This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft File: MK7HNts6BEOzui_FtKQkWG-0zhU.mft (raw, json) Hash identifier: 4QRS+o5wKg4QrCgho7jKa0pqkcxSI+7mF6HjP5XYwAQ= Subject key identifier: 42:E7:35:8C:58:D9:DE:4A:5E:F1:1C:1C:98:75:57:34:58:15:A3:77 Authority key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15 Certificate issuer: /CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15 Certificate serial: 019AF0F5C5B8138B13A7BF85E4DC9ACEE401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft Manifest number: 7B Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: 6H_HYtmg2UdJqU5MWI0lffy1dSc.roa (hash: AKgGfr6wkzXFXCjq2IfcxYtjAtEln9LUULf9VwKwDj8=) 2: MK7HNts6BEOzui_FtKQkWG-0zhU.crl (hash: 7MidRQ6X7zCwwjxB/BrXLQzOSWCsq1GzVkGQXH8E92k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c5:b8:13:8b:13:a7:bf:85:e4:dc:9a:ce:e4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15 Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=42e7358c58d9de4a5ef11c1c987557345815a377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:f9:49:f5:90:a5:f2:f3:2d:50:62:78:d1: 09:1b:b4:8c:a3:a6:e7:29:61:32:c7:7d:f4:a9:98: 82:36:82:dd:f0:a8:69:00:36:66:ee:bf:93:37:75: e5:03:13:f5:ce:39:a7:f8:11:8e:63:2c:3c:8e:27: 2f:57:e0:09:83:25:86:b0:29:b7:32:f7:13:a6:e7: 9e:b7:4a:7a:29:d6:7f:88:0f:5a:9b:6a:ea:d3:0a: f2:e4:ff:1d:f8:4a:8b:33:b9:f7:cc:78:9a:10:3a: 33:28:ab:26:37:60:8f:26:25:08:9f:25:fb:aa:32: a0:1f:95:40:d5:a0:32:e8:b2:be:a1:e9:be:ed:a1: b4:ff:26:51:7b:f0:1f:b9:3f:11:19:89:b8:a3:ae: 51:65:ae:ab:8e:cb:ca:21:75:f7:b5:ec:c5:e1:ff: 31:4a:91:e7:8d:dd:6d:7e:c3:42:22:33:ee:ff:a7: bf:c1:f7:63:ed:ea:9c:b5:cc:91:bf:22:f5:4d:51: ca:01:eb:f8:88:4f:7d:44:1f:f1:cb:35:9f:65:8a: 3e:72:80:f7:3f:12:db:16:2a:7d:ea:c1:ca:64:c2: 79:61:38:40:85:0e:a4:83:ae:2f:87:15:6d:1d:a8: 84:53:5d:cb:e7:e8:e5:bf:25:0c:82:2d:db:b8:ea: 50:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E7:35:8C:58:D9:DE:4A:5E:F1:1C:1C:98:75:57:34:58:15:A3:77 X509v3 Authority Key Identifier: keyid:30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2c:ec:31:40:12:c2:71:96:af:d8:47:fa:49:a6:01:d6:f4: 69:79:99:64:09:8d:fe:05:17:4f:33:f1:4d:f2:23:3a:d2:9e: 0b:ac:50:3d:5d:e7:c8:2b:bf:c3:d0:68:b4:ed:57:9a:c7:8b: 57:44:2f:eb:0b:93:79:23:65:40:a0:57:1d:d0:69:11:c8:5c: 64:3f:c5:15:74:5e:08:fc:94:f1:f4:f2:79:af:ba:a4:53:fd: 5b:f6:cc:ee:ce:cf:df:b7:aa:5b:ea:65:fa:73:02:73:6b:99: f8:79:5b:77:4c:c5:43:ec:3f:74:7f:93:eb:fe:bf:85:36:66: 8c:9f:33:d6:56:b2:bf:30:d4:c3:84:1a:da:d5:20:d5:8f:9c: 0d:3e:c7:ae:54:ee:c2:50:f1:d3:2c:9c:8a:8a:b6:ba:4e:42: 3b:9d:a3:61:86:de:98:77:87:bf:a7:4d:07:88:28:b0:87:72: fa:b4:83:b5:da:61:84:f7:3c:68:be:89:11:4c:0b:54:d8:b2: 9e:b4:cd:92:57:2b:48:1d:2a:01:c6:7c:a8:72:f0:25:3b:6a: a4:0c:a0:6d:1a:f3:02:fa:0b:38:c4:91:f0:7f:e9:49:d4:27: a4:d3:fb:f0:a0:bc:2f:7a:8a:0a:13:08:1a:fb:6a:ad:0d:73: a2:54:79:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cW4E4sTp7+F5NyazuQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWVjNzM2ZGIzYTA0NDNiM2JhMmZjNWI0YTQyNDU4NmZi NGNlMTUwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD Eyg0MmU3MzU4YzU4ZDlkZTRhNWVmMTFjMWM5ODc1NTczNDU4MTVhMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvz5SfWQpfLzLVBieNEJG7SMo6bn KWEyx330qZiCNoLd8KhpADZm7r+TN3XlAxP1zjmn+BGOYyw8jicvV+AJgyWGsCm3 MvcTpueet0p6KdZ/iA9am2rq0wry5P8d+EqLM7n3zHiaEDozKKsmN2CPJiUInyX7 qjKgH5VA1aAy6LK+oem+7aG0/yZRe/AfuT8RGYm4o65RZa6rjsvKIXX3tezF4f8x SpHnjd1tfsNCIjPu/6e/wfdj7eqctcyRvyL1TVHKAev4iE99RB/xyzWfZYo+coD3 PxLbFip96sHKZMJ5YThAhQ6kg64vhxVtHaiEU13L5+jlvyUMgi3buOpQhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELnNYxY2d5KXvEcHJh1VzRYFaN3MB8GA1UdIwQY MBaAFDCuxzbbOgRDs7ovxbSkJFhvtM4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUs3SE50czZCRU96dWlfRnRLUWtXRy0wemhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kMzdiYmYtMDU2ZC00OGYwLTkwZTct YjM3OWVhMDNmYmFhLzEvTUs3SE50czZCRU96dWlfRnRLUWtXRy0wemhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kMzdiYmYtMDU2ZC00OGYwLTkwZTctYjM3OWVhMDNmYmFh LzEvTUs3SE50czZCRU96dWlfRnRLUWtXRy0wemhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEizsMUAS wnGWr9hH+kmmAdb0aXmZZAmN/gUXTzPxTfIjOtKeC6xQPV3nyCu/w9BotO1XmseL V0Qv6wuTeSNlQKBXHdBpEchcZD/FFXReCPyU8fTyea+6pFP9W/bM7s7P37eqW+pl +nMCc2uZ+Hlbd0zFQ+w/dH+T6/6/hTZmjJ8z1layvzDUw4Qa2tUg1Y+cDT7HrlTu wlDx0yycioq2uk5CO52jYYbemHeHv6dNB4gosIdy+rSDtdphhPc8aL6JEUwLVNiy nrTNklcrSB0qAcZ8qHLwJTtqpAygbRrzAvoLOMSR8H/pSdQnpNP78KC8L3qKChMI GvtqrQ1zolR5xg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:40 2025 by rpki-client