This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft File: eyIdrMbD43H18LsnbJ_liMXuX9w.mft (raw, json) Hash identifier: 5N+bAg1qGTjuM4TywifQKXN7+eRMVYinmZHCMkV9Cj0= Subject key identifier: C3:37:3C:2F:C3:98:F7:9B:A1:2D:CC:C3:0C:CD:F5:A8:9F:ED:0B:2E Authority key identifier: 7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC Certificate issuer: /CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc Certificate serial: 019AF50B7A8D083E319375FB0FDF0BA0A95F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft Manifest number: 13C8 Signing time: Sat 06 Dec 2025 19:02:41 +0000 Manifest this update: Sat 06 Dec 2025 19:02:41 +0000 Manifest next update: Sun 07 Dec 2025 19:02:41 +0000 Files and hashes: 1: Y8PQyPUzQhQIv_XdteLNY7mLRvU.roa (hash: A+OBbpWaD+MmN4QsD5RWbw2liSbkHZBgDbYA9Xko2fM=) 2: eyIdrMbD43H18LsnbJ_liMXuX9w.crl (hash: L12lQ108jRnxv88+630yPqQP+N25GuKJf/V8Kiw1RJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:7a:8d:08:3e:31:93:75:fb:0f:df:0b:a0:a9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc Validity Not Before: Dec 6 19:02:41 2025 GMT Not After : Dec 7 19:02:41 2025 GMT Subject: CN=c3373c2fc398f79ba12dccc30ccdf5a89fed0b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:a1:9d:6a:01:a5:51:ed:dd:1d:40:07:44: 34:b1:4f:ff:4d:8c:46:61:57:9b:bf:06:6b:4d:62: 59:82:46:d5:57:2c:2c:91:ab:2a:03:6a:db:d2:c9: ff:86:16:50:d5:ae:5f:9c:b9:ca:ea:a1:ae:2e:aa: 15:dc:2f:fd:74:9c:90:e9:45:e5:9e:89:70:0b:df: c9:da:bb:ae:6a:d8:3c:79:54:51:00:ee:39:a8:db: 15:4a:5c:ef:d5:9d:60:b4:c2:95:c9:04:fe:af:ca: e6:94:c2:07:6a:54:28:e8:d0:10:74:ca:57:40:bf: 89:a6:3b:22:58:8e:af:98:da:60:8f:eb:dd:f2:4e: 19:63:5c:ac:97:71:be:81:05:5f:9c:12:56:b1:cb: fe:5a:3c:0d:fe:dc:ef:1b:8e:fd:e6:8e:dc:4d:7c: db:b5:ef:3c:a2:8f:46:44:97:ba:9b:7b:5d:09:bd: e7:db:6c:2d:a4:ef:0e:5e:6a:bb:74:c7:6d:cc:b3: e1:b5:a4:09:7f:c8:48:35:d1:ff:06:73:37:37:51: bf:be:3e:5d:25:bf:d5:ea:c9:32:ca:38:4e:d4:ab: 7e:77:4f:12:46:b1:2b:19:2b:82:5d:67:f2:e9:c3: 73:7d:a4:21:1e:c0:b5:ac:f3:bc:04:fc:38:13:a4: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:37:3C:2F:C3:98:F7:9B:A1:2D:CC:C3:0C:CD:F5:A8:9F:ED:0B:2E X509v3 Authority Key Identifier: keyid:7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:42:bc:56:c1:4b:53:5f:bb:d8:c2:1c:6f:17:33:a3:02:0a: ae:98:95:9f:bd:e8:79:cc:25:7f:2a:bd:ff:e4:41:66:4e:75: f6:4e:dc:a6:ff:ae:e3:2a:c6:f9:48:ba:4c:56:2a:6c:b4:75: 38:55:6b:0a:13:e0:25:08:c4:be:bf:f3:c3:a7:ba:37:8b:69: db:3a:78:26:52:18:be:7c:86:3b:49:46:73:d3:6c:39:73:0a: b2:c5:76:95:3c:7b:9d:c5:f9:d2:6f:e4:e6:5c:3b:3a:80:62: f1:10:a2:4b:07:34:6e:59:4c:a5:86:2b:53:b8:21:c3:fe:b6: b5:50:f3:6e:a7:19:f0:67:9d:b4:a2:cf:2a:55:0f:4a:fd:29: 01:56:57:82:8e:d7:a6:f2:d9:e9:60:d8:13:04:96:af:a4:53: 82:31:8e:e3:18:2b:03:43:d7:79:b0:bb:b7:5a:32:ab:14:84: 09:c3:20:07:4d:05:02:0b:8c:7b:0b:b4:f9:60:53:22:ae:65: 22:2e:94:c4:96:ea:77:41:42:7e:76:4c:41:a8:f2:c4:f8:2e: e8:ea:2f:7d:e0:0a:6a:03:ed:ca:6e:4a:bd:41:c6:9b:0a:e1: 20:98:df:ff:9e:0b:a8:43:6d:5e:69:6e:67:ac:f8:e0:06:82: 7b:c4:1b:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3qNCD4xk3X7D98LoKlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjIxZGFjYzZjM2UzNzFmNWYwYmIyNzZjOWZlNTg4YzVl ZTVmZGMwHhcNMjUxMjA2MTkwMjQxWhcNMjUxMjA3MTkwMjQxWjAzMTEwLwYDVQQD EyhjMzM3M2MyZmMzOThmNzliYTEyZGNjYzMwY2NkZjVhODlmZWQwYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28yhnWoBpVHt3R1AB0Q0sU//TYxG YVebvwZrTWJZgkbVVywskasqA2rb0sn/hhZQ1a5fnLnK6qGuLqoV3C/9dJyQ6UXl nolwC9/J2ruuatg8eVRRAO45qNsVSlzv1Z1gtMKVyQT+r8rmlMIHalQo6NAQdMpX QL+JpjsiWI6vmNpgj+vd8k4ZY1ysl3G+gQVfnBJWscv+WjwN/tzvG4795o7cTXzb te88oo9GRJe6m3tdCb3n22wtpO8OXmq7dMdtzLPhtaQJf8hINdH/BnM3N1G/vj5d Jb/V6skyyjhO1Kt+d08SRrErGSuCXWfy6cNzfaQhHsC1rPO8BPw4E6TanQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM3PC/DmPeboS3MwwzN9aif7QsuMB8GA1UdIwQY MBaAFHsiHazGw+Nx9fC7J2yf5YjF7l/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXlJZHJNYkQ0M0gxOExzbmJKX2xpTVh1WDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iMWU2YjAtZjNhMC00ZjVmLWJmMjUt ODEyZDQ1MjY1MTg2LzEvZXlJZHJNYkQ0M0gxOExzbmJKX2xpTVh1WDl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iMWU2YjAtZjNhMC00ZjVmLWJmMjUtODEyZDQ1MjY1MTg2 LzEvZXlJZHJNYkQ0M0gxOExzbmJKX2xpTVh1WDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUK8VsFL U1+72MIcbxczowIKrpiVn73oecwlfyq9/+RBZk519k7cpv+u4yrG+Ui6TFYqbLR1 OFVrChPgJQjEvr/zw6e6N4tp2zp4JlIYvnyGO0lGc9NsOXMKssV2lTx7ncX50m/k 5lw7OoBi8RCiSwc0bllMpYYrU7ghw/62tVDzbqcZ8GedtKLPKlUPSv0pAVZXgo7X pvLZ6WDYEwSWr6RTgjGO4xgrA0PXebC7t1oyqxSECcMgB00FAguMewu0+WBTIq5l Ii6UxJbqd0FCfnZMQajyxPgu6OovfeAKagPtym5KvUHGmwrhIJjf/54LqENtXmlu Z6z44AaCe8Qbwg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:22 2025 by rpki-client