This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json) Hash identifier: V5MoBqZ3SZN/8yEMErOcbNCUZFU5JgqhiFIzI0/diqs= Subject key identifier: 34:04:96:B1:5B:BB:5D:25:70:53:CA:4D:C0:00:B9:94:2D:23:83:77 Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd Certificate serial: 019AF12D0FE49F80D3952C4F180EA66609EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft Manifest number: 0F08 Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: ZZne9x3edeYoErgzYT0PoQyVHWV3HOii5vg+I0X0DKs=) 2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=) 3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0f:e4:9f:80:d3:95:2c:4f:18:0e:a6:66:09:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=340496b15bbb5d257053ca4dc000b9942d238377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:19:4c:82:4c:1a:04:7c:0e:d6:82:62:7c: 33:50:88:6b:7b:4d:1a:73:3a:54:a0:38:95:8a:04: c4:13:94:48:88:e1:05:7b:c3:ae:1f:d7:26:33:c8: d9:79:b7:ce:08:bb:be:8e:24:38:51:09:3e:ba:99: ec:64:c3:0e:1f:20:28:21:21:3f:3c:1a:62:37:e2: ef:60:53:21:93:2d:3f:5a:62:2f:9f:32:89:66:7b: cc:79:99:22:ca:b8:fa:e4:9a:e8:42:c5:e7:24:33: 73:27:92:c0:45:fe:63:81:a8:60:c2:b1:ec:79:14: 6a:fb:4a:3d:42:5e:8a:a2:1e:1e:26:41:28:b2:cb: 7e:08:97:5c:29:db:e9:97:26:71:9d:ae:7b:9a:81: 0b:87:6e:b4:6d:4e:16:71:21:57:5a:14:80:dc:0b: 47:f1:4b:e1:36:58:2d:c9:d9:c9:ed:d0:18:0f:5c: f3:d0:4d:43:3f:25:42:53:16:0b:78:5c:8c:48:42: eb:4e:ad:c9:3e:69:b7:5e:44:50:90:ec:40:db:a7: dc:e7:60:4a:cf:d5:53:c9:03:08:fa:1c:19:7a:c4: 1c:c7:8d:05:dd:2c:28:a8:af:72:df:ac:7d:3c:99: 0f:a9:49:9b:6a:25:ce:a8:3c:41:09:23:55:a7:4d: 07:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:04:96:B1:5B:BB:5D:25:70:53:CA:4D:C0:00:B9:94:2D:23:83:77 X509v3 Authority Key Identifier: keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3f:e5:d8:08:11:d0:4c:11:1e:37:86:cd:ef:14:ae:b3:27: fd:b1:4e:33:8f:72:fb:6c:d9:31:ee:2e:b8:c0:66:9b:82:c5: b2:04:15:ee:5f:58:79:52:72:9a:cc:df:9d:37:b5:8c:a5:a9: 7d:3f:8a:8b:d2:32:b8:9e:15:a5:64:10:0d:1f:14:9c:67:43: 05:c7:a9:18:38:36:73:ed:1a:35:a7:47:be:60:a8:ed:ae:4b: fe:47:38:51:be:70:52:f4:c7:bb:ea:de:58:31:f0:14:53:f5: 16:4e:de:bb:35:03:47:05:84:e6:05:52:dc:08:a0:aa:98:08: 81:00:0c:fc:ec:72:e6:88:4b:a0:67:f8:03:b1:15:2f:40:f6: 30:a8:7a:61:81:6d:40:49:15:bc:8a:a2:a2:66:22:5d:47:01: b8:15:60:6f:5e:27:2d:e4:f3:53:55:a5:ee:f3:32:f7:f2:dd: 1d:4a:1e:c6:27:9b:f0:43:85:6a:d7:27:a6:ee:67:d3:10:9c: 0f:e1:06:4b:85:4d:65:1d:38:f6:b8:b3:8d:ec:30:3a:5f:a7: 1c:86:c3:c1:56:32:27:77:a7:a1:c3:47:8d:ed:e1:17:87:9e: 89:a5:04:31:f7:68:8b:3f:14:ed:26:17:e2:23:b2:a3:85:3d: fa:02:20:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQ/kn4DTlSxPGA6mZgnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjUwYzdlODFkOGNmMjY0ZDEyMDliNmFkNWEzY2NiODJj MTZmZGQwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD EygzNDA0OTZiMTViYmI1ZDI1NzA1M2NhNGRjMDAwYjk5NDJkMjM4Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfQZTIJMGgR8DtaCYnwzUIhre00a czpUoDiVigTEE5RIiOEFe8OuH9cmM8jZebfOCLu+jiQ4UQk+upnsZMMOHyAoISE/ PBpiN+LvYFMhky0/WmIvnzKJZnvMeZkiyrj65JroQsXnJDNzJ5LARf5jgahgwrHs eRRq+0o9Ql6Koh4eJkEosst+CJdcKdvplyZxna57moELh260bU4WcSFXWhSA3AtH 8UvhNlgtydnJ7dAYD1zz0E1DPyVCUxYLeFyMSELrTq3JPmm3XkRQkOxA26fc52BK z9VTyQMI+hwZesQcx40F3SwoqK9y36x9PJkPqUmbaiXOqDxBCSNVp00HFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQElrFbu10lcFPKTcAAuZQtI4N3MB8GA1UdIwQY MBaAFPe1DH6B2M8mTRIJtq1aPMuCwW/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdVTWZvSFl6eVpORWdtMnJWbzh5NExCYjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmIt YWM0MDE2MTIwY2I5LzEvOTdVTWZvSFl6eVpORWdtMnJWbzh5NExCYjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmItYWM0MDE2MTIwY2I5 LzEvOTdVTWZvSFl6eVpORWdtMnJWbzh5NExCYjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT/l2AgR 0EwRHjeGze8UrrMn/bFOM49y+2zZMe4uuMBmm4LFsgQV7l9YeVJymszfnTe1jKWp fT+Ki9IyuJ4VpWQQDR8UnGdDBcepGDg2c+0aNadHvmCo7a5L/kc4Ub5wUvTHu+re WDHwFFP1Fk7euzUDRwWE5gVS3AigqpgIgQAM/Oxy5ohLoGf4A7EVL0D2MKh6YYFt QEkVvIqiomYiXUcBuBVgb14nLeTzU1Wl7vMy9/LdHUoexieb8EOFatcnpu5n0xCc D+EGS4VNZR049rizjewwOl+nHIbDwVYyJ3enocNHje3hF4eeiaUEMfdoiz8U7SYX 4iOyo4U9+gIgJg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:32 2025 by rpki-client