This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft File: 97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json) Hash identifier: dZ2o1NX+ALwZsiTyy3IjLL3k51OHRQalio1yw6I1IkE= Subject key identifier: 1F:53:FC:E5:57:C3:BD:75:D9:90:62:D6:71:BC:BB:7E:A0:67:70:16 Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26 Certificate issuer: /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326 Certificate serial: 019AF6C0FA3F3140B4259871F2D4D4C1D41A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft Manifest number: 04AA Signing time: Sun 07 Dec 2025 03:00:33 +0000 Manifest this update: Sun 07 Dec 2025 03:00:33 +0000 Manifest next update: Mon 08 Dec 2025 03:00:33 +0000 Files and hashes: 1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: WR6eAopc+L62qp8VRuGE+CX2W8ozwREAks27il6THTs=) 2: fcfwcgfJzdC7q2gyJpWTHF0Bvdo.roa (hash: eEZHx/UE99AhtrYzD9Tg0RlZl4/V5YzfIHojAstlnHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c0:fa:3f:31:40:b4:25:98:71:f2:d4:d4:c1:d4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326 Validity Not Before: Dec 7 03:00:33 2025 GMT Not After : Dec 8 03:00:33 2025 GMT Subject: CN=1f53fce557c3bd75d99062d671bcbb7ea0677016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:93:b7:8c:07:b7:7f:83:e2:e8:24:dc:39: 09:70:51:f7:35:a9:21:23:49:a9:5b:28:43:fb:68: 8b:87:e1:df:4d:e2:26:d5:de:a7:57:0d:d0:01:db: 42:5f:91:cd:71:6d:05:1d:3a:97:12:fe:9a:03:0a: 0f:85:ee:4a:13:b9:8c:c0:7c:df:ee:0a:78:51:7f: 49:a1:c8:f3:12:8f:e9:fc:e3:09:90:c8:50:8e:29: 70:ad:cf:66:7e:fe:1d:5a:5e:36:0c:6b:f4:bc:f8: 2c:3c:a8:60:f6:75:74:45:55:15:a6:72:ea:ad:21: d6:ae:21:24:48:ee:4a:a3:b8:b9:82:ae:f8:42:5a: f9:7f:19:fa:4c:c4:72:af:16:d9:34:53:ae:5b:8e: ef:e9:28:24:98:01:a5:f3:66:ec:d4:fe:fd:ef:99: 2a:18:94:a5:d3:07:a0:3c:c5:18:64:e0:f7:e0:60: 89:d4:53:47:c7:e9:6c:cd:9d:f1:a2:fa:7b:5d:55: b8:fc:9f:df:83:f0:76:ca:07:05:23:b3:9a:82:13: f7:e3:f4:28:15:91:12:76:5a:b4:53:f6:0a:b0:89: 12:a7:8b:11:76:ad:2d:42:55:f7:44:a1:f9:9c:ba: ce:f7:f3:56:a0:68:3d:2e:12:03:36:21:53:1d:8d: 06:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:FC:E5:57:C3:BD:75:D9:90:62:D6:71:BC:BB:7E:A0:67:70:16 X509v3 Authority Key Identifier: keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dc:ba:e3:dd:a6:f2:cf:17:ea:fa:87:14:82:eb:bc:88:3d: 72:d7:d7:a6:70:61:dc:69:69:8f:34:28:20:d0:9b:1f:14:34: 53:d3:be:39:4a:18:f5:cc:af:47:21:43:ce:29:51:5f:0d:c4: 54:21:29:87:0b:21:79:4f:81:25:ae:03:1f:f4:43:57:02:c4: 71:13:61:d9:c5:de:02:d7:2d:5b:58:b7:e1:ae:58:76:9c:61: c5:33:18:5b:5f:0a:c4:2a:ef:1a:98:02:bf:84:2d:49:47:ba: 88:06:6a:bc:be:a1:88:43:39:23:c6:df:76:ce:67:aa:5c:4e: f0:71:f4:f2:c9:d1:b5:23:b6:f2:64:44:12:5e:64:26:26:ab: b9:62:10:06:1c:be:77:8c:83:6e:d8:19:ef:44:a1:b7:c3:5f: da:ef:3c:3b:43:56:08:1d:2e:d0:4e:93:91:d8:50:29:7b:99: a1:3b:82:e0:d4:8e:f8:be:bc:a4:4a:47:83:6c:07:73:07:09: 3f:a3:f1:2d:f9:28:a9:f6:17:c9:2a:94:47:7d:0a:48:73:43: 45:8a:d6:be:24:44:a0:8f:2f:90:2a:ca:b2:08:53:ea:1c:7b: 76:88:ee:1c:6e:69:a6:48:97:5c:86:11:f4:f0:e5:74:b4:d6: 9d:79:44:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wPo/MUC0JZhx8tTUwdQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjlkOTdiOTdmZDRjYmFjZWRhODFjNDQwNmU3NGFkNmQ1 MzkzMjYwHhcNMjUxMjA3MDMwMDMzWhcNMjUxMjA4MDMwMDMzWjAzMTEwLwYDVQQD EygxZjUzZmNlNTU3YzNiZDc1ZDk5MDYyZDY3MWJjYmI3ZWEwNjc3MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF+Tt4wHt3+D4ugk3DkJcFH3Nakh I0mpWyhD+2iLh+HfTeIm1d6nVw3QAdtCX5HNcW0FHTqXEv6aAwoPhe5KE7mMwHzf 7gp4UX9JocjzEo/p/OMJkMhQjilwrc9mfv4dWl42DGv0vPgsPKhg9nV0RVUVpnLq rSHWriEkSO5Ko7i5gq74Qlr5fxn6TMRyrxbZNFOuW47v6SgkmAGl82bs1P7975kq GJSl0wegPMUYZOD34GCJ1FNHx+lszZ3xovp7XVW4/J/fg/B2ygcFI7OaghP34/Qo FZESdlq0U/YKsIkSp4sRdq0tQlX3RKH5nLrO9/NWoGg9LhIDNiFTHY0GRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9T/OVXw7112ZBi1nG8u36gZ3AWMB8GA1UdIwQY MBaAFPe52XuX/Uy6ztqBxEBudK1tU5MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMt YTMwZDgyYmQ2MjE5LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMtYTMwZDgyYmQ2MjE5 LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNy6492m 8s8X6vqHFILrvIg9ctfXpnBh3GlpjzQoINCbHxQ0U9O+OUoY9cyvRyFDzilRXw3E VCEphwsheU+BJa4DH/RDVwLEcRNh2cXeAtctW1i34a5YdpxhxTMYW18KxCrvGpgC v4QtSUe6iAZqvL6hiEM5I8bfds5nqlxO8HH08snRtSO28mREEl5kJiaruWIQBhy+ d4yDbtgZ70Sht8Nf2u88O0NWCB0u0E6TkdhQKXuZoTuC4NSO+L68pEpHg2wHcwcJ P6PxLfkoqfYXySqUR30KSHNDRYrWviREoI8vkCrKsghT6hx7dojuHG5ppkiXXIYR 9PDldLTWnXlE0g== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:11 2025 by rpki-client