This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json) Hash identifier: fAcKa8FEAz60mD4wCBx1BXtu3L5SmhHZKFkyX7RgJUI= Subject key identifier: 66:DA:DB:D8:19:C8:67:FA:A7:E6:57:C1:60:B4:E9:63:29:7F:85:61 Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb Certificate serial: 019AF23FEF3B9CBD48E39BCFF04C13D14455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft Manifest number: 01D7 Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=) 2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: 0lFVTkpooZsDIjPRMKf5Skg3fGf1ZSjovxFUKnPBaqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ef:3b:9c:bd:48:e3:9b:cf:f0:4c:13:d1:44:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=66dadbd819c867faa7e657c160b4e963297f8561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:8a:8e:eb:9c:25:68:98:ad:59:e0:d3:d2: a7:b1:e2:ac:6f:af:c7:65:58:98:78:78:0d:e2:12: 9b:46:07:fb:82:1f:a1:a6:9a:71:79:3a:a3:6b:a3: 79:24:cc:54:9c:7d:b2:0c:60:c2:19:d9:5a:88:b9: 16:83:b7:25:e2:9d:0b:91:60:c7:2b:9f:c6:91:71: 8d:04:c0:d6:8b:da:87:43:c5:8c:83:3f:14:bd:51: 4e:1b:a2:e2:d9:31:16:ce:d6:70:94:1d:be:a4:45: 69:77:81:db:f1:ac:c6:6c:a7:12:9d:ff:42:1c:7c: 06:bb:22:5e:54:13:da:e0:98:78:1d:3d:52:95:75: ea:e2:d6:47:4f:4b:9c:03:25:2d:b8:11:69:9a:3b: df:89:53:4b:b1:c0:44:ba:e7:07:d7:a3:40:1a:3e: 18:c9:a0:c4:6c:79:07:c9:35:20:58:10:10:fd:51: 0d:bb:bf:50:83:e8:4c:d1:45:8b:cf:aa:e5:5d:36: 45:b6:03:4e:2c:c3:8b:b2:fb:5e:b8:3c:4b:53:e6: 6c:3b:49:26:20:1c:10:26:71:83:d1:9e:b9:36:e9: 1d:32:01:a5:05:a5:3c:68:58:df:6d:c6:e6:f2:65: a1:c6:a6:6b:2c:cb:40:8a:74:80:41:85:ba:f7:ad: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DA:DB:D8:19:C8:67:FA:A7:E6:57:C1:60:B4:E9:63:29:7F:85:61 X509v3 Authority Key Identifier: keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:21:88:5a:de:dd:5d:ba:f1:0b:00:c0:10:37:99:c1:15:35: c5:42:45:39:45:41:b7:c4:f0:d8:22:8a:8d:33:1d:da:0e:36: bc:03:31:72:fe:b6:c0:c2:d9:30:9d:40:53:50:10:80:4d:a5: 76:f8:d0:42:79:30:8a:1c:31:7c:01:44:8d:e1:e1:53:80:ad: 6b:7b:9f:46:b8:69:6e:16:b3:b5:3c:55:89:93:d7:b8:3e:9d: 76:6a:b5:30:f6:9b:9e:ad:36:06:87:72:2a:bd:12:6d:5d:e9: 30:80:50:1e:6c:36:de:35:1a:a1:60:63:f9:a4:4c:5a:ec:e8: 2f:bc:9a:b1:ad:8f:69:42:fd:1f:19:6e:90:7c:43:ea:f0:8a: a3:0e:22:9c:5f:c2:2f:dc:cf:63:37:b6:cc:6c:d5:d2:b3:9c: 52:14:cd:58:17:0f:b3:dc:9e:11:5a:bf:07:b7:40:f8:66:74: 36:bd:84:0f:18:50:0c:46:62:fd:0c:13:78:6e:5a:1c:de:9f: 93:b0:18:83:b8:57:2b:c0:5c:0b:5f:13:64:df:68:3c:f6:7a: 64:ae:70:a7:b7:2b:9d:32:d7:b7:ef:61:e4:3c:32:d2:60:30: e4:db:a0:72:36:ac:b4:2b:25:9b:25:7f:4b:34:99:d7:23:94: 8e:ab:36:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+87nL1I45vP8EwT0URVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGU2NGUwNzEwZDMyZjI2YTM2ZDY4Y2ZmN2IzZjg2YWM4 MjBjZWIwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD Eyg2NmRhZGJkODE5Yzg2N2ZhYTdlNjU3YzE2MGI0ZTk2MzI5N2Y4NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjGKjuucJWiYrVng09KnseKsb6/H ZViYeHgN4hKbRgf7gh+hpppxeTqja6N5JMxUnH2yDGDCGdlaiLkWg7cl4p0LkWDH K5/GkXGNBMDWi9qHQ8WMgz8UvVFOG6Li2TEWztZwlB2+pEVpd4Hb8azGbKcSnf9C HHwGuyJeVBPa4Jh4HT1SlXXq4tZHT0ucAyUtuBFpmjvfiVNLscBEuucH16NAGj4Y yaDEbHkHyTUgWBAQ/VENu79Qg+hM0UWLz6rlXTZFtgNOLMOLsvteuDxLU+ZsO0km IBwQJnGD0Z65NukdMgGlBaU8aFjfbcbm8mWhxqZrLMtAinSAQYW6960tdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGba29gZyGf6p+ZXwWC06WMpf4VhMB8GA1UdIwQY MBaAFGyOZOBxDTLyajbWjP97P4asggzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgt YjhiYjlkN2RhMmRiLzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgtYjhiYjlkN2RhMmRi LzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4SGIWt7d XbrxCwDAEDeZwRU1xUJFOUVBt8Tw2CKKjTMd2g42vAMxcv62wMLZMJ1AU1AQgE2l dvjQQnkwihwxfAFEjeHhU4Cta3ufRrhpbhaztTxViZPXuD6ddmq1MPabnq02Body Kr0SbV3pMIBQHmw23jUaoWBj+aRMWuzoL7yasa2PaUL9HxlukHxD6vCKow4inF/C L9zPYze2zGzV0rOcUhTNWBcPs9yeEVq/B7dA+GZ0Nr2EDxhQDEZi/QwTeG5aHN6f k7AYg7hXK8BcC18TZN9oPPZ6ZK5wp7crnTLXt+9h5Dwy0mAw5NugcjastCslmyV/ SzSZ1yOUjqs2iA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:21 2025 by rpki-client