This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft File: 7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json) Hash identifier: HlckKYt52K10RAOvUIkZsOGa/8O0YY8VeSh4zUHoUZ8= Subject key identifier: B9:19:6E:36:A4:A1:E9:77:72:E1:98:AF:03:C1:61:86:0B:CD:62:CA Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931 Certificate serial: 019AF23FAE64AF2634CBC7E9E90A5E3B4343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: BJtO127iUvoysLRR4J3UdRO6Mxwyi9342UMeu7Isx3c=) 2: DhrEeypsTDYQFqtn5MxSVP9RNeU.roa (hash: YbsKC7hbnZNHtFxguJmaXdHmEbB7PGi2yECVIv3in+Y=) 3: ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa (hash: Q7ZeIOfUNPi7mpE3FmolNTr+UgiuMWmE4orBE7DJEUE=) 4: bU9Ico-cyM-PvgK1SQj6vU4e1Ls.roa (hash: doVS673KgZlyTzdhMbWDR8Kab55ovw32HoLTIKOV1EA=) 5: voL46_JMwU4qTPsD8VeKh98SS14.roa (hash: qZtqKCrc3zkDk9p5tCOUN22BVn6pEnapViAnA8r2BYY=) 6: zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa (hash: nyGClrw0gv+ItcF8Z6pEhgDK/R+w+uNDhXQXgQXv0GY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ae:64:af:26:34:cb:c7:e9:e9:0a:5e:3b:43:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931 Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=b9196e36a4a1e97772e198af03c161860bcd62ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:0c:49:b2:e7:46:15:12:7e:7d:05:e5:4d: 15:7c:e2:3d:5a:fa:48:b5:c7:72:b8:5c:51:57:8f: cc:69:c1:5f:6f:ac:da:97:56:11:65:96:8c:d1:7e: f9:09:a6:78:63:fd:cc:08:d6:fb:3d:9b:4a:c5:cd: 1f:f4:c5:dc:07:ed:eb:af:5f:db:64:a0:6f:18:b2: 48:6c:e8:9d:73:70:8b:ea:dd:17:56:a2:80:25:3c: 8b:81:68:a0:9d:3e:3f:29:41:d2:43:26:1b:90:4f: e4:b2:d3:92:36:2b:a3:62:4f:13:d8:ae:ae:c7:9c: c1:b3:96:59:46:7e:9e:4b:aa:5c:ff:31:a9:16:b5: 35:23:5d:e0:14:d6:32:6a:32:a2:8c:bd:88:7b:29: c4:33:13:2c:5b:13:e6:33:2b:22:46:f9:f3:59:99: 45:52:58:d9:dc:4d:be:7f:3c:e6:63:85:d2:22:be: bb:c7:b5:17:9d:73:12:55:95:09:7e:f5:e7:26:49: 7e:17:ed:e7:a6:a5:00:f7:0e:bb:9f:c1:b1:cf:2e: 88:9c:52:ed:bb:34:4c:05:b6:85:79:05:82:45:0f: ca:b9:23:49:c6:90:71:77:5c:87:34:88:91:9a:e7: f1:d6:6b:99:3c:02:5d:9e:32:be:51:76:3c:12:22: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:19:6E:36:A4:A1:E9:77:72:E1:98:AF:03:C1:61:86:0B:CD:62:CA X509v3 Authority Key Identifier: keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:70:97:c4:2c:31:20:af:ea:bb:d5:7c:d2:c1:67:c2:21:a5: 87:6a:6f:7a:a2:47:e9:d6:36:68:12:e7:11:04:71:d9:2e:53: 0f:51:38:83:0b:e5:9d:2d:bb:fc:9c:b0:0c:ab:75:34:58:9e: 9d:85:6b:19:15:6b:be:08:f5:a0:0b:19:66:f7:32:2e:1b:4e: 78:fe:96:b7:0e:dd:96:79:0e:cf:1a:50:4b:b9:b1:4f:dc:d1: 14:f4:30:dd:5f:77:3e:77:2b:e5:a6:9d:3d:9d:11:d4:79:95: d1:9c:9b:d5:20:83:3a:d9:f0:be:98:11:cd:f9:c5:13:08:6d: 04:79:73:16:2c:0c:ce:37:67:e0:79:c6:97:f2:ce:fa:4f:07: 6e:e3:a5:18:78:95:28:83:74:91:e5:65:59:93:9f:93:c3:3e: 34:df:82:47:6c:76:24:40:f6:0a:75:ac:6f:ae:63:40:c7:e1: 97:0a:c4:5e:1c:05:21:61:c0:3d:07:af:df:2c:ff:b8:e9:c7: 76:c0:86:29:4b:cd:b1:1e:56:4f:53:4c:d0:97:c2:92:dd:bc: c6:c1:13:ad:f6:75:58:78:22:09:96:b9:ff:76:55:b7:9b:a7: a3:a0:0a:80:36:52:eb:61:6d:f7:a0:51:91:a9:a4:6a:41:7a: 1d:7f:d5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP65kryY0y8fp6QpeO0NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy ZWQ5MzEwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD EyhiOTE5NmUzNmE0YTFlOTc3NzJlMTk4YWYwM2MxNjE4NjBiY2Q2MmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nkMSbLnRhUSfn0F5U0VfOI9WvpI tcdyuFxRV4/MacFfb6zal1YRZZaM0X75CaZ4Y/3MCNb7PZtKxc0f9MXcB+3rr1/b ZKBvGLJIbOidc3CL6t0XVqKAJTyLgWignT4/KUHSQyYbkE/kstOSNiujYk8T2K6u x5zBs5ZZRn6eS6pc/zGpFrU1I13gFNYyajKijL2IeynEMxMsWxPmMysiRvnzWZlF UljZ3E2+fzzmY4XSIr67x7UXnXMSVZUJfvXnJkl+F+3npqUA9w67n8Gxzy6InFLt uzRMBbaFeQWCRQ/KuSNJxpBxd1yHNIiRmufx1muZPAJdnjK+UXY8EiLCSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkZbjakoel3cuGYrwPBYYYLzWLKMB8GA1UdIwQY MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt NWU1M2MyM2I1NWIwLzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHCXxCwx IK/qu9V80sFnwiGlh2pveqJH6dY2aBLnEQRx2S5TD1E4gwvlnS27/JywDKt1NFie nYVrGRVrvgj1oAsZZvcyLhtOeP6Wtw7dlnkOzxpQS7mxT9zRFPQw3V93Pncr5aad PZ0R1HmV0Zyb1SCDOtnwvpgRzfnFEwhtBHlzFiwMzjdn4HnGl/LO+k8HbuOlGHiV KIN0keVlWZOfk8M+NN+CR2x2JED2CnWsb65jQMfhlwrEXhwFIWHAPQev3yz/uOnH dsCGKUvNsR5WT1NM0JfCkt28xsETrfZ1WHgiCZa5/3ZVt5uno6AKgDZS62Ft96BR kamkakF6HX/Vjw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:28 2025 by rpki-client