This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json) Hash identifier: 2HICNNMY28BPEraa2Uyf7gvuOtSXcYtM65BkQpvVK5c= Subject key identifier: 9E:22:89:C6:1B:D2:7F:99:7A:49:3C:23:17:03:7B:32:A2:0E:1C:19 Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Certificate serial: 019AF61C6DDA1E5588B4ADEB6624A96F79B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 00:00:49 +0000 Manifest this update: Sun 07 Dec 2025 00:00:49 +0000 Manifest next update: Mon 08 Dec 2025 00:00:49 +0000 Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=) 2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: JjUOITkpGBdPAimPRSLT6VoGl3LB4vxIBWRfpnQSWjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:6d:da:1e:55:88:b4:ad:eb:66:24:a9:6f:79:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Validity Not Before: Dec 7 00:00:49 2025 GMT Not After : Dec 8 00:00:49 2025 GMT Subject: CN=9e2289c61bd27f997a493c2317037b32a20e1c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:d5:43:ce:34:53:bc:95:28:b7:a1:18:0f: ce:cf:bd:6f:ec:6b:b0:c0:f2:d4:c8:9a:38:19:9d: 76:77:2f:46:aa:76:9f:a2:7d:45:0f:3b:1f:cd:3e: e9:40:9d:09:df:3c:ca:f2:c8:da:ae:ae:88:21:68: 3c:52:bb:f1:0c:8a:37:e3:3f:18:6b:c3:49:a7:99: 54:2b:2b:ed:c3:71:8a:21:29:a7:0f:7f:37:ad:6c: d1:33:15:db:79:a1:3c:f0:d1:dc:ac:f9:74:a8:ea: 51:30:e3:09:c1:ea:cd:92:23:e5:37:24:81:dc:5a: 98:8c:33:e7:84:96:a5:69:40:7a:d4:39:1c:a7:46: 5f:60:e3:6b:95:97:f0:12:cd:9f:b6:63:6b:75:64: 6f:f5:90:10:b9:22:18:8b:81:15:1f:7c:00:e3:c8: 7b:a8:90:40:b7:b0:ed:99:f7:d9:8b:e0:63:52:a4: c2:67:01:fc:70:ba:6d:dc:73:41:4b:1b:62:42:bd: ee:9a:43:16:40:78:6d:54:0d:fc:c6:8c:28:01:31: 63:c6:ed:b2:05:a5:fd:06:b3:64:e3:b7:43:6c:83: 3b:02:e8:ff:d8:30:27:7a:73:9e:c8:35:b0:60:92: fe:5d:3b:79:83:9c:7f:53:19:a0:91:cc:50:f5:a8: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:89:C6:1B:D2:7F:99:7A:49:3C:23:17:03:7B:32:A2:0E:1C:19 X509v3 Authority Key Identifier: keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d5:c4:18:4f:45:bd:e0:08:13:64:68:f9:c6:bb:c8:7e:fb: 5d:b2:f5:e8:95:a9:94:f3:96:e9:0c:60:0b:b2:a0:6d:26:93: be:e0:1f:4c:72:bb:5c:d2:33:a4:7b:9f:5a:8a:52:4c:06:6e: 84:d7:5d:7d:ec:87:fc:32:55:e7:3a:04:59:d2:9a:09:e7:72: 29:a8:f3:87:4c:53:fd:50:b6:a5:16:ef:f3:e7:d5:da:7d:99: 3b:50:c7:2f:a1:2c:f0:df:b7:e9:81:75:68:3e:2e:30:e5:dd: e9:f1:33:47:dc:61:68:1d:f2:b9:15:c8:49:2a:fc:4d:fb:60: 8f:25:71:27:82:ab:ae:e1:e2:ab:79:ef:57:de:9e:0a:8e:c7: 69:a0:79:79:e5:28:3f:94:40:5a:63:36:de:5a:21:5c:e2:22: c6:63:20:64:47:3e:17:9b:e2:36:2a:cb:0a:18:28:78:9b:db: 83:07:97:5d:4c:25:4d:54:ac:00:f8:5c:a8:71:73:48:ff:1b: da:7d:17:0b:85:bd:3f:23:0f:1e:17:61:6c:cd:17:13:69:65: 58:d9:bc:32:26:c9:ad:ab:b9:ff:ec:65:c4:72:65:21:90:e3: 65:cd:26:38:c3:5f:71:e7:73:fa:4d:3e:a2:36:8b:58:0f:79: 83:68:3e:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HG3aHlWItK3rZiSpb3m2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2I4NWMzMTY1ODZiMTk5ZDI2YmZjNDhmZTI1OTg5Mzlj YjZmZGUwHhcNMjUxMjA3MDAwMDQ5WhcNMjUxMjA4MDAwMDQ5WjAzMTEwLwYDVQQD Eyg5ZTIyODljNjFiZDI3Zjk5N2E0OTNjMjMxNzAzN2IzMmEyMGUxYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4jVQ840U7yVKLehGA/Oz71v7Guw wPLUyJo4GZ12dy9Gqnafon1FDzsfzT7pQJ0J3zzK8sjarq6IIWg8UrvxDIo34z8Y a8NJp5lUKyvtw3GKISmnD383rWzRMxXbeaE88NHcrPl0qOpRMOMJwerNkiPlNySB 3FqYjDPnhJalaUB61Dkcp0ZfYONrlZfwEs2ftmNrdWRv9ZAQuSIYi4EVH3wA48h7 qJBAt7DtmffZi+BjUqTCZwH8cLpt3HNBSxtiQr3umkMWQHhtVA38xowoATFjxu2y BaX9BrNk47dDbIM7Auj/2DAnenOeyDWwYJL+XTt5g5x/UxmgkcxQ9ahZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4iicYb0n+Zekk8IxcDezKiDhwZMB8GA1UdIwQY MBaAFIp7hcMWWGsZnSa/xI/iWYk5y2/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2Qt MjlmMjBkYzhlYWY0LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2QtMjlmMjBkYzhlYWY0 LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNXEGE9F veAIE2Ro+ca7yH77XbL16JWplPOW6QxgC7KgbSaTvuAfTHK7XNIzpHufWopSTAZu hNddfeyH/DJV5zoEWdKaCedyKajzh0xT/VC2pRbv8+fV2n2ZO1DHL6Es8N+36YF1 aD4uMOXd6fEzR9xhaB3yuRXISSr8TftgjyVxJ4KrruHiq3nvV96eCo7HaaB5eeUo P5RAWmM23lohXOIixmMgZEc+F5viNirLChgoeJvbgweXXUwlTVSsAPhcqHFzSP8b 2n0XC4W9PyMPHhdhbM0XE2llWNm8MibJrau5/+xlxHJlIZDjZc0mOMNfcedz+k0+ ojaLWA95g2g+6Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:26 2025 by rpki-client