This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft File: f7UOfTt_0olM-3DklGCLMgzCFcE.mft (raw, json) Hash identifier: DeqIUBBefWLKOgmOZZ7FBchlyGvL1EaV0odNpE46Gb0= Subject key identifier: 30:8C:2B:F2:D9:F2:0A:09:10:49:D5:E1:CB:61:6A:57:91:85:7D:BC Authority key identifier: 7F:B5:0E:7D:3B:7F:D2:89:4C:FB:70:E4:94:60:8B:32:0C:C2:15:C1 Certificate issuer: /CN=7fb50e7d3b7fd2894cfb70e494608b320cc215c1 Certificate serial: 019AF0BF3F0CA6F7D79D9A1C2FABCD1FA489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft Manifest number: 75 Signing time: Fri 05 Dec 2025 23:00:56 +0000 Manifest this update: Fri 05 Dec 2025 23:00:56 +0000 Manifest next update: Sat 06 Dec 2025 23:00:56 +0000 Files and hashes: 1: f7UOfTt_0olM-3DklGCLMgzCFcE.crl (hash: wXOnE+f8GlmRzxXJJ/m8cJ1mtriixH7fVOmKGhENzPQ=) 2: oclKHAtmoA9vP-ZCW-nXoVl95RM.roa (hash: xxuHEbUOU/3xe58FFQOG42uiHerR1Ojst9xa4iCrTKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3f:0c:a6:f7:d7:9d:9a:1c:2f:ab:cd:1f:a4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fb50e7d3b7fd2894cfb70e494608b320cc215c1 Validity Not Before: Dec 5 23:00:56 2025 GMT Not After : Dec 6 23:00:56 2025 GMT Subject: CN=308c2bf2d9f20a091049d5e1cb616a5791857dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:36:6f:4c:b5:ad:04:98:33:62:c6:25:1f: 9f:00:9e:c0:d7:ee:3e:f5:81:02:e6:dc:fb:8d:bf: b2:9a:82:15:a4:64:05:b0:b4:0e:cd:64:10:47:31: 52:f0:d8:42:e3:d7:84:3d:3c:00:ae:25:be:9b:35: 73:62:25:14:ae:05:cd:ad:93:10:30:05:31:28:7d: 25:11:07:ba:db:7e:ee:67:8e:d6:35:79:01:7a:7f: 4c:19:3c:b4:3c:57:35:37:6e:17:15:56:a9:5e:e0: 91:8b:dd:97:ef:5e:5d:d7:ca:30:35:b7:c3:5c:00: cb:87:b7:07:df:33:19:08:19:52:22:98:3e:d8:d3: 58:3b:64:68:70:58:05:79:6c:c5:ff:82:8b:d9:63: 5f:9e:fe:f3:0e:9e:dd:95:eb:83:67:4a:bb:72:d6: c2:49:6d:ef:6c:07:8a:c4:cd:51:e7:7b:50:ed:88: fe:01:1b:a4:fb:1c:8d:6a:45:21:35:d5:7f:a8:92: 12:f5:c7:de:00:0c:25:b7:e7:e7:3a:d3:1a:fb:fd: 65:1a:42:a5:93:40:2d:ac:9e:5f:ab:6b:d6:6c:4d: 0a:ad:23:b0:c2:e4:11:05:db:86:84:c5:b0:f2:81: 3c:87:50:ed:21:c5:e6:bb:aa:b8:fa:cd:cc:bb:57: 45:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8C:2B:F2:D9:F2:0A:09:10:49:D5:E1:CB:61:6A:57:91:85:7D:BC X509v3 Authority Key Identifier: keyid:7F:B5:0E:7D:3B:7F:D2:89:4C:FB:70:E4:94:60:8B:32:0C:C2:15:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:95:f1:96:57:f3:6c:7a:8d:81:0e:4f:fc:0d:41:36:95:d5: 7d:fb:21:b6:d0:8f:1b:36:e3:24:1b:d0:9b:be:e8:07:27:42: f6:8e:b1:aa:56:63:f9:c5:98:66:68:79:b5:6a:fa:1f:0e:66: 18:3b:14:e7:2c:38:b5:8c:d3:48:57:f6:46:de:98:ed:ff:c1: b1:84:db:b8:0a:db:a2:ab:8d:31:70:13:24:9c:d8:c4:84:2b: d2:7d:35:09:8b:75:49:47:d8:cf:f2:a8:1a:42:85:4d:b5:64: 94:6a:98:9c:47:f1:7f:db:fd:ea:a3:6d:14:b6:2d:17:18:8c: 0f:54:a4:78:f3:b3:92:d4:3c:be:28:9a:86:64:4b:a2:5b:bf: af:af:62:a1:4c:7e:85:de:19:b9:00:8a:c7:a3:55:9c:39:95: 62:1f:ba:b9:6c:27:e1:d2:e6:5d:f0:e9:01:de:92:e6:ee:26: f2:5e:e7:32:4c:5e:b5:f0:38:89:12:43:e8:db:6a:5d:76:a4: a5:aa:47:89:d7:19:fa:ff:54:f7:0e:8c:97:5f:91:8c:e1:5a: f4:fe:d8:a9:f9:95:d1:db:1d:de:8e:37:90:4d:bf:9e:56:2f: 28:71:c2:c1:09:6a:c4:38:dd:0b:c8:1d:93:bc:8f:80:d6:b3: 92:08:eb:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvz8MpvfXnZocL6vNH6SJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYjUwZTdkM2I3ZmQyODk0Y2ZiNzBlNDk0NjA4YjMyMGNj MjE1YzEwHhcNMjUxMjA1MjMwMDU2WhcNMjUxMjA2MjMwMDU2WjAzMTEwLwYDVQQD EygzMDhjMmJmMmQ5ZjIwYTA5MTA0OWQ1ZTFjYjYxNmE1NzkxODU3ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw502b0y1rQSYM2LGJR+fAJ7A1+4+ 9YEC5tz7jb+ymoIVpGQFsLQOzWQQRzFS8NhC49eEPTwAriW+mzVzYiUUrgXNrZMQ MAUxKH0lEQe6237uZ47WNXkBen9MGTy0PFc1N24XFVapXuCRi92X715d18owNbfD XADLh7cH3zMZCBlSIpg+2NNYO2RocFgFeWzF/4KL2WNfnv7zDp7dleuDZ0q7ctbC SW3vbAeKxM1R53tQ7Yj+ARuk+xyNakUhNdV/qJIS9cfeAAwlt+fnOtMa+/1lGkKl k0AtrJ5fq2vWbE0KrSOwwuQRBduGhMWw8oE8h1DtIcXmu6q4+s3Mu1dFqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCMK/LZ8goJEEnV4cthaleRhX28MB8GA1UdIwQY MBaAFH+1Dn07f9KJTPtw5JRgizIMwhXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjdVT2ZUdF8wb2xNLTNEa2xHQ0xNZ3pDRmNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hOTE4Y2ItMjA0NC00ZjFjLTk3MDAt OTM2MDFhMzRmNjJmLzEvZjdVT2ZUdF8wb2xNLTNEa2xHQ0xNZ3pDRmNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hOTE4Y2ItMjA0NC00ZjFjLTk3MDAtOTM2MDFhMzRmNjJm LzEvZjdVT2ZUdF8wb2xNLTNEa2xHQ0xNZ3pDRmNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZXxllfz bHqNgQ5P/A1BNpXVffshttCPGzbjJBvQm77oBydC9o6xqlZj+cWYZmh5tWr6Hw5m GDsU5yw4tYzTSFf2Rt6Y7f/BsYTbuArboquNMXATJJzYxIQr0n01CYt1SUfYz/Ko GkKFTbVklGqYnEfxf9v96qNtFLYtFxiMD1SkePOzktQ8viiahmRLolu/r69ioUx+ hd4ZuQCKx6NVnDmVYh+6uWwn4dLmXfDpAd6S5u4m8l7nMkxetfA4iRJD6NtqXXak papHidcZ+v9U9w6Ml1+RjOFa9P7YqfmV0dsd3o43kE2/nlYvKHHCwQlqxDjdC8gd k7yPgNazkgjrDA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:19 2025 by rpki-client