This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json) Hash identifier: QDZ851wjbMPl11AJXxuwtLMsUHJkwFJHv0Zqk6VVPkY= Subject key identifier: A8:40:13:57:55:A3:A9:65:28:41:D1:30:C3:E0:C7:5D:89:22:22:36 Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d Certificate serial: 019AF27720990237FF8D7C1C6E4875C2914E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=) 2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: +vJQbRpKQdwK/Y4JuuNeBXpxKzHQDHWhAnlfjnhgn4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:20:99:02:37:ff:8d:7c:1c:6e:48:75:c2:91:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=a840135755a3a9652841d130c3e0c75d89222236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:42:11:4d:71:57:3c:f6:4d:de:91:c3:d7: 16:48:24:b0:9b:59:be:29:19:e0:f9:bf:d6:0c:60: b4:c0:20:89:0e:42:43:a1:f4:70:a1:00:ba:99:8a: 7c:c1:b2:ad:bd:22:2d:de:c6:65:3d:46:ea:1d:ed: 1c:1b:e3:2a:c9:e9:39:76:88:eb:dc:e9:69:1e:99: 37:d0:e0:61:6f:9d:91:da:08:1e:b8:d9:3c:d3:90: 6b:be:50:fe:81:dc:81:c3:4e:13:f0:65:85:48:d9: 9b:b9:9e:f4:cf:46:0a:95:90:11:07:97:46:c0:66: c3:5f:ca:e5:cc:b3:85:f0:05:1d:41:a8:ae:07:63: cc:8e:71:99:07:cf:bc:27:ca:4a:81:cc:83:76:82: 49:2d:33:51:94:10:83:6d:93:30:d6:68:06:f4:67: 4b:3c:dc:0a:76:b2:c0:78:3a:28:7c:c0:fd:a0:2b: 70:0e:46:1d:ce:0b:88:98:93:2a:8e:df:6e:e9:28: 04:08:b4:44:e2:87:d2:35:43:dd:70:bb:b6:87:83: bd:20:bb:39:ab:dc:90:29:b6:02:43:7d:c9:2e:5b: 8e:c5:83:d9:a5:d3:50:db:8d:21:d3:18:42:d1:91: a4:5f:b6:6f:f7:d2:ad:37:25:38:60:97:5b:b1:52: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:40:13:57:55:A3:A9:65:28:41:D1:30:C3:E0:C7:5D:89:22:22:36 X509v3 Authority Key Identifier: keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c3:eb:34:8a:aa:70:91:d2:93:8f:13:a6:a4:d1:f9:62:d8: a9:f7:4c:c3:b5:af:57:3a:c5:90:b6:d5:39:6e:09:31:b8:e9: 18:ee:eb:9d:d9:09:64:45:2a:2d:33:e4:69:9f:05:a7:b9:eb: 7f:be:b5:ae:c0:aa:ea:09:db:c8:1e:b9:5d:de:39:95:60:1e: fb:99:13:fd:9c:dc:1e:11:51:43:0d:45:9d:b7:3d:3d:84:ce: 84:37:73:7b:4e:25:5a:da:c6:48:6b:09:c5:46:de:42:91:a0: 69:06:fa:8e:bd:ee:24:50:05:c7:e2:bc:93:54:60:89:17:aa: e8:e4:bc:02:65:d1:d1:08:8e:14:b1:b5:9a:ee:87:65:4a:2a: 1f:1b:89:e0:f8:a3:50:df:39:7f:55:01:33:8d:0a:01:13:e4: 73:43:72:c5:c9:99:69:dd:ae:6d:87:0d:ac:55:9c:bb:1e:6c: 2c:f3:74:6c:40:56:6c:9f:b9:36:a3:47:c8:c5:c9:70:95:13: 31:8c:20:ae:22:cc:d6:47:10:0d:91:6f:90:22:fc:87:72:93: e9:e7:27:50:14:cc:2d:9a:e6:57:b3:51:c3:93:af:c9:d9:89: c7:af:ac:7b:bb:33:e7:96:c0:c2:0b:eb:d3:95:ce:97:3c:15: 0a:52:6f:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyCZAjf/jXwcbkh1wpFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmZhNzcyYWFjMjEwN2M5MGNmMjhiMjJiOGQyYWQwNzk3 ZjgzMmQwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD EyhhODQwMTM1NzU1YTNhOTY1Mjg0MWQxMzBjM2UwYzc1ZDg5MjIyMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFVCEU1xVzz2Td6Rw9cWSCSwm1m+ KRng+b/WDGC0wCCJDkJDofRwoQC6mYp8wbKtvSIt3sZlPUbqHe0cG+Mqyek5dojr 3OlpHpk30OBhb52R2ggeuNk805BrvlD+gdyBw04T8GWFSNmbuZ70z0YKlZARB5dG wGbDX8rlzLOF8AUdQaiuB2PMjnGZB8+8J8pKgcyDdoJJLTNRlBCDbZMw1mgG9GdL PNwKdrLAeDoofMD9oCtwDkYdzguImJMqjt9u6SgECLRE4ofSNUPdcLu2h4O9ILs5 q9yQKbYCQ33JLluOxYPZpdNQ240h0xhC0ZGkX7Zv99KtNyU4YJdbsVLk1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhAE1dVo6llKEHRMMPgx12JIiI2MB8GA1UdIwQY MBaAFJu/p3KqwhB8kM8osiuNKtB5f4MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81NTJjOTQtN2M5OS00Y2RkLTg5MmEt ZWU5ODI5ZGRhOGJjLzEvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81NTJjOTQtN2M5OS00Y2RkLTg5MmEtZWU5ODI5ZGRhOGJj LzEvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMPrNIqq cJHSk48TpqTR+WLYqfdMw7WvVzrFkLbVOW4JMbjpGO7rndkJZEUqLTPkaZ8Fp7nr f761rsCq6gnbyB65Xd45lWAe+5kT/ZzcHhFRQw1Fnbc9PYTOhDdze04lWtrGSGsJ xUbeQpGgaQb6jr3uJFAFx+K8k1RgiReq6OS8AmXR0QiOFLG1mu6HZUoqHxuJ4Pij UN85f1UBM40KARPkc0NyxcmZad2ubYcNrFWcux5sLPN0bEBWbJ+5NqNHyMXJcJUT MYwgriLM1kcQDZFvkCL8h3KT6ecnUBTMLZrmV7NRw5OvydmJx6+se7sz55bAwgvr 05XOlzwVClJvgg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:00 2025 by rpki-client