ce:12:64:9c:ca:41:da:17:96:3a:3c:15:cf:df:b1:a4:78:e3: ac:a8:d4:15:c4:a9:77:20:db:3f:3c:ff:2a:27:df:76:27:22: ab:b8:ba:0c:ec:56:d1:d1:56:d5:95:96:7f:6f:24:2e:cf:0b: 72:29:a5:f8:a4:a4:2c:e3:6a:dc:87:98:5a:f7:77:6c:22:98: c6:ab:b8:9d:d8:6f:33:02:56:3f:e6:53:a7:0f:a4:f6:ba:d5: ed:bf:87:ce:87:30:a5:43:e5:0e:f9:5e:8c:7b:44:88:bb:f9: ea:6b:6c:90:76:f2:a8:48:b6:7f:c6:93:4c:90:df:44:34:23: a3:d9:49:1f:f4:5a:2d:5a:8f:7e:b9:3c:e5:0a:54:22:c0:10: df:0e:f9:02:f2:b2:dc:d4:1c:1f:6f:f7:33:04:ff:28:95:f3: 45:ae:c6:d4:f4:28:36:a2:a3:64:7a:48:fb:04:72:3c:aa:f3: c1:42:52:0e:2b:90:77:f7:dd:47:12:ec:7f:99:17:02:0b:3d: 1f:92:ef:8e:03:df:3b:5a:b3:7a:b5:41:2f:ce:d9:8a:ac:eb: 0a:e6:33:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxJsbjHTTf6eAckB6Q+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMzhmYmZlYTU3Njg0NzljODYzMDA5MDZlNzRlYjI1NGRj YjVjNjkwHhcNMjUxMjA1MjMwMDQ1WhcNMjUxMjA2MjMwMDQ1WjAzMTEwLwYDVQQD EyhjZGU0NjRhOWZmNDY2MDdlYmNmMGVmMWQ5M2MyMDQ5NWFkZWJlNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq//t1Rx8JLRbz6szQ1ceoI7NGoF M5i6RqWEBbpZ5VPAd0P/uDXntlj7HcKRw12z/zpj3hpamWc2N5dXEztZywAK4jsd 3NxxZLSuH+Ml8l7iY80R/qWZINAw2CluDYUl2UiimjH34qHo2bTPc7wAZt5nWnds R32GN9TZHN6+QopJlkrErfQ70SocIClXPv8fYBK1oZQ0C7yzGkSK6ke4f7t1+9ls 9Z9jTlUcQWh6ZEvwnkkRZ2L0/pLtouXpot7XbpdMbaGKiSYFqt7zifr9nVe5HoEt nkNE/C7PSWcLO8UXpgoiTJbInm1h8mywCJXnUm4DGT+oacoysuSZUORvPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3kZKn/RmB+vPDvHZPCBJWt6+YpMB8GA1UdIwQY MBaAFHI4+/6ldoR5yGMAkG506yVNy1xpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEt YmUxMGU4YjRhMDBlLzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEtYmUxMGU4YjRhMDBl LzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfV5LSbI7 VmDm27UmGOJ2d5C2fKoQNQE3RPO8N/ItxLbH78UkzhJknMpB2heWOjwVz9+xpHjj rKjUFcSpdyDbPzz/Kiffdiciq7i6DOxW0dFW1ZWWf28kLs8Lciml+KSkLONq3IeY Wvd3bCKYxqu4ndhvMwJWP+ZTpw+k9rrV7b+HzocwpUPlDvlejHtEiLv56mtskHby qEi2f8aTTJDfRDQjo9lJH/RaLVqPfrk85QpUIsAQ3w75AvKy3NQcH2/3MwT/KJXz Ra7G1PQoNqKjZHpI+wRyPKrzwUJSDiuQd/fdRxLsf5kXAgs9H5LvjgPfO1qzerVB L87ZiqzrCuYzFg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:13 2025 by rpki-client