This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json) Hash identifier: 8GcWgTkfRvhMATc3o13JA8F9fYmhdY/UFhAgzsBtE30= Subject key identifier: 31:3F:A8:06:7A:4D:BA:98:1B:0C:AC:70:07:C4:3B:83:EF:08:D2:39 Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a Certificate serial: 019AF12D78917D767ACDA5DA79D752C367BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=) 2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: w5Tggjl5eWy+tZ4ujkMqVb9ytYDGu3yUW/YnrJji3Zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:78:91:7d:76:7a:cd:a5:da:79:d7:52:c3:67:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=313fa8067a4dba981b0cac7007c43b83ef08d239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a9:0e:b6:a8:45:29:b2:5a:34:8d:f4:82:38: 9b:f5:fa:4f:96:94:2c:cf:e6:89:2d:9c:24:29:cc: 3c:32:24:f8:f2:5a:e8:7e:ec:88:37:3b:63:e5:68: 63:c5:f6:fe:c2:26:c7:b1:8d:4a:88:2a:29:1b:37: 03:3c:37:e1:1d:e4:73:89:1b:bc:8b:79:94:9c:77: 68:b6:2e:05:d4:56:fd:54:c6:eb:b2:e2:e7:3d:a5: d8:84:e2:a8:24:ef:a6:c6:91:f2:57:e1:23:b6:87: 11:9c:41:8f:1a:8f:ca:00:8d:97:23:23:a3:2d:1b: 62:14:9b:a4:ea:b5:b4:d4:5e:9b:81:b7:f0:2f:fa: 2d:c9:e5:0f:95:f8:94:79:77:8f:18:36:8d:6e:b4: a1:db:e1:a5:88:b6:1d:2f:b7:57:4b:22:ee:c1:09: f2:2c:79:f0:a3:ce:51:e3:d7:bf:dd:4e:c6:de:82: 2e:80:ea:c3:c6:d2:fb:ab:36:e9:3c:e2:67:38:e7: bd:ff:eb:bb:88:2c:5f:42:fb:6b:43:ee:01:31:c2: 40:b6:26:a4:fe:52:f8:60:f8:31:55:ce:83:20:58: 24:1c:76:91:c1:a0:e4:5d:03:c5:fd:72:55:6a:57: 31:17:49:9c:80:9a:cb:c8:6c:48:21:c7:79:ea:71: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3F:A8:06:7A:4D:BA:98:1B:0C:AC:70:07:C4:3B:83:EF:08:D2:39 X509v3 Authority Key Identifier: keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4e:ef:d7:20:3b:48:be:e6:88:6a:de:0a:22:cd:73:8a:4b: 69:06:89:8f:b4:26:3b:71:b9:92:dd:40:be:3b:d5:2e:4f:25: 3d:d5:da:73:50:57:a1:5d:30:34:23:cd:35:13:4e:f0:f6:09: c3:3d:5e:bd:8c:d7:4a:35:a9:4d:92:aa:25:23:af:25:ca:d5: aa:22:ea:b9:9c:8e:e5:82:11:84:28:6c:aa:3e:5b:1c:af:43: f4:1c:6a:1b:6d:e3:b7:b3:c8:4c:8e:b9:81:32:8a:e6:8b:56: 44:b3:d7:e7:8f:1b:b1:42:92:5c:e7:ed:9a:a0:1d:e2:7c:17: a7:62:63:4f:39:bc:87:b8:9c:cf:39:bb:3a:79:64:c9:e4:d6: 6f:6d:fe:0c:11:00:dd:28:d6:29:65:8e:ca:85:20:5c:c7:14: fa:37:a6:bc:73:3d:f4:b6:72:dc:67:f9:51:f7:b6:c5:53:d9: 7d:5c:8c:65:a9:78:ab:9c:a7:24:ad:45:83:e0:2a:36:17:01: 32:55:a4:9d:1f:35:34:97:01:67:9e:96:6f:83:c6:75:12:0d: 5f:a0:bf:6a:56:0c:98:90:90:95:b3:68:02:48:44:a0:bc:df: ee:55:88:91:6c:a6:43:c2:21:e5:7d:c5:62:2a:8e:63:66:4c: 24:2c:ca:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXiRfXZ6zaXaeddSw2e7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjY3YmE1NzlmNDhhNDIwN2FjNDA5YWJmNGYwMTE5NDA0 NmVhM2EwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD EygzMTNmYTgwNjdhNGRiYTk4MWIwY2FjNzAwN2M0M2I4M2VmMDhkMjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqkOtqhFKbJaNI30gjib9fpPlpQs z+aJLZwkKcw8MiT48lrofuyINztj5Whjxfb+wibHsY1KiCopGzcDPDfhHeRziRu8 i3mUnHdoti4F1Fb9VMbrsuLnPaXYhOKoJO+mxpHyV+EjtocRnEGPGo/KAI2XIyOj LRtiFJuk6rW01F6bgbfwL/otyeUPlfiUeXePGDaNbrSh2+GliLYdL7dXSyLuwQny LHnwo85R49e/3U7G3oIugOrDxtL7qzbpPOJnOOe9/+u7iCxfQvtrQ+4BMcJAtiak /lL4YPgxVc6DIFgkHHaRwaDkXQPF/XJValcxF0mcgJrLyGxIIcd56nFyDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDE/qAZ6TbqYGwyscAfEO4PvCNI5MB8GA1UdIwQY MBaAFLe2e6V59IpCB6xAmr9PARlARuo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85NjNkNzUtNGNmZi00YjE0LTgzZGYt Yjc3NDMyMGQ5OTdmLzEvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85NjNkNzUtNGNmZi00YjE0LTgzZGYtYjc3NDMyMGQ5OTdm LzEvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGk7v1yA7 SL7miGreCiLNc4pLaQaJj7QmO3G5kt1AvjvVLk8lPdXac1BXoV0wNCPNNRNO8PYJ wz1evYzXSjWpTZKqJSOvJcrVqiLquZyO5YIRhChsqj5bHK9D9BxqG23jt7PITI65 gTKK5otWRLPX548bsUKSXOftmqAd4nwXp2JjTzm8h7iczzm7OnlkyeTWb23+DBEA 3SjWKWWOyoUgXMcU+jemvHM99LZy3Gf5Ufe2xVPZfVyMZal4q5ynJK1Fg+AqNhcB MlWknR81NJcBZ56Wb4PGdRINX6C/alYMmJCQlbNoAkhEoLzf7lWIkWymQ8Ih5X3F YiqOY2ZMJCzKkA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:31 2025 by rpki-client