This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: y7g7HBQQ7MZ6ntjwlw2qcWTzlYB1lTm9ayiUwRe7mKU= Subject key identifier: D7:D2:AA:8E:17:7C:07:FD:44:AF:16:CA:C4:5B:27:AC:50:D6:45:92 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019AF0BEF73A3773B073C54173C7E16ABE83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1788 Signing time: Fri 05 Dec 2025 23:00:38 +0000 Manifest this update: Fri 05 Dec 2025 23:00:38 +0000 Manifest next update: Sat 06 Dec 2025 23:00:38 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZLCgOlPZ-adZViTKhsMv3BABRVQ.roa (hash: y37YnkCGLdmrEa4m8cGkKpYMZJFVaIJVqpcOQKXrYQA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: GHrYbFUt33NKe6js4IdnKLerIjfi8aH8mP7Q10KUlb4=) 9: fUiU9NND6NDkXeCCtG2FpkvLAtQ.roa (hash: BipzZjfv9NJLde/5SLk/7HBxUjct/iO+maQqs2utFTw=) 10: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (hash: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=) 11: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) 12: tORFCAGU_ExqN7Mewd4Qy6LCTnI.roa (hash: uPuXkPZSEOXMpoFnzdu2ibc0loihcwKdhAnVhzFJMng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f7:3a:37:73:b0:73:c5:41:73:c7:e1:6a:be:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Dec 5 23:00:38 2025 GMT Not After : Dec 6 23:00:38 2025 GMT Subject: CN=d7d2aa8e177c07fd44af16cac45b27ac50d64592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f6:b3:82:01:cd:47:6f:48:4f:3f:2c:28:23: 1b:4a:46:57:fc:b2:e4:a3:dc:ce:64:14:86:22:2f: 36:dd:ca:3a:9a:ad:e4:f6:48:9d:7a:97:6b:fd:1b: 11:de:4f:ac:74:56:99:f1:3d:4f:49:33:8d:47:b6: bf:64:51:6d:3c:c4:ec:7e:8e:37:b7:bb:af:7e:57: 21:91:3f:d2:2b:8f:2a:0d:20:4e:15:b0:0f:c4:24: 44:ea:f3:a1:97:c7:06:59:cd:d8:66:75:6c:76:ac: 8b:98:bd:a5:74:b7:71:c0:0f:67:c6:00:42:5a:c6: 95:c0:c5:95:c9:99:f2:44:68:a6:32:e1:fb:55:60: 57:d2:3e:df:a4:cb:f0:81:b5:8c:00:0c:53:4a:4e: bf:88:46:d8:4d:f9:bf:b5:c5:ea:39:82:69:04:08: 68:6e:23:4e:52:5f:dc:54:f8:ad:f5:fa:4a:98:24: bd:03:66:34:52:55:db:41:cf:03:83:af:7b:d7:56: 82:78:3c:d8:87:55:9a:8f:15:03:57:bb:1d:f5:63: d0:5a:88:80:9a:dd:90:ec:2f:5f:85:94:f1:16:47: 91:48:6a:6b:4f:2e:ed:46:ad:b9:c2:d0:f3:be:43: 05:8a:52:6d:47:b8:32:07:53:2f:3b:d1:17:87:07: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D2:AA:8E:17:7C:07:FD:44:AF:16:CA:C4:5B:27:AC:50:D6:45:92 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:36:00:19:0a:4f:e0:df:4f:e5:11:88:94:57:ce:b8:49:94: c0:25:f2:b8:bf:c5:87:cd:5c:f9:ae:64:8d:5c:f1:45:02:f5: f5:84:e3:02:04:31:93:75:84:47:90:49:de:35:09:7a:96:3a: df:8a:7e:75:ab:7c:28:ec:8d:00:4d:89:1e:c8:e2:3d:e5:5c: 5f:38:b5:a7:64:0e:1b:ac:22:db:cb:66:e0:77:fe:b8:f2:64: 62:64:0d:b1:a8:06:72:2c:4d:34:71:f5:9e:e4:1f:ae:6a:ad: 75:c6:0e:b4:bb:13:0d:de:a3:6a:c7:44:db:27:96:4f:20:f6: 76:91:cb:85:dd:a4:88:ad:99:c8:c1:27:67:5a:a5:e5:ea:91: 95:e2:f2:fc:46:0c:30:c9:4d:d7:9e:e5:f2:47:82:c3:1d:c7: d1:f9:07:c4:06:84:fa:31:f2:4a:72:d6:12:b2:ba:76:51:90: 9e:a9:80:df:10:3a:d9:38:9d:a8:57:ba:84:57:0e:93:b5:e8: bf:ab:4a:1e:8f:00:43:72:e7:b0:67:46:47:07:c1:57:a9:e0: ab:48:c9:12:b9:4f:c0:be:21:0f:8a:54:9e:70:5f:60:dd:80: b5:e6:18:60:34:7b:77:88:23:f3:13:2a:09:f7:ef:7c:b5:7f: 5c:5b:9a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvc6N3Owc8VBc8fhar6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUxMjA1MjMwMDM4WhcNMjUxMjA2MjMwMDM4WjAzMTEwLwYDVQQD EyhkN2QyYWE4ZTE3N2MwN2ZkNDRhZjE2Y2FjNDViMjdhYzUwZDY0NTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PazggHNR29ITz8sKCMbSkZX/LLk o9zOZBSGIi823co6mq3k9kidepdr/RsR3k+sdFaZ8T1PSTONR7a/ZFFtPMTsfo43 t7uvflchkT/SK48qDSBOFbAPxCRE6vOhl8cGWc3YZnVsdqyLmL2ldLdxwA9nxgBC WsaVwMWVyZnyRGimMuH7VWBX0j7fpMvwgbWMAAxTSk6/iEbYTfm/tcXqOYJpBAho biNOUl/cVPit9fpKmCS9A2Y0UlXbQc8Dg69711aCeDzYh1WajxUDV7sd9WPQWoiA mt2Q7C9fhZTxFkeRSGprTy7tRq25wtDzvkMFilJtR7gyB1MvO9EXhwcOWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfSqo4XfAf9RK8WysRbJ6xQ1kWSMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTYAGQpP 4N9P5RGIlFfOuEmUwCXyuL/Fh81c+a5kjVzxRQL19YTjAgQxk3WER5BJ3jUJepY6 34p+dat8KOyNAE2JHsjiPeVcXzi1p2QOG6wi28tm4Hf+uPJkYmQNsagGcixNNHH1 nuQfrmqtdcYOtLsTDd6jasdE2yeWTyD2dpHLhd2kiK2ZyMEnZ1ql5eqRleLy/EYM MMlN157l8keCwx3H0fkHxAaE+jHySnLWErK6dlGQnqmA3xA62TidqFe6hFcOk7Xo v6tKHo8AQ3LnsGdGRwfBV6ngq0jJErlPwL4hD4pUnnBfYN2AteYYYDR7d4gj8xMq CffvfLV/XFuavQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:14 2025 by rpki-client