This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json) Hash identifier: ZZ4qGRaWgIirSgzQFVmGN2v0drTmT0UeqjF16bif3D4= Subject key identifier: AD:5A:57:9E:18:79:C9:51:C4:73:7B:28:35:E1:B9:48:19:54:48:ED Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f Certificate serial: 019AF2ADDD1614E79B9CB1DCF72B83AA92A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:01:11 +0000 Manifest this update: Sat 06 Dec 2025 08:01:11 +0000 Manifest next update: Sun 07 Dec 2025 08:01:11 +0000 Files and hashes: 1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=) 2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: gNwQk1EYKhYD5C4y4k+Vyk4dgNdrvdrR+TVt0YTLfQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:dd:16:14:e7:9b:9c:b1:dc:f7:2b:83:aa:92:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f Validity Not Before: Dec 6 08:01:11 2025 GMT Not After : Dec 7 08:01:11 2025 GMT Subject: CN=ad5a579e1879c951c4737b2835e1b948195448ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:50:3f:15:11:2c:4a:89:4d:06:e0:e2:17: ec:56:85:f4:4f:57:95:05:11:6a:bf:3d:c5:41:de: dd:34:2d:4a:c4:f4:9d:a7:f4:7c:31:0f:ad:e2:c9: d1:e9:cb:40:31:c4:76:d5:aa:c8:1e:1b:5c:05:46: eb:8b:a6:a5:a1:3b:6d:a8:74:be:38:55:0c:b8:3a: 7c:99:7b:c3:85:32:d9:ec:f8:55:38:3f:42:8d:5a: 3c:08:b3:67:45:d7:36:bb:93:06:3a:57:b5:77:04: a1:5e:b2:2c:d9:17:cb:87:43:c6:20:5b:26:19:f6: b7:d5:0f:38:b6:d7:f9:51:1d:73:d0:88:5f:6a:84: 25:5b:99:8c:a9:d3:07:7e:a2:13:f6:f0:60:d1:fe: 34:7a:a4:a0:9f:03:46:a5:e0:6b:fb:11:43:f1:e9: 71:89:2c:2a:54:12:0e:91:11:1c:0b:66:bc:2e:87: 30:ca:af:03:70:fb:2e:b2:41:93:71:a0:12:c1:0f: 99:1e:eb:3d:9d:0e:92:eb:14:ee:62:cd:ae:3c:4b: e3:89:5a:eb:0c:e9:70:c9:b9:98:f2:4b:f0:47:ee: 69:30:6f:f6:02:dc:ec:fa:e3:64:de:ce:e6:f7:60: 2d:c2:fc:cc:bb:17:1d:0f:92:82:63:a3:82:cd:b3: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5A:57:9E:18:79:C9:51:C4:73:7B:28:35:E1:B9:48:19:54:48:ED X509v3 Authority Key Identifier: keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:07:28:ad:09:47:74:2b:da:e7:fb:50:3d:31:70:3c:26:89: fa:44:65:1f:50:1b:6b:02:39:e6:04:43:77:2c:c2:44:19:b4: bc:fa:3f:4b:a8:09:1b:63:4b:65:e2:cf:ef:65:75:45:32:eb: e8:82:c7:93:eb:72:cf:a1:1a:6e:7a:45:6b:96:3f:2c:00:11: 13:1e:b9:4e:de:7c:b1:db:13:c4:64:22:0b:34:e7:17:8b:81: b7:66:89:da:4e:27:be:58:1e:44:08:92:63:3a:75:a1:ef:a2: 5a:eb:0c:f4:f0:68:13:b7:67:fe:ea:55:a8:ac:5f:f6:98:63: a4:fd:1d:27:fd:20:8e:be:ea:c6:e8:1d:6a:2c:4a:a0:0b:04: ac:84:d4:12:05:17:9e:7c:c7:b9:da:db:1c:32:43:f5:29:aa: e7:ca:40:6f:cf:74:b3:26:42:26:e4:70:e5:b5:7f:ce:00:74: ed:b9:97:ab:a7:07:e7:50:84:29:9d:93:54:43:9e:4b:0f:b7: 36:ec:e2:25:4e:5c:a1:a6:d0:22:02:ca:89:ef:97:e4:f0:e2: 47:18:97:e3:fd:d8:52:3c:95:7a:bc:4f:b7:5b:22:84:8b:6a: 05:db:78:39:32:1e:5d:5d:22:db:22:e0:57:1f:5e:05:bb:2e: 89:49:c4:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrd0WFOebnLHc9yuDqpKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWVjNGU1OGJkNDRlYmFjNzg5NTQ4ZjMxOWU2OWNjOWE1 MzIxMWYwHhcNMjUxMjA2MDgwMTExWhcNMjUxMjA3MDgwMTExWjAzMTEwLwYDVQQD EyhhZDVhNTc5ZTE4NzljOTUxYzQ3MzdiMjgzNWUxYjk0ODE5NTQ0OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopJQPxURLEqJTQbg4hfsVoX0T1eV BRFqvz3FQd7dNC1KxPSdp/R8MQ+t4snR6ctAMcR21arIHhtcBUbri6aloTttqHS+ OFUMuDp8mXvDhTLZ7PhVOD9CjVo8CLNnRdc2u5MGOle1dwShXrIs2RfLh0PGIFsm Gfa31Q84ttf5UR1z0IhfaoQlW5mMqdMHfqIT9vBg0f40eqSgnwNGpeBr+xFD8elx iSwqVBIOkREcC2a8Locwyq8DcPsuskGTcaASwQ+ZHus9nQ6S6xTuYs2uPEvjiVrr DOlwybmY8kvwR+5pMG/2Atzs+uNk3s7m92AtwvzMuxcdD5KCY6OCzbNLoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1aV54YeclRxHN7KDXhuUgZVEjtMB8GA1UdIwQY MBaAFLUexOWL1E66x4lUjzGeacyaUyEfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jYjg5MzAtYzA2My00MWUyLTgwNWQt YTdlNGJiNDE1Y2ZlLzEvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jYjg5MzAtYzA2My00MWUyLTgwNWQtYTdlNGJiNDE1Y2Zl LzEvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQcorQlH dCva5/tQPTFwPCaJ+kRlH1AbawI55gRDdyzCRBm0vPo/S6gJG2NLZeLP72V1RTLr 6ILHk+tyz6EabnpFa5Y/LAAREx65Tt58sdsTxGQiCzTnF4uBt2aJ2k4nvlgeRAiS Yzp1oe+iWusM9PBoE7dn/upVqKxf9phjpP0dJ/0gjr7qxugdaixKoAsErITUEgUX nnzHudrbHDJD9Smq58pAb890syZCJuRw5bV/zgB07bmXq6cH51CEKZ2TVEOeSw+3 NuziJU5coabQIgLKie+X5PDiRxiX4/3YUjyVerxPt1sihItqBdt4OTIeXV0i2yLg Vx9eBbsuiUnEIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:31 2025 by rpki-client