This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json) Hash identifier: 4Hud3e4aqxF5Z7Cdwx7bH3Ecz79xwswpAo34531vok4= Subject key identifier: 52:F1:65:BC:27:8A:4A:76:1B:28:CB:D3:0F:32:AF:D4:15:47:04:E4 Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019AF08851A30ABF4441E927BDC845564809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft Manifest number: 1785 Signing time: Fri 05 Dec 2025 22:00:56 +0000 Manifest this update: Fri 05 Dec 2025 22:00:56 +0000 Manifest next update: Sat 06 Dec 2025 22:00:56 +0000 Files and hashes: 1: 8b-JQ0B4OeomGbojQ4PaiEVexlI.roa (hash: PDPZU+uajsc1VUxrfy28T4es/CG+VoGQyCpiUpUvLyI=) 2: QABfuc4nvtHeT0vqG6JAEeAf21M.roa (hash: NHXYHLNca2RMaeMxdrJ0tAQ2KOU4PCzHu6iJg4kIFME=) 3: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=) 4: dESzUpMviwtTKAbBmdcEnSrDmb8.roa (hash: t6YDlmbHdL/fLbmXo8sZDgLUB7U10S0kh8xDcseSIRM=) 5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: eRKx1kQyMbSW7atEFH/hnrl7DVUdsRlaChMUQ5N3YK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:51:a3:0a:bf:44:41:e9:27:bd:c8:45:56:48:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Dec 5 22:00:56 2025 GMT Not After : Dec 6 22:00:56 2025 GMT Subject: CN=52f165bc278a4a761b28cbd30f32afd4154704e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:ad:f4:03:3b:a7:be:e9:0a:64:61:7a:c8: b6:d1:37:09:38:6b:85:f1:3f:4d:87:a1:c1:2b:4d: 7e:40:b0:b3:17:dc:17:fd:67:74:11:02:13:33:99: 50:a1:76:d8:cd:e5:58:1f:22:ed:93:e1:61:e0:71: 0c:b3:87:43:30:0a:68:d3:cc:3e:ee:49:37:cd:ed: 7f:1d:09:55:2c:40:ff:af:b1:19:25:97:c2:7c:5a: 3c:c3:ad:9c:99:e3:a3:18:7b:15:2d:f3:d1:e4:81: eb:9e:3f:64:d0:c8:25:88:b0:ad:d8:18:65:4a:c7: 7a:18:eb:95:5b:58:d9:41:75:e3:80:97:84:59:c3: 33:de:23:fa:58:d9:33:07:55:4d:60:2d:e3:4c:45: 87:63:23:62:7e:53:8f:4a:8e:25:6b:21:75:6c:16: c9:54:d6:70:bd:54:3a:3e:90:ae:6e:e6:71:37:22: 5f:af:91:5a:ab:60:db:dd:52:af:37:1e:82:70:24: 6a:34:86:74:2d:02:4c:fd:b8:9f:1f:68:e5:97:5a: ad:40:90:68:31:8f:a3:5d:ad:88:bc:33:bf:e0:ee: 9a:9f:48:7c:83:bc:00:e8:93:eb:c3:3e:4b:f7:41: fb:b3:b5:1e:97:0e:49:cd:06:cd:bd:5b:78:b1:ae: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F1:65:BC:27:8A:4A:76:1B:28:CB:D3:0F:32:AF:D4:15:47:04:E4 X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:aa:47:b6:ec:c8:d2:44:6d:26:c5:49:c5:8e:f1:b4:e7:b0: fa:3f:74:e4:1d:d6:64:0d:2c:87:a0:9b:a8:99:c5:09:c2:c5: b0:de:e0:2a:c3:28:b5:8a:c4:ba:bf:1d:5d:6f:95:28:e4:b2: fd:10:d7:d8:d6:db:4c:2e:c0:a9:f0:e1:01:0b:09:fa:74:9a: 9d:7d:01:3a:ce:bc:9b:77:f7:8b:9f:dc:bf:58:55:c9:f5:72: 7a:02:42:29:0e:5a:24:09:9d:d8:98:90:b4:6f:a9:da:7a:dd: cf:d2:12:5a:8c:6b:da:7a:3b:1d:0e:cb:bd:9e:92:de:04:23: cd:fb:17:f2:d4:5e:c9:c3:15:f2:57:44:cf:eb:97:26:ee:bc: 33:73:80:53:5d:8e:1b:b9:cb:1e:14:14:75:f1:ac:46:f1:ca: 6f:42:55:60:d1:cc:83:b2:45:ca:d1:0e:75:3e:53:26:ee:7a: ea:da:ed:a5:ad:33:49:d6:6d:4c:26:08:58:eb:8e:5f:db:59: 6f:e4:90:0d:00:5b:f3:e7:83:95:3b:a9:23:0c:52:a6:a2:dc: e9:9b:93:16:d9:22:70:e2:78:60:e0:be:34:fe:0e:e4:cf:5c: ae:f5:fa:36:2f:1d:d8:1f:e6:43:4a:94:03:c2:a0:61:5b:3b: da:7f:82:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFGjCr9EQeknvchFVkgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjUxMjA1MjIwMDU2WhcNMjUxMjA2MjIwMDU2WjAzMTEwLwYDVQQD Eyg1MmYxNjViYzI3OGE0YTc2MWIyOGNiZDMwZjMyYWZkNDE1NDcwNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfyt9AM7p77pCmRhesi20TcJOGuF 8T9Nh6HBK01+QLCzF9wX/Wd0EQITM5lQoXbYzeVYHyLtk+Fh4HEMs4dDMApo08w+ 7kk3ze1/HQlVLED/r7EZJZfCfFo8w62cmeOjGHsVLfPR5IHrnj9k0MgliLCt2Bhl Ssd6GOuVW1jZQXXjgJeEWcMz3iP6WNkzB1VNYC3jTEWHYyNiflOPSo4layF1bBbJ VNZwvVQ6PpCubuZxNyJfr5Faq2Db3VKvNx6CcCRqNIZ0LQJM/bifH2jll1qtQJBo MY+jXa2IvDO/4O6an0h8g7wA6JPrwz5L90H7s7Uelw5JzQbNvVt4sa5pjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLxZbwnikp2GyjL0w8yr9QVRwTkMB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOapHtuzI 0kRtJsVJxY7xtOew+j905B3WZA0sh6CbqJnFCcLFsN7gKsMotYrEur8dXW+VKOSy /RDX2NbbTC7AqfDhAQsJ+nSanX0BOs68m3f3i5/cv1hVyfVyegJCKQ5aJAmd2JiQ tG+p2nrdz9ISWoxr2no7HQ7LvZ6S3gQjzfsX8tReycMV8ldEz+uXJu68M3OAU12O G7nLHhQUdfGsRvHKb0JVYNHMg7JFytEOdT5TJu566trtpa0zSdZtTCYIWOuOX9tZ b+SQDQBb8+eDlTupIwxSpqLc6ZuTFtkicOJ4YOC+NP4O5M9crvX6Ni8d2B/mQ0qU A8KgYVs72n+CHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:00 2025 by rpki-client