This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft File: 81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json) Hash identifier: +99m4icK9IdzMV1hEVmpGDEUZeB4TK6a/x9rU2xn6QU= Subject key identifier: 7A:05:D7:31:EB:81:F3:E5:3D:2F:AD:B3:EF:DA:8C:9E:8E:29:AE:2B Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB Certificate issuer: /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb Certificate serial: 019B2287CF9786BE593A4E17B380DF0E8B52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft Manifest number: 07FE Signing time: Mon 15 Dec 2025 15:01:24 +0000 Manifest this update: Mon 15 Dec 2025 15:01:24 +0000 Manifest next update: Tue 16 Dec 2025 15:01:24 +0000 Files and hashes: 1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: 2ouZ2UisuhCoLfk9Pyv8ZCuFjLqq+/CrSw8QjMirT7I=) 2: XwCCzqbTFIbNt4tDIiPwvE7s53o.roa (hash: tvLAuw3pgR4MhRPh7vqk9g2rkTx+zeY+ExS4WrgC8y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:cf:97:86:be:59:3a:4e:17:b3:80:df:0e:8b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb Validity Not Before: Dec 15 15:01:24 2025 GMT Not After : Dec 16 15:01:24 2025 GMT Subject: CN=7a05d731eb81f3e53d2fadb3efda8c9e8e29ae2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:34:b1:4b:ef:0a:03:47:04:ca:91:00:9a: 92:da:04:d3:74:05:60:a4:4e:a7:7f:e6:7d:de:d1: ed:ca:a2:da:d4:ec:cf:e1:b6:78:1f:54:a4:58:ed: bd:d2:5e:4e:3f:e9:5a:5c:7a:0f:32:5e:da:7e:93: 3c:fa:30:4c:a3:24:56:63:26:d1:82:85:7d:79:13: 54:75:24:46:d7:bf:f9:c0:37:52:ed:af:52:32:e4: 2c:82:9e:d5:9f:2c:f9:92:ca:4a:b1:1c:39:7b:e4: 6e:04:0e:a5:49:3b:bd:3c:f6:64:67:f4:74:3f:53: eb:63:ef:0b:d0:7d:70:17:d9:da:da:76:29:0d:3b: c2:fb:09:7b:fa:83:72:f9:bb:0f:cd:70:0b:18:f5: 8d:8e:34:5c:2a:c5:e2:26:6a:be:8e:ad:30:05:a5: b8:eb:2c:bf:be:19:b6:c6:87:fd:91:0c:a1:bf:5b: bd:70:23:af:fd:c1:ae:8b:35:6d:2d:49:6c:96:77: 96:73:79:5e:62:46:a6:9c:22:ba:e9:10:6d:cd:6a: 92:c2:93:05:d2:11:0a:48:d9:ef:5d:fd:b6:5d:92: b6:80:51:ba:1c:9b:e3:1e:27:1a:4f:cc:fe:7e:b4: c1:20:13:20:0f:93:2f:18:95:65:25:6d:d0:fe:68: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:05:D7:31:EB:81:F3:E5:3D:2F:AD:B3:EF:DA:8C:9E:8E:29:AE:2B X509v3 Authority Key Identifier: keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:95:3c:47:b8:88:37:29:04:a3:1f:e6:d3:de:64:f4:96:44: f2:e3:51:7d:17:d9:6d:c1:f1:dc:01:86:19:7d:bb:7c:2b:8a: 71:e2:67:6b:05:fd:b9:19:4d:26:bb:0d:71:1c:65:c3:16:cb: c0:2b:69:c8:7e:9a:b7:61:1b:30:86:30:74:3a:df:9c:dd:87: a8:a6:3f:e0:08:f1:40:58:6e:bd:51:4b:22:d1:2a:5d:1f:5e: a8:c2:d5:04:e8:2a:ac:4a:ed:8a:e6:df:cd:03:38:b7:2c:c2: af:ee:e8:7d:11:bf:56:3b:81:bb:7c:13:f8:be:08:f4:2e:17: 69:63:14:69:24:25:bd:eb:58:6d:ab:89:d9:93:56:26:17:7a: 8d:44:83:52:85:98:9c:ee:30:de:43:4f:ce:e5:ab:d3:91:ed: c3:90:27:90:b3:28:e8:3b:b3:3a:51:d7:7f:c7:bb:3c:b6:7d: fb:3b:cc:69:ea:5c:ea:de:4b:3e:ff:ff:66:af:ad:e1:75:e0: 8c:b2:a8:ec:e7:e7:6c:18:59:07:2d:72:a7:f8:19:ef:b7:80: 67:74:67:5d:39:53:9c:d9:9b:ab:e9:fb:aa:fb:b8:21:50:d8: 1d:8e:80:6b:66:19:b3:77:46:e9:e1:75:b3:9a:77:5c:6a:69: 03:7a:38:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih8+Xhr5ZOk4Xs4DfDotSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNWRiZGU4ZmJjZGJmNDI4NWU4N2JlNDkwZWQ2ZmNkYjQ2 YTA1ZmIwHhcNMjUxMjE1MTUwMTI0WhcNMjUxMjE2MTUwMTI0WjAzMTEwLwYDVQQD Eyg3YTA1ZDczMWViODFmM2U1M2QyZmFkYjNlZmRhOGM5ZThlMjlhZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr140sUvvCgNHBMqRAJqS2gTTdAVg pE6nf+Z93tHtyqLa1OzP4bZ4H1SkWO290l5OP+laXHoPMl7afpM8+jBMoyRWYybR goV9eRNUdSRG17/5wDdS7a9SMuQsgp7Vnyz5kspKsRw5e+RuBA6lSTu9PPZkZ/R0 P1PrY+8L0H1wF9na2nYpDTvC+wl7+oNy+bsPzXALGPWNjjRcKsXiJmq+jq0wBaW4 6yy/vhm2xof9kQyhv1u9cCOv/cGuizVtLUlslneWc3leYkamnCK66RBtzWqSwpMF 0hEKSNnvXf22XZK2gFG6HJvjHicaT8z+frTBIBMgD5MvGJVlJW3Q/mj1iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoF1zHrgfPlPS+ts+/ajJ6OKa4rMB8GA1UdIwQY MBaAFPNdvej7zb9Cheh75JDtb820agX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODEyOTZQdk52MEtGNkh2a2tPMXZ6YlJxQmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNjZiZjctMTMxYi00M2I4LWI1Yzgt ZWQ1ZTBhYzExNWViLzEvODEyOTZQdk52MEtGNkh2a2tPMXZ6YlJxQmZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNjZiZjctMTMxYi00M2I4LWI1YzgtZWQ1ZTBhYzExNWVi LzEvODEyOTZQdk52MEtGNkh2a2tPMXZ6YlJxQmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpU8R7iI NykEox/m095k9JZE8uNRfRfZbcHx3AGGGX27fCuKceJnawX9uRlNJrsNcRxlwxbL wCtpyH6at2EbMIYwdDrfnN2HqKY/4AjxQFhuvVFLItEqXR9eqMLVBOgqrErtiubf zQM4tyzCr+7ofRG/VjuBu3wT+L4I9C4XaWMUaSQlvetYbauJ2ZNWJhd6jUSDUoWY nO4w3kNPzuWr05Htw5AnkLMo6DuzOlHXf8e7PLZ9+zvMaepc6t5LPv//Zq+t4XXg jLKo7OfnbBhZBy1yp/gZ77eAZ3RnXTlTnNmbq+n7qvu4IVDYHY6Aa2YZs3dG6eF1 s5p3XGppA3o4DQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:20:30 2025 by rpki-client