This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json) Hash identifier: 3KtoWH36f48xxcJXrz53SnINOrfNWcwomYkIQAKAilg= Subject key identifier: 80:4E:48:2E:70:F9:FC:99:B4:D9:0B:D4:16:BD:70:E0:A4:2F:EC:17 Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Certificate serial: 019AF051A5254061293189221B9BB4F7D87F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft Manifest number: 0FE7 Signing time: Fri 05 Dec 2025 21:01:13 +0000 Manifest this update: Fri 05 Dec 2025 21:01:13 +0000 Manifest next update: Sat 06 Dec 2025 21:01:13 +0000 Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=) 2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: TzQMcbMYDc77ndKCRkc4zfZkx3zYkVK618JGmuLSgyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:a5:25:40:61:29:31:89:22:1b:9b:b4:f7:d8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Validity Not Before: Dec 5 21:01:13 2025 GMT Not After : Dec 6 21:01:13 2025 GMT Subject: CN=804e482e70f9fc99b4d90bd416bd70e0a42fec17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:7f:0d:e6:bb:b3:a4:b2:22:13:7d:a0:92: e5:85:8e:8b:c4:f6:85:20:67:e2:10:fc:fa:89:2b: 1c:db:9d:1e:1d:75:8b:c0:c7:87:31:42:cf:3c:a1: 23:df:dd:b7:45:3a:1d:b8:06:97:d6:61:f9:5d:bd: 8f:05:6b:17:4b:54:a0:bd:7c:83:3e:2b:9d:e6:c4: 28:67:70:a1:25:59:96:44:73:e7:06:6f:9a:23:76: 98:0a:7a:16:cd:d0:f5:34:bd:95:1e:5e:bc:f7:fd: af:46:92:6e:e8:80:2a:6f:14:0d:9e:5b:6e:eb:fb: ba:83:84:ee:8c:90:c2:0b:3c:6e:8b:5c:e6:c4:86: 90:fa:4b:68:75:7d:f9:97:10:87:7a:75:8d:fb:b6: 10:cf:87:95:75:5d:ab:c2:8d:4a:4f:88:15:ec:8d: e9:f5:1e:a8:48:0b:3f:78:03:f2:32:01:82:04:d3: 84:ff:85:35:b6:78:8c:ef:9f:45:68:3f:bf:8c:c0: cf:04:c2:f3:34:24:3d:da:03:eb:36:df:73:38:a0: 11:ef:2a:8b:14:f8:27:c2:55:43:61:b2:de:be:10: bb:86:1e:68:f9:7b:11:61:04:0d:91:1e:a6:d7:f8: 76:fb:13:5e:68:98:1f:7a:48:cf:21:f5:30:0d:13: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4E:48:2E:70:F9:FC:99:B4:D9:0B:D4:16:BD:70:E0:A4:2F:EC:17 X509v3 Authority Key Identifier: keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f1:ec:91:06:c1:f9:56:5e:ce:b5:10:69:51:d8:4f:10:f3: 48:e1:af:24:30:8b:48:86:48:c5:a7:41:86:ce:7a:6c:17:31: 96:51:69:b9:a2:3d:8b:8c:ad:e2:90:b5:c4:4f:94:3a:da:00: 54:cd:64:e6:59:c0:ca:56:29:06:36:7f:77:ea:7b:21:fb:70: bc:ac:b3:d6:97:f5:1d:07:87:b1:5c:b1:71:9b:da:f4:78:49: b2:31:68:ac:40:a4:54:76:db:ed:5a:10:4c:36:5f:63:cf:41: 9c:6b:5f:06:4d:24:0e:46:aa:dd:75:da:e9:cb:58:19:76:fa: 8f:1b:dd:b8:55:69:f0:20:b9:32:65:df:29:1c:79:ba:29:32: 34:e4:1d:6c:76:20:42:f3:a2:34:aa:d1:b7:42:33:f7:db:74: 8c:2d:0c:06:c0:cd:27:c5:f3:51:0b:72:17:69:cf:f4:43:44: f5:86:58:09:0d:cd:3e:b5:a4:0c:af:84:61:91:57:af:fc:9d: 9b:db:52:2a:db:80:17:53:9d:ab:94:25:76:6f:3e:11:d2:56: c4:43:9e:26:04:ed:8c:65:84:5d:b2:01:90:46:24:c6:31:aa: 59:0f:52:f2:fe:de:f3:34:95:47:3c:bf:3c:20:ce:50:78:01: 02:bd:2b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUaUlQGEpMYkiG5u099h/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2Y4M2RlZTkyZDhkM2UyOGQ3MzYyZGZjNzE4NzU1M2Q4 OGM3NWMwHhcNMjUxMjA1MjEwMTEzWhcNMjUxMjA2MjEwMTEzWjAzMTEwLwYDVQQD Eyg4MDRlNDgyZTcwZjlmYzk5YjRkOTBiZDQxNmJkNzBlMGE0MmZlYzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq1/Dea7s6SyIhN9oJLlhY6LxPaF IGfiEPz6iSsc250eHXWLwMeHMULPPKEj3923RToduAaX1mH5Xb2PBWsXS1SgvXyD Piud5sQoZ3ChJVmWRHPnBm+aI3aYCnoWzdD1NL2VHl689/2vRpJu6IAqbxQNnltu 6/u6g4TujJDCCzxui1zmxIaQ+ktodX35lxCHenWN+7YQz4eVdV2rwo1KT4gV7I3p 9R6oSAs/eAPyMgGCBNOE/4U1tniM759FaD+/jMDPBMLzNCQ92gPrNt9zOKAR7yqL FPgnwlVDYbLevhC7hh5o+XsRYQQNkR6m1/h2+xNeaJgfekjPIfUwDRPF+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBOSC5w+fyZtNkL1Ba9cOCkL+wXMB8GA1UdIwQY MBaAFHE/g97pLY0+KNc2Lfxxh1U9iMdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAt NzkxNDM4MzM2M2Y3LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAtNzkxNDM4MzM2M2Y3 LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfHskQbB +VZezrUQaVHYTxDzSOGvJDCLSIZIxadBhs56bBcxllFpuaI9i4yt4pC1xE+UOtoA VM1k5lnAylYpBjZ/d+p7IftwvKyz1pf1HQeHsVyxcZva9HhJsjForECkVHbb7VoQ TDZfY89BnGtfBk0kDkaq3XXa6ctYGXb6jxvduFVp8CC5MmXfKRx5uikyNOQdbHYg QvOiNKrRt0Iz99t0jC0MBsDNJ8XzUQtyF2nP9ENE9YZYCQ3NPrWkDK+EYZFXr/yd m9tSKtuAF1Odq5Qldm8+EdJWxEOeJgTtjGWEXbIBkEYkxjGqWQ9S8v7e8zSVRzy/ PCDOUHgBAr0rdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:37 2025 by rpki-client