This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json) Hash identifier: FjrmC5IKZgZgpujxQN3QMGu4IASnAMITRKjeruSXpxE= Subject key identifier: 58:CE:96:B1:BB:DF:A5:86:6E:F3:19:9F:F0:AD:58:5C:FA:08:82:E6 Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66 Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166 Certificate serial: 019AF2AD869FA6FF26233E1063E00A7AD73B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=) 2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: 1LmHzw2idyTItSpHvSB7EczSuyG3SRHgAj0ubg0XuWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:86:9f:a6:ff:26:23:3e:10:63:e0:0a:7a:d7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166 Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=58ce96b1bbdfa5866ef3199ff0ad585cfa0882e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:1c:8e:c4:65:68:94:59:2c:74:0c:0e:6a: 0c:ba:a4:7f:30:5b:ed:91:43:28:17:36:5b:7b:f9: 7f:56:e6:fa:95:d5:53:15:f2:cc:b4:f6:a2:32:15: 77:10:4f:b8:0c:03:2c:bb:ab:ce:ad:62:e9:74:02: 33:8d:4b:12:b2:18:e3:2f:79:6a:b0:3c:e2:b4:f7: 57:02:3a:4a:cb:01:2b:f0:38:9e:61:e6:eb:cd:e9: 97:b2:9c:9a:d2:54:9b:2f:02:c0:36:37:cb:ac:ac: e8:39:4a:6a:14:e4:82:60:56:69:a6:da:ca:35:98: df:71:f9:30:4b:b4:be:45:82:01:a3:e2:4f:14:8c: 7b:e5:23:4b:3f:66:3d:7b:06:60:ed:67:b2:45:6a: ac:95:21:38:af:b8:b1:4b:79:45:f1:d7:63:d0:d3: 53:39:9a:64:2a:47:1b:09:9b:ea:90:dc:b0:08:cb: 53:73:76:34:8e:0b:a7:c7:a9:75:02:ab:2b:80:0c: 5d:f5:97:0b:43:44:c9:e9:e0:37:9e:3c:1e:41:c5: a7:7a:01:ee:de:15:f8:3d:6e:35:e0:5b:de:ab:30: e2:26:8e:b9:a2:04:28:18:8a:3f:b3:0b:14:a8:c8: 98:4b:e5:72:04:67:44:90:bd:c4:49:46:09:52:a5: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CE:96:B1:BB:DF:A5:86:6E:F3:19:9F:F0:AD:58:5C:FA:08:82:E6 X509v3 Authority Key Identifier: keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:60:a9:07:de:2f:81:50:ea:25:84:c4:e3:6a:ee:8d:a9:17: d2:76:d5:42:f4:bd:c9:77:62:2f:1f:69:54:be:1f:ef:86:aa: 31:77:16:11:0e:6b:36:68:c8:7e:90:43:18:82:f9:9e:f0:f0: a9:a4:9b:2b:b3:7f:08:bc:53:29:8e:1e:b1:72:cb:39:32:73: c3:ac:40:83:53:50:32:b2:42:6a:28:ba:aa:b7:04:db:55:08: 29:ad:3d:fa:8e:94:48:22:9b:a9:f6:6e:aa:4a:61:fb:be:58: 58:4a:e0:9f:9b:96:d2:58:51:98:40:0a:ed:52:e1:62:8f:2c: 04:20:81:01:e6:2b:2f:48:6e:c9:28:4a:90:31:fb:ff:67:2e: 92:dd:4f:24:4a:2e:27:ae:df:2e:06:cd:bf:07:3c:d2:5a:35: 55:ac:f4:52:29:61:e7:aa:8a:33:c8:bf:0d:0c:80:49:f8:6b: d8:24:6e:46:de:df:4d:42:4e:b2:ad:0d:4d:73:4c:a2:4c:06: b3:77:61:30:59:b8:00:f2:7b:9d:85:f2:b1:07:94:1d:90:de: 0b:f5:40:e5:da:6a:0b:0c:0d:8e:25:8c:21:20:83:fb:2e:f9: 46:af:ec:47:2d:31:5c:95:10:e5:5e:99:52:2c:c8:e9:25:06: 20:a0:e3:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYafpv8mIz4QY+AKetc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZGVjN2IyZTlmODY2ZWFjMzZiYzMxY2E0YzRmZjYyZDUz ZGQxNjYwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD Eyg1OGNlOTZiMWJiZGZhNTg2NmVmMzE5OWZmMGFkNTg1Y2ZhMDg4MmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf0cjsRlaJRZLHQMDmoMuqR/MFvt kUMoFzZbe/l/Vub6ldVTFfLMtPaiMhV3EE+4DAMsu6vOrWLpdAIzjUsSshjjL3lq sDzitPdXAjpKywEr8DieYebrzemXspya0lSbLwLANjfLrKzoOUpqFOSCYFZpptrK NZjfcfkwS7S+RYIBo+JPFIx75SNLP2Y9ewZg7WeyRWqslSE4r7ixS3lF8ddj0NNT OZpkKkcbCZvqkNywCMtTc3Y0jgunx6l1AqsrgAxd9ZcLQ0TJ6eA3njweQcWnegHu 3hX4PW414FveqzDiJo65ogQoGIo/swsUqMiYS+VyBGdEkL3ESUYJUqXJZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjOlrG736WGbvMZn/CtWFz6CILmMB8GA1UdIwQY MBaAFGzex7Lp+Gbqw2vDHKTE/2LVPdFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDIt NGU2N2JlNGU0MzJlLzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDItNGU2N2JlNGU0MzJl LzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2CpB94v gVDqJYTE42rujakX0nbVQvS9yXdiLx9pVL4f74aqMXcWEQ5rNmjIfpBDGIL5nvDw qaSbK7N/CLxTKY4esXLLOTJzw6xAg1NQMrJCaii6qrcE21UIKa09+o6USCKbqfZu qkph+75YWErgn5uW0lhRmEAK7VLhYo8sBCCBAeYrL0huyShKkDH7/2cukt1PJEou J67fLgbNvwc80lo1Vaz0Uilh56qKM8i/DQyASfhr2CRuRt7fTUJOsq0NTXNMokwG s3dhMFm4APJ7nYXysQeUHZDeC/VA5dpqCwwNjiWMISCD+y75Rq/sRy0xXJUQ5V6Z UizI6SUGIKDjWA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:38 2025 by rpki-client