This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json) Hash identifier: Y0Ao54hZkRm0UbLJyzwBut+7WOJAlTyE3nTVRcqjaWo= Subject key identifier: B6:79:E1:DF:B6:C9:8B:7C:FC:71:23:F4:F2:D3:7F:F1:8D:52:AD:D5 Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b Certificate serial: 019AF0BEDF89BA180395EA38D3696D42A8E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft Manifest number: 0718 Signing time: Fri 05 Dec 2025 23:00:32 +0000 Manifest this update: Fri 05 Dec 2025 23:00:32 +0000 Manifest next update: Sat 06 Dec 2025 23:00:32 +0000 Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: GtW5y9fDMIOMyYTBTtBUJdUEFZrnxtgD04kJztMk6Tg=) 2: B30qKHB4pvW_uIxt5ksptRBP4PQ.roa (hash: Y9HutrF2XOKiS4omLhBmOgiWSK360mai1Yz5rvj0XF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:df:89:ba:18:03:95:ea:38:d3:69:6d:42:a8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b Validity Not Before: Dec 5 23:00:32 2025 GMT Not After : Dec 6 23:00:32 2025 GMT Subject: CN=b679e1dfb6c98b7cfc7123f4f2d37ff18d52add5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:66:d6:d8:cc:53:5d:ef:47:fd:80:90:e9: d6:59:1d:6a:40:d3:cf:dd:c6:ff:42:05:69:54:05: c1:21:45:68:4b:42:c0:a9:5b:ce:10:c7:ca:29:02: e7:81:96:f0:d8:11:13:b7:03:93:e0:4a:aa:0f:e1: 33:32:08:99:ab:50:62:84:28:4d:1a:e2:4e:97:8c: d6:73:4b:d6:50:77:ff:de:db:f5:09:74:d1:cb:c2: 29:56:79:19:5d:09:d4:87:f8:1a:ca:f9:0e:f9:18: c7:ac:39:75:e1:ad:f8:86:0b:fa:23:e9:09:ef:07: d9:a6:f0:ab:db:2c:c4:7a:83:79:07:10:17:ee:6c: 3c:eb:7a:3f:57:1e:fb:52:49:09:da:25:45:0a:49: b2:0b:99:b3:09:4c:57:4e:13:57:d1:19:bc:49:9b: 91:8d:d8:d5:c7:f6:d2:f9:7f:07:59:ca:d3:a2:26: d0:96:69:5d:be:28:12:f7:7a:f8:19:39:a2:f6:44: e9:ef:78:c8:45:36:3b:12:af:ac:53:55:8a:a2:ea: d9:66:a5:17:18:16:a6:65:43:66:45:d0:db:a3:38: 63:17:69:ee:80:a0:64:4a:c0:31:56:c2:3f:da:5f: 9a:fc:c5:da:7f:61:80:3d:bd:c8:a3:f3:4a:b8:62: a8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:79:E1:DF:B6:C9:8B:7C:FC:71:23:F4:F2:D3:7F:F1:8D:52:AD:D5 X509v3 Authority Key Identifier: keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b9:6d:5c:dc:53:69:13:59:3a:1f:2c:fe:52:c4:46:6e:e7: 20:e4:b5:d2:5b:61:3d:9d:1e:e1:71:a2:bb:65:86:70:05:d3: 8e:12:eb:2b:7b:bb:a2:1d:7c:04:04:4b:6d:20:d3:a5:e3:1a: 94:f6:bc:f3:de:34:fa:53:03:36:cb:eb:5e:b0:6a:76:e5:f3: ca:fe:1f:1a:c2:c8:3a:a6:1b:33:b2:d8:db:4b:e0:09:c1:75: d5:58:20:41:85:f3:38:87:71:22:e6:bd:26:51:71:9c:e2:62: c3:b7:c4:75:67:62:c1:b6:aa:f1:38:54:27:51:b0:fa:3a:9b: 74:c2:d0:9e:07:b1:9f:0f:7a:a3:74:79:4e:75:41:76:45:4d: 36:8f:d1:0d:22:d6:2f:97:e5:6d:6a:d9:fb:3f:8d:b3:c6:7e: 9e:d7:fb:ea:ad:18:eb:11:c9:b8:1a:f5:39:09:29:3a:f6:5b: 64:d3:16:1b:4f:5e:d1:f9:f4:71:92:c0:d0:be:91:0f:9f:5e: c6:af:e6:08:c6:aa:58:77:aa:ae:e7:45:53:42:5a:ea:74:64: fe:e6:fd:d6:95:71:f6:29:5b:85:3a:d6:e1:87:76:de:13:98: 38:ec:35:32:bb:f2:ad:c4:e1:50:9a:f9:96:33:38:bf:d7:ed: 33:62:fb:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvt+JuhgDleo402ltQqjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOWVmMjA5M2RhMTVlZWM5MGVmYjgzN2I5NTAxNjQ2Njlm NjE5OGIwHhcNMjUxMjA1MjMwMDMyWhcNMjUxMjA2MjMwMDMyWjAzMTEwLwYDVQQD EyhiNjc5ZTFkZmI2Yzk4YjdjZmM3MTIzZjRmMmQzN2ZmMThkNTJhZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyphm1tjMU13vR/2AkOnWWR1qQNPP 3cb/QgVpVAXBIUVoS0LAqVvOEMfKKQLngZbw2BETtwOT4EqqD+EzMgiZq1BihChN GuJOl4zWc0vWUHf/3tv1CXTRy8IpVnkZXQnUh/gayvkO+RjHrDl14a34hgv6I+kJ 7wfZpvCr2yzEeoN5BxAX7mw863o/Vx77UkkJ2iVFCkmyC5mzCUxXThNX0Rm8SZuR jdjVx/bS+X8HWcrToibQlmldvigS93r4GTmi9kTp73jIRTY7Eq+sU1WKourZZqUX GBamZUNmRdDbozhjF2nugKBkSsAxVsI/2l+a/MXaf2GAPb3Io/NKuGKoIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZ54d+2yYt8/HEj9PLTf/GNUq3VMB8GA1UdIwQY MBaAFNCe8gk9oV7skO+4N7lQFkZp9hmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgt NmIyZTY4ZGRlMWUzLzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgtNmIyZTY4ZGRlMWUz LzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbltXNxT aRNZOh8s/lLERm7nIOS10lthPZ0e4XGiu2WGcAXTjhLrK3u7oh18BARLbSDTpeMa lPa88940+lMDNsvrXrBqduXzyv4fGsLIOqYbM7LY20vgCcF11VggQYXzOIdxIua9 JlFxnOJiw7fEdWdiwbaq8ThUJ1Gw+jqbdMLQngexnw96o3R5TnVBdkVNNo/RDSLW L5flbWrZ+z+Ns8Z+ntf76q0Y6xHJuBr1OQkpOvZbZNMWG09e0fn0cZLA0L6RD59e xq/mCMaqWHeqrudFU0Ja6nRk/ub91pVx9ilbhTrW4Yd23hOYOOw1MrvyrcThUJr5 ljM4v9ftM2L7+A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:59 2025 by rpki-client