This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft File: 81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json) Hash identifier: I5Z3JJ2WMQYPcQ1iOEec0IdJS/kdZ0y9h6I4udSMSRI= Subject key identifier: 70:67:B6:4E:9A:2E:2F:29:23:37:F9:19:87:AB:95:AD:C9:4F:D0:C9 Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB Certificate issuer: /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb Certificate serial: 019AF2400C2297363CA52D9749D65A761E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft Manifest number: 07E5 Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 06:01:14 +0000 Manifest next update: Sun 07 Dec 2025 06:01:14 +0000 Files and hashes: 1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: QtOEduLrR6TjLfTqVJ8W9gxE5u8E+c2bx4YirSU2i70=) 2: XwCCzqbTFIbNt4tDIiPwvE7s53o.roa (hash: tvLAuw3pgR4MhRPh7vqk9g2rkTx+zeY+ExS4WrgC8y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0c:22:97:36:3c:a5:2d:97:49:d6:5a:76:1e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb Validity Not Before: Dec 6 06:01:14 2025 GMT Not After : Dec 7 06:01:14 2025 GMT Subject: CN=7067b64e9a2e2f292337f91987ab95adc94fd0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:08:d6:90:e8:d1:d8:ba:d6:3f:c1:bc:da:a4: 72:69:42:ca:e9:e1:82:d9:13:24:2e:3f:80:7f:34: f8:18:16:87:c1:f9:ae:71:63:06:89:2d:34:03:d8: a7:98:c7:12:aa:b0:1a:cf:7d:24:ef:41:88:49:70: 7b:7f:26:17:b1:49:dc:03:77:05:21:32:ef:86:f0: 21:99:3e:63:39:eb:92:98:c4:c1:4e:82:ca:1c:fb: 50:de:0b:64:95:d0:bb:29:af:d7:b2:fe:83:7f:80: 79:58:e3:56:38:27:16:63:01:98:42:6c:be:1f:c2: 08:2f:02:dc:5c:3a:5e:20:a0:bb:ad:f8:df:70:ab: c5:d3:48:f3:6f:58:68:89:62:e4:66:1b:43:6e:92: eb:d5:cf:f4:57:38:d4:c5:b1:5f:f6:f4:01:97:32: 36:38:d4:ac:65:ef:12:54:96:f1:b5:0f:c4:3d:27: 22:3e:35:a4:c4:b2:58:f1:cb:0b:45:09:d1:94:c5: 74:68:f8:e0:29:16:75:c1:32:cb:61:27:f2:44:72: 9a:79:56:b3:04:35:5c:a8:26:50:20:c4:dd:f6:cb: fc:92:5c:63:93:a7:10:28:40:93:87:84:d7:b6:b0: ba:b5:fa:8f:f8:1c:6f:5f:01:b1:ee:e6:1e:01:f6: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:67:B6:4E:9A:2E:2F:29:23:37:F9:19:87:AB:95:AD:C9:4F:D0:C9 X509v3 Authority Key Identifier: keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cc:4e:14:8d:e6:32:25:11:7c:25:8e:dc:eb:f7:cd:cd:18: 4c:89:68:9c:26:a3:39:7a:af:80:3b:77:52:d1:eb:ad:b2:58: 8c:dd:20:7d:f2:c1:e4:6b:fa:ec:c0:9b:b0:e5:22:e9:36:33: b6:08:ed:07:d3:5f:75:eb:13:30:96:5a:a2:f5:b1:c7:b8:26: 86:e4:18:49:e8:1e:74:c7:2f:7c:20:ce:46:e0:42:a6:b1:5a: 58:d6:2c:f4:a4:1a:9a:1c:c0:15:5c:7c:16:db:f6:19:2a:c2: 02:b1:82:84:37:87:10:57:94:da:cb:f9:09:2a:b2:da:f6:d8: 87:e7:ff:7d:77:a9:07:5c:28:25:dd:8b:8d:a8:be:f1:66:cf: e2:c4:e6:b6:0d:95:43:9d:62:0e:a8:d6:56:7a:f8:47:f6:5e: 4d:ec:85:30:d8:bf:47:62:30:87:08:72:01:6f:2a:af:33:7b: 22:44:c7:90:48:d6:89:4d:0e:7e:5a:f4:da:93:a7:35:64:83: 96:1f:65:7a:ce:8a:6b:0b:7d:fc:06:a4:af:91:87:a8:08:51: 04:64:31:3c:fc:59:75:4b:01:b0:99:58:80:4f:6e:b0:59:73: 0c:32:87:14:d1:b2:48:60:d2:5a:6d:3e:de:65:cb:cd:d5:e1: 59:79:c3:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAwilzY8pS2XSdZadh5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNWRiZGU4ZmJjZGJmNDI4NWU4N2JlNDkwZWQ2ZmNkYjQ2 YTA1ZmIwHhcNMjUxMjA2MDYwMTE0WhcNMjUxMjA3MDYwMTE0WjAzMTEwLwYDVQQD Eyg3MDY3YjY0ZTlhMmUyZjI5MjMzN2Y5MTk4N2FiOTVhZGM5NGZkMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAjWkOjR2LrWP8G82qRyaULK6eGC 2RMkLj+AfzT4GBaHwfmucWMGiS00A9inmMcSqrAaz30k70GISXB7fyYXsUncA3cF ITLvhvAhmT5jOeuSmMTBToLKHPtQ3gtkldC7Ka/Xsv6Df4B5WONWOCcWYwGYQmy+ H8IILwLcXDpeIKC7rfjfcKvF00jzb1hoiWLkZhtDbpLr1c/0VzjUxbFf9vQBlzI2 ONSsZe8SVJbxtQ/EPSciPjWkxLJY8csLRQnRlMV0aPjgKRZ1wTLLYSfyRHKaeVaz BDVcqCZQIMTd9sv8klxjk6cQKECTh4TXtrC6tfqP+BxvXwGx7uYeAfZ8qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBntk6aLi8pIzf5GYerla3JT9DJMB8GA1UdIwQY MBaAFPNdvej7zb9Cheh75JDtb820agX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODEyOTZQdk52MEtGNkh2a2tPMXZ6YlJxQmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNjZiZjctMTMxYi00M2I4LWI1Yzgt ZWQ1ZTBhYzExNWViLzEvODEyOTZQdk52MEtGNkh2a2tPMXZ6YlJxQmZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNjZiZjctMTMxYi00M2I4LWI1YzgtZWQ1ZTBhYzExNWVi LzEvODEyOTZQdk52MEtGNkh2a2tPMXZ6YlJxQmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsxOFI3m MiURfCWO3Ov3zc0YTIlonCajOXqvgDt3UtHrrbJYjN0gffLB5Gv67MCbsOUi6TYz tgjtB9NfdesTMJZaovWxx7gmhuQYSegedMcvfCDORuBCprFaWNYs9KQamhzAFVx8 Ftv2GSrCArGChDeHEFeU2sv5CSqy2vbYh+f/fXepB1woJd2Ljai+8WbP4sTmtg2V Q51iDqjWVnr4R/ZeTeyFMNi/R2IwhwhyAW8qrzN7IkTHkEjWiU0Oflr02pOnNWSD lh9les6Kawt9/Aakr5GHqAhRBGQxPPxZdUsBsJlYgE9usFlzDDKHFNGySGDSWm0+ 3mXLzdXhWXnD/w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:19 2025 by rpki-client