This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json) Hash identifier: cVGyTecFIwYdwGHcBzZqhNzTqNxDtSDVXdASLx8WFA8= Subject key identifier: 33:A2:C3:38:6D:2A:50:90:1F:B3:BE:23:1B:22:EE:30:1A:F2:76:3D Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Certificate serial: 019AF65349BA39D94E663FFEE58AFABACE61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 01:00:44 +0000 Manifest this update: Sun 07 Dec 2025 01:00:44 +0000 Manifest next update: Mon 08 Dec 2025 01:00:44 +0000 Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=) 2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: 1t4pS06FVa3/XTz4+RCk0Go0UAcx6M4N0areC6SJm8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:49:ba:39:d9:4e:66:3f:fe:e5:8a:fa:ba:ce:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Validity Not Before: Dec 7 01:00:44 2025 GMT Not After : Dec 8 01:00:44 2025 GMT Subject: CN=33a2c3386d2a50901fb3be231b22ee301af2763d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:01:4b:37:e2:18:f6:e3:77:a7:86:0b:b3: 10:18:a1:0d:c3:7a:4b:dc:20:11:99:60:96:e2:48: 91:19:fd:0e:d2:02:d8:2c:53:63:3e:fb:6c:f2:95: 59:9c:0f:8e:df:fc:10:b8:09:2e:d8:73:dd:cf:b0: 63:14:56:88:16:c1:c7:94:66:fb:e7:4d:a5:67:36: 5b:fd:16:18:37:c8:24:fe:73:b0:2f:53:a2:74:73: eb:8a:22:9e:83:8c:e6:25:e8:dc:39:48:77:d8:1d: ca:cf:05:10:07:cd:fa:6b:a8:77:c2:52:4a:52:9d: 3e:58:2b:a8:d8:28:2e:39:b1:15:cb:e8:49:ce:1a: f2:9c:45:0f:16:af:57:97:47:78:7d:df:87:d8:bf: 6c:d8:b7:16:08:21:f6:7e:3f:85:60:d5:5e:bf:36: f0:d2:ba:3b:61:7c:80:e1:12:81:63:65:99:33:f5: ea:f3:3b:c0:6d:fa:e9:6f:dd:b6:bc:9d:1c:d8:d9: 45:b9:09:59:7b:4e:c6:24:d2:34:0f:0f:8b:ee:a4: 47:44:48:ff:d3:9c:58:96:61:76:38:01:47:bd:57: 12:d0:c6:a6:7d:50:fa:40:89:20:86:a8:2f:04:58: a7:4e:73:c1:e3:e3:9b:9d:d1:17:a9:0d:94:7e:b2: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A2:C3:38:6D:2A:50:90:1F:B3:BE:23:1B:22:EE:30:1A:F2:76:3D X509v3 Authority Key Identifier: keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:56:b2:b9:59:4b:35:25:52:25:b0:e8:7c:d5:0f:22:91:28: 39:c0:c1:e4:81:6f:56:91:74:1f:f6:b2:ab:d4:62:19:13:c8: 1b:37:ee:27:ad:52:c2:da:79:dd:2a:fe:0b:5b:21:de:fe:45: be:ac:d7:a4:4b:9f:f5:8d:01:6b:12:29:a6:2e:76:aa:51:3c: be:39:c2:f7:c4:94:65:04:18:62:03:4f:1d:98:dd:b3:8f:33: 0a:de:ba:d0:b9:c9:7b:2c:d6:b2:52:ef:ac:00:2c:e7:6a:4e: 65:98:ec:e1:7b:d5:4f:4b:08:72:74:ca:2a:23:8d:fa:29:6b: bc:90:5f:17:49:8f:13:85:40:61:67:15:53:c3:ef:82:c2:74: ae:cb:cf:df:23:09:5e:05:c9:dd:56:aa:e1:0f:f0:f9:6b:ab: eb:a5:29:91:16:46:81:b0:bf:92:f8:b2:8a:85:dd:a9:3e:9e: 96:c9:24:d0:09:d8:e5:e9:04:c4:f1:8d:b4:f3:f2:bc:30:28: f1:ec:ef:34:f5:6b:c8:1f:44:5a:38:e9:ff:ed:5c:4e:6d:ce: 48:b8:4d:06:5f:e4:2f:ed:be:b2:96:4f:a0:6e:4f:cf:5c:b7: 01:c5:34:74:1b:d3:95:f9:1d:03:e2:78:f8:9c:12:9e:0d:ed: f8:4d:64:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U0m6OdlOZj/+5Yr6us5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz M2I3OGIwHhcNMjUxMjA3MDEwMDQ0WhcNMjUxMjA4MDEwMDQ0WjAzMTEwLwYDVQQD EygzM2EyYzMzODZkMmE1MDkwMWZiM2JlMjMxYjIyZWUzMDFhZjI3NjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZIBSzfiGPbjd6eGC7MQGKENw3pL 3CARmWCW4kiRGf0O0gLYLFNjPvts8pVZnA+O3/wQuAku2HPdz7BjFFaIFsHHlGb7 502lZzZb/RYYN8gk/nOwL1OidHPriiKeg4zmJejcOUh32B3KzwUQB836a6h3wlJK Up0+WCuo2CguObEVy+hJzhrynEUPFq9Xl0d4fd+H2L9s2LcWCCH2fj+FYNVevzbw 0ro7YXyA4RKBY2WZM/Xq8zvAbfrpb922vJ0c2NlFuQlZe07GJNI0Dw+L7qRHREj/ 05xYlmF2OAFHvVcS0MamfVD6QIkghqgvBFinTnPB4+ObndEXqQ2UfrI1FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOiwzhtKlCQH7O+Ixsi7jAa8nY9MB8GA1UdIwQY MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt YWQwOTUzZjdmZDQ5LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5 LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlayuVlL NSVSJbDofNUPIpEoOcDB5IFvVpF0H/ayq9RiGRPIGzfuJ61Swtp53Sr+C1sh3v5F vqzXpEuf9Y0BaxIppi52qlE8vjnC98SUZQQYYgNPHZjds48zCt660LnJeyzWslLv rAAs52pOZZjs4XvVT0sIcnTKKiON+ilrvJBfF0mPE4VAYWcVU8PvgsJ0rsvP3yMJ XgXJ3Vaq4Q/w+Wur66UpkRZGgbC/kviyioXdqT6elskk0AnY5ekExPGNtPPyvDAo 8ezvNPVryB9EWjjp/+1cTm3OSLhNBl/kL+2+spZPoG5Pz1y3AcU0dBvTlfkdA+J4 +JwSng3t+E1knA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:19 2025 by rpki-client