This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json) Hash identifier: NMJoJ5OoD1n0TgU+yKnD1ArPQkCBuXP+IwWK3Iy7LPg= Subject key identifier: BB:69:58:A2:DF:CA:20:41:29:F4:4D:97:B6:25:7A:43:7C:6D:09:E9 Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588 Certificate serial: 019AF50ADEE18CAFF3EBD53AA1F22E088CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft Manifest number: 0EEA Signing time: Sat 06 Dec 2025 19:02:01 +0000 Manifest this update: Sat 06 Dec 2025 19:02:01 +0000 Manifest next update: Sun 07 Dec 2025 19:02:01 +0000 Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: 7RzqnTnhxfncLbG7NKiduQ2tgtvs58aspzAOOKkz9Nk=) 2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:de:e1:8c:af:f3:eb:d5:3a:a1:f2:2e:08:8c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588 Validity Not Before: Dec 6 19:02:01 2025 GMT Not After : Dec 7 19:02:01 2025 GMT Subject: CN=bb6958a2dfca204129f44d97b6257a437c6d09e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:ce:95:03:6c:d4:9e:a7:82:f6:ec:58:07: c8:d0:6b:bb:eb:15:42:21:0c:87:c8:6e:79:4c:ee: 2a:29:ac:8c:1c:7d:98:ef:7b:f4:0d:98:4a:e5:40: a6:b1:90:39:ec:02:7f:91:64:b4:f9:41:fa:9a:6b: df:03:e0:9e:06:6d:b2:c2:46:1c:d8:40:6d:fb:ab: 2c:64:54:6a:f8:64:47:74:78:55:25:57:98:cf:c6: 93:0e:4a:6a:c3:57:4f:e2:62:07:7b:27:26:7c:08: 36:4d:96:2a:89:be:4e:dc:c7:96:e0:2c:36:12:08: a4:76:11:26:37:31:d3:3a:e7:ef:5d:6a:be:4d:73: 4f:28:81:a3:1f:59:c9:33:23:9d:e5:9f:22:b7:bb: d0:e9:56:3c:c4:8a:73:c7:44:c1:7c:d7:fd:12:c1: 6a:40:14:62:e7:f1:2c:3b:0e:5a:12:ee:14:6a:16: ee:1f:27:d7:56:b4:ac:71:54:66:30:c8:92:cd:aa: 72:45:d5:b0:04:b8:d5:a9:ff:f1:8e:11:f7:6c:3f: 76:97:fc:2e:1e:b2:2d:fc:20:cb:97:be:77:73:a5: 9b:21:34:27:15:96:30:14:09:97:46:37:30:2e:68: df:e2:85:b4:b7:5a:1c:30:30:7d:ef:71:c9:e2:15: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:69:58:A2:DF:CA:20:41:29:F4:4D:97:B6:25:7A:43:7C:6D:09:E9 X509v3 Authority Key Identifier: keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7c:fc:81:c2:ee:82:72:38:f5:14:67:bd:15:27:4a:70:fa: d7:2e:46:39:19:df:dc:cd:2a:b1:41:ec:33:49:5e:51:82:a1: d7:dd:52:c7:41:93:46:a2:b0:60:f3:5a:37:5e:8b:ec:26:60: 88:82:e1:d8:f7:95:61:51:88:0f:2e:72:6e:ae:eb:f3:3c:ed: c6:ac:08:17:02:ac:04:ea:73:08:b0:b0:2a:28:0f:83:aa:1b: 32:3f:41:bf:08:67:08:f7:9d:5b:5f:6a:8c:d7:85:7f:6c:ea: 42:c1:21:c3:56:93:95:23:24:75:d2:2e:b9:ef:c9:fd:a2:ff: f3:71:9c:fe:ec:cc:1e:60:78:65:13:9b:15:17:c8:f0:64:28: aa:0e:a5:a1:25:3d:19:b0:21:be:e7:e0:ee:7d:31:e3:fe:e5: 61:d3:a7:94:8b:87:0c:ac:5e:a2:eb:86:e5:fe:bd:1b:b5:5c: 04:1b:02:cf:d3:e7:04:55:48:a6:3f:84:e8:b8:e4:3d:89:19: 3a:e6:de:49:bc:7f:2a:16:53:68:19:7e:35:ac:65:9a:b3:73: 81:38:5c:72:ae:78:1a:89:43:68:76:bf:c9:20:43:7c:7e:e5: cb:66:5d:be:6c:89:fd:33:1d:cc:b4:08:ec:60:ce:b1:9b:f2: d0:5c:d1:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ct7hjK/z69U6ofIuCIzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0 MGE1ODgwHhcNMjUxMjA2MTkwMjAxWhcNMjUxMjA3MTkwMjAxWjAzMTEwLwYDVQQD EyhiYjY5NThhMmRmY2EyMDQxMjlmNDRkOTdiNjI1N2E0MzdjNmQwOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVzOlQNs1J6ngvbsWAfI0Gu76xVC IQyHyG55TO4qKayMHH2Y73v0DZhK5UCmsZA57AJ/kWS0+UH6mmvfA+CeBm2ywkYc 2EBt+6ssZFRq+GRHdHhVJVeYz8aTDkpqw1dP4mIHeycmfAg2TZYqib5O3MeW4Cw2 EgikdhEmNzHTOufvXWq+TXNPKIGjH1nJMyOd5Z8it7vQ6VY8xIpzx0TBfNf9EsFq QBRi5/EsOw5aEu4UahbuHyfXVrSscVRmMMiSzapyRdWwBLjVqf/xjhH3bD92l/wu HrIt/CDLl753c6WbITQnFZYwFAmXRjcwLmjf4oW0t1ocMDB973HJ4hW/eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtpWKLfyiBBKfRNl7YlekN8bQnpMB8GA1UdIwQY MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXz8gcLu gnI49RRnvRUnSnD61y5GORnf3M0qsUHsM0leUYKh191Sx0GTRqKwYPNaN16L7CZg iILh2PeVYVGIDy5ybq7r8zztxqwIFwKsBOpzCLCwKigPg6obMj9BvwhnCPedW19q jNeFf2zqQsEhw1aTlSMkddIuue/J/aL/83Gc/uzMHmB4ZRObFRfI8GQoqg6loSU9 GbAhvufg7n0x4/7lYdOnlIuHDKxeouuG5f69G7VcBBsCz9PnBFVIpj+E6LjkPYkZ OubeSbx/KhZTaBl+NaxlmrNzgThccq54GolDaHa/ySBDfH7ly2ZdvmyJ/TMdzLQI 7GDOsZvy0FzRfQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:36:43 2025 by rpki-client