This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft File: 7f4_b22YcU4B8IxzsmRDaHdOhmA.mft (raw, json) Hash identifier: 8z2rENX27t5BlfsUdviW5lnkCyPqBDzs7gbvLQopfD0= Subject key identifier: C5:55:25:61:3B:B5:62:14:2C:5F:39:86:AB:89:7B:38:83:B3:94:DC Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Certificate serial: 019AF0BF1947F17E7C11634408E68A813A44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft Manifest number: 0AA3 Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: 7f4_b22YcU4B8IxzsmRDaHdOhmA.crl (hash: TQwh2wE/QlVrNowKlC+qKBitPrxTkk2BgJNs1LpgSKY=) 2: C33JEEkzeUPfbth7teviRKyxbuE.roa (hash: bhxYSOeRjG5Bc/CRRVr1eQSS4+raxx1XaOAQhc1D4HU=) 3: TvNorktNlarz-Fx5A-JvtYbjN1o.roa (hash: Jt3Gta94f81hrjgeEGTgQ09/pyVEiIlyWVZAsZeXQYU=) 4: aU0Ly4vlCl2a1AlU8b88V0QZMpw.roa (hash: i0WEsyrwOUpXjeH2PBX2MXTKTehmIYecmcGg2/8/obc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:19:47:f1:7e:7c:11:63:44:08:e6:8a:81:3a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=c55525613bb562142c5f3986ab897b3883b394dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:b9:44:2b:ae:16:ed:eb:25:64:75:44:4e: ba:e9:23:86:e4:ae:c2:37:ac:aa:c7:1c:b5:0b:3c: e7:69:99:e2:16:b3:d7:a6:d8:ff:9d:30:45:12:91: 29:0a:08:df:8f:34:47:78:a5:e3:c4:37:74:f6:c2: 3d:e0:f5:08:4e:2f:4f:80:6b:8f:1a:3f:35:72:34: 8b:b0:fa:c0:9b:ba:c2:49:9f:ad:92:78:5d:21:77: 4d:49:b2:52:da:1d:81:e1:03:4c:33:6b:eb:0d:c9: 8e:9e:c0:e0:60:7c:07:52:11:53:5e:0c:4f:96:f4: 1b:11:4b:94:0b:e1:4b:69:43:f3:bf:28:7e:90:e0: 45:6a:4e:8a:82:ce:cf:fa:16:bf:e1:8c:ed:f2:e3: cc:66:03:c0:01:f9:66:4a:36:0b:e7:f1:f4:23:3a: c4:bf:fd:f4:5b:5a:4d:cf:a4:65:12:69:ac:0a:da: 97:7e:02:7b:dc:fa:6a:36:69:fd:89:8c:15:05:ed: d4:03:b1:6b:ad:67:fd:6a:76:39:f9:e0:9b:68:a5: a9:97:55:46:08:0d:06:60:72:25:30:1d:5b:3b:56: 27:e7:f3:31:b2:6a:ff:11:67:46:fa:1d:fc:24:7f: c6:48:07:1a:c4:a3:20:82:d9:67:c3:5c:68:e7:1e: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:55:25:61:3B:B5:62:14:2C:5F:39:86:AB:89:7B:38:83:B3:94:DC X509v3 Authority Key Identifier: keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:44:4e:6b:9b:a5:e8:98:5a:aa:06:f6:22:06:7f:e3:f0:7e: e8:2b:f1:f0:bd:0f:a9:5a:32:56:23:9a:ce:f1:1a:8e:9f:28: bb:48:7c:d4:99:dc:64:85:79:96:18:32:c6:d1:81:3d:ec:b4: 17:06:36:c4:43:53:ca:cc:79:92:b4:dd:b9:f8:24:46:79:cd: 8b:9d:6b:4c:1c:45:1c:46:ff:b0:3e:ff:64:ba:d8:be:a5:3d: b2:bd:c9:13:06:99:a6:76:22:06:a5:26:9c:a4:1d:46:9c:2a: 1f:a5:4f:1c:5b:b5:19:5e:0f:ef:a6:7a:04:b0:76:57:71:75: 61:05:a6:91:9d:4d:47:fa:c7:04:9d:7d:2e:80:2c:2a:d2:9b: 53:74:70:d2:c8:97:16:10:a2:ff:71:60:88:d2:59:27:d5:51: b2:2a:02:d5:89:66:26:be:cc:f0:9b:90:07:39:9f:2c:1f:21: cf:f5:15:b5:f2:ec:05:a5:2a:e5:2e:98:a9:8d:a7:6b:62:13: b7:0c:d2:85:e5:de:32:3e:88:d2:33:ec:f6:ea:aa:71:ae:01: 22:6e:d1:73:83:d5:3d:14:35:c3:48:cf:8a:90:91:77:80:f7: 9f:54:6b:19:7e:3f:a1:94:ea:2b:0c:09:5b:42:3b:eb:73:01: ea:54:9a:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxlH8X58EWNECOaKgTpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmUzZjZmNmQ5ODcxNGUwMWYwOGM3M2IyNjQ0MzY4Nzc0 ZTg2NjAwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD EyhjNTU1MjU2MTNiYjU2MjE0MmM1ZjM5ODZhYjg5N2IzODgzYjM5NGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2S5RCuuFu3rJWR1RE666SOG5K7C N6yqxxy1CzznaZniFrPXptj/nTBFEpEpCgjfjzRHeKXjxDd09sI94PUITi9PgGuP Gj81cjSLsPrAm7rCSZ+tknhdIXdNSbJS2h2B4QNMM2vrDcmOnsDgYHwHUhFTXgxP lvQbEUuUC+FLaUPzvyh+kOBFak6Kgs7P+ha/4Yzt8uPMZgPAAflmSjYL5/H0IzrE v/30W1pNz6RlEmmsCtqXfgJ73PpqNmn9iYwVBe3UA7FrrWf9anY5+eCbaKWpl1VG CA0GYHIlMB1bO1Yn5/Mxsmr/EWdG+h38JH/GSAcaxKMggtlnw1xo5x47MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVVJWE7tWIULF85hquJeziDs5TcMB8GA1UdIwQY MBaAFO3+P29tmHFOAfCMc7JkQ2h3ToZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMt ZWI0YTk2YzM4YzZmLzEvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMtZWI0YTk2YzM4YzZm LzEvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0ROa5ul 6Jhaqgb2IgZ/4/B+6Cvx8L0PqVoyViOazvEajp8ou0h81JncZIV5lhgyxtGBPey0 FwY2xENTysx5krTdufgkRnnNi51rTBxFHEb/sD7/ZLrYvqU9sr3JEwaZpnYiBqUm nKQdRpwqH6VPHFu1GV4P76Z6BLB2V3F1YQWmkZ1NR/rHBJ19LoAsKtKbU3Rw0siX FhCi/3FgiNJZJ9VRsioC1YlmJr7M8JuQBzmfLB8hz/UVtfLsBaUq5S6YqY2na2IT twzSheXeMj6I0jPs9uqqca4BIm7Rc4PVPRQ1w0jPipCRd4D3n1RrGX4/oZTqKwwJ W0I763MB6lSahw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:54 2025 by rpki-client