This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json) Hash identifier: GZwG18ms7PYQVlsrVPbiq3M4zyrIlmnsOpHnYqmEEyA= Subject key identifier: BC:A6:72:4B:18:91:ED:45:E2:CD:88:7D:A9:5D:56:F9:24:C4:BC:ED Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8 Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8 Certificate serial: 019AF2AD77F70B5F99B623D04632561EC875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=) 2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: Aef2IOYtPguaYaOyjBZfg34E7BKaOPiCBMuv6Su1PaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:77:f7:0b:5f:99:b6:23:d0:46:32:56:1e:c8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8 Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=bca6724b1891ed45e2cd887da95d56f924c4bced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:4a:de:4d:83:00:b1:c3:4c:bc:59:4f:fd: 7c:12:28:a6:55:a7:18:2a:73:df:9b:da:89:d0:22: d2:5c:c9:35:ee:22:e2:d4:54:fc:36:83:13:4c:d2: 88:30:69:fb:e1:a6:03:19:ee:33:a7:af:91:70:88: 75:c8:5e:e2:a9:ef:2b:f5:f8:40:bd:97:b8:d6:1a: e6:55:02:09:82:3a:f7:4e:d1:95:22:13:69:ab:c9: 9c:1d:d4:d1:1b:9a:e4:be:68:26:25:95:da:b4:37: 93:9d:6d:63:89:87:7c:cf:38:df:64:2b:ad:0a:3e: a1:49:81:2a:f4:9e:91:31:ab:45:54:ec:bb:94:de: 54:49:62:5e:a1:c4:5e:cf:20:ec:75:91:a8:3a:b1: 52:27:94:2b:0e:83:b2:52:f8:8c:af:cf:d0:42:02: 0f:6a:b7:61:93:92:3b:15:99:53:2e:a1:f8:15:1a: 22:69:67:64:9d:d4:d1:a1:63:a0:55:8f:cb:8a:5a: 9b:2e:81:f6:37:b7:1d:e9:72:ec:41:30:e9:90:c6: 95:14:6e:23:70:24:80:5e:61:fb:dc:b3:0e:00:fa: cf:98:6c:d3:78:9b:aa:44:11:3c:7d:1d:96:d6:08: 9f:cc:6d:2c:66:7e:68:ea:c1:42:1c:55:d0:9d:7b: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A6:72:4B:18:91:ED:45:E2:CD:88:7D:A9:5D:56:F9:24:C4:BC:ED X509v3 Authority Key Identifier: keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7c:35:9f:22:8d:ca:0e:b2:99:a4:ef:6a:1c:8f:2c:d9:91: 5f:b4:31:be:74:78:e8:72:7c:43:20:6d:94:76:4c:0c:ee:1b: 04:9c:1e:33:8e:52:92:7c:1c:7a:aa:b5:30:24:42:6b:ed:8c: af:7d:b2:c0:d6:49:b8:50:95:9b:3f:09:af:5c:97:8b:a8:9a: 59:78:34:70:fa:83:67:8d:31:a4:dd:07:9e:d7:c6:d1:aa:f8: 1f:6d:d3:93:bc:33:97:90:72:df:80:97:5c:6b:b5:e0:9e:17: 9b:fc:7a:c6:02:50:51:cc:0d:ec:e1:c8:34:ce:7d:66:b2:16: 81:98:b7:cb:74:40:85:fa:86:4f:ec:6b:59:74:18:eb:d4:01: 9a:a2:a0:6f:95:d0:a5:af:3f:fc:d7:1f:43:dd:98:a8:8c:7a: 81:a6:16:85:e4:c6:4c:b1:c8:77:98:cb:c0:11:36:63:d9:57: ee:95:ec:29:03:4f:73:08:98:c9:56:fb:6e:be:34:49:d4:75: 8e:27:9a:a9:78:ee:58:27:40:9c:37:3c:16:19:c3:d7:01:05: f3:2b:e8:fa:e4:ef:93:63:32:7c:06:2f:2a:c4:37:7a:26:5b: ea:82:bf:5e:d7:49:d5:65:4a:4b:7e:75:3d:4f:2c:da:47:bf: ec:bd:ca:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXf3C1+ZtiPQRjJWHsh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYjQzZGUyMzdmZDBiNmEyODczODkyMzA5MjFkMjVhMmMy ZWQxYTgwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD EyhiY2E2NzI0YjE4OTFlZDQ1ZTJjZDg4N2RhOTVkNTZmOTI0YzRiY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoxK3k2DALHDTLxZT/18EiimVacY KnPfm9qJ0CLSXMk17iLi1FT8NoMTTNKIMGn74aYDGe4zp6+RcIh1yF7iqe8r9fhA vZe41hrmVQIJgjr3TtGVIhNpq8mcHdTRG5rkvmgmJZXatDeTnW1jiYd8zzjfZCut Cj6hSYEq9J6RMatFVOy7lN5USWJeocRezyDsdZGoOrFSJ5QrDoOyUviMr8/QQgIP ardhk5I7FZlTLqH4FRoiaWdkndTRoWOgVY/LilqbLoH2N7cd6XLsQTDpkMaVFG4j cCSAXmH73LMOAPrPmGzTeJuqRBE8fR2W1gifzG0sZn5o6sFCHFXQnXtthQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLymcksYke1F4s2IfaldVvkkxLztMB8GA1UdIwQY MBaAFH+0PeI3/QtqKHOJIwkh0losLtGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kNGQxMmEtYWI0ZS00ZGJhLTk1ZGUt YmM2MzcxMzBkZTZlLzEvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kNGQxMmEtYWI0ZS00ZGJhLTk1ZGUtYmM2MzcxMzBkZTZl LzEvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXw1nyKN yg6ymaTvahyPLNmRX7QxvnR46HJ8QyBtlHZMDO4bBJweM45Sknwceqq1MCRCa+2M r32ywNZJuFCVmz8Jr1yXi6iaWXg0cPqDZ40xpN0HntfG0ar4H23Tk7wzl5By34CX XGu14J4Xm/x6xgJQUcwN7OHINM59ZrIWgZi3y3RAhfqGT+xrWXQY69QBmqKgb5XQ pa8//NcfQ92YqIx6gaYWheTGTLHId5jLwBE2Y9lX7pXsKQNPcwiYyVb7br40SdR1 jieaqXjuWCdAnDc8FhnD1wEF8yvo+uTvk2MyfAYvKsQ3eiZb6oK/XtdJ1WVKS351 PU8s2ke/7L3KBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:29 2025 by rpki-client