This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json) Hash identifier: my4BjcQ+IRFdsSw4EnEqRjwoUZjLTq9nNxpGPwiP5ss= Subject key identifier: A7:7C:F2:68:F5:D4:CA:8D:2D:A2:1B:4E:FA:E5:A2:70:CB:A2:F0:C0 Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a Certificate serial: 019AF12CD718DF776AE6A0B5682322E7F651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: qj6uIcK2WXZfbFEBPeS44I6lSD/Oz42r96oFGFapxZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d7:18:df:77:6a:e6:a0:b5:68:23:22:e7:f6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=a77cf268f5d4ca8d2da21b4efae5a270cba2f0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:6e:e4:ee:c5:8e:06:73:96:ec:14:cf:d9: 30:8b:d8:9b:19:6e:31:56:bd:24:50:d8:3d:af:29: ab:ad:a5:77:5d:a6:15:2a:33:8c:10:98:9d:a5:9e: c6:65:6d:5d:48:ad:2d:27:da:d8:30:23:ae:0f:09: a9:48:47:1e:69:29:f4:04:d5:64:35:47:24:58:2e: 9e:89:84:e8:7e:97:ba:36:72:a7:3f:89:ab:48:51: d6:fb:ea:db:54:98:73:36:f4:0c:77:37:87:47:bf: 22:8a:ea:97:fc:ad:29:a0:a8:fa:c9:2a:c9:00:e2: 3c:c3:25:4f:25:44:fc:fb:e5:73:0d:a8:56:d3:e4: 0a:67:a0:04:7f:49:04:2d:33:91:9a:91:d8:d7:c9: 28:0f:15:95:31:4d:c2:14:f5:de:9c:49:87:17:5c: ee:8b:a0:e0:b5:d2:09:b3:35:7b:2d:1c:71:a9:f6: 27:7a:90:4f:17:3e:31:9b:45:fb:30:66:fb:7e:6d: f2:41:1f:fd:d3:bd:c7:50:52:af:2f:c6:a7:6f:dd: 49:22:ee:d4:70:8b:cb:99:0a:d7:b5:89:93:c3:df: 64:ed:ae:62:41:c5:c6:5f:fb:4e:4e:89:d6:82:55: 33:a6:0b:49:4c:00:93:66:54:c4:86:22:b1:28:6c: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7C:F2:68:F5:D4:CA:8D:2D:A2:1B:4E:FA:E5:A2:70:CB:A2:F0:C0 X509v3 Authority Key Identifier: keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:38:4f:56:0a:17:c0:91:4a:e8:8c:17:a3:c2:44:ea:37:08: b5:47:25:96:fc:19:a0:08:e2:22:48:50:c5:3a:c2:99:48:80: 42:65:17:1e:a7:b4:19:3a:3d:d8:ba:cd:31:fb:50:d4:1b:c3: 01:c0:b2:66:24:df:69:9b:e5:fb:c1:10:36:15:2b:42:3f:04: 43:d9:3f:36:ca:54:7a:46:53:72:74:6c:c5:25:80:ab:df:ac: 93:36:cc:95:ed:9a:7b:ae:49:e0:39:f9:bf:e3:05:d0:80:d1: 4c:8d:f7:8b:58:9a:0e:35:f9:3b:f2:33:b0:d1:18:6b:9f:03: cf:82:88:fd:28:de:98:20:6b:a7:0e:5f:1b:a5:b6:61:cd:0b: eb:2e:2b:8f:15:c0:65:e2:ca:21:9c:db:76:99:0b:4c:2b:9a: 88:ba:a3:4d:25:9e:95:b8:d6:ea:12:1b:7f:9c:db:09:ff:da: 23:76:71:b1:0d:a4:a6:26:ca:8f:31:18:b5:44:de:6e:db:ad: 0a:07:9a:87:8b:22:ae:84:04:11:02:98:cc:c8:43:34:08:89: 17:24:aa:94:8c:3c:16:b5:67:1b:c3:99:8d:cc:6f:3f:46:31: b5:a1:ad:12:b2:58:4d:0a:f6:9b:18:e9:61:f3:7d:67:65:7f: 12:aa:df:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNcY33dq5qC1aCMi5/ZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYmNhYmYwN2MxOWM4YTIwYTc2OWFhODI5MDcxYWIzMzgy ZjU4OGEwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD EyhhNzdjZjI2OGY1ZDRjYThkMmRhMjFiNGVmYWU1YTI3MGNiYTJmMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHdu5O7FjgZzluwUz9kwi9ibGW4x Vr0kUNg9rymrraV3XaYVKjOMEJidpZ7GZW1dSK0tJ9rYMCOuDwmpSEceaSn0BNVk NUckWC6eiYTofpe6NnKnP4mrSFHW++rbVJhzNvQMdzeHR78iiuqX/K0poKj6ySrJ AOI8wyVPJUT8++VzDahW0+QKZ6AEf0kELTORmpHY18koDxWVMU3CFPXenEmHF1zu i6DgtdIJszV7LRxxqfYnepBPFz4xm0X7MGb7fm3yQR/9073HUFKvL8anb91JIu7U cIvLmQrXtYmTw99k7a5iQcXGX/tOTonWglUzpgtJTACTZlTEhiKxKGzBNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd88mj11MqNLaIbTvrlonDLovDAMB8GA1UdIwQY MBaAFG+8q/B8GciiCnaaqCkHGrM4L1iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zNjRkM2UtYTQ0ZC00NDZhLTgyZWUt NjVkOWU0NjExMjcwLzEvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zNjRkM2UtYTQ0ZC00NDZhLTgyZWUtNjVkOWU0NjExMjcw LzEvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfThPVgoX wJFK6IwXo8JE6jcItUcllvwZoAjiIkhQxTrCmUiAQmUXHqe0GTo92LrNMftQ1BvD AcCyZiTfaZvl+8EQNhUrQj8EQ9k/NspUekZTcnRsxSWAq9+skzbMle2ae65J4Dn5 v+MF0IDRTI33i1iaDjX5O/IzsNEYa58Dz4KI/SjemCBrpw5fG6W2Yc0L6y4rjxXA ZeLKIZzbdpkLTCuaiLqjTSWelbjW6hIbf5zbCf/aI3ZxsQ2kpibKjzEYtUTebtut Cgeah4siroQEEQKYzMhDNAiJFySqlIw8FrVnG8OZjcxvP0YxtaGtErJYTQr2mxjp YfN9Z2V/Eqrfdw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:27 2025 by rpki-client