This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json) Hash identifier: KBPpBGMWAZqPSTiqTuNm9ZZteAzKz3R9YJthJiio7wo= Subject key identifier: 6C:B9:5C:87:E5:ED:DA:7D:72:E9:91:BB:43:65:35:D4:5F:70:73:EA Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84 Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084 Certificate serial: 019AF352971FAE2A4F59314A2F9CB72436B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft Manifest number: 09CC Signing time: Sat 06 Dec 2025 11:01:07 +0000 Manifest this update: Sat 06 Dec 2025 11:01:07 +0000 Manifest next update: Sun 07 Dec 2025 11:01:07 +0000 Files and hashes: 1: 5yM7l9glO5Y_kZZbeV1PY4oF4AI.roa (hash: Zrq7WRCOd9AEwWRm5k4u/56c3wqE+RlRfF9EKNORqJM=) 2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: nZYQ0cqitMarv0BSRt2P62rviABxsVzmPKmictdn/+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:97:1f:ae:2a:4f:59:31:4a:2f:9c:b7:24:36:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084 Validity Not Before: Dec 6 11:01:07 2025 GMT Not After : Dec 7 11:01:07 2025 GMT Subject: CN=6cb95c87e5edda7d72e991bb436535d45f7073ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:2c:50:09:7f:70:22:ba:5c:08:4f:6e:8a: 7b:98:7d:73:3b:62:43:50:dd:e0:7b:cd:38:04:31: eb:55:4c:38:23:35:ee:f0:b9:da:e3:08:1c:3f:03: 6c:61:41:3d:d0:ce:56:e1:79:79:95:53:35:65:43: 28:8d:4e:94:9c:69:cf:e7:73:26:a7:65:99:60:55: 00:bd:d5:5b:10:92:63:62:48:8b:90:01:96:84:29: f3:ac:af:2e:fd:f9:6a:09:70:09:73:a8:4e:62:f5: 03:17:41:4f:6e:95:38:f4:d6:18:7c:4b:8b:8f:ae: 03:c9:5c:76:46:7c:0d:95:79:57:12:96:05:9d:81: 9e:3e:02:8a:2b:68:e8:96:25:05:88:9a:1e:d0:b0: dc:d3:6a:c3:13:ab:ea:38:8e:0b:b7:a7:7f:25:20: b2:cb:51:4f:38:be:5f:2c:8f:d4:73:32:2e:35:a0: 90:05:c9:e6:d7:e1:69:d3:76:13:82:8b:3c:8e:1f: eb:8c:09:36:ba:f5:1f:e1:27:6c:de:9a:a0:07:60: 13:5d:07:7f:cf:13:ef:b0:da:a6:5e:1c:19:67:9e: d0:5a:2c:07:d3:8d:d5:65:09:d9:40:01:54:48:ad: b5:1d:5b:66:d0:64:a8:f4:bf:be:dd:ae:ca:55:84: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B9:5C:87:E5:ED:DA:7D:72:E9:91:BB:43:65:35:D4:5F:70:73:EA X509v3 Authority Key Identifier: keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e1:a6:a6:64:b1:65:64:b5:8d:1d:0e:bc:76:0b:87:65:5a: 16:68:28:07:bd:5c:d7:70:d0:c2:4d:a1:7d:58:61:59:ba:48: e8:53:64:3d:40:a4:08:e6:64:b2:03:57:da:46:08:fd:13:58: 8f:67:4a:1e:58:41:c5:fd:9b:92:c1:2e:f9:8f:e0:b5:8f:0c: f0:44:00:a3:af:11:2f:7d:33:1c:8d:d7:fc:c1:67:2f:03:be: 2b:52:93:0e:ed:48:10:ff:06:0a:37:5f:ba:61:76:39:8f:f4: 23:d9:8c:7e:39:df:ff:1a:ad:20:c1:5e:85:0e:f7:e4:ff:50: 8b:77:02:69:65:1f:b4:d7:4f:6a:3b:12:47:0b:c9:6f:e4:db: 2e:d1:f9:16:29:47:6b:c2:90:9d:c4:00:46:57:17:66:3b:81: ac:95:20:58:0f:99:73:a2:2f:91:4c:69:26:b5:47:bb:04:bf: 83:fb:52:7a:65:78:48:5e:c7:94:86:51:09:c4:50:fe:68:9d: de:9c:f3:3d:78:4f:53:de:d1:af:b2:9c:13:b1:d3:52:0f:c4: 1b:f8:95:32:25:21:aa:63:46:c3:95:8d:df:2b:d9:0e:17:d7: 3c:e3:a1:d6:d4:88:3b:5c:da:f1:7d:64:2a:69:4f:41:44:3a: 35:ce:90:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpcfripPWTFKL5y3JDa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWVkM2QxYTFhMWUyODMwZDQxNmFmYTA0N2I5NTIyMGU4 MTQwODQwHhcNMjUxMjA2MTEwMTA3WhcNMjUxMjA3MTEwMTA3WjAzMTEwLwYDVQQD Eyg2Y2I5NWM4N2U1ZWRkYTdkNzJlOTkxYmI0MzY1MzVkNDVmNzA3M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5YsUAl/cCK6XAhPbop7mH1zO2JD UN3ge804BDHrVUw4IzXu8Lna4wgcPwNsYUE90M5W4Xl5lVM1ZUMojU6UnGnP53Mm p2WZYFUAvdVbEJJjYkiLkAGWhCnzrK8u/flqCXAJc6hOYvUDF0FPbpU49NYYfEuL j64DyVx2RnwNlXlXEpYFnYGePgKKK2joliUFiJoe0LDc02rDE6vqOI4Lt6d/JSCy y1FPOL5fLI/UczIuNaCQBcnm1+Fp03YTgos8jh/rjAk2uvUf4Sds3pqgB2ATXQd/ zxPvsNqmXhwZZ57QWiwH043VZQnZQAFUSK21HVtm0GSo9L++3a7KVYRb7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGy5XIfl7dp9cumRu0NlNdRfcHPqMB8GA1UdIwQY MBaAFEWu09GhoeKDDUFq+gR7lSIOgUCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYt MmM2OTk4NTM1OWMwLzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYtMmM2OTk4NTM1OWMw LzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuGmpmSx ZWS1jR0OvHYLh2VaFmgoB71c13DQwk2hfVhhWbpI6FNkPUCkCOZksgNX2kYI/RNY j2dKHlhBxf2bksEu+Y/gtY8M8EQAo68RL30zHI3X/MFnLwO+K1KTDu1IEP8GCjdf umF2OY/0I9mMfjnf/xqtIMFehQ735P9Qi3cCaWUftNdPajsSRwvJb+TbLtH5FilH a8KQncQARlcXZjuBrJUgWA+Zc6IvkUxpJrVHuwS/g/tSemV4SF7HlIZRCcRQ/mid 3pzzPXhPU97Rr7KcE7HTUg/EG/iVMiUhqmNGw5WN3yvZDhfXPOOh1tSIO1za8X1k KmlPQUQ6Nc6QtA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:07 2025 by rpki-client