This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json) Hash identifier: Q6tnsDnnLNFNp3cRmuCDrqRm3CwtkwjBj75GmjGZEwQ= Subject key identifier: B6:50:13:3A:BA:06:57:A0:00:FA:31:74:75:41:D2:67:71:5B:71:54 Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2 Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2 Certificate serial: 019AF12E5C0CCE5119F5E60EBC82C9A08FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 01:02:18 +0000 Manifest this update: Sat 06 Dec 2025 01:02:18 +0000 Manifest next update: Sun 07 Dec 2025 01:02:18 +0000 Files and hashes: 1: I32dN6KwFoewNSfpS4XBjG5myXU.roa (hash: PHYrnIWI7dP/AROY19OnK6Q0ENbOWp8OyZchyzmlbds=) 2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: xx30weiAeO8ot5yWSiyR0eu41IvThksIcyN8o16G8NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5c:0c:ce:51:19:f5:e6:0e:bc:82:c9:a0:8f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2 Validity Not Before: Dec 6 01:02:18 2025 GMT Not After : Dec 7 01:02:18 2025 GMT Subject: CN=b650133aba0657a000fa31747541d267715b7154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:19:f1:6b:3f:ec:65:c8:ca:c2:37:50:92: f0:d6:6a:6b:6c:af:98:5d:3f:cf:12:07:47:dc:66: f8:40:c4:27:0c:c7:5c:58:f9:2a:52:79:0c:17:07: 2f:ba:ad:e6:7d:b8:36:af:5a:19:f5:49:61:8e:55: f8:40:d1:28:ac:a5:22:b8:36:53:5b:f5:e3:30:d0: 1f:c7:d0:96:53:41:7a:4c:f3:98:90:f1:89:41:76: 3f:3b:35:f8:f1:b0:72:c9:68:54:5e:7d:92:50:91: 59:8a:a9:35:35:c4:2e:06:21:90:06:5a:01:45:b0: e2:81:f9:bc:5d:67:38:1a:72:8c:9b:08:f5:0c:e5: a6:5c:95:b9:9e:f5:8c:7d:01:8a:13:98:10:da:3f: 40:13:e8:b3:cf:f9:5f:06:a2:63:c2:eb:ae:22:dc: b6:13:21:d5:fb:d8:53:a4:f7:7d:63:10:77:24:20: 44:18:3b:a8:ce:62:de:05:b3:02:47:70:3d:74:e8: 1b:df:01:a8:be:d9:8c:a3:7c:e5:eb:2a:7a:20:a9: 33:3c:38:d5:65:10:9f:fb:ef:99:c7:85:ee:ba:6d: 5d:d9:3f:79:71:cb:bf:d5:09:05:af:b8:6a:0f:cc: 29:ac:8f:38:f4:35:91:3e:ea:0f:36:cf:92:19:cb: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:50:13:3A:BA:06:57:A0:00:FA:31:74:75:41:D2:67:71:5B:71:54 X509v3 Authority Key Identifier: keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4d:f7:2b:f6:74:a0:a9:f6:7a:72:a5:a0:f2:4c:a8:85:a0: 74:98:47:fd:6f:87:54:77:b9:f1:3b:dd:0c:2d:49:cb:a0:04: 03:cf:c1:d1:36:2e:00:b6:1a:66:5a:5b:ca:eb:c8:b8:87:ea: 90:b7:89:3b:c8:3e:cd:3f:91:03:5f:c0:61:75:3f:42:1b:62: 06:00:ac:ad:6f:80:73:81:42:ef:96:b6:a6:80:4b:a3:a4:43: d0:e3:c4:57:75:b8:21:fa:9c:2a:71:59:e1:39:f9:a7:ba:0a: 73:07:63:95:0d:53:cc:06:f7:79:8f:20:c2:2c:97:51:f5:cb: c1:15:e1:52:dd:66:e9:40:d4:4a:3b:50:a4:f6:9b:2b:7b:b6: 9d:f0:19:8c:2d:75:bb:78:71:af:35:1f:41:0f:c3:e4:85:23: 3a:fd:a2:92:7f:da:0f:a9:58:98:7b:6f:fb:0f:4b:84:00:d2: c9:16:ed:d0:1a:e9:27:bc:42:96:46:74:19:4a:85:de:bf:7d: e2:e5:f2:7f:94:e6:2f:c2:d9:35:37:f4:7b:43:a0:cb:c4:14: 7b:8c:a9:69:54:24:7f:fd:9a:14:9b:15:34:58:e3:5e:b5:d2: 41:43:e8:f3:86:b7:05:af:f2:63:93:e1:7d:5a:6b:db:6f:07: 58:17:e3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlwMzlEZ9eYOvILJoI/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjU4NTI3ODAxNDJlNDEzZjlmMTViMjRkNTk5MTMzMTFh MTBlYzIwHhcNMjUxMjA2MDEwMjE4WhcNMjUxMjA3MDEwMjE4WjAzMTEwLwYDVQQD EyhiNjUwMTMzYWJhMDY1N2EwMDBmYTMxNzQ3NTQxZDI2NzcxNWI3MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWcZ8Ws/7GXIysI3UJLw1mprbK+Y XT/PEgdH3Gb4QMQnDMdcWPkqUnkMFwcvuq3mfbg2r1oZ9UlhjlX4QNEorKUiuDZT W/XjMNAfx9CWU0F6TPOYkPGJQXY/OzX48bByyWhUXn2SUJFZiqk1NcQuBiGQBloB RbDigfm8XWc4GnKMmwj1DOWmXJW5nvWMfQGKE5gQ2j9AE+izz/lfBqJjwuuuIty2 EyHV+9hTpPd9YxB3JCBEGDuozmLeBbMCR3A9dOgb3wGovtmMo3zl6yp6IKkzPDjV ZRCf+++Zx4Xuum1d2T95ccu/1QkFr7hqD8wprI849DWRPuoPNs+SGcueRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZQEzq6BlegAPoxdHVB0mdxW3FUMB8GA1UdIwQY MBaAFP+1hSeAFC5BP58Vsk1ZkTMRoQ7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdXRko0QVVMa0VfbnhXeVRWbVJNeEdoRHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82NGI2YjQtN2NlMi00YzhiLTg1ODUt ZWQwOTJkYmM3MmIzLzEvXzdXRko0QVVMa0VfbnhXeVRWbVJNeEdoRHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS82NGI2YjQtN2NlMi00YzhiLTg1ODUtZWQwOTJkYmM3MmIz LzEvXzdXRko0QVVMa0VfbnhXeVRWbVJNeEdoRHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk33K/Z0 oKn2enKloPJMqIWgdJhH/W+HVHe58TvdDC1Jy6AEA8/B0TYuALYaZlpbyuvIuIfq kLeJO8g+zT+RA1/AYXU/QhtiBgCsrW+Ac4FC75a2poBLo6RD0OPEV3W4IfqcKnFZ 4Tn5p7oKcwdjlQ1TzAb3eY8gwiyXUfXLwRXhUt1m6UDUSjtQpPabK3u2nfAZjC11 u3hxrzUfQQ/D5IUjOv2ikn/aD6lYmHtv+w9LhADSyRbt0BrpJ7xClkZ0GUqF3r99 4uXyf5TmL8LZNTf0e0Ogy8QUe4ypaVQkf/2aFJsVNFjjXrXSQUPo84a3Ba/yY5Ph fVpr228HWBfj9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:17 2025 by rpki-client