This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json) Hash identifier: KbwWPad+QGKI+catpPe2df6TkBJVLWqxChXmCSQCiZs= Subject key identifier: A5:AF:F4:1D:82:90:5A:32:DC:B6:78:FC:53:F8:36:FA:7F:86:13:A9 Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Certificate serial: 019AF50A70DB32C89A8CF5EDD74D4AC49E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:33 +0000 Manifest this update: Sat 06 Dec 2025 19:01:33 +0000 Manifest next update: Sun 07 Dec 2025 19:01:33 +0000 Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: pZsk81hilOr5oKXIsiOZf+o2kGYf/Pnj85uNqqqVy2w=) 2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:70:db:32:c8:9a:8c:f5:ed:d7:4d:4a:c4:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Validity Not Before: Dec 6 19:01:33 2025 GMT Not After : Dec 7 19:01:33 2025 GMT Subject: CN=a5aff41d82905a32dcb678fc53f836fa7f8613a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fe:e3:f7:64:46:bc:8c:c8:5c:bf:c8:da:9e: 18:22:60:57:7a:56:86:d6:44:71:70:2d:6a:7c:e9: 94:e2:b3:aa:a5:cb:f2:7b:a7:11:66:62:a6:ca:ea: 30:87:50:c5:b1:52:d5:96:e7:61:8a:f7:ea:85:0a: ba:3e:c7:49:63:e4:74:a7:2f:0b:86:3c:5a:fe:2d: f8:17:be:52:af:27:07:3b:11:e2:ac:95:4b:7b:c4: 0d:2b:ec:3d:be:86:b2:1e:43:f5:aa:1b:f7:f9:a4: 0e:e5:16:46:57:77:0e:49:2f:29:a7:35:00:3c:b6: db:2d:cb:1f:59:91:38:26:a6:99:e9:d4:95:65:7f: 39:e4:d8:6d:61:a4:3e:39:ad:30:c0:fa:cb:c3:25: 4a:e9:0a:32:3e:f5:96:74:72:6c:7c:3a:79:2d:5e: c3:7e:ad:db:6e:40:22:8c:9a:f4:f0:c8:8e:79:5f: ac:78:38:86:d4:b4:5a:6c:94:03:39:66:24:c6:e1: 2d:cb:e7:8e:a4:48:5e:7f:c6:13:ee:d2:89:63:f3: 59:b7:12:e8:4b:82:21:6b:e9:0a:99:41:0d:5a:3b: 7a:7e:f6:cb:90:34:84:41:42:5d:65:70:be:3c:08: 89:89:95:c1:d1:15:73:e0:15:a3:f0:8b:cc:54:17: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AF:F4:1D:82:90:5A:32:DC:B6:78:FC:53:F8:36:FA:7F:86:13:A9 X509v3 Authority Key Identifier: keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:95:b7:01:c2:b7:de:ff:40:10:87:5b:9e:7e:48:fe:9b:cc: c1:c0:11:a0:fd:9f:76:b2:a6:1c:b5:8b:3b:68:22:08:dc:5b: e6:78:33:f8:56:c0:8d:98:71:61:ef:ff:c2:ab:b6:c7:69:23: 5f:26:00:5f:0c:77:6b:02:da:de:97:6d:46:42:7b:93:61:04: 50:86:a1:2e:34:fd:b2:06:67:03:44:be:13:1a:e1:fa:be:e3: 63:e2:c6:95:e4:eb:bf:a6:de:52:f8:1a:05:db:47:46:a8:2d: cd:54:62:4d:3d:c8:07:ee:30:56:29:c8:fe:55:3e:01:c1:22: 31:62:10:40:06:b2:83:17:7d:a5:8a:18:4c:7f:9f:a0:91:42: c0:f9:3a:6e:59:63:e7:ed:d3:de:16:1d:74:8e:11:ba:7a:20: d3:b8:69:56:3e:44:1f:a6:68:6e:c5:30:a7:3f:0a:4e:88:7b: 1d:73:a0:97:26:a5:e7:f9:8a:9d:fa:63:7c:2c:99:68:fe:0c: 76:35:76:8b:c8:c0:21:be:e1:1e:ee:06:1f:c4:53:08:ed:38: 11:17:fa:b0:b9:bd:69:9f:f7:68:af:b7:40:96:ca:ba:d7:b4: 05:78:fd:52:50:fc:84:58:f1:7d:c9:4c:0e:35:1c:ae:60:af: b4:12:db:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CnDbMsiajPXt101KxJ4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi ZDFiYWMwHhcNMjUxMjA2MTkwMTMzWhcNMjUxMjA3MTkwMTMzWjAzMTEwLwYDVQQD EyhhNWFmZjQxZDgyOTA1YTMyZGNiNjc4ZmM1M2Y4MzZmYTdmODYxM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f7j92RGvIzIXL/I2p4YImBXelaG 1kRxcC1qfOmU4rOqpcvye6cRZmKmyuowh1DFsVLVludhivfqhQq6PsdJY+R0py8L hjxa/i34F75SrycHOxHirJVLe8QNK+w9voayHkP1qhv3+aQO5RZGV3cOSS8ppzUA PLbbLcsfWZE4JqaZ6dSVZX855NhtYaQ+Oa0wwPrLwyVK6QoyPvWWdHJsfDp5LV7D fq3bbkAijJr08MiOeV+seDiG1LRabJQDOWYkxuEty+eOpEhef8YT7tKJY/NZtxLo S4Iha+kKmUENWjt6fvbLkDSEQUJdZXC+PAiJiZXB0RVz4BWj8IvMVBczKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWv9B2CkFoy3LZ4/FP4Nvp/hhOpMB8GA1UdIwQY MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt NjU0OTA4Mzg0ZGQ4LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4 LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5W3AcK3 3v9AEIdbnn5I/pvMwcARoP2fdrKmHLWLO2giCNxb5ngz+FbAjZhxYe//wqu2x2kj XyYAXwx3awLa3pdtRkJ7k2EEUIahLjT9sgZnA0S+Exrh+r7jY+LGleTrv6beUvga BdtHRqgtzVRiTT3IB+4wVinI/lU+AcEiMWIQQAaygxd9pYoYTH+foJFCwPk6bllj 5+3T3hYddI4Runog07hpVj5EH6ZobsUwpz8KToh7HXOglyal5/mKnfpjfCyZaP4M djV2i8jAIb7hHu4GH8RTCO04ERf6sLm9aZ/3aK+3QJbKute0BXj9UlD8hFjxfclM DjUcrmCvtBLbRg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:19 2025 by rpki-client