This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json) Hash identifier: 6PdoQLbCpVVXoR6y+3mtQD5Zn8la09DJBzF7glmaqhE= Subject key identifier: DA:7E:4C:63:F8:4E:19:F7:0A:20:71:DD:5E:DD:A5:5A:78:CA:1A:0E Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Certificate serial: 019AF27732A9F6E3E0AB32C409CD480848D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=) 2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: V0nEmOcKC2jLIEPPe+bxeg2J5GkEcRjyZwWg8Xpf8Gs=) 3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:32:a9:f6:e3:e0:ab:32:c4:09:cd:48:08:48:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=da7e4c63f84e19f70a2071dd5edda55a78ca1a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:e2:af:b6:f5:00:0a:34:c8:43:bf:7e:e5: fb:1f:bf:f8:a1:ed:74:1f:0c:42:0f:ba:d9:13:b4: 24:11:97:98:34:8b:61:28:39:1f:cd:ba:47:02:1c: 15:ef:6f:63:94:03:7b:39:43:86:df:d1:a1:b6:08: 67:b7:ed:80:ac:90:8e:f4:64:bd:ea:17:db:24:27: dd:cc:37:73:8c:ab:10:7e:2b:88:01:0c:82:86:67: d1:d6:0c:dd:5b:c4:6a:70:89:92:17:af:48:e6:06: 0e:1f:c8:d1:55:25:ad:ac:b8:ee:82:48:c7:ea:15: df:b2:34:18:75:c7:e7:52:c4:9a:6c:79:52:1c:83: 75:25:71:f6:51:e2:81:d4:5d:eb:e4:34:e4:9f:c3: 13:f4:0c:45:f9:35:3b:32:89:13:fe:14:b7:50:6f: 10:c1:10:f5:68:b1:f9:a7:0f:e4:be:9c:62:e0:f2: a2:55:37:f3:8f:5e:35:60:62:4c:6b:fc:78:fa:7a: a4:dc:a8:2e:b1:1a:d1:63:2b:95:44:74:12:24:51: 7a:9e:35:34:1a:c9:74:71:1c:61:8e:e4:71:ed:ed: 27:f9:ee:81:aa:cc:1a:98:f2:bb:c8:ba:e3:6d:2a: ae:08:af:1c:c5:29:63:17:02:2e:ea:84:73:96:d0: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7E:4C:63:F8:4E:19:F7:0A:20:71:DD:5E:DD:A5:5A:78:CA:1A:0E X509v3 Authority Key Identifier: keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:72:3e:08:fd:50:8d:06:53:02:6e:c8:d5:da:9f:12:21:a6: 4d:0b:c9:9f:06:8b:65:9d:df:54:b9:2e:59:df:1c:43:3f:d0: ed:70:a4:08:c4:f7:c6:3e:8e:a9:02:27:25:3f:b5:52:05:af: b2:01:cd:37:78:b0:6c:45:82:a0:2b:fc:9f:3c:1f:cb:7a:b5: 84:a0:27:9a:b4:70:b1:ce:4d:98:92:01:d4:78:92:88:ae:72: bd:11:08:9b:f8:3d:c2:b2:1e:50:9c:8e:b2:35:37:76:ee:c6: 6a:2e:54:c8:a8:73:e7:50:87:36:d7:4c:5a:56:13:05:ea:f2: 9a:c9:50:a0:74:be:c2:59:df:2a:89:76:fd:ae:2d:56:66:82: 2c:36:e0:ee:2f:86:b9:f3:c7:72:b3:81:8f:ca:0b:e3:b0:bd: 85:8b:e2:25:81:48:86:bf:63:5e:85:65:8d:f0:e9:86:fd:f5: 61:ba:66:ef:da:27:55:bf:a7:5c:b7:b9:a6:f5:f0:47:3b:7e: 1c:fe:46:89:be:67:34:52:a5:76:d2:14:f5:4a:76:f9:94:1e: 54:af:12:97:1c:af:7e:7e:79:7a:db:75:53:43:ab:fb:27:44: a1:2e:5d:2f:e8:79:d8:1f:19:24:3b:10:e4:3c:7a:51:e8:3c: 23:04:10:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzKp9uPgqzLECc1ICEjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmNiZWU0NGY0Y2VmMDkxOTg1ZTU0NmE2ODU0ZjljY2Iy YWRhOGEwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EyhkYTdlNGM2M2Y4NGUxOWY3MGEyMDcxZGQ1ZWRkYTU1YTc4Y2ExYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bHir7b1AAo0yEO/fuX7H7/4oe10 HwxCD7rZE7QkEZeYNIthKDkfzbpHAhwV729jlAN7OUOG39Ghtghnt+2ArJCO9GS9 6hfbJCfdzDdzjKsQfiuIAQyChmfR1gzdW8RqcImSF69I5gYOH8jRVSWtrLjugkjH 6hXfsjQYdcfnUsSabHlSHIN1JXH2UeKB1F3r5DTkn8MT9AxF+TU7MokT/hS3UG8Q wRD1aLH5pw/kvpxi4PKiVTfzj141YGJMa/x4+nqk3KgusRrRYyuVRHQSJFF6njU0 Gsl0cRxhjuRx7e0n+e6BqswamPK7yLrjbSquCK8cxSljFwIu6oRzltC/wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp+TGP4Thn3CiBx3V7dpVp4yhoOMB8GA1UdIwQY MBaAFJe8vuRPTO8JGYXlRqaFT5zLKtqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgt ODMwM2FkMTM3MWRkLzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgtODMwM2FkMTM3MWRk LzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3I+CP1Q jQZTAm7I1dqfEiGmTQvJnwaLZZ3fVLkuWd8cQz/Q7XCkCMT3xj6OqQInJT+1UgWv sgHNN3iwbEWCoCv8nzwfy3q1hKAnmrRwsc5NmJIB1HiSiK5yvREIm/g9wrIeUJyO sjU3du7Gai5UyKhz51CHNtdMWlYTBerymslQoHS+wlnfKol2/a4tVmaCLDbg7i+G ufPHcrOBj8oL47C9hYviJYFIhr9jXoVljfDphv31Ybpm79onVb+nXLe5pvXwRzt+ HP5Gib5nNFKldtIU9Up2+ZQeVK8Slxyvfn55ett1U0Or+ydEoS5dL+h52B8ZJDsQ 5Dx6Ueg8IwQQTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:06 2025 by rpki-client