This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json) Hash identifier: 2xS1eDqvXq9YAWMU4I0J204tsvsKQJNKJBTAuuDNWgg= Subject key identifier: 17:74:E0:DA:A1:2B:9E:51:25:EC:35:2B:79:C5:56:25:2B:73:49:C5 Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c Certificate serial: 019AF3894E2420E4D50B7B300F46E6426676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 12:00:53 +0000 Manifest this update: Sat 06 Dec 2025 12:00:53 +0000 Manifest next update: Sun 07 Dec 2025 12:00:53 +0000 Files and hashes: 1: 1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa (hash: Kl3hSPrxfLsP3eL4mz9H4sGXJibptXkIeof0KRDPENU=) 2: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: YceBeI2iWK76GJRq/QLuSgtrPP0Cqk9nSAKg5Z8c1kU=) 3: RLvDrK9Icwtsn0-UEJyGztaVYr4.roa (hash: sOv+1479fgLJ5PTa3FjO5dyIsDN63KZWKnOL+8WQdFo=) 4: _4XBnUgfkXLCDNw3CzmT18WUZVM.roa (hash: giU+x9zSm/fPNyU8L4h9ehUNb3Bz8rg57NNz6941FeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4e:24:20:e4:d5:0b:7b:30:0f:46:e6:42:66:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c Validity Not Before: Dec 6 12:00:53 2025 GMT Not After : Dec 7 12:00:53 2025 GMT Subject: CN=1774e0daa12b9e5125ec352b79c556252b7349c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:65:82:3c:42:5f:4c:d5:88:4d:73:34:5d: 7f:99:68:9c:0c:4d:8e:a6:95:48:eb:ad:88:19:ad: df:e5:9a:99:d0:c8:0b:5e:95:77:7e:b9:e7:cf:a8: d4:4f:67:d3:57:dd:a9:24:1b:f4:d2:70:2a:d7:84: 77:26:d4:25:a7:39:df:a2:5b:14:31:35:41:06:a3: dc:1d:bc:c1:cd:ff:44:d7:be:1e:3b:4e:69:91:a3: fd:99:06:9a:9c:8d:bc:85:71:84:7d:14:5d:34:20: 67:a7:5f:ce:3c:55:6c:65:f4:4b:76:f6:2f:41:be: 8a:cc:39:7b:a1:57:c4:c8:c5:86:1b:4e:1a:cd:ad: 0a:dc:ce:b9:d6:e9:e1:4f:b5:60:a6:bc:99:67:fa: 9e:a0:fc:84:70:88:6b:63:f1:6f:4a:3a:39:ee:bc: 82:20:6c:c5:87:f0:fa:35:69:e1:45:6b:79:f7:a8: 08:83:3c:09:cd:78:ea:71:76:82:4e:cf:5b:ca:5e: 0a:c7:65:1b:bc:93:c6:7a:c8:c3:09:f3:5d:2a:68: 96:df:8b:3f:b7:79:03:34:ac:ed:0a:b6:8d:21:c3: b0:d1:ac:28:dc:6c:76:3e:8d:6a:5b:22:8b:9e:5d: db:60:f5:d2:cc:05:e7:04:d4:39:2e:b3:ab:57:c5: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:74:E0:DA:A1:2B:9E:51:25:EC:35:2B:79:C5:56:25:2B:73:49:C5 X509v3 Authority Key Identifier: keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ac:7c:68:8a:fc:d6:a0:8f:dc:d7:a5:a6:16:59:b4:26:a1: 1b:55:97:07:26:f7:4c:1b:bb:16:0e:83:04:21:57:86:08:44: 5a:c2:b4:4c:04:bb:25:98:e1:74:de:cc:7b:61:fa:80:79:67: bc:d9:f3:9f:fd:d0:44:08:56:b4:d4:a5:e9:a1:5a:6f:19:a4: cf:54:9c:b3:60:4b:42:67:6c:3d:4a:6e:5d:3f:e0:0c:ab:91: 52:2d:cd:e4:2e:51:91:87:11:b4:09:1b:e8:4f:2f:42:81:29: ab:01:e1:04:9a:cf:c8:af:bb:a8:70:93:79:44:1c:fb:9f:2b: 3d:3d:b4:9d:14:3d:51:cf:ea:67:7e:33:90:52:72:cb:ea:02: 9e:20:8f:f0:a6:97:bf:ed:49:a7:17:93:3e:4f:79:89:71:6b: 82:f2:6e:05:72:7c:47:4b:63:93:6e:44:a2:cd:da:c3:e6:af: 6b:2c:a9:b0:c1:e9:18:01:35:19:f5:d9:54:d6:b9:82:84:39: c3:de:b0:73:ee:3c:a0:c4:db:5f:34:c9:fc:0f:48:e1:f0:c8: f5:b7:e9:38:c2:ba:5b:95:4d:1a:7d:06:3c:d9:e1:7e:8c:8c: 62:1c:0d:ae:c6:38:a8:5f:91:3e:23:66:1a:67:f2:28:cb:e9: c7:2f:04:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziU4kIOTVC3swD0bmQmZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGVlZmI1YjI2NDgzNTYxNzExYzk5MGYyMGZmNTUyYWM0 ZTJjOWMwHhcNMjUxMjA2MTIwMDUzWhcNMjUxMjA3MTIwMDUzWjAzMTEwLwYDVQQD EygxNzc0ZTBkYWExMmI5ZTUxMjVlYzM1MmI3OWM1NTYyNTJiNzM0OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwhlgjxCX0zViE1zNF1/mWicDE2O ppVI662IGa3f5ZqZ0MgLXpV3frnnz6jUT2fTV92pJBv00nAq14R3JtQlpznfolsU MTVBBqPcHbzBzf9E174eO05pkaP9mQaanI28hXGEfRRdNCBnp1/OPFVsZfRLdvYv Qb6KzDl7oVfEyMWGG04aza0K3M651unhT7VgpryZZ/qeoPyEcIhrY/FvSjo57ryC IGzFh/D6NWnhRWt596gIgzwJzXjqcXaCTs9byl4Kx2UbvJPGesjDCfNdKmiW34s/ t3kDNKztCraNIcOw0awo3Gx2Po1qWyKLnl3bYPXSzAXnBNQ5LrOrV8X/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBd04NqhK55RJew1K3nFViUrc0nFMB8GA1UdIwQY MBaAFASO77WyZINWFxHJkPIP9VKsTiycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUt YWVhYzVkOWNkYzdiLzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUtYWVhYzVkOWNkYzdi LzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKx8aIr8 1qCP3NelphZZtCahG1WXByb3TBu7Fg6DBCFXhghEWsK0TAS7JZjhdN7Me2H6gHln vNnzn/3QRAhWtNSl6aFabxmkz1Scs2BLQmdsPUpuXT/gDKuRUi3N5C5RkYcRtAkb 6E8vQoEpqwHhBJrPyK+7qHCTeUQc+58rPT20nRQ9Uc/qZ34zkFJyy+oCniCP8KaX v+1JpxeTPk95iXFrgvJuBXJ8R0tjk25Eos3aw+avayypsMHpGAE1GfXZVNa5goQ5 w96wc+48oMTbXzTJ/A9I4fDI9bfpOMK6W5VNGn0GPNnhfoyMYhwNrsY4qF+RPiNm GmfyKMvpxy8EqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:38 2025 by rpki-client