This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft File: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft (raw, json) Hash identifier: nHzz8EZbF0kTMgD/c85lawTVWri/+nZULz3CKuc/Aqo= Subject key identifier: EF:B5:0B:DE:41:46:F1:32:1D:AA:67:9D:4D:9E:19:01:59:A5:B9:37 Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A Certificate issuer: /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a Certificate serial: 019AF352263EFD0EFA27F9AED189ABE35FF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 11:00:38 +0000 Manifest this update: Sat 06 Dec 2025 11:00:38 +0000 Manifest next update: Sun 07 Dec 2025 11:00:38 +0000 Files and hashes: 1: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl (hash: M9CgNnArku1Vn1mTiuHHWG3XuGzF8JbBr9r5MAxXJoQ=) 2: jvYIR4cGI1xTBTMHiHmlslGT8ss.roa (hash: XYWrze0y1RSFOkB9yC9oozCL7v1si1KQCdXxbKpu5VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:26:3e:fd:0e:fa:27:f9:ae:d1:89:ab:e3:5f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a Validity Not Before: Dec 6 11:00:38 2025 GMT Not After : Dec 7 11:00:38 2025 GMT Subject: CN=efb50bde4146f1321daa679d4d9e190159a5b937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:99:bf:cc:81:02:da:0a:7c:8a:f2:cc:fb: c4:e3:25:73:9f:5b:7a:46:4e:ad:b3:05:e9:10:22: 26:30:cf:ee:e8:56:20:b4:1a:fc:ff:89:c3:db:87: 23:e5:35:a5:8d:96:81:a3:30:a2:10:5b:7b:60:20: ff:ec:05:e1:1a:62:eb:9b:0e:c5:2d:0c:d2:91:91: 86:d1:a5:34:22:e6:c7:22:91:4b:74:f8:4e:28:37: 30:63:65:f9:52:f4:7d:61:51:30:49:15:29:c9:b4: 3c:19:c0:05:fb:e0:01:f6:1a:6e:30:16:e4:5c:09: 8a:b4:5e:98:9d:6c:c1:f6:f6:61:f8:14:9f:48:87: 0f:47:38:29:0c:74:fb:61:5e:3e:15:d1:ee:82:ef: 13:1e:3f:63:a1:67:85:2e:1a:25:a3:cf:47:96:19: 6f:a5:98:30:09:e0:74:bc:aa:ff:3b:20:8b:89:77: 97:b1:c8:66:ff:cf:8e:1c:aa:58:fa:ad:55:a7:40: 10:d8:89:f2:12:67:ab:0a:c4:99:4c:9e:47:b5:81: 9e:38:cb:27:21:67:48:82:68:35:49:24:be:90:85: f3:8a:0e:6c:49:18:7c:db:22:54:26:9c:03:8b:56: 69:3e:db:16:1d:b4:1b:ae:75:a5:40:f6:df:10:f3: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B5:0B:DE:41:46:F1:32:1D:AA:67:9D:4D:9E:19:01:59:A5:B9:37 X509v3 Authority Key Identifier: keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:48:1f:2c:41:65:1e:f3:f5:6c:1b:f8:4b:7b:3a:23:ae:ec: 3f:ca:33:13:5b:c2:53:89:85:9d:a7:a4:70:0a:b1:6c:c9:97: 07:4e:15:88:fa:fa:94:c3:22:46:e5:a6:43:a6:86:ed:bd:80: 92:3a:de:8f:ad:ad:2f:24:8f:9f:46:97:2f:30:7e:57:f1:48: 5c:12:b4:68:b2:18:29:0b:9f:ef:4c:1e:d3:24:27:f0:72:c6: f6:6d:9a:c4:1e:e7:c5:96:16:c4:62:32:d4:ca:3b:19:2b:78: f0:0f:6f:3f:36:7f:f2:d8:2f:36:22:e3:d9:a7:94:d2:b0:1a: b2:d1:5a:79:53:c1:3d:ef:32:f8:85:f9:28:12:e1:cb:f8:57: 65:eb:5a:0b:d2:70:2b:5f:ed:f9:41:46:a0:44:f9:df:92:9a: b3:3d:4b:19:96:81:a9:f4:ed:9b:a2:4d:39:65:65:7b:8c:f7: f6:85:6a:e5:65:64:09:ae:54:65:9b:ce:3f:eb:48:9e:91:c0: 68:af:bf:ed:da:af:2c:22:6d:f7:de:84:b4:90:39:06:c8:f9: 95:24:8f:90:42:87:cc:06:32:ba:2b:c8:da:1d:04:ef:9f:2e: ad:3f:7c:4b:6c:0b:51:ac:a0:fc:c9:7a:b8:02:af:28:84:df: f3:ea:d5:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUiY+/Q76J/mu0Ymr41/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlM2VjZmIzNTk5MzIxN2MzNjc0M2JjYWZhYTdiMDI1OWQy ZTQ3NmEwHhcNMjUxMjA2MTEwMDM4WhcNMjUxMjA3MTEwMDM4WjAzMTEwLwYDVQQD EyhlZmI1MGJkZTQxNDZmMTMyMWRhYTY3OWQ0ZDllMTkwMTU5YTViOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R6Zv8yBAtoKfIryzPvE4yVzn1t6 Rk6tswXpECImMM/u6FYgtBr8/4nD24cj5TWljZaBozCiEFt7YCD/7AXhGmLrmw7F LQzSkZGG0aU0IubHIpFLdPhOKDcwY2X5UvR9YVEwSRUpybQ8GcAF++AB9hpuMBbk XAmKtF6YnWzB9vZh+BSfSIcPRzgpDHT7YV4+FdHugu8THj9joWeFLholo89Hlhlv pZgwCeB0vKr/OyCLiXeXschm/8+OHKpY+q1Vp0AQ2InyEmerCsSZTJ5HtYGeOMsn IWdIgmg1SSS+kIXzig5sSRh82yJUJpwDi1ZpPtsWHbQbrnWlQPbfEPP3jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+1C95BRvEyHapnnU2eGQFZpbk3MB8GA1UdIwQY MBaAFP4+z7NZkyF8NnQ7yvqnsCWdLkdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2o3UHMxbVRJWHcyZER2Sy1xZXdKWjB1UjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iMmIyMjEtMmFlOS00NWNjLWFkMWUt ZmNkM2RlODY4NDMxLzEvX2o3UHMxbVRJWHcyZER2Sy1xZXdKWjB1UjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9iMmIyMjEtMmFlOS00NWNjLWFkMWUtZmNkM2RlODY4NDMx LzEvX2o3UHMxbVRJWHcyZER2Sy1xZXdKWjB1UjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUgfLEFl HvP1bBv4S3s6I67sP8ozE1vCU4mFnaekcAqxbMmXB04ViPr6lMMiRuWmQ6aG7b2A kjrej62tLySPn0aXLzB+V/FIXBK0aLIYKQuf70we0yQn8HLG9m2axB7nxZYWxGIy 1Mo7GSt48A9vPzZ/8tgvNiLj2aeU0rAastFaeVPBPe8y+IX5KBLhy/hXZetaC9Jw K1/t+UFGoET535Kasz1LGZaBqfTtm6JNOWVle4z39oVq5WVkCa5UZZvOP+tInpHA aK+/7dqvLCJt996EtJA5Bsj5lSSPkEKHzAYyuivI2h0E758urT98S2wLUayg/Ml6 uAKvKITf8+rVNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:13 2025 by rpki-client