This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json) Hash identifier: ZSfv0aZLja1wT7cxK6diz8I6jZZf5CaDtuu8MOME4l8= Subject key identifier: 51:9A:68:C7:67:B3:0E:F6:91:60:9E:49:E0:F5:CD:EB:AB:85:01:42 Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11 Certificate serial: 019AF24009D2D247521BBFE49F0835224115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft Manifest number: 06E5 Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 06:01:14 +0000 Manifest next update: Sun 07 Dec 2025 06:01:14 +0000 Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: 6+nNvuWMpH2tJOqqUk7VaBCp97EeCD9ZUxTYE2R1Z5k=) 2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:09:d2:d2:47:52:1b:bf:e4:9f:08:35:22:41:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11 Validity Not Before: Dec 6 06:01:14 2025 GMT Not After : Dec 7 06:01:14 2025 GMT Subject: CN=519a68c767b30ef691609e49e0f5cdebab850142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:21:c6:70:d4:66:55:e2:03:5c:13:68:15: 0a:5f:52:53:87:11:6b:a1:2d:8f:cf:b6:b0:1b:93: 94:7d:b1:72:9d:ec:64:fe:c9:5c:07:69:29:df:a4: f6:27:b1:b1:6a:60:a8:c8:a0:66:88:43:52:c0:f9: b0:36:6a:bd:4c:27:3f:61:41:18:f8:5f:f4:33:db: 63:ea:11:2e:96:ab:4b:3a:46:2c:9f:09:67:cf:9f: ae:ba:b6:71:84:82:c9:7b:1b:cc:7c:9e:f1:de:f9: 40:b9:0a:14:21:36:19:c8:d5:28:66:47:20:7f:56: 95:e3:78:bd:c8:0d:10:ae:ee:ac:83:fb:01:8d:cd: 2e:c8:a0:54:1a:31:87:f4:a0:85:cf:b6:ed:8c:6b: ca:08:54:f3:3d:bc:61:83:33:e9:c1:c0:6d:59:36: 8c:a0:c2:aa:4a:35:e5:3e:34:f8:28:e8:af:56:e8: c1:d1:72:9e:14:b8:bf:54:6a:22:0e:95:69:c3:8a: dd:ee:9f:27:80:c5:3d:be:32:14:78:d8:bf:e3:4c: 84:fb:d4:d8:29:8f:ae:bd:96:1f:bf:c6:7a:16:b9: 0e:90:6d:f1:90:a8:e1:70:b0:ee:5f:83:2d:6a:1f: ea:f7:82:b6:8e:0d:62:76:19:04:9e:23:78:0c:c1: ca:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9A:68:C7:67:B3:0E:F6:91:60:9E:49:E0:F5:CD:EB:AB:85:01:42 X509v3 Authority Key Identifier: keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:34:f1:97:34:be:69:1b:b2:42:0e:12:49:e3:6f:bd:82:48: da:db:70:41:f9:56:1c:8a:73:39:ab:ab:99:c7:48:a1:1c:8a: 3b:37:25:e1:98:23:74:12:22:1c:9c:5b:cf:f8:49:94:d3:79: ba:d6:0c:8f:8e:cc:d6:ea:b6:6d:9b:c2:31:5b:14:8e:cb:db: 40:2a:73:a0:03:6e:4c:01:fc:fe:41:6b:76:b2:96:af:b9:2e: a6:e7:81:d3:10:89:c8:f8:57:b6:cf:5f:e0:0a:c6:c4:b8:78: 70:1b:2a:24:87:a4:b9:4a:3b:9e:d1:0b:10:a2:0d:cb:2e:e3: 74:10:60:7a:5a:ea:d5:0d:df:a6:bb:ba:a1:b9:83:3d:87:19: aa:68:3e:b5:ad:25:db:92:6f:dd:b6:d6:34:ad:36:88:a1:7e: 87:2a:94:38:21:45:44:2d:de:78:62:60:42:f0:e5:84:e6:95: 10:18:9f:06:c9:b6:57:a3:1a:10:53:a1:5a:37:f2:c1:58:89: 01:f5:62:c0:a1:b5:ba:c7:39:5b:10:56:57:de:04:c9:1f:51: 9c:de:bd:f3:2d:aa:35:13:9b:50:aa:e7:a8:b3:08:80:11:11: bf:e4:27:fa:43:0d:e0:13:3a:9e:52:e6:52:9c:e4:e0:bb:fa: ab:cf:cd:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAnS0kdSG7/knwg1IkEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODkyOTg2NDRlZDQ4NmRlZDUwOWQ5NDZhNmQ2ZDgzOTU4 OWNlMTEwHhcNMjUxMjA2MDYwMTE0WhcNMjUxMjA3MDYwMTE0WjAzMTEwLwYDVQQD Eyg1MTlhNjhjNzY3YjMwZWY2OTE2MDllNDllMGY1Y2RlYmFiODUwMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk0hxnDUZlXiA1wTaBUKX1JThxFr oS2Pz7awG5OUfbFynexk/slcB2kp36T2J7GxamCoyKBmiENSwPmwNmq9TCc/YUEY +F/0M9tj6hEulqtLOkYsnwlnz5+uurZxhILJexvMfJ7x3vlAuQoUITYZyNUoZkcg f1aV43i9yA0Qru6sg/sBjc0uyKBUGjGH9KCFz7btjGvKCFTzPbxhgzPpwcBtWTaM oMKqSjXlPjT4KOivVujB0XKeFLi/VGoiDpVpw4rd7p8ngMU9vjIUeNi/40yE+9TY KY+uvZYfv8Z6FrkOkG3xkKjhcLDuX4Mtah/q94K2jg1idhkEniN4DMHKrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGaaMdnsw72kWCeSeD1zeurhQFCMB8GA1UdIwQY MBaAFO2JKYZE7Uht7VCdlGptbYOVic4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEt NTdhMWYwYjMyZjAxLzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEtNTdhMWYwYjMyZjAx LzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzTxlzS+ aRuyQg4SSeNvvYJI2ttwQflWHIpzOaurmcdIoRyKOzcl4ZgjdBIiHJxbz/hJlNN5 utYMj47M1uq2bZvCMVsUjsvbQCpzoANuTAH8/kFrdrKWr7kupueB0xCJyPhXts9f 4ArGxLh4cBsqJIekuUo7ntELEKINyy7jdBBgelrq1Q3fpru6obmDPYcZqmg+ta0l 25Jv3bbWNK02iKF+hyqUOCFFRC3eeGJgQvDlhOaVEBifBsm2V6MaEFOhWjfywViJ AfViwKG1usc5WxBWV94EyR9RnN698y2qNRObUKrnqLMIgBERv+Qn+kMN4BM6nlLm Upzk4Lv6q8/NQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:07 2025 by rpki-client