This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json) Hash identifier: K0aagII2vCZmyjoAZ+srvo2ku4vxna7aUSYrmj5fXkY= Subject key identifier: BB:90:33:6A:61:55:8A:47:BE:93:21:A3:99:93:4E:BE:7A:C8:E1:62 Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Certificate serial: 019AF464C9542471CE9C9DCCF908F7ECC4C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 16:00:37 +0000 Manifest this update: Sat 06 Dec 2025 16:00:37 +0000 Manifest next update: Sun 07 Dec 2025 16:00:37 +0000 Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: KEJE0mX5Uj0Db1vdPLOXRhnkCfBVeTY7Cc06Xj72s54=) 2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=) 3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c9:54:24:71:ce:9c:9d:cc:f9:08:f7:ec:c4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Validity Not Before: Dec 6 16:00:37 2025 GMT Not After : Dec 7 16:00:37 2025 GMT Subject: CN=bb90336a61558a47be9321a399934ebe7ac8e162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:d5:c1:b9:e6:63:e5:0e:87:67:aa:4c:f2: 9e:c4:67:8f:99:79:4e:e2:e2:b2:1f:1b:e3:4c:dd: 94:23:39:fb:e5:71:42:9d:e9:66:08:57:86:eb:ad: 0c:bd:63:3b:c2:ec:77:7b:5b:ba:d0:5b:73:fe:bd: d0:4a:42:ec:d6:b6:bc:56:cf:e5:59:43:b6:d6:cf: b6:35:3b:20:c1:78:12:b0:2c:45:81:8f:21:bf:67: 2a:c2:38:8d:16:a2:41:32:ca:d1:2a:f7:e8:fb:20: da:83:bf:98:9e:cc:6b:22:a5:b4:2e:a8:30:e0:c7: f9:59:49:d3:50:d4:8f:2f:fc:a8:80:50:04:16:8c: ef:da:30:94:12:12:ac:d9:7a:6f:3d:88:62:56:ed: c3:d3:91:56:38:7e:04:2a:e7:f7:97:89:25:a7:56: bf:ac:31:9e:98:d1:13:64:5b:18:41:f1:46:da:0f: 56:ff:51:1c:c7:8c:e4:33:6b:56:3d:6e:4c:7d:f4: 83:47:33:82:73:f4:d5:f6:ed:8a:40:f7:3e:95:8a: 13:6b:f6:52:48:98:18:cd:a6:fd:0c:11:77:ef:c4: c7:db:49:3e:9c:f0:b5:64:a6:f7:1b:f3:e4:11:8e: c3:92:b8:81:b8:89:2e:c1:d2:60:f0:82:34:48:70: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:90:33:6A:61:55:8A:47:BE:93:21:A3:99:93:4E:BE:7A:C8:E1:62 X509v3 Authority Key Identifier: keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c2:39:17:a2:9b:4f:d7:13:84:c5:4b:c5:0c:b7:03:89:23: 8b:e1:f6:9a:3a:33:1a:86:33:e7:ad:93:6b:bf:91:d0:76:fd: 6d:1e:a6:7e:0c:6e:63:ac:59:cb:e4:74:6b:3a:2e:a8:fe:a1: 16:9a:31:a6:3c:a7:d0:55:fc:0c:84:24:a3:a8:3b:be:a8:1e: 6d:b9:0b:39:a3:a5:f4:5d:dc:ee:fd:f1:0d:35:b7:2c:5e:48: b5:3c:c9:41:27:5b:ad:2d:41:84:f8:4c:d1:71:ce:8e:75:0d: 46:4a:f2:d9:da:78:7b:ee:f1:bd:7d:bc:6a:df:05:66:10:2b: ba:d1:00:df:d4:ed:ae:38:84:02:e7:78:a3:fe:5c:b7:da:23: dc:ee:6d:9d:dd:a9:77:dc:13:53:ba:45:ee:bd:0c:61:55:3b: 1a:11:88:e0:e1:84:f7:7d:bf:a2:e9:14:40:17:38:6d:6b:cf: 6d:e1:5a:e9:bd:b4:d9:10:fb:06:b6:03:ec:ab:bf:f3:93:f6: c0:f6:0e:de:be:15:5f:74:91:ee:42:37:9c:a6:53:90:5f:c5: 5e:1c:9b:d5:8f:e6:e5:80:ef:2e:01:c9:f6:e1:1f:3f:dd:0b: 79:e2:af:54:1e:0e:8a:72:86:4c:84:e6:d4:e0:b8:ef:bb:1f: 95:39:12:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMlUJHHOnJ3M+Qj37MTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3 MjEwZTUwHhcNMjUxMjA2MTYwMDM3WhcNMjUxMjA3MTYwMDM3WjAzMTEwLwYDVQQD EyhiYjkwMzM2YTYxNTU4YTQ3YmU5MzIxYTM5OTkzNGViZTdhYzhlMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhXVwbnmY+UOh2eqTPKexGePmXlO 4uKyHxvjTN2UIzn75XFCnelmCFeG660MvWM7wux3e1u60Ftz/r3QSkLs1ra8Vs/l WUO21s+2NTsgwXgSsCxFgY8hv2cqwjiNFqJBMsrRKvfo+yDag7+YnsxrIqW0Lqgw 4Mf5WUnTUNSPL/yogFAEFozv2jCUEhKs2XpvPYhiVu3D05FWOH4EKuf3l4klp1a/ rDGemNETZFsYQfFG2g9W/1Ecx4zkM2tWPW5MffSDRzOCc/TV9u2KQPc+lYoTa/ZS SJgYzab9DBF378TH20k+nPC1ZKb3G/PkEY7DkriBuIkuwdJg8II0SHBxBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuQM2phVYpHvpMho5mTTr56yOFiMB8GA1UdIwQY MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt YWIyY2U5NGMxNDIzLzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcI5F6Kb T9cThMVLxQy3A4kji+H2mjozGoYz562Ta7+R0Hb9bR6mfgxuY6xZy+R0azouqP6h Fpoxpjyn0FX8DIQko6g7vqgebbkLOaOl9F3c7v3xDTW3LF5ItTzJQSdbrS1BhPhM 0XHOjnUNRkry2dp4e+7xvX28at8FZhArutEA39TtrjiEAud4o/5ct9oj3O5tnd2p d9wTU7pF7r0MYVU7GhGI4OGE932/oukUQBc4bWvPbeFa6b202RD7BrYD7Ku/85P2 wPYO3r4VX3SR7kI3nKZTkF/FXhyb1Y/m5YDvLgHJ9uEfP90LeeKvVB4OinKGTITm 1OC477sflTkSdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:51 2025 by rpki-client