This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json) Hash identifier: b81wdtPf0pGlco0Ah+C5+XhO4U2JUMNRZuh3VG9A0QU= Subject key identifier: 31:79:D1:C7:E3:4C:32:44:87:C0:D5:23:FF:55:46:59:E2:AC:20:F2 Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c Certificate serial: 019AF12DA965CF3DD88692876BE1DF7A6B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (hash: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=) 2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: dZWbzJ4TMJtmxrFqV6anGlz4d9hm3MpfPx1NciYXuQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a9:65:cf:3d:d8:86:92:87:6b:e1:df:7a:6b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=3179d1c7e34c324487c0d523ff554659e2ac20f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:a5:58:70:b2:49:40:87:d3:0c:df:b3:cf: 39:2a:bd:82:d9:23:7d:44:27:62:e4:70:08:71:0c: c3:f9:fc:f0:7a:de:ed:72:1d:57:62:68:86:b5:57: 30:c8:7c:9d:13:f8:5f:bb:7c:94:6e:a2:17:6b:f8: 14:e2:c9:f6:d8:6f:98:97:65:6e:2e:e3:0e:5c:51: 85:ab:5f:ba:d9:66:0a:3c:71:f6:87:6a:86:af:2b: 94:40:7a:a1:f1:99:d6:92:2a:a3:d2:19:9b:25:7a: 46:cb:d0:bb:2a:62:2e:07:fb:52:87:48:c1:6d:c4: a3:28:31:ef:8a:79:29:23:24:89:51:16:a0:24:0e: 2c:6e:b7:6e:bb:71:52:90:fa:c0:7b:db:e9:f5:ca: c5:db:e1:e8:bf:16:c3:32:0b:0b:d8:59:35:6a:0b: 3c:34:5b:de:52:1d:d5:88:a4:15:50:36:6b:c3:37: ac:7c:8b:7a:fb:d8:00:b9:56:48:6e:3d:96:a5:be: e5:ab:2b:e3:09:84:12:d3:f0:22:15:db:40:80:bd: 1a:b9:6b:fa:0a:6a:28:bc:92:78:5c:c7:de:5d:db: 1a:44:6c:18:c3:20:18:d3:cf:7d:13:17:c9:62:54: 6d:53:c8:85:b3:f7:06:37:bc:3e:6d:fa:3f:f9:4a: c1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:79:D1:C7:E3:4C:32:44:87:C0:D5:23:FF:55:46:59:E2:AC:20:F2 X509v3 Authority Key Identifier: keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d9:34:28:3b:3f:91:ad:59:fb:9a:b1:a1:51:a2:e2:d5:d9: f3:54:10:82:fc:0d:b7:4c:53:92:c6:3e:ab:51:c1:5b:08:f5: 50:09:44:c5:8a:36:93:96:a8:87:f7:5c:68:14:fd:31:d0:25: a2:ad:85:03:75:8e:b6:8f:4f:c3:b3:5b:27:a2:20:11:a9:7a: a1:48:13:60:12:97:0a:f9:14:32:a2:2b:bf:ff:d0:a0:d3:49: ca:f9:43:42:b6:0b:5a:9c:b2:20:78:7b:c3:de:b6:79:44:9f: 7e:bb:eb:6f:f8:8f:37:aa:fb:60:d9:7e:b0:d2:ef:60:c2:3d: fe:fb:ab:72:7f:26:d8:b1:17:30:5b:62:19:95:5d:16:f5:f0: a0:76:93:de:3e:83:73:08:a5:19:89:0e:56:89:7e:7a:f6:06: 54:1b:02:c1:77:42:6a:d4:32:17:14:07:35:e7:3e:11:d7:ab: c7:24:b2:4c:0e:28:cd:1d:34:95:98:2a:a7:ce:ae:58:b2:43: e8:cf:7e:9a:cf:11:cb:ca:03:69:5e:30:92:fd:64:4b:c6:8d: bc:54:0c:3f:da:31:84:d1:74:34:4a:61:9b:53:09:93:45:3f: ec:d0:2a:cd:ec:3e:22:5f:44:30:c4:fe:96:36:43:71:76:d7: ac:f6:93:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLallzz3YhpKHa+HfemtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjMyMmI1OTA0OGUxMDdiOTRhNmRiMDY1NTdhZjVmMGM5 YzI5MGMwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD EygzMTc5ZDFjN2UzNGMzMjQ0ODdjMGQ1MjNmZjU1NDY1OWUyYWMyMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjqlWHCySUCH0wzfs885Kr2C2SN9 RCdi5HAIcQzD+fzwet7tch1XYmiGtVcwyHydE/hfu3yUbqIXa/gU4sn22G+Yl2Vu LuMOXFGFq1+62WYKPHH2h2qGryuUQHqh8ZnWkiqj0hmbJXpGy9C7KmIuB/tSh0jB bcSjKDHvinkpIySJURagJA4sbrduu3FSkPrAe9vp9crF2+HovxbDMgsL2Fk1ags8 NFveUh3ViKQVUDZrwzesfIt6+9gAuVZIbj2Wpb7lqyvjCYQS0/AiFdtAgL0auWv6 CmoovJJ4XMfeXdsaRGwYwyAY0899ExfJYlRtU8iFs/cGN7w+bfo/+UrB/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF50cfjTDJEh8DVI/9VRlnirCDyMB8GA1UdIwQY MBaAFJOzIrWQSOEHuUptsGVXr18MnCkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZmY1MjAtNzI3MC00YTk4LWFlYzkt ZWY2MDRkNDE2YzM3LzEvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83ZmY1MjAtNzI3MC00YTk4LWFlYzktZWY2MDRkNDE2YzM3 LzEvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANk0KDs/ ka1Z+5qxoVGi4tXZ81QQgvwNt0xTksY+q1HBWwj1UAlExYo2k5aoh/dcaBT9MdAl oq2FA3WOto9Pw7NbJ6IgEal6oUgTYBKXCvkUMqIrv//QoNNJyvlDQrYLWpyyIHh7 w962eUSffrvrb/iPN6r7YNl+sNLvYMI9/vurcn8m2LEXMFtiGZVdFvXwoHaT3j6D cwilGYkOVol+evYGVBsCwXdCatQyFxQHNec+EderxySyTA4ozR00lZgqp86uWLJD 6M9+ms8Ry8oDaV4wkv1kS8aNvFQMP9oxhNF0NEphm1MJk0U/7NAqzew+Il9EMMT+ ljZDcXbXrPaT7g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:17 2025 by rpki-client