This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json) Hash identifier: 0/2VIU1LvMqrcWf/EZV0gwJXPTRNQrzQ8Z8oFXJznlQ= Subject key identifier: 61:D4:11:F4:F4:E3:6A:F3:FB:82:8D:47:20:96:E9:AC:6B:F1:E3:C4 Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Certificate serial: 019AF23F860570F33FCAE576C7672C0CC7F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:00:40 +0000 Manifest this update: Sat 06 Dec 2025 06:00:40 +0000 Manifest next update: Sun 07 Dec 2025 06:00:40 +0000 Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=) 2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: Qn/D+Cmv5uQUNa7MQlb8KVEw2RRcz3L8ZJtsBCDrWUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:86:05:70:f3:3f:ca:e5:76:c7:67:2c:0c:c7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Validity Not Before: Dec 6 06:00:40 2025 GMT Not After : Dec 7 06:00:40 2025 GMT Subject: CN=61d411f4f4e36af3fb828d472096e9ac6bf1e3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d9:c4:5e:a4:ab:d4:11:15:9a:03:f5:c3:c3: 33:68:9d:22:1d:bc:99:2c:c6:8f:9e:c9:36:e4:59: 70:06:8c:68:32:42:db:82:fa:64:c9:97:d7:79:38: fe:49:79:42:70:58:53:b7:31:9c:1e:0d:cf:4c:a8: 42:3e:8e:70:b9:7f:1b:80:79:97:24:10:5c:34:41: c6:6f:ae:d1:64:90:fb:0a:25:69:47:c7:95:49:f1: 31:03:8f:33:9d:68:1d:8e:35:bd:13:10:13:12:4c: 83:61:45:ae:c8:0a:18:5f:89:6b:b5:12:e4:3f:14: 98:ed:f2:ef:18:08:03:39:ec:0f:61:95:48:de:b9: 40:c0:f5:31:0b:49:fa:cd:0c:8b:13:70:48:dd:5e: 52:c2:19:31:5c:06:df:03:37:59:9f:8a:c8:5a:29: 71:e2:9e:5d:a5:ec:fb:6d:7e:a3:f3:f3:18:80:4b: 6e:db:d6:41:b9:c5:ef:11:5e:73:d0:77:65:36:b2: cd:39:e7:a4:d4:68:d3:d9:03:2e:75:ab:45:2d:a4: 3c:02:c0:00:64:5e:00:33:3d:2e:24:07:ee:a3:fe: d2:0a:f0:d3:c2:d8:fd:25:bb:3a:29:b6:4d:dd:c2: b0:7d:15:e5:6f:60:74:97:5e:57:5f:a2:b5:f8:8c: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D4:11:F4:F4:E3:6A:F3:FB:82:8D:47:20:96:E9:AC:6B:F1:E3:C4 X509v3 Authority Key Identifier: keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:51:c7:67:de:f0:23:bb:0a:30:14:6b:a7:e4:92:c1:4e:f6: 57:d8:f0:dd:61:86:31:55:5f:3a:67:4d:59:3b:74:fe:8d:c6: 7a:0e:5c:7e:fa:ee:f1:de:ea:04:91:6d:a0:c6:43:89:1a:31: 32:e3:97:9d:57:4b:75:e8:15:19:51:f9:85:bf:d2:fa:8b:d3: d0:99:2a:bb:e8:42:65:66:b3:b0:4a:86:dc:54:70:75:c8:6d: 48:45:7e:01:89:e6:58:82:d5:32:47:b6:e0:c5:b5:aa:f3:f7: a8:98:e7:ab:83:c2:3e:ff:f5:05:7d:de:81:5b:6a:84:c1:84: c2:9c:48:6b:22:f2:91:4b:f4:7a:c9:ab:ca:95:0b:72:20:24: 5c:f7:4c:6b:a5:9a:68:b5:0c:bb:b1:66:0b:fe:9a:34:c9:bc: 0d:c3:e4:76:22:a7:5e:0b:4e:45:c3:eb:34:0e:31:44:a3:fe: ba:9f:d5:54:fd:b1:36:14:3c:75:48:fd:7b:25:f3:cc:f8:e0: 1e:c6:22:1d:b2:88:66:26:e5:5c:d1:c8:b2:e5:5c:f1:cc:4a: ec:3c:ff:f9:66:08:6a:4f:5f:29:e9:5e:8a:48:f1:67:9f:fa: 76:37:a1:33:71:07:02:e9:70:5a:f0:3b:b1:ed:e0:6b:6b:a8: 31:ac:36:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4YFcPM/yuV2x2csDMf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYjkxMjViOGExMGQzMjIzNDg2ODFhMmQyYWM3ZDY3ZDJh ZDI1MzUwHhcNMjUxMjA2MDYwMDQwWhcNMjUxMjA3MDYwMDQwWjAzMTEwLwYDVQQD Eyg2MWQ0MTFmNGY0ZTM2YWYzZmI4MjhkNDcyMDk2ZTlhYzZiZjFlM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29nEXqSr1BEVmgP1w8MzaJ0iHbyZ LMaPnsk25FlwBoxoMkLbgvpkyZfXeTj+SXlCcFhTtzGcHg3PTKhCPo5wuX8bgHmX JBBcNEHGb67RZJD7CiVpR8eVSfExA48znWgdjjW9ExATEkyDYUWuyAoYX4lrtRLk PxSY7fLvGAgDOewPYZVI3rlAwPUxC0n6zQyLE3BI3V5SwhkxXAbfAzdZn4rIWilx 4p5dpez7bX6j8/MYgEtu29ZBucXvEV5z0HdlNrLNOeek1GjT2QMudatFLaQ8AsAA ZF4AMz0uJAfuo/7SCvDTwtj9Jbs6KbZN3cKwfRXlb2B0l15XX6K1+IzsOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHUEfT042rz+4KNRyCW6axr8ePEMB8GA1UdIwQY MBaAFGu5EluKENMiNIaBotKsfWfSrSU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUt ODNiYzQxM2EwNDhkLzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUtODNiYzQxM2EwNDhk LzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVHHZ97w I7sKMBRrp+SSwU72V9jw3WGGMVVfOmdNWTt0/o3Geg5cfvru8d7qBJFtoMZDiRox MuOXnVdLdegVGVH5hb/S+ovT0Jkqu+hCZWazsEqG3FRwdchtSEV+AYnmWILVMke2 4MW1qvP3qJjnq4PCPv/1BX3egVtqhMGEwpxIayLykUv0esmrypULciAkXPdMa6Wa aLUMu7FmC/6aNMm8DcPkdiKnXgtORcPrNA4xRKP+up/VVP2xNhQ8dUj9eyXzzPjg HsYiHbKIZiblXNHIsuVc8cxK7Dz/+WYIak9fKeleikjxZ5/6djehM3EHAulwWvA7 se3ga2uoMaw2zA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:58 2025 by rpki-client