This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json) Hash identifier: h/cp2MlBlRLpqd/ZSPIgm3cdpN+Du7brWf40BuZpcFc= Subject key identifier: 07:A1:E7:FD:32:C1:DD:C8:2A:61:32:F0:3E:02:63:11:06:22:24:27 Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31 Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931 Certificate serial: 019AF2ADAB1D2813B8CBE17029E2038FE75F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=) 2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: a9rQ/6JAC//0jINnErQ43kLMDGoCpcyvi0d1BBeXXvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ab:1d:28:13:b8:cb:e1:70:29:e2:03:8f:e7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931 Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=07a1e7fd32c1ddc82a6132f03e02631106222427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:e9:e6:82:a2:b8:7f:31:6f:af:2d:2f:0a: 8d:df:39:3a:f6:44:f3:72:04:3c:81:01:e7:ab:b8: 16:bb:17:4f:6c:1c:81:59:39:fc:82:83:23:68:27: 9f:c8:db:c1:15:c4:7b:07:35:78:42:3d:a2:e8:41: a3:26:04:13:37:a2:6e:85:2b:aa:9c:7e:6b:42:c9: b3:e2:70:48:4e:30:46:0d:d8:a6:e1:7c:24:6a:d7: db:1b:57:8e:94:1d:ee:5d:71:54:1b:5a:0d:85:38: ff:ba:0a:c6:d9:7c:4b:63:09:2f:5b:1f:87:aa:20: d3:22:f2:0f:56:69:32:d6:1d:07:4e:03:23:e8:c9: df:7c:8f:84:19:89:83:db:e6:b1:e9:89:99:80:ba: cb:1e:dc:44:ac:fc:27:70:21:a5:c8:a2:bb:40:d9: b0:e5:22:30:dc:b6:61:61:48:b6:33:96:1a:8e:39: 96:da:63:27:6f:26:ba:b5:36:7c:84:a7:52:db:cd: 3a:c7:ef:ab:11:c7:ab:f9:96:bb:35:dd:2b:ba:6c: 53:b3:fe:f2:da:3f:e2:16:47:3b:60:41:fd:9e:06: c9:b4:7d:ae:4d:8c:bb:7a:72:48:64:7a:da:35:f7: 18:dd:6b:ea:01:2f:33:f3:73:3d:5c:0e:54:7c:ab: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A1:E7:FD:32:C1:DD:C8:2A:61:32:F0:3E:02:63:11:06:22:24:27 X509v3 Authority Key Identifier: keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:d9:9d:e0:5f:0c:4e:b2:87:12:4b:b4:9a:77:9d:c3:d1:f2: 1d:78:5c:4c:bc:8d:43:0f:ad:4d:c2:53:e8:92:d3:1f:c2:5e: 83:36:b2:fe:fe:f4:79:f5:f8:67:05:61:04:fd:cb:10:07:da: c0:99:90:0c:ea:10:0b:65:68:d6:90:70:b9:ef:b2:5f:92:1c: 0b:12:8e:68:f2:8c:36:a3:4d:23:4d:af:5e:fe:32:38:89:1a: ed:fb:c6:61:c2:b9:20:32:18:c8:21:db:3c:61:24:f1:ba:6d: d9:72:70:40:36:f8:ab:e0:24:d7:d1:27:57:b3:da:76:c2:79: c0:8a:e8:55:1f:2c:f6:0d:e0:19:45:9c:85:79:94:81:44:a9: 3a:d9:be:05:c1:e6:e0:53:f5:cd:29:8b:f6:84:0d:ca:c4:4f: 3c:68:e9:b3:89:42:61:ef:ff:5a:56:70:dd:c5:39:63:d6:4b: b4:bc:85:64:b5:37:aa:a9:52:2d:8a:04:72:13:7c:3d:b4:63: 7e:f2:c3:3a:f3:6f:b7:4d:1d:b5:f6:5c:5f:1b:ca:82:bb:9b: 62:f8:1d:c4:ef:10:fc:3d:dc:17:db:57:b8:3a:f4:4c:59:ee: f4:86:c7:bf:0e:d1:bb:0e:40:c4:4f:8e:b0:2d:38:9c:1b:62: 6a:c0:82:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrasdKBO4y+FwKeIDj+dfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmM5MWY3OGEzMzUwYmFjYmJmYmUzNzZmODgxMzIxMmQx NDk5MzEwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EygwN2ExZTdmZDMyYzFkZGM4MmE2MTMyZjAzZTAyNjMxMTA2MjIyNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Azp5oKiuH8xb68tLwqN3zk69kTz cgQ8gQHnq7gWuxdPbByBWTn8goMjaCefyNvBFcR7BzV4Qj2i6EGjJgQTN6JuhSuq nH5rQsmz4nBITjBGDdim4XwkatfbG1eOlB3uXXFUG1oNhTj/ugrG2XxLYwkvWx+H qiDTIvIPVmky1h0HTgMj6MnffI+EGYmD2+ax6YmZgLrLHtxErPwncCGlyKK7QNmw 5SIw3LZhYUi2M5YajjmW2mMnbya6tTZ8hKdS2806x++rEcer+Za7Nd0rumxTs/7y 2j/iFkc7YEH9ngbJtH2uTYy7enJIZHraNfcY3WvqAS8z83M9XA5UfKtIkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeh5/0ywd3IKmEy8D4CYxEGIiQnMB8GA1UdIwQY MBaAFHe8kfeKM1C6y7++N2+IEyEtFJkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMt OWRiNTdjM2ZlNDFkLzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMtOWRiNTdjM2ZlNDFk LzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdmd4F8M TrKHEku0mnedw9HyHXhcTLyNQw+tTcJT6JLTH8Jegzay/v70efX4ZwVhBP3LEAfa wJmQDOoQC2Vo1pBwue+yX5IcCxKOaPKMNqNNI02vXv4yOIka7fvGYcK5IDIYyCHb PGEk8bpt2XJwQDb4q+Ak19EnV7PadsJ5wIroVR8s9g3gGUWchXmUgUSpOtm+BcHm 4FP1zSmL9oQNysRPPGjps4lCYe//WlZw3cU5Y9ZLtLyFZLU3qqlSLYoEchN8PbRj fvLDOvNvt00dtfZcXxvKgrubYvgdxO8Q/D3cF9tXuDr0TFnu9IbHvw7Ruw5AxE+O sC04nBtiasCCdg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:56:27 2025 by rpki-client