This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json) Hash identifier: exVy8KcAAQa1j+atwRREf/5KV0fyOhEi3CsGZ4oG3FQ= Subject key identifier: 7D:A3:E1:60:B8:95:C3:D4:4D:22:84:E4:81:60:89:EB:27:F8:B7:2D Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Certificate serial: 019B31FAB025A7A721527B2BCDC9B814D03B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft Manifest number: 1009 Signing time: Thu 18 Dec 2025 15:01:11 +0000 Manifest this update: Thu 18 Dec 2025 15:01:11 +0000 Manifest next update: Fri 19 Dec 2025 15:01:11 +0000 Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=) 2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: WMW8OH2Kl2yCSmsBDp0q0rEMNjsVlDP8SDX6dZLYLlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:b0:25:a7:a7:21:52:7b:2b:cd:c9:b8:14:d0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Validity Not Before: Dec 18 15:01:11 2025 GMT Not After : Dec 19 15:01:11 2025 GMT Subject: CN=7da3e160b895c3d44d2284e4816089eb27f8b72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:3b:f4:bc:a8:cd:0c:c4:b3:5e:3a:f3:71: dd:e3:88:ef:56:4c:17:be:82:11:ec:e5:b0:d3:ed: a1:99:d6:43:c1:bf:77:15:a3:3a:a6:42:79:21:9c: a5:01:14:df:6e:e3:53:68:b9:02:f3:aa:c2:15:33: 17:23:21:9f:54:9b:79:b1:89:2c:0e:a3:de:19:e9: a3:f6:44:90:3a:89:37:49:be:e4:30:3a:eb:a1:d7: 70:6f:b2:d3:72:4f:f8:43:8c:de:02:38:33:6b:31: 75:bd:cb:62:0e:0b:f7:1b:72:35:9f:a9:98:36:a5: 30:b9:5d:f8:4d:26:54:45:c4:16:7e:01:1b:5a:d3: f5:77:0c:16:4b:fa:fe:cb:91:f6:97:7a:7d:ac:69: ed:bf:8d:7c:b4:90:06:f3:4a:eb:2d:a6:c5:35:6b: ad:21:9a:5b:42:6c:63:1c:fc:b6:89:e5:a0:53:62: 49:ce:0e:e9:fc:f8:ca:e6:69:76:2f:42:34:6b:57: 7e:58:c2:bd:e8:32:2c:a2:4c:75:bc:84:01:9d:47: 2d:4c:97:1c:5e:ff:e0:f0:f0:3d:c8:9a:f1:39:52: c9:1f:7a:39:59:66:88:ee:d5:38:91:4c:74:7b:ff: 6e:57:0f:a5:7c:35:b7:89:3b:f6:44:d8:f7:76:44: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A3:E1:60:B8:95:C3:D4:4D:22:84:E4:81:60:89:EB:27:F8:B7:2D X509v3 Authority Key Identifier: keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:b9:a9:42:c1:7a:4a:17:6c:3c:5a:f6:c1:75:60:46:64:c1: 69:84:dc:08:e3:dc:7b:bf:e4:8e:6d:3b:0b:ec:b7:6e:61:45: 5f:a6:48:09:c8:97:63:96:70:65:0c:55:d1:d8:b8:bf:94:25: f3:60:fc:d3:5e:97:cf:5c:57:7b:7d:01:99:e8:6e:4d:19:4b: e1:d0:4a:3c:26:66:03:06:1f:8c:be:4e:b6:fe:7c:fe:49:e6: d6:14:cb:ce:a0:46:6a:13:16:8e:36:bf:1a:31:05:3c:b4:68: 46:bf:be:a4:1f:cd:7d:43:9f:79:18:47:50:41:45:a2:0d:54: 96:ce:bf:97:3d:cb:57:d8:39:10:e4:92:ef:9d:23:d9:a7:73: 5c:3f:8a:1e:bc:a0:0f:04:88:46:ea:24:d6:5e:e4:b6:eb:e5: ea:08:14:69:c8:10:6a:1e:43:fd:cd:90:10:f2:3b:d8:d9:7c: 8c:f4:b3:78:1b:10:f3:f5:a3:ad:b3:dc:56:23:b0:7c:86:5b: 28:8e:f6:74:9d:0d:bb:26:4d:2d:f7:1a:a0:54:15:50:87:3b: f1:66:a6:03:e3:f5:ac:61:e9:fb:6b:97:8e:a0:98:e6:d5:38: e4:79:4b:44:21:48:3f:c2:8d:64:3e:e6:4f:bc:29:e5:da:4f: aa:66:9a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+rAlp6chUnsrzcm4FNA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2Y4M2RlZTkyZDhkM2UyOGQ3MzYyZGZjNzE4NzU1M2Q4 OGM3NWMwHhcNMjUxMjE4MTUwMTExWhcNMjUxMjE5MTUwMTExWjAzMTEwLwYDVQQD Eyg3ZGEzZTE2MGI4OTVjM2Q0NGQyMjg0ZTQ4MTYwODllYjI3ZjhiNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoww79LyozQzEs14683Hd44jvVkwX voIR7OWw0+2hmdZDwb93FaM6pkJ5IZylARTfbuNTaLkC86rCFTMXIyGfVJt5sYks DqPeGemj9kSQOok3Sb7kMDrroddwb7LTck/4Q4zeAjgzazF1vctiDgv3G3I1n6mY NqUwuV34TSZURcQWfgEbWtP1dwwWS/r+y5H2l3p9rGntv418tJAG80rrLabFNWut IZpbQmxjHPy2ieWgU2JJzg7p/PjK5ml2L0I0a1d+WMK96DIsokx1vIQBnUctTJcc Xv/g8PA9yJrxOVLJH3o5WWaI7tU4kUx0e/9uVw+lfDW3iTv2RNj3dkQQAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2j4WC4lcPUTSKE5IFgiesn+LctMB8GA1UdIwQY MBaAFHE/g97pLY0+KNc2Lfxxh1U9iMdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAt NzkxNDM4MzM2M2Y3LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAtNzkxNDM4MzM2M2Y3 LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLmpQsF6 ShdsPFr2wXVgRmTBaYTcCOPce7/kjm07C+y3bmFFX6ZICciXY5ZwZQxV0di4v5Ql 82D8016Xz1xXe30BmehuTRlL4dBKPCZmAwYfjL5Otv58/knm1hTLzqBGahMWjja/ GjEFPLRoRr++pB/NfUOfeRhHUEFFog1Uls6/lz3LV9g5EOSS750j2adzXD+KHryg DwSIRuok1l7ktuvl6ggUacgQah5D/c2QEPI72Nl8jPSzeBsQ8/WjrbPcViOwfIZb KI72dJ0NuyZNLfcaoFQVUIc78WamA+P1rGHp+2uXjqCY5tU45HlLRCFIP8KNZD7m T7wp5dpPqmaaCg== -----END CERTIFICATE-----Generated at Thu Dec 18 21:46:24 2025 by rpki-client