This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json) Hash identifier: 21frkipVg7Vapc/3Qcq7hcK6rgSm3sBNHKKmkwFg+D8= Subject key identifier: 91:DD:DB:FF:95:4D:A8:FA:4E:35:89:B1:BA:8B:B0:12:81:B5:B3:0D Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79 Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779 Certificate serial: 019AF23FBEC42790B354AF573BB0F77065C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft Manifest number: 07B7 Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=) 2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: KY13ScSjfktaPnResvI3ZVJuDw67Hrny5lknEJEOLj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:be:c4:27:90:b3:54:af:57:3b:b0:f7:70:65:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779 Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=91dddbff954da8fa4e3589b1ba8bb01281b5b30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:aa:99:34:80:9f:75:75:56:ae:93:91:7f: 61:f6:8c:bd:03:19:3f:30:94:e0:d2:f7:2e:7b:5e: a2:9e:a4:5f:b5:07:d7:e1:98:f4:c0:b8:e6:b5:17: f2:94:4d:15:04:7d:34:1d:37:33:8e:ac:02:03:f6: d4:ac:ae:cf:60:6e:9d:74:1a:a2:2b:9d:19:90:98: 34:b9:5a:90:72:b9:28:5a:24:5d:f8:54:bc:68:b0: 13:c5:2e:87:d2:82:96:93:d5:b2:e5:c0:fa:88:27: ce:98:8a:f1:24:8a:da:6e:23:f4:0d:df:5d:ea:04: db:70:d0:ed:d0:a7:f8:8f:06:ba:23:9c:16:fa:cd: 76:5f:f8:2a:9e:e6:29:21:33:83:2f:1a:47:1b:1d: 01:3e:43:60:8a:7f:a6:9b:fd:2f:85:91:6d:2e:13: d7:0b:84:4c:eb:fd:e2:b5:72:5d:5e:0f:2d:a1:b9: 38:40:23:c7:a2:e5:a3:9a:82:e2:24:13:b8:ef:9b: a7:83:d7:97:c7:14:2f:5f:85:b1:52:03:a4:ef:1b: c9:82:88:81:b1:b5:9b:74:5e:11:38:86:05:fc:01: 9a:d7:de:64:81:5d:93:70:62:37:6a:86:73:8b:d2: 69:09:6e:c8:25:aa:8b:e7:33:33:b4:12:58:db:35: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:DB:FF:95:4D:A8:FA:4E:35:89:B1:BA:8B:B0:12:81:B5:B3:0D X509v3 Authority Key Identifier: keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d9:9b:ac:93:ce:c3:7f:ee:e9:a7:e6:32:0f:aa:66:64:42: 6b:f6:8d:2b:58:18:75:2d:7c:d9:c4:d7:7d:83:cf:a9:ea:4b: 1a:5c:d0:f0:5d:7d:57:3f:a3:1a:31:ac:4d:b4:ae:fe:29:6f: 8d:1b:ed:3d:52:41:d4:ba:76:ff:4c:cd:28:6c:3e:42:2b:03: 51:27:93:b8:65:73:0c:60:a7:05:25:0d:f1:9f:58:c2:bd:a7: c6:6f:b0:49:96:7e:03:d4:11:1b:95:7a:50:03:f4:aa:e8:7a: 4d:9e:07:40:a2:eb:d6:ef:a1:6a:ce:69:f1:e2:15:63:fb:9f: 86:52:d0:15:28:09:3e:af:31:e1:3c:ac:b4:58:34:89:67:df: 35:63:fc:c8:ae:25:a6:91:b6:36:ca:c9:c6:0e:3d:d4:74:5a: 4a:9b:25:15:6a:33:02:d1:f1:bc:30:98:c4:d7:e1:4d:4e:65: c4:81:fc:62:b4:27:e7:f5:2c:2a:88:43:37:c5:f5:82:60:53: 61:a3:26:77:9f:45:5d:f6:c8:92:ad:fc:49:f1:1d:22:43:66: 65:fa:99:a3:6d:38:d5:dd:9f:6c:52:b0:3f:30:e1:c1:f5:5d: d9:9d:01:46:0f:b5:63:ab:c3:70:de:b8:86:e3:47:f9:9c:8b: 2f:4b:a1:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP77EJ5CzVK9XO7D3cGXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzJkOGE2MDE5N2ZjN2JkZTY0ZmMzZmFkMTBlYjJkYTRm ZTg3NzkwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD Eyg5MWRkZGJmZjk1NGRhOGZhNGUzNTg5YjFiYThiYjAxMjgxYjViMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx6qmTSAn3V1Vq6TkX9h9oy9Axk/ MJTg0vcue16inqRftQfX4Zj0wLjmtRfylE0VBH00HTczjqwCA/bUrK7PYG6ddBqi K50ZkJg0uVqQcrkoWiRd+FS8aLATxS6H0oKWk9Wy5cD6iCfOmIrxJIrabiP0Dd9d 6gTbcNDt0Kf4jwa6I5wW+s12X/gqnuYpITODLxpHGx0BPkNgin+mm/0vhZFtLhPX C4RM6/3itXJdXg8tobk4QCPHouWjmoLiJBO475ung9eXxxQvX4WxUgOk7xvJgoiB sbWbdF4ROIYF/AGa195kgV2TcGI3aoZzi9JpCW7IJaqL5zMztBJY2zXonQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHd2/+VTaj6TjWJsbqLsBKBtbMNMB8GA1UdIwQY MBaAFHfC2KYBl/x73mT8P60Q6y2k/od5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAt OGYyYWY5YjUxYzViLzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAtOGYyYWY5YjUxYzVi LzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNmbrJPO w3/u6afmMg+qZmRCa/aNK1gYdS182cTXfYPPqepLGlzQ8F19Vz+jGjGsTbSu/ilv jRvtPVJB1Lp2/0zNKGw+QisDUSeTuGVzDGCnBSUN8Z9Ywr2nxm+wSZZ+A9QRG5V6 UAP0quh6TZ4HQKLr1u+has5p8eIVY/ufhlLQFSgJPq8x4TystFg0iWffNWP8yK4l ppG2NsrJxg491HRaSpslFWozAtHxvDCYxNfhTU5lxIH8YrQn5/UsKohDN8X1gmBT YaMmd59FXfbIkq38SfEdIkNmZfqZo2041d2fbFKwPzDhwfVd2Z0BRg+1Y6vDcN64 huNH+ZyLL0uh8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:14 2025 by rpki-client