This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft File: d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json) Hash identifier: JkmNrtMfY58KUsCiP8kBu1J/Fu0J3HRJ0skA0e843Xg= Subject key identifier: 70:DC:B1:56:B8:68:C6:35:6C:7D:B0:44:B4:86:48:DF:FA:10:85:EC Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F Certificate issuer: /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f Certificate serial: 019AF0BF50698128D292F98F9AF0420B9826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:01:00 +0000 Manifest this update: Fri 05 Dec 2025 23:01:00 +0000 Manifest next update: Sat 06 Dec 2025 23:01:00 +0000 Files and hashes: 1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: 9BAqR+l5YE0+YoYdEpTLD6J2WKrq+L84DKz5K+pVvro=) 2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:50:69:81:28:d2:92:f9:8f:9a:f0:42:0b:98:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f Validity Not Before: Dec 5 23:01:00 2025 GMT Not After : Dec 6 23:01:00 2025 GMT Subject: CN=70dcb156b868c6356c7db044b48648dffa1085ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:9b:2f:2a:12:4b:85:62:a2:f6:0e:a4:8f: 39:eb:72:65:ef:f4:03:96:32:d6:5b:db:4f:06:c3: b5:88:5e:d5:38:ff:54:8c:55:60:e1:c7:1c:c8:ce: 17:74:99:cb:06:54:44:b4:25:b4:91:81:41:98:69: 28:fb:c4:2a:4b:3a:7e:75:99:4c:0e:cb:99:2f:14: f3:da:b5:da:19:52:ca:11:1b:b1:51:ff:11:ab:c3: d8:31:c8:49:bd:de:14:71:ef:54:12:b9:9d:a1:f3: fb:cf:39:d9:40:63:e3:26:0f:81:7b:cc:67:41:70: a0:05:b2:e7:c0:82:d8:01:6c:0d:51:03:d2:16:f3: 09:c9:51:48:dc:13:02:c2:71:fd:e5:b5:f5:06:85: 9c:a7:bb:d0:e1:94:fd:f2:7d:7c:7c:2e:14:48:1c: e1:8e:7d:11:27:db:27:a7:e7:8a:31:6f:ee:b2:bb: 3d:c7:2c:63:ae:37:6c:61:10:3c:3d:91:64:4e:3a: e8:4c:f3:92:11:02:3f:73:ec:c6:58:40:68:7f:78: 6e:42:b2:8f:cb:f2:c2:46:20:f9:ef:fd:a7:8a:47: fb:4e:69:d1:f3:bf:14:e0:96:a2:8c:8e:f4:39:b4: b7:99:c8:63:ad:1c:c1:2d:e3:76:5a:b0:fc:4e:0b: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DC:B1:56:B8:68:C6:35:6C:7D:B0:44:B4:86:48:DF:FA:10:85:EC X509v3 Authority Key Identifier: keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3f:74:13:b2:a3:36:bc:1a:c8:92:a6:93:6a:c9:e7:72:7e: b7:02:62:35:b2:91:60:2a:2f:29:c1:8e:76:97:01:5a:13:2b: fb:db:e7:ca:be:24:e5:81:9a:d8:2c:80:2b:eb:71:07:bf:7d: e7:c7:d2:bf:05:6b:f5:69:1f:7d:58:8a:62:8b:8c:4a:ed:56: 3a:c3:5f:8d:4d:02:98:48:b8:d7:f0:02:90:3d:fd:a3:90:0b: 29:81:df:0b:62:84:7e:71:bb:2c:38:5a:87:fa:45:3e:76:2e: f9:a0:5b:3c:6b:df:e9:ec:28:50:0d:5a:43:87:3f:d5:f2:e4: 1f:37:1b:a5:ba:09:ba:b1:0a:ab:7f:30:fd:98:6e:2f:4b:47: 4c:fe:30:87:fa:ed:2a:a6:9b:ad:54:eb:16:3d:d6:d1:f8:e9: f4:75:b9:ab:b3:7c:1a:bf:7e:be:81:f8:40:24:e5:c1:c8:1f: 72:a0:25:9a:80:0b:71:68:17:cb:92:01:c6:3d:9a:b9:1c:af: 24:6a:01:30:4a:e6:03:9b:74:11:49:99:06:58:a7:e9:80:13: 7f:ee:74:5d:4e:ad:9e:25:26:e9:ab:96:83:de:1a:72:d6:54: a5:b5:64:be:b4:ec:f3:75:9b:10:2d:f5:ba:a7:40:86:67:10: eb:75:f8:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1BpgSjSkvmPmvBCC5gmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZGJmYjNkNjRlYjEwYzc4MjU2MmEzNzg1NWIwNzMyYmQx OGViM2YwHhcNMjUxMjA1MjMwMTAwWhcNMjUxMjA2MjMwMTAwWjAzMTEwLwYDVQQD Eyg3MGRjYjE1NmI4NjhjNjM1NmM3ZGIwNDRiNDg2NDhkZmZhMTA4NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZmbLyoSS4ViovYOpI8563Jl7/QD ljLWW9tPBsO1iF7VOP9UjFVg4cccyM4XdJnLBlREtCW0kYFBmGko+8QqSzp+dZlM DsuZLxTz2rXaGVLKERuxUf8Rq8PYMchJvd4Uce9UErmdofP7zznZQGPjJg+Be8xn QXCgBbLnwILYAWwNUQPSFvMJyVFI3BMCwnH95bX1BoWcp7vQ4ZT98n18fC4USBzh jn0RJ9snp+eKMW/usrs9xyxjrjdsYRA8PZFkTjroTPOSEQI/c+zGWEBof3huQrKP y/LCRiD57/2nikf7TmnR878U4JaijI70ObS3mchjrRzBLeN2WrD8Tgsi5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDcsVa4aMY1bH2wRLSGSN/6EIXsMB8GA1UdIwQY MBaAFHfb+z1k6xDHglYqN4VbBzK9GOs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEt NTRiNDFlNGZjNjNiLzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEtNTRiNDFlNGZjNjNi LzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACj90E7Kj NrwayJKmk2rJ53J+twJiNbKRYCovKcGOdpcBWhMr+9vnyr4k5YGa2CyAK+txB799 58fSvwVr9WkffViKYouMSu1WOsNfjU0CmEi41/ACkD39o5ALKYHfC2KEfnG7LDha h/pFPnYu+aBbPGvf6ewoUA1aQ4c/1fLkHzcbpboJurEKq38w/ZhuL0tHTP4wh/rt KqabrVTrFj3W0fjp9HW5q7N8Gr9+voH4QCTlwcgfcqAlmoALcWgXy5IBxj2auRyv JGoBMErmA5t0EUmZBlin6YATf+50XU6tniUm6auWg94actZUpbVkvrTs83WbEC31 uqdAhmcQ63X4Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:24 2025 by rpki-client