This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json) Hash identifier: wJgS19k2VP91khpIyr7YY5KC7YLMgmyrr2rIsxbrZcc= Subject key identifier: B2:84:3E:8C:AB:A2:1C:4A:20:AB:21:3E:09:69:86:92:C8:84:7C:CA Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9 Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9 Certificate serial: 019AF5E5ABC5E316DA3BADA75F27504FA12F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft Manifest number: 0E48 Signing time: Sat 06 Dec 2025 23:01:00 +0000 Manifest this update: Sat 06 Dec 2025 23:01:00 +0000 Manifest next update: Sun 07 Dec 2025 23:01:00 +0000 Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=) 2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=) 3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: XQED/8EcgoEV/kxazn73elZzjqolYbdv+z+Hf3NhDAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:ab:c5:e3:16:da:3b:ad:a7:5f:27:50:4f:a1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9 Validity Not Before: Dec 6 23:01:00 2025 GMT Not After : Dec 7 23:01:00 2025 GMT Subject: CN=b2843e8caba21c4a20ab213e09698692c8847cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:0a:1e:35:c4:59:c7:57:2f:31:ad:a6:84: 14:37:b8:02:04:14:ed:fa:2f:01:ca:26:c6:e4:78: b0:5c:b2:cd:46:73:2d:c2:d7:19:66:ac:e9:c2:e8: 8f:70:2c:69:80:cd:9c:24:52:f8:b2:8e:36:be:48: 41:3e:f4:bf:c7:58:9c:65:31:87:8e:a3:6f:ed:c5: b1:ea:0c:dc:3f:2e:3c:a8:56:f2:fa:ed:3b:be:4e: 7d:aa:8b:9c:8d:54:d0:b7:01:1a:4e:78:5d:e2:23: b3:33:12:87:e2:6a:66:ae:8b:5a:ef:81:58:60:a4: 1d:f5:54:a0:b5:4b:ab:55:e1:59:2b:ad:ac:00:a1: bc:d9:a1:3f:48:f6:db:b8:70:ae:50:6b:ed:bb:52: ee:68:91:fd:62:22:cf:22:85:fc:76:fd:cb:6c:cf: f9:59:f5:5d:8c:50:b9:4a:4a:f3:91:13:43:e4:53: 2a:ac:88:2a:02:0f:b4:6d:e3:e1:f9:b9:1b:de:7a: 0b:eb:8e:eb:ac:f4:fd:f4:3d:42:d0:09:74:61:76: 54:73:c8:68:e2:19:4c:5d:64:7a:a1:37:65:e1:4c: d9:dd:34:fc:92:3e:8d:f2:8e:67:3a:50:d6:a6:0d: 8c:50:5c:d7:12:c1:32:e1:05:be:2b:d7:a1:bf:9c: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:84:3E:8C:AB:A2:1C:4A:20:AB:21:3E:09:69:86:92:C8:84:7C:CA X509v3 Authority Key Identifier: keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:23:02:a2:bf:cc:7b:19:da:68:59:c4:85:bc:40:ba:97:3c: 1a:c4:53:80:84:81:9a:1c:36:8e:55:99:0b:99:00:77:1f:75: 28:72:c6:77:ab:fc:85:40:a0:ba:ee:3f:76:94:f1:0e:b4:0c: ed:0a:9b:16:16:4f:bd:de:d9:86:4d:20:49:87:7f:d4:ae:16: 7c:52:0f:06:be:be:f3:b7:ac:5c:0b:80:6e:ab:9a:43:82:41: 44:82:11:03:8e:19:d8:45:41:f7:af:e1:b2:b8:01:ea:9f:95: 3c:86:75:5f:53:20:38:59:93:e7:0e:d4:f3:a4:8e:0f:90:b6: e6:fc:80:6d:6e:e7:7a:bf:c1:86:4c:1a:8a:50:2c:31:ce:ce: 23:0b:a7:44:9f:40:f9:b5:c8:b2:f5:9a:81:b2:f1:0a:37:09: 9a:d8:a9:5d:f2:19:cd:7b:99:b6:92:23:d4:01:2a:49:2f:ee: 54:7f:cb:45:16:62:97:cf:e1:9e:82:b8:4f:27:73:64:dc:0f: e4:7d:23:16:21:4a:e6:3b:53:d7:c0:f6:0a:69:00:ec:6f:d2: ec:d6:b7:36:18:25:64:33:b9:b2:0e:24:52:26:1a:46:fd:0b: a4:98:a0:31:82:e0:b7:55:61:d9:90:2c:4a:d9:10:15:82:ea: 58:18:4a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15avF4xbaO62nXydQT6EvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjQ3NGQwNTU3MWRmM2Q0NGY2M2NjYTIxYjQwYjZlMTJj MzkyZDkwHhcNMjUxMjA2MjMwMTAwWhcNMjUxMjA3MjMwMTAwWjAzMTEwLwYDVQQD EyhiMjg0M2U4Y2FiYTIxYzRhMjBhYjIxM2UwOTY5ODY5MmM4ODQ3Y2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoMKHjXEWcdXLzGtpoQUN7gCBBTt +i8ByibG5HiwXLLNRnMtwtcZZqzpwuiPcCxpgM2cJFL4so42vkhBPvS/x1icZTGH jqNv7cWx6gzcPy48qFby+u07vk59qoucjVTQtwEaTnhd4iOzMxKH4mpmrota74FY YKQd9VSgtUurVeFZK62sAKG82aE/SPbbuHCuUGvtu1LuaJH9YiLPIoX8dv3LbM/5 WfVdjFC5SkrzkRND5FMqrIgqAg+0bePh+bkb3noL647rrPT99D1C0Al0YXZUc8ho 4hlMXWR6oTdl4UzZ3TT8kj6N8o5nOlDWpg2MUFzXEsEy4QW+K9ehv5zAiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKEPoyrohxKIKshPglphpLIhHzKMB8GA1UdIwQY MBaAFJO0dNBVcd89RPY8yiG0C24Sw5LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEt MjA0OWY2YWJmZDlkLzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEtMjA0OWY2YWJmZDlk LzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSMCor/M exnaaFnEhbxAupc8GsRTgISBmhw2jlWZC5kAdx91KHLGd6v8hUCguu4/dpTxDrQM 7QqbFhZPvd7Zhk0gSYd/1K4WfFIPBr6+87esXAuAbquaQ4JBRIIRA44Z2EVB96/h srgB6p+VPIZ1X1MgOFmT5w7U86SOD5C25vyAbW7ner/BhkwailAsMc7OIwunRJ9A +bXIsvWagbLxCjcJmtipXfIZzXuZtpIj1AEqSS/uVH/LRRZil8/hnoK4TydzZNwP 5H0jFiFK5jtT18D2CmkA7G/S7Na3NhglZDO5sg4kUiYaRv0LpJigMYLgt1Vh2ZAs StkQFYLqWBhKng== -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:45 2025 by rpki-client