This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json) Hash identifier: 77PGWFc9iST/zoa0jrxmEl/D+NaFo2LXZks9gYdL9EA= Subject key identifier: 11:A6:D4:88:4E:95:E5:14:22:E8:00:D7:6A:C7:6B:48:6D:AD:73:41 Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1 Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1 Certificate serial: 019AF5E61BA80185BF12A775228410F2838A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft Manifest number: 0E4D Signing time: Sat 06 Dec 2025 23:01:29 +0000 Manifest this update: Sat 06 Dec 2025 23:01:29 +0000 Manifest next update: Sun 07 Dec 2025 23:01:29 +0000 Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: YyUSMu7y0imdgzTdVPuxM6EDEsGQd3M5wt3pMl23mxQ=) 2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:1b:a8:01:85:bf:12:a7:75:22:84:10:f2:83:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1 Validity Not Before: Dec 6 23:01:29 2025 GMT Not After : Dec 7 23:01:29 2025 GMT Subject: CN=11a6d4884e95e51422e800d76ac76b486dad7341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:98:f5:9f:28:e7:c4:43:f2:42:df:29:90: 3d:28:36:8a:33:8e:a6:eb:13:19:3b:d0:30:b5:c5: 57:2c:7f:e0:8e:3f:bf:d8:01:bb:98:58:3a:59:65: 2c:8d:43:1f:4e:81:e2:51:7a:2e:80:4f:82:45:ba: 62:25:77:db:10:fa:5e:9c:0a:7b:0b:1a:15:1b:2f: 50:b3:64:a1:a7:2f:e2:05:54:54:0f:85:d1:9a:cd: 83:95:51:f0:49:28:72:e8:30:df:aa:75:1e:34:37: 84:5a:ea:84:4e:9b:9c:d3:1c:b5:fd:40:bb:57:c2: 94:62:08:a8:6c:8c:42:7b:9b:59:6c:d7:b5:cb:72: 78:5d:ad:36:88:7b:07:0b:f1:06:84:f2:50:cb:c5: 10:e7:f1:f2:2d:ed:b1:66:2c:a0:ba:68:94:bc:c6: 01:f7:e6:49:27:c8:8c:e4:a4:47:89:8a:b0:75:4f: 10:cf:7c:03:0b:1f:a3:35:a1:2f:14:f2:ab:32:82: dd:5c:d5:e6:83:35:34:64:39:27:23:ac:47:52:ca: ad:95:c4:3f:28:b0:4b:8d:38:98:2d:81:e7:a6:e4: 03:2b:5f:53:76:57:3f:d0:3c:55:ad:d1:6f:5c:74: bd:f4:69:1b:99:7f:25:91:40:b4:9c:b9:c9:a8:10: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A6:D4:88:4E:95:E5:14:22:E8:00:D7:6A:C7:6B:48:6D:AD:73:41 X509v3 Authority Key Identifier: keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b4:a7:a9:3a:33:bb:6b:61:0d:21:98:8a:5a:0b:ee:bb:7d: 96:71:51:d3:da:d0:6c:ef:16:26:1d:03:c5:62:ed:b7:76:b6: 4d:75:52:a3:fa:37:35:91:eb:cf:bb:13:33:f2:60:98:12:b0: 2f:a9:fa:62:bf:61:25:3f:b0:07:a7:f5:87:7d:e6:cf:15:24: 6b:db:66:23:c8:b3:be:7c:bb:2f:fa:d5:cf:b5:d3:6b:cd:be: 38:84:7e:bb:11:34:a4:b0:cd:c2:36:95:5a:2f:3f:80:c1:b4: 4d:09:3b:f7:9e:b1:72:6f:f1:3a:c0:04:7e:1f:97:f4:8d:34: 73:c4:d2:6a:10:27:e5:1d:9a:24:e6:a7:d3:d8:d2:74:3e:c8: 8b:83:2c:41:63:88:d5:12:ac:36:01:da:1c:34:60:b0:09:47: 13:4b:82:71:95:88:c0:42:5b:3e:43:ea:59:df:d7:70:75:2c: 7c:2e:d4:ca:f5:f5:38:b7:5b:bc:14:63:ae:da:bf:ed:22:74: a6:ed:96:27:e4:8e:fe:04:f1:5c:e5:50:84:fb:5f:c7:a6:58: 4d:1b:6e:e2:4a:14:d0:fc:a6:fa:42:64:b0:16:f6:f1:90:15: cd:06:6d:07:3e:4f:2b:8b:06:15:e4:b3:cd:a3:5b:de:ae:3e: c9:d5:f9:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15huoAYW/Eqd1IoQQ8oOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YmI1NTIzNjU0OTljMDdhZWQzNGI2ODg0ZjViMmU5Mzgw ZWJlZTEwHhcNMjUxMjA2MjMwMTI5WhcNMjUxMjA3MjMwMTI5WjAzMTEwLwYDVQQD EygxMWE2ZDQ4ODRlOTVlNTE0MjJlODAwZDc2YWM3NmI0ODZkYWQ3MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ryY9Z8o58RD8kLfKZA9KDaKM46m 6xMZO9AwtcVXLH/gjj+/2AG7mFg6WWUsjUMfToHiUXougE+CRbpiJXfbEPpenAp7 CxoVGy9Qs2Shpy/iBVRUD4XRms2DlVHwSShy6DDfqnUeNDeEWuqETpuc0xy1/UC7 V8KUYgiobIxCe5tZbNe1y3J4Xa02iHsHC/EGhPJQy8UQ5/HyLe2xZiygumiUvMYB 9+ZJJ8iM5KRHiYqwdU8Qz3wDCx+jNaEvFPKrMoLdXNXmgzU0ZDknI6xHUsqtlcQ/ KLBLjTiYLYHnpuQDK19Tdlc/0DxVrdFvXHS99GkbmX8lkUC0nLnJqBAepwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGm1IhOleUUIugA12rHa0htrXNBMB8GA1UdIwQY MBaAFNe7VSNlSZwHrtNLaIT1suk4Dr7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUt M2ViZDQ1NWFjMmFlLzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUtM2ViZDQ1NWFjMmFl LzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbSnqToz u2thDSGYiloL7rt9lnFR09rQbO8WJh0DxWLtt3a2TXVSo/o3NZHrz7sTM/JgmBKw L6n6Yr9hJT+wB6f1h33mzxUka9tmI8izvny7L/rVz7XTa82+OIR+uxE0pLDNwjaV Wi8/gMG0TQk7956xcm/xOsAEfh+X9I00c8TSahAn5R2aJOan09jSdD7Ii4MsQWOI 1RKsNgHaHDRgsAlHE0uCcZWIwEJbPkPqWd/XcHUsfC7UyvX1OLdbvBRjrtq/7SJ0 pu2WJ+SO/gTxXOVQhPtfx6ZYTRtu4koU0Pym+kJksBb28ZAVzQZtBz5PK4sGFeSz zaNb3q4+ydX5sQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:18 2025 by rpki-client