This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json) Hash identifier: hT0ib3TLUH2PpTwbXPV/hL4p1WjroVYOPBAMxT9/LWI= Subject key identifier: BB:0C:8B:4D:C8:9F:A0:F8:93:43:00:35:DD:CB:46:F0:7D:C6:48:2D Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd Certificate serial: 019AF2AD54A73DA665651101F40784869493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: SpsqNCwISL1D7YWDs8MOUK4XUcQ.roa (hash: VKTdP32emCO1Alc2phplZ6z5V0MT3UL3VXfP0BBA76I=) 2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: r+nEIjaczMyJVaKXzy11H92JHfw+2wUFzyBezBbTBII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:54:a7:3d:a6:65:65:11:01:f4:07:84:86:94:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=bb0c8b4dc89fa0f893430035ddcb46f07dc6482d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:df:2e:11:c8:56:15:b0:2b:70:4a:46:39: ca:56:26:fc:16:f4:ec:79:82:35:ca:af:ad:b7:53: 01:00:eb:49:bb:bc:7c:24:c2:33:98:2e:88:5d:ec: cf:45:fa:27:b8:bc:ee:09:96:3c:6a:49:8b:35:0f: 6f:c5:bd:c7:1d:8c:32:95:d4:b5:43:8c:e8:ba:cd: 44:a3:3e:58:42:e1:a5:4e:13:65:92:28:8b:d0:4d: 88:07:9e:05:12:3d:99:46:ea:62:52:98:7d:1e:08: 58:15:cf:3f:fc:e5:26:cc:e4:f5:4a:87:c7:44:6b: 52:82:13:10:27:82:48:e3:7c:87:eb:d5:36:6b:3a: f2:c6:19:7a:6e:ae:a9:a2:b5:7d:76:92:19:7a:16: 86:7f:79:d1:b2:07:d5:ba:71:37:f7:2d:b6:08:9d: 2f:b3:cc:d3:57:b1:53:6e:dc:50:29:b9:d6:a3:02: 04:eb:96:62:24:44:ff:f3:ee:ad:57:f9:19:5c:7d: 46:59:ae:28:c9:d4:83:b2:7e:0e:16:b6:0d:f1:0a: c9:3e:ad:b1:85:63:4a:02:a4:7c:c9:77:06:f5:1d: 22:3f:b0:4d:6c:f0:05:d2:de:7d:a6:cf:f7:96:3b: 99:3d:0d:c8:1a:d6:18:2f:64:b4:4c:92:38:e5:16: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0C:8B:4D:C8:9F:A0:F8:93:43:00:35:DD:CB:46:F0:7D:C6:48:2D X509v3 Authority Key Identifier: keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:78:0d:3b:fb:fa:a9:32:75:67:00:62:69:5b:a4:1f:38:43: 28:02:c3:88:69:f0:a6:07:b1:0e:33:e2:e9:17:e7:a8:e8:fd: 4a:d3:23:d2:d4:76:e0:4a:04:94:8e:13:88:d9:b0:4a:a5:07: d9:de:15:f6:66:10:74:0a:e5:12:4a:22:1d:4a:89:a5:7f:54: 10:4e:ec:75:c4:07:ed:52:b4:09:41:2c:2a:a1:53:39:2b:68: a0:a8:47:e6:d8:8f:56:49:19:e3:e0:a5:33:7a:16:4e:a9:1b: bb:81:83:be:30:e4:64:b6:7e:1f:e2:d3:b0:47:95:ca:4c:b1: 0c:b8:a8:20:93:60:3e:2c:ef:ae:29:15:c5:2a:1f:3f:31:70: 2a:89:ce:af:90:8a:e7:b9:5b:11:13:f7:a7:ce:30:c2:bf:35: 4a:a0:54:5a:a0:85:5b:6c:36:7e:de:c9:e2:4c:9b:ff:2e:cc: 5a:ae:de:85:77:a0:8b:24:7c:c9:cd:dc:d6:53:ec:a8:b0:e6: 6b:41:49:ce:8d:1f:f9:34:85:29:af:17:51:4c:ca:a6:2f:8d: 0b:f4:bc:d4:97:91:c9:47:58:f9:8b:5f:8a:46:68:00:b9:95: 52:5b:24:f2:12:b0:a9:1e:67:3c:39:d3:3e:99:fc:a0:b1:f4: aa:2c:4a:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVSnPaZlZREB9AeEhpSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZmNTRlYTliMTVhOGJkNGYzMzgyNTM4NmNiMjc3YjAz NDM5ZGQwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD EyhiYjBjOGI0ZGM4OWZhMGY4OTM0MzAwMzVkZGNiNDZmMDdkYzY0ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHrfLhHIVhWwK3BKRjnKVib8FvTs eYI1yq+tt1MBAOtJu7x8JMIzmC6IXezPRfonuLzuCZY8akmLNQ9vxb3HHYwyldS1 Q4zous1Eoz5YQuGlThNlkiiL0E2IB54FEj2ZRupiUph9HghYFc8//OUmzOT1SofH RGtSghMQJ4JI43yH69U2azryxhl6bq6porV9dpIZehaGf3nRsgfVunE39y22CJ0v s8zTV7FTbtxQKbnWowIE65ZiJET/8+6tV/kZXH1GWa4oydSDsn4OFrYN8QrJPq2x hWNKAqR8yXcG9R0iP7BNbPAF0t59ps/3ljuZPQ3IGtYYL2S0TJI45RZHzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsMi03In6D4k0MANd3LRvB9xkgtMB8GA1UdIwQY MBaAFLO29U6psVqL1PM4JThssnewNDndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUt MmY0NmU5MzE3Y2M2LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUtMmY0NmU5MzE3Y2M2 LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXgNO/v6 qTJ1ZwBiaVukHzhDKALDiGnwpgexDjPi6RfnqOj9StMj0tR24EoElI4TiNmwSqUH 2d4V9mYQdArlEkoiHUqJpX9UEE7sdcQH7VK0CUEsKqFTOStooKhH5tiPVkkZ4+Cl M3oWTqkbu4GDvjDkZLZ+H+LTsEeVykyxDLioIJNgPizvrikVxSofPzFwKonOr5CK 57lbERP3p84wwr81SqBUWqCFW2w2ft7J4kyb/y7MWq7ehXegiyR8yc3c1lPsqLDm a0FJzo0f+TSFKa8XUUzKpi+NC/S81JeRyUdY+YtfikZoALmVUlsk8hKwqR5nPDnT Ppn8oLH0qixKpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:01 2025 by rpki-client