This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft File: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft (raw, json) Hash identifier: Z+O9bEvfAYwyL0+/ZDX4pf7hA/opNLfovxX+air6wFI= Subject key identifier: 13:49:60:B0:45:AF:D4:45:8A:34:A3:BE:50:AB:5C:0B:9C:17:27:8C Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4 Certificate issuer: /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4 Certificate serial: 019AF276676B2B28A5EF566611EBE81695E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft Manifest number: 0E7E Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl (hash: OCHJlUjQArNvIqMM3hQPt26ItVPQX7HA8daiNqlpA6U=) 2: ebpSJwwODthJSAtEhWxsuE5jmWc.roa (hash: DHoxuM9A5djnyMyGDG3UGPu6tBxqwYzj6AbU5sL1Pg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:67:6b:2b:28:a5:ef:56:66:11:eb:e8:16:95:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4 Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=134960b045afd4458a34a3be50ab5c0b9c17278c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:ea:9a:c7:27:82:69:07:6b:36:1e:e5:60: a7:48:49:ed:a9:82:2c:63:f4:42:66:18:3e:22:a9: bd:2a:82:54:a0:db:0b:74:2b:fc:30:42:53:1d:db: e1:27:8d:78:35:12:4f:8d:1d:c4:ba:c0:4b:5c:f0: a5:57:63:f5:52:dc:dc:87:35:60:75:88:7f:25:32: b4:0a:45:49:41:e5:99:e7:5a:fa:a7:b9:a9:18:32: 70:bd:bc:9d:bf:df:f6:4b:cf:a0:83:e6:8c:b3:dd: dc:63:9c:fe:46:3f:db:02:27:a1:1b:45:c4:d3:1c: a1:d8:3c:f7:e6:dd:5f:70:24:c6:18:45:f2:2e:6c: 57:d7:44:d1:68:23:ac:ea:23:85:06:88:9b:5a:e3: e2:34:be:eb:6b:20:8c:7a:90:54:2d:90:8f:fc:b3: b5:4c:7d:d5:30:9d:7c:12:ce:5e:c2:a1:3b:a1:bd: e3:46:42:1c:ec:79:d1:78:46:58:a6:c7:3e:96:9e: ac:7f:4d:1d:e0:dd:10:6e:55:d5:ae:5a:44:01:29: d5:52:4b:71:e6:03:52:39:68:12:1b:e5:2b:5d:a6: 39:85:dc:fd:7c:d3:46:ec:f8:eb:54:f4:b2:93:34: b1:6b:97:c9:3d:d5:ae:57:5f:28:4d:a0:0d:63:83: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:49:60:B0:45:AF:D4:45:8A:34:A3:BE:50:AB:5C:0B:9C:17:27:8C X509v3 Authority Key Identifier: keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:cb:0c:e3:1d:47:fc:65:0d:ed:99:04:67:2f:5a:4f:41:ba: e4:5a:cc:e7:28:43:19:74:3c:da:64:c1:d7:13:44:af:99:e7: 4e:e9:a7:c1:72:55:b8:46:b8:9e:9b:5c:4a:46:f3:45:b2:fb: da:02:a9:45:a5:31:bc:3a:99:f1:d0:5d:bc:78:8e:1f:43:fc: e0:e4:65:50:c5:b5:1c:f0:f7:d1:79:f0:3a:f5:0c:8d:ee:ef: fc:62:39:47:d5:11:d5:d3:03:43:19:7f:9a:41:4b:ba:5e:e5: 30:fe:2d:85:e3:46:e6:d7:fc:48:cf:c6:33:59:e1:e7:ec:cd: c2:21:90:e2:cc:38:8c:bf:10:04:02:c7:b8:ad:b2:ab:62:91: 87:ba:5b:00:54:0e:77:f2:93:74:d4:05:8b:96:70:be:f2:e9: d6:d4:c1:89:19:d7:1c:95:69:f7:52:04:e5:41:37:51:93:60: ea:a8:87:9c:49:5a:03:7c:4f:78:c3:fc:45:64:6a:af:72:2f: 9d:6a:da:3d:8a:e1:c3:b9:57:6e:bf:b3:f8:90:ca:ff:6c:c5: be:36:3a:85:ce:e4:49:9d:ac:7b:2a:39:63:9e:84:d6:35:5f: a8:23:99:cb:61:68:19:f8:10:2f:88:e2:67:a4:8b:ba:74:fe: f2:44:b7:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmdrKyil71ZmEevoFpXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YWY3Njk4OWVkNDY0ZmQ5YTU0ODlmZmY3ZmI5OGNjMmQy ZjkzZTQwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EygxMzQ5NjBiMDQ1YWZkNDQ1OGEzNGEzYmU1MGFiNWMwYjljMTcyNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TvqmscngmkHazYe5WCnSEntqYIs Y/RCZhg+Iqm9KoJUoNsLdCv8MEJTHdvhJ414NRJPjR3EusBLXPClV2P1UtzchzVg dYh/JTK0CkVJQeWZ51r6p7mpGDJwvbydv9/2S8+gg+aMs93cY5z+Rj/bAiehG0XE 0xyh2Dz35t1fcCTGGEXyLmxX10TRaCOs6iOFBoibWuPiNL7rayCMepBULZCP/LO1 TH3VMJ18Es5ewqE7ob3jRkIc7HnReEZYpsc+lp6sf00d4N0QblXVrlpEASnVUktx 5gNSOWgSG+UrXaY5hdz9fNNG7PjrVPSykzSxa5fJPdWuV18oTaANY4Mu1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNJYLBFr9RFijSjvlCrXAucFyeMMB8GA1UdIwQY MBaAFPevdpie1GT9mlSJ//f7mMwtL5PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTY5Mm1KN1VaUDJhVkluXzlfdVl6QzB2ay1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kNjYzY2EtYWRmNi00MWMyLTkzYzEt NjBiMWRlNmMzOGQxLzEvOTY5Mm1KN1VaUDJhVkluXzlfdVl6QzB2ay1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kNjYzY2EtYWRmNi00MWMyLTkzYzEtNjBiMWRlNmMzOGQx LzEvOTY5Mm1KN1VaUDJhVkluXzlfdVl6QzB2ay1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMssM4x1H /GUN7ZkEZy9aT0G65FrM5yhDGXQ82mTB1xNEr5nnTumnwXJVuEa4nptcSkbzRbL7 2gKpRaUxvDqZ8dBdvHiOH0P84ORlUMW1HPD30XnwOvUMje7v/GI5R9UR1dMDQxl/ mkFLul7lMP4theNG5tf8SM/GM1nh5+zNwiGQ4sw4jL8QBALHuK2yq2KRh7pbAFQO d/KTdNQFi5ZwvvLp1tTBiRnXHJVp91IE5UE3UZNg6qiHnElaA3xPeMP8RWRqr3Iv nWraPYrhw7lXbr+z+JDK/2zFvjY6hc7kSZ2seyo5Y56E1jVfqCOZy2FoGfgQL4ji Z6SLunT+8kS3Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:24 2025 by rpki-client