This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft File: B_8L7Dwze0fdzzZvQwFQO-eD15g.mft (raw, json) Hash identifier: TuHNsPff94snqQG9boLePhG9Y2HvlCcSjvXv9uG1fpE= Subject key identifier: AD:01:A3:75:C9:80:44:7B:DC:18:6F:32:59:E9:D9:50:17:23:8C:57 Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98 Certificate issuer: /CN=07ff0bec3c337b47ddcf366f4301503be783d798 Certificate serial: 019AF23FB63265891BD7FFED2CACFA78029E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft Manifest number: 0DC7 Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: B_8L7Dwze0fdzzZvQwFQO-eD15g.crl (hash: bNLzzKOS76HOAugKKToLFec1UoW9iLJYJ80UAwlBGuw=) 2: CxCDh51hJryNPM51K0PBFglnj6s.roa (hash: NMl10T/JTlSsGDyTehyeNpuYxe8bg8ZQ55g2bqhBosQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b6:32:65:89:1b:d7:ff:ed:2c:ac:fa:78:02:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798 Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=ad01a375c980447bdc186f3259e9d95017238c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:91:6d:f6:eb:3a:8e:0a:0b:c4:88:94:6d: ff:01:e5:9f:af:38:89:81:24:76:d2:41:73:c2:62: b0:78:02:31:4c:79:5d:bd:9c:43:ad:cf:29:48:94: 2a:c8:fe:84:d0:3d:e9:21:8b:f9:30:d9:9f:7e:74: 80:f1:03:28:9f:d8:00:27:19:9f:37:c9:8f:57:d7: 8e:c4:85:e2:5d:18:f2:eb:e9:83:27:03:8a:a8:6b: c4:72:e9:85:3a:87:9a:79:ba:f1:bd:0e:35:28:0c: 22:2c:78:be:dd:d8:8c:fc:a4:ca:45:b1:33:e8:1a: f4:4a:c2:64:6b:fb:32:57:6d:6a:07:09:26:59:c9: 05:31:82:2a:45:d7:ec:12:bb:ff:9e:75:8d:49:8a: c7:28:36:77:87:e8:55:cf:eb:41:68:4b:d0:6b:df: 84:93:08:0a:34:a2:b6:8f:e4:89:7a:5f:13:3e:d8: 40:38:85:d1:61:8a:e1:ae:1b:b4:13:9d:84:67:6c: 20:01:84:c0:2b:a2:6f:ee:6b:a8:79:02:8f:6a:7e: 9a:3f:1e:56:f2:86:36:70:8e:11:ed:cd:3b:62:34: e9:e3:3a:72:d5:63:ba:22:fa:ad:ca:b7:93:57:f5: 20:38:c2:8e:a8:68:4e:a9:ce:80:6f:69:64:62:91: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:01:A3:75:C9:80:44:7B:DC:18:6F:32:59:E9:D9:50:17:23:8C:57 X509v3 Authority Key Identifier: keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b0:c1:61:2c:46:94:c3:b5:0d:43:bb:1f:47:eb:06:6f:bd: a7:00:37:2e:0e:48:35:b9:1b:81:13:29:e4:5f:c5:7c:20:ce: bf:72:9f:5c:a5:7e:98:53:30:6a:be:c0:40:68:7f:db:3f:85: d2:77:69:f2:eb:24:84:63:da:7a:61:e5:54:d4:9b:b5:2c:5c: cb:c9:16:cb:c4:da:8e:50:06:22:85:7c:75:70:d2:a7:d5:70: 7f:90:2b:8a:81:73:37:9c:3a:8b:15:8f:aa:b5:db:a8:27:f9: 3b:a8:6f:9f:e0:d5:e7:53:26:2e:d4:b2:54:cd:f3:e8:52:81: 5f:cd:bb:3e:fe:4a:60:f0:e9:e6:99:33:12:1f:6f:db:89:80: fc:b1:f3:e4:ee:c4:58:bb:6f:96:ea:e6:4c:7a:b2:68:2e:ac: 13:4b:cb:43:29:ea:a6:20:52:d7:65:53:b8:55:ca:1c:a1:a3: 13:2c:fb:3a:07:e2:c8:ff:5f:92:16:e0:8a:d3:74:18:e8:aa: 27:89:23:b0:68:20:3d:18:ae:44:2f:1a:a3:de:29:91:fa:ee: 44:c7:23:b4:b5:af:b3:70:01:01:3c:92:12:e2:37:a5:08:eb: 66:fe:00:cf:3b:07:f9:c4:0e:45:07:da:00:60:6f:db:19:8e: 67:80:82:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7YyZYkb1//tLKz6eAKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmYwYmVjM2MzMzdiNDdkZGNmMzY2ZjQzMDE1MDNiZTc4 M2Q3OTgwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EyhhZDAxYTM3NWM5ODA0NDdiZGMxODZmMzI1OWU5ZDk1MDE3MjM4YzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnKRbfbrOo4KC8SIlG3/AeWfrziJ gSR20kFzwmKweAIxTHldvZxDrc8pSJQqyP6E0D3pIYv5MNmffnSA8QMon9gAJxmf N8mPV9eOxIXiXRjy6+mDJwOKqGvEcumFOoeaebrxvQ41KAwiLHi+3diM/KTKRbEz 6Br0SsJka/syV21qBwkmWckFMYIqRdfsErv/nnWNSYrHKDZ3h+hVz+tBaEvQa9+E kwgKNKK2j+SJel8TPthAOIXRYYrhrhu0E52EZ2wgAYTAK6Jv7muoeQKPan6aPx5W 8oY2cI4R7c07YjTp4zpy1WO6IvqtyreTV/UgOMKOqGhOqc6Ab2lkYpFLuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0Bo3XJgER73BhvMlnp2VAXI4xXMB8GA1UdIwQY MBaAFAf/C+w8M3tH3c82b0MBUDvng9eYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl84TDdEd3plMGZkenpadlF3RlFPLWVEMTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MDVlYWItNmVhYy00ZmY4LWI2YzYt NzAyMDNiZjM1NmZkLzEvQl84TDdEd3plMGZkenpadlF3RlFPLWVEMTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MDVlYWItNmVhYy00ZmY4LWI2YzYtNzAyMDNiZjM1NmZk LzEvQl84TDdEd3plMGZkenpadlF3RlFPLWVEMTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7DBYSxG lMO1DUO7H0frBm+9pwA3Lg5INbkbgRMp5F/FfCDOv3KfXKV+mFMwar7AQGh/2z+F 0ndp8uskhGPaemHlVNSbtSxcy8kWy8TajlAGIoV8dXDSp9Vwf5ArioFzN5w6ixWP qrXbqCf5O6hvn+DV51MmLtSyVM3z6FKBX827Pv5KYPDp5pkzEh9v24mA/LHz5O7E WLtvlurmTHqyaC6sE0vLQynqpiBS12VTuFXKHKGjEyz7OgfiyP9fkhbgitN0GOiq J4kjsGggPRiuRC8ao94pkfruRMcjtLWvs3ABATySEuI3pQjrZv4AzzsH+cQORQfa AGBv2xmOZ4CC2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:40 2025 by rpki-client