This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json) Hash identifier: TF+p3im399KaQEehmbd+TiEJiJEjfjkvu2pwwcqkwdw= Subject key identifier: 68:28:74:66:FF:9E:36:C6:9C:6A:01:93:AE:BD:DB:19:76:DA:DA:AF Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7 Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7 Certificate serial: 019AF12E54D089DADA5B923CDA1C19890BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft Manifest number: 1367 Signing time: Sat 06 Dec 2025 01:02:16 +0000 Manifest this update: Sat 06 Dec 2025 01:02:16 +0000 Manifest next update: Sun 07 Dec 2025 01:02:16 +0000 Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=) 2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=) 3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: GyGEqaVsc3AFWht8hHrpGw80YlC9UddIfI0tdWNqLm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:54:d0:89:da:da:5b:92:3c:da:1c:19:89:0b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7 Validity Not Before: Dec 6 01:02:16 2025 GMT Not After : Dec 7 01:02:16 2025 GMT Subject: CN=68287466ff9e36c69c6a0193aebddb1976dadaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:10:99:09:c7:41:9e:4e:fa:85:17:d5:db:3f: 18:0e:df:0c:d6:ca:57:24:a8:05:61:e4:68:6b:1b: f5:dc:ce:35:77:1d:eb:56:30:cd:9b:e5:1c:23:a2: 4a:13:ac:3d:c8:7f:6b:ca:33:f3:95:53:bc:b7:6e: df:c3:a2:a5:11:9e:b7:e8:93:8b:d4:13:47:1b:a5: a5:9c:45:ed:42:45:d4:0d:55:2b:ac:53:8d:15:a1: bb:0a:fb:d1:aa:5c:44:88:4c:02:d2:40:9f:7c:d8: b9:86:8b:71:15:8b:1d:66:9b:0d:40:3d:5c:91:a0: 26:ce:13:06:6b:3d:fd:e5:ea:cb:7a:fb:ff:18:a7: f9:bf:02:5d:ac:e2:c7:b2:73:dd:ea:f4:d5:94:f9: 20:d0:12:82:e3:c4:c0:22:44:db:78:83:ea:e7:a7: 71:c0:af:2c:4d:61:cf:07:16:20:af:9d:84:be:c0: e6:7f:ba:27:c1:73:47:c1:b0:e1:ee:3b:a3:79:ee: 72:fd:89:e0:e9:ec:5d:dc:17:13:bd:10:81:e9:e6: bc:31:3b:b0:ef:70:d8:2e:8b:a0:49:8d:26:fb:5b: e2:58:33:40:c0:61:e8:27:1c:0f:ce:8b:fb:96:32: c0:9d:b4:aa:cd:39:5a:e8:39:40:ec:f0:b6:a4:c8: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:74:66:FF:9E:36:C6:9C:6A:01:93:AE:BD:DB:19:76:DA:DA:AF X509v3 Authority Key Identifier: keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:64:1e:bf:c7:00:b2:db:19:5d:a4:a8:da:1a:a9:af:26:51: a1:66:1f:4e:8c:8a:0d:e7:d0:32:33:59:fd:fc:ea:be:f6:fa: e1:28:a3:31:8f:41:52:4b:7f:41:3c:56:ae:a4:a5:de:bc:7a: d3:56:04:96:55:4c:e4:a7:6f:12:de:7b:e9:e2:c1:f8:67:25: 9d:9e:39:dc:3c:74:c9:89:f2:da:22:c8:01:4d:73:10:0b:4f: 5b:91:64:0b:fa:6d:32:5e:90:1f:f3:1a:28:40:08:43:05:c1: f9:57:26:de:c2:d9:27:04:ff:14:5e:56:f5:7d:0b:c4:6f:63: ad:38:22:ff:cc:e0:61:c3:db:42:40:67:92:70:39:b6:5b:a6: 99:69:dc:e2:5f:6b:62:c9:28:26:a1:a9:7b:b7:85:96:4f:bd: 61:9d:93:ed:dd:ac:45:74:d7:da:2a:7f:d7:e2:1b:46:9e:4e: c9:6a:53:3f:fe:01:f5:d6:0a:f7:70:32:dd:70:7a:ad:6a:1f: 8f:48:8e:2c:97:ec:c9:30:a4:5c:a0:81:d3:4a:e5:fb:d6:8f: 58:77:9a:9a:5c:43:65:b1:dd:fb:66:80:a2:94:10:36:6d:a1: 2d:9a:4c:65:8b:de:72:87:2a:fc:fe:4b:da:47:c6:de:98:fc: 70:19:e2:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlTQidraW5I82hwZiQvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZThiYmY4NjQzYWJkNjJmZjNmNDJiZWM0YzBiMmRiOTc3 NTk2ZDcwHhcNMjUxMjA2MDEwMjE2WhcNMjUxMjA3MDEwMjE2WjAzMTEwLwYDVQQD Eyg2ODI4NzQ2NmZmOWUzNmM2OWM2YTAxOTNhZWJkZGIxOTc2ZGFkYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xCZCcdBnk76hRfV2z8YDt8M1spX JKgFYeRoaxv13M41dx3rVjDNm+UcI6JKE6w9yH9ryjPzlVO8t27fw6KlEZ636JOL 1BNHG6WlnEXtQkXUDVUrrFONFaG7CvvRqlxEiEwC0kCffNi5hotxFYsdZpsNQD1c kaAmzhMGaz395erLevv/GKf5vwJdrOLHsnPd6vTVlPkg0BKC48TAIkTbeIPq56dx wK8sTWHPBxYgr52EvsDmf7onwXNHwbDh7jujee5y/Yng6exd3BcTvRCB6ea8MTuw 73DYLougSY0m+1viWDNAwGHoJxwPzov7ljLAnbSqzTla6DlA7PC2pMiuRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgodGb/njbGnGoBk6692xl22tqvMB8GA1UdIwQY MBaAFHfou/hkOr1i/z9CvsTAstuXdZbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjkt NDRjY2QxYjUxZjEwLzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjktNDRjY2QxYjUxZjEw LzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGQev8cA stsZXaSo2hqpryZRoWYfToyKDefQMjNZ/fzqvvb64SijMY9BUkt/QTxWrqSl3rx6 01YEllVM5KdvEt576eLB+GclnZ453Dx0yYny2iLIAU1zEAtPW5FkC/ptMl6QH/Ma KEAIQwXB+Vcm3sLZJwT/FF5W9X0LxG9jrTgi/8zgYcPbQkBnknA5tlummWnc4l9r YskoJqGpe7eFlk+9YZ2T7d2sRXTX2ip/1+IbRp5OyWpTP/4B9dYK93Ay3XB6rWof j0iOLJfsyTCkXKCB00rl+9aPWHeamlxDZbHd+2aAopQQNm2hLZpMZYvecocq/P5L 2kfG3pj8cBniXg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:02 2025 by rpki-client