This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft File: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json) Hash identifier: PtqhT7CgOpah/8quF7qyYz+/A8fT/G+Tgj/DBfT0jew= Subject key identifier: BF:1C:62:EC:96:58:22:E4:49:C4:A3:8C:39:B5:7F:1F:C6:67:9E:20 Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69 Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69 Certificate serial: 019AF352B1E0D5E1DECF5FF1F527FCFC0E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: 5GgeMQan7NMVXcH9zCFlejKFvw2PQLhvh2uwWlVa1bc=) 2: HKJ58z8cHDMRoWp61kiI8qNU6_s.roa (hash: xkG+rFTXCO8KSFj1Ggdwhiil4ktc9BxAHUA4oj/CQxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b1:e0:d5:e1:de:cf:5f:f1:f5:27:fc:fc:0e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edff0ab25662757afb831675319296f63d989b69 Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=bf1c62ec965822e449c4a38c39b57f1fc6679e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:32:3e:f4:97:be:92:ea:96:1c:1d:20:46:3c: 71:2b:d9:a8:f6:7b:a1:aa:51:09:26:2c:1a:6d:cc: 44:44:03:fc:3d:3b:3c:b5:14:68:62:b5:3c:ec:89: df:f9:9c:63:6c:da:ec:0d:ba:17:5d:d3:55:3b:16: ae:2c:e6:ba:ef:11:91:02:66:d1:d6:45:24:8a:cd: af:aa:11:f0:4c:97:ea:b6:94:f8:cb:09:c0:f3:d3: e1:5b:f8:b1:52:09:ae:58:26:df:03:ef:c5:a9:d4: 98:ad:e9:d2:f8:af:a9:df:02:55:a9:a4:21:a4:ea: 92:4a:fa:3c:e3:7d:d9:8c:ef:2d:c7:b0:33:8c:b5: f4:73:43:51:22:2d:85:2c:1a:47:9a:00:4a:6c:d1: 6a:98:90:75:be:18:f9:b6:69:4e:38:64:bc:e7:00: 40:ef:6f:e1:a7:25:5b:97:6c:ff:af:e3:81:54:78: a6:1c:b2:4d:ed:c1:40:dc:79:4b:a7:62:67:ae:05: 1a:5f:51:a8:fd:f0:2c:13:87:b7:7f:d6:b8:47:54: 36:a5:72:a0:ed:29:1b:2d:86:14:fa:12:1e:20:ad: 5c:07:6d:f3:5a:f3:ec:37:90:0f:c3:cf:72:eb:0c: 21:39:88:aa:2c:d8:7e:f2:91:b8:ab:27:01:ff:d3: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1C:62:EC:96:58:22:E4:49:C4:A3:8C:39:B5:7F:1F:C6:67:9E:20 X509v3 Authority Key Identifier: keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d4:11:bc:d9:f4:84:fa:dd:18:5f:40:9b:f5:eb:3e:ae:bd: 8a:aa:dc:38:57:ef:39:95:c6:31:38:15:c3:2e:f9:87:a2:78: 0e:9f:09:c3:49:3c:93:ca:7f:a1:00:3b:bd:f9:7f:79:61:d4: bc:7b:aa:fd:d4:95:49:6c:bf:4d:80:3d:46:db:57:c9:d7:9b: 80:ff:a8:cd:7c:ed:23:e8:81:95:a9:66:de:8c:aa:e6:14:6d: 83:bd:74:77:ba:6d:b9:5a:a9:9d:06:64:fe:0e:40:40:d3:46: 8d:4c:08:63:c5:84:6d:43:8e:50:3b:a5:b9:68:63:f0:10:73: 74:13:4d:94:f8:15:7f:e3:ce:75:5e:1b:29:f3:21:7a:5f:d4: 15:4b:d7:c8:50:34:74:84:a4:ec:84:92:f7:dc:a8:2d:59:a5: 9d:28:29:e4:de:92:94:c9:b6:18:6d:93:32:f3:f3:e4:d0:53: 8b:3e:48:b4:ac:e0:1f:af:a6:8f:cd:61:42:f0:a5:d7:0e:a0: b2:6d:1d:65:25:e2:8c:ce:1b:ba:81:20:0a:45:6a:74:77:8a: ea:80:43:48:a2:dd:27:e8:49:ec:a3:0e:10:3a:9f:9e:b4:55: 88:6b:44:27:e4:19:0d:21:65:f5:3c:6f:5d:f4:7c:b4:c5:d8: 86:97:42:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrHg1eHez1/x9Sf8/A6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmYwYWIyNTY2Mjc1N2FmYjgzMTY3NTMxOTI5NmY2M2Q5 ODliNjkwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD EyhiZjFjNjJlYzk2NTgyMmU0NDljNGEzOGMzOWI1N2YxZmM2Njc5ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TI+9Je+kuqWHB0gRjxxK9mo9nuh qlEJJiwabcxERAP8PTs8tRRoYrU87Inf+ZxjbNrsDboXXdNVOxauLOa67xGRAmbR 1kUkis2vqhHwTJfqtpT4ywnA89PhW/ixUgmuWCbfA+/FqdSYrenS+K+p3wJVqaQh pOqSSvo8433ZjO8tx7AzjLX0c0NRIi2FLBpHmgBKbNFqmJB1vhj5tmlOOGS85wBA 72/hpyVbl2z/r+OBVHimHLJN7cFA3HlLp2JnrgUaX1Go/fAsE4e3f9a4R1Q2pXKg 7SkbLYYU+hIeIK1cB23zWvPsN5APw89y6wwhOYiqLNh+8pG4qycB/9MG5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8cYuyWWCLkScSjjDm1fx/GZ54gMB8GA1UdIwQY MBaAFO3/CrJWYnV6+4MWdTGSlvY9mJtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgt NjQ0YmZkY2ViOWY2LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgtNjQ0YmZkY2ViOWY2 LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9QRvNn0 hPrdGF9Am/XrPq69iqrcOFfvOZXGMTgVwy75h6J4Dp8Jw0k8k8p/oQA7vfl/eWHU vHuq/dSVSWy/TYA9RttXydebgP+ozXztI+iBlalm3oyq5hRtg710d7ptuVqpnQZk /g5AQNNGjUwIY8WEbUOOUDuluWhj8BBzdBNNlPgVf+POdV4bKfMhel/UFUvXyFA0 dISk7ISS99yoLVmlnSgp5N6SlMm2GG2TMvPz5NBTiz5ItKzgH6+mj81hQvCl1w6g sm0dZSXijM4buoEgCkVqdHeK6oBDSKLdJ+hJ7KMOEDqfnrRViGtEJ+QZDSFl9Txv XfR8tMXYhpdCwg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:04 2025 by rpki-client