This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json) Hash identifier: 8O+613SmOpAwIh0kZIxPCTnF+GQclmle+THs/m0L884= Subject key identifier: 97:31:1A:4D:53:2A:28:5C:68:C6:7F:AB:4D:52:D5:C9:34:CE:E2:1D Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14 Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14 Certificate serial: 019AF540C5D61F721BBE6EB83F3E53B5AD24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 20:00:54 +0000 Manifest this update: Sat 06 Dec 2025 20:00:54 +0000 Manifest next update: Sun 07 Dec 2025 20:00:54 +0000 Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: JihaZL1QvYggPu4jgOUgmwDGXMiRxvbY4Eim4JqLD9o=) 2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=) 3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c5:d6:1f:72:1b:be:6e:b8:3f:3e:53:b5:ad:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14 Validity Not Before: Dec 6 20:00:54 2025 GMT Not After : Dec 7 20:00:54 2025 GMT Subject: CN=97311a4d532a285c68c67fab4d52d5c934cee21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:22:12:e1:dd:e8:f2:b3:87:bd:61:0b:2f: c2:fd:8e:c3:53:dd:da:57:84:86:11:05:9c:fb:9e: e0:39:eb:84:6e:7f:5d:39:ab:2e:0b:12:df:99:41: a9:c5:58:50:68:b9:dd:56:55:0b:ab:4e:9d:e9:e1: f8:c3:27:14:fa:ae:90:3e:0a:88:ca:bd:84:04:21: 10:3e:49:ab:03:37:dc:fc:30:d3:60:ab:32:44:94: 47:3b:32:22:cd:73:48:01:bc:a3:61:69:75:d1:23: 8d:1d:7b:9e:4e:0c:11:85:11:f8:71:8b:dc:f0:58: d6:4a:6d:63:95:44:85:ba:46:0d:02:24:28:7a:b2: 0b:be:c0:90:1d:3e:c3:5b:12:f7:16:3f:12:93:07: f8:56:a1:18:51:75:59:a5:d2:a9:63:42:e2:11:d4: 5c:e6:64:3f:84:e4:fb:e7:6e:3e:11:b7:ff:04:98: 0d:8b:46:fb:a7:fd:77:a2:38:8b:8a:f1:59:dc:66: 95:f6:46:82:ad:25:01:47:e1:93:6f:b2:43:bb:64: 2d:10:8d:ad:58:94:b7:83:9e:e1:b0:27:38:9f:34: 3c:ad:70:a3:97:6b:28:6b:53:2a:7e:2e:be:a0:f6: e9:39:d1:ed:50:98:22:e3:de:80:01:83:88:bc:06: 01:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:31:1A:4D:53:2A:28:5C:68:C6:7F:AB:4D:52:D5:C9:34:CE:E2:1D X509v3 Authority Key Identifier: keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b4:27:ca:e5:a3:d8:a6:20:b0:67:17:1d:d6:34:c4:4d:2a: 3a:51:6a:d1:bd:f7:75:33:65:21:f5:e8:59:60:00:76:d0:ae: 0d:c6:80:fe:ce:da:4c:d4:67:a5:fd:b6:75:50:72:c7:f3:b2: 12:fd:58:e3:99:a9:20:84:36:fa:a7:b8:cc:5b:63:34:db:c0: cc:c8:d3:d0:6d:c2:53:16:3c:b0:d3:8a:25:cb:c3:c9:63:c3: 56:66:89:3f:e2:fb:cb:57:46:b2:da:08:c1:9f:2b:1f:0c:17: 6a:d8:ff:9a:50:4e:19:b3:d0:3c:31:bc:d5:90:c9:df:fa:4a: c0:7d:22:a1:dc:55:8a:3b:b8:3b:57:d0:db:63:48:d4:45:9d: 75:0c:5d:0f:1a:8b:a1:82:a2:8b:34:68:1f:56:88:ce:56:fb: c8:0f:ec:fa:cc:57:6c:32:e1:bf:0f:58:6e:0d:a8:fe:96:55: 92:ea:b6:62:20:69:28:1a:27:95:be:ce:ed:92:e9:d4:14:2e: 11:a7:9a:3a:76:c6:b9:68:ef:89:40:f1:f5:17:33:e4:79:97: fc:6e:5a:56:25:b3:81:bb:3f:b3:c6:ae:09:e9:e4:34:25:ad: 2e:c2:5f:bc:ae:6e:90:0d:46:e3:4f:dd:25:a8:d8:29:2b:cf: 3f:36:28:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMXWH3Ibvm64Pz5Tta0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjI1OWYxNThiOWFhNzZhYWQwYjFhZGZhNjJjMWVlZDQ1 NTlkMTQwHhcNMjUxMjA2MjAwMDU0WhcNMjUxMjA3MjAwMDU0WjAzMTEwLwYDVQQD Eyg5NzMxMWE0ZDUzMmEyODVjNjhjNjdmYWI0ZDUyZDVjOTM0Y2VlMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqQiEuHd6PKzh71hCy/C/Y7DU93a V4SGEQWc+57gOeuEbn9dOasuCxLfmUGpxVhQaLndVlULq06d6eH4wycU+q6QPgqI yr2EBCEQPkmrAzfc/DDTYKsyRJRHOzIizXNIAbyjYWl10SONHXueTgwRhRH4cYvc 8FjWSm1jlUSFukYNAiQoerILvsCQHT7DWxL3Fj8Skwf4VqEYUXVZpdKpY0LiEdRc 5mQ/hOT7524+Ebf/BJgNi0b7p/13ojiLivFZ3GaV9kaCrSUBR+GTb7JDu2QtEI2t WJS3g57hsCc4nzQ8rXCjl2soa1Mqfi6+oPbpOdHtUJgi496AAYOIvAYBKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcxGk1TKihcaMZ/q01S1ck0zuIdMB8GA1UdIwQY MBaAFO4iWfFYuap2qtCxrfpiwe7UVZ0UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQt MzQ5N2NlMWI3MWJmLzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQtMzQ5N2NlMWI3MWJm LzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrQnyuWj 2KYgsGcXHdY0xE0qOlFq0b33dTNlIfXoWWAAdtCuDcaA/s7aTNRnpf22dVByx/Oy Ev1Y45mpIIQ2+qe4zFtjNNvAzMjT0G3CUxY8sNOKJcvDyWPDVmaJP+L7y1dGstoI wZ8rHwwXatj/mlBOGbPQPDG81ZDJ3/pKwH0iodxViju4O1fQ22NI1EWddQxdDxqL oYKiizRoH1aIzlb7yA/s+sxXbDLhvw9Ybg2o/pZVkuq2YiBpKBonlb7O7ZLp1BQu EaeaOnbGuWjviUDx9Rcz5HmX/G5aViWzgbs/s8auCenkNCWtLsJfvK5ukA1G40/d JajYKSvPPzYosA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:00 2025 by rpki-client