This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft File: c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json) Hash identifier: H/cMdwuE9nVPKHlkHE8c+BiKMRG2aoSw3Y9/JG/heCU= Subject key identifier: AF:BB:6A:B6:E7:14:11:38:BD:01:3A:2D:02:BB:A0:1A:4F:0B:E2:D8 Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f Certificate serial: 019B3079CC3229E09E64B7F510C459F4AF77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft Manifest number: 0B69 Signing time: Thu 18 Dec 2025 08:00:47 +0000 Manifest this update: Thu 18 Dec 2025 08:00:47 +0000 Manifest next update: Fri 19 Dec 2025 08:00:47 +0000 Files and hashes: 1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: zb0y8G23my4mLzoUVb6jMxakmZuaMGPnemxbwocQEV0=) 2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:cc:32:29:e0:9e:64:b7:f5:10:c4:59:f4:af:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f Validity Not Before: Dec 18 08:00:47 2025 GMT Not After : Dec 19 08:00:47 2025 GMT Subject: CN=afbb6ab6e7141138bd013a2d02bba01a4f0be2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:62:4e:95:ad:b8:2b:9c:26:e3:f5:a4:ab: 89:46:a2:86:55:10:4c:3c:d3:1b:63:0a:89:13:60: 7a:35:c3:5a:d8:28:c0:27:9e:09:2d:b9:87:86:56: ed:3c:f1:74:ce:26:40:27:b0:9a:14:ee:30:cc:3e: 3a:5d:0d:19:bf:e7:f8:0b:44:4c:32:23:5f:77:54: e4:bf:98:3c:c5:a6:b3:3b:68:29:82:1c:8e:dc:55: 94:d8:f4:b5:e3:ce:af:f2:60:53:0d:30:53:31:4f: f3:d5:ea:e9:23:b3:ed:72:1b:f6:9f:f0:fc:96:a3: 68:69:59:68:81:23:ce:69:f8:bd:e0:cb:47:31:05: 6a:bc:ed:a3:46:71:16:1d:53:f9:29:16:95:ea:3c: 59:d6:98:d1:15:52:38:7b:29:b3:7c:98:8e:9a:c0: 52:2d:26:1a:3d:e4:4d:90:d7:fe:7e:ed:05:55:76: ff:19:04:f6:c4:35:a4:9d:89:a7:56:d5:25:af:41: 3f:1f:0a:12:44:9d:3b:1d:3c:da:c2:11:a1:4e:33: 32:9f:b8:bd:6a:bb:85:98:40:67:93:2c:8e:52:5f: 08:2c:72:ab:0c:b1:38:61:7f:69:36:24:63:ae:ae: f0:c9:34:6b:25:19:4b:d1:ee:9e:25:f1:4f:cd:77: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BB:6A:B6:E7:14:11:38:BD:01:3A:2D:02:BB:A0:1A:4F:0B:E2:D8 X509v3 Authority Key Identifier: keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:de:36:f5:de:33:75:ae:ba:40:63:74:78:28:ea:be:23:2f: 75:1d:86:ff:90:6d:4d:18:44:f8:df:55:33:0b:25:44:53:42: c1:da:4d:33:b2:f9:f5:72:4f:a8:79:de:f7:4a:8c:ed:14:df: 5b:55:22:d5:6c:fa:58:76:9d:a2:7c:6e:e6:c1:2f:6c:3d:99: d9:52:ba:3f:63:74:36:fc:57:47:33:ed:2b:db:57:cc:ad:16: 8b:e4:43:71:27:c9:4e:60:1d:56:d2:bf:a9:85:0c:e9:66:8f: 7e:39:9a:42:b9:7c:9a:e5:b1:0a:47:c2:eb:c8:86:c1:4a:a1: e4:f6:e9:f3:c9:aa:7f:5e:cb:e9:3f:7a:8a:05:3d:ea:fa:e3: 8b:aa:f4:30:6d:d0:f2:ed:a9:3e:da:3e:04:25:59:d2:15:ed: 14:23:d3:cd:ac:bf:7e:b8:0a:d5:6e:c6:86:ac:e5:5f:37:c1: 6a:3e:77:8b:48:46:34:a2:0c:86:6a:3b:a8:73:c4:fa:99:4b: 89:b6:ff:35:51:a9:94:21:34:16:95:0a:14:42:9a:16:c8:12: 08:ea:22:87:b0:ba:c7:b6:73:23:55:c6:dd:1e:c7:1d:8a:43: b7:cd:9c:47:5d:d4:c9:56:c5:8b:b0:78:ed:b5:36:0c:57:6c: eb:3e:86:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswecwyKeCeZLf1EMRZ9K93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYjk4MWNiNmVlNzlkMmRmOGM4OWQ2YTM0YzU1NGJkZTNm Y2M3NWYwHhcNMjUxMjE4MDgwMDQ3WhcNMjUxMjE5MDgwMDQ3WjAzMTEwLwYDVQQD EyhhZmJiNmFiNmU3MTQxMTM4YmQwMTNhMmQwMmJiYTAxYTRmMGJlMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eNiTpWtuCucJuP1pKuJRqKGVRBM PNMbYwqJE2B6NcNa2CjAJ54JLbmHhlbtPPF0ziZAJ7CaFO4wzD46XQ0Zv+f4C0RM MiNfd1Tkv5g8xaazO2gpghyO3FWU2PS1486v8mBTDTBTMU/z1erpI7Ptchv2n/D8 lqNoaVlogSPOafi94MtHMQVqvO2jRnEWHVP5KRaV6jxZ1pjRFVI4eymzfJiOmsBS LSYaPeRNkNf+fu0FVXb/GQT2xDWknYmnVtUlr0E/HwoSRJ07HTzawhGhTjMyn7i9 aruFmEBnkyyOUl8ILHKrDLE4YX9pNiRjrq7wyTRrJRlL0e6eJfFPzXc1AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+7arbnFBE4vQE6LQK7oBpPC+LYMB8GA1UdIwQY MBaAFHO5gctu550t+MidajTFVL3j/MdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUt YWE1ODFkMzc4YTdjLzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUtYWE1ODFkMzc4YTdj LzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9429d4z da66QGN0eCjqviMvdR2G/5BtTRhE+N9VMwslRFNCwdpNM7L59XJPqHne90qM7RTf W1Ui1Wz6WHadonxu5sEvbD2Z2VK6P2N0NvxXRzPtK9tXzK0Wi+RDcSfJTmAdVtK/ qYUM6WaPfjmaQrl8muWxCkfC68iGwUqh5Pbp88mqf17L6T96igU96vrji6r0MG3Q 8u2pPto+BCVZ0hXtFCPTzay/frgK1W7GhqzlXzfBaj53i0hGNKIMhmo7qHPE+plL ibb/NVGplCE0FpUKFEKaFsgSCOoih7C6x7ZzI1XG3R7HHYpDt82cR13UyVbFi7B4 7bU2DFds6z6GTA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:58:44 2025 by rpki-client