This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json) Hash identifier: xtv9zNEVWS+nTRYJPwYmtaSu/ZaJ9XWk4XekRfaJ7Q8= Subject key identifier: 89:5B:DE:35:57:FD:40:47:AE:4F:28:C8:1E:71:F7:19:40:2F:97:8C Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef Certificate serial: 019AF12E241C60E997C9CEC7ED479252507B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: iGTbdJQqZwoUYPwURyg4B3q6CKQDCIlEhtdQtO5xQns=) 2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:24:1c:60:e9:97:c9:ce:c7:ed:47:92:52:50:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=895bde3557fd4047ae4f28c81e71f719402f978c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:2e:b3:ec:60:c1:fb:89:c4:ed:c3:25:7c: 7e:0e:9e:e6:98:15:a9:f6:21:d0:5f:de:6c:b0:87: 23:92:d7:0d:06:c1:d7:13:b5:17:c5:1b:88:6a:0d: cd:52:45:f6:78:e2:43:a3:9f:f9:ce:a2:78:b8:55: 14:ba:61:dc:c6:1b:b6:72:40:ea:b3:d9:19:93:c7: 46:87:23:9f:4e:5f:53:d2:c7:b1:74:4a:7a:6c:56: 65:c0:d0:38:7b:a6:cb:85:2c:ac:91:af:f7:ef:c4: 28:76:37:93:22:19:ac:cc:7e:c9:89:77:9e:92:79: 9b:8a:b3:3f:b4:c6:b7:ac:84:3e:2a:8f:52:69:f6: af:d4:8a:a9:cc:7a:7c:be:7c:c9:43:72:8f:e5:e7: 9b:4f:91:42:57:e8:15:f7:c5:4f:4b:a2:e9:b1:d4: 7b:b5:c6:88:b8:2a:0b:dd:7a:9f:01:f1:1d:ed:ce: de:8d:d1:fe:32:9a:4a:c5:6f:8d:6c:12:e3:8a:0f: 91:32:b0:c5:b1:08:50:3a:a2:af:9c:80:66:6b:28: ca:d4:e3:e6:e8:ae:2a:49:01:0c:4c:04:c7:d7:62: d3:91:89:39:28:3f:2f:fa:90:25:7a:fd:ac:2a:1d: a0:1f:f4:3d:8f:11:3b:2d:fb:61:4b:85:5b:ac:74: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5B:DE:35:57:FD:40:47:AE:4F:28:C8:1E:71:F7:19:40:2F:97:8C X509v3 Authority Key Identifier: keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c0:61:23:38:a4:41:34:f4:b2:f4:f4:ff:2b:e8:ad:41:bb: c7:7d:3c:39:e0:90:b5:ba:44:50:fa:c8:fa:69:7f:9c:63:bf: 5f:26:aa:6d:4a:03:b0:47:77:7d:32:a2:bb:23:38:05:12:9a: c4:97:12:7f:a2:51:a1:d3:c5:2b:03:83:a9:7f:77:51:52:f3: 58:67:3e:44:f4:7a:14:9f:ca:66:8a:86:ae:0f:2d:90:fa:58: 8f:24:f5:80:40:44:38:8b:92:e3:aa:cf:04:f2:97:f4:82:f7: a9:02:13:77:bb:37:b0:a5:5f:0c:9a:c2:35:19:ad:df:3d:a8: f0:e7:93:1f:c7:52:ea:4b:bb:41:37:f1:87:c4:23:c2:94:10: a5:a5:39:f0:b6:ec:b4:cd:94:ae:71:5d:b4:7f:6f:65:72:22: 91:92:4d:8d:bd:9b:6e:98:d7:2e:27:81:7c:5c:e4:c4:c5:84: ff:3f:dd:02:9a:a3:be:f1:36:19:73:8c:40:32:13:b1:ed:3c: 2b:f5:33:7e:2f:bc:df:13:98:6f:13:30:9f:42:b0:1d:f5:cd: e2:5d:cc:ac:7b:2b:7c:67:72:fb:db:f9:66:1d:5a:6d:cb:f6: ef:24:7b:25:63:cf:d7:c3:13:c2:8b:00:dc:f6:ae:c8:e8:5d: ab:a0:56:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiQcYOmXyc7H7UeSUlB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmM2VkM2Q0ZDQ3YjhlODI1ZmJmZDA3OTQ4MmY3YTBjMjFk YzkxZWYwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD Eyg4OTViZGUzNTU3ZmQ0MDQ3YWU0ZjI4YzgxZTcxZjcxOTQwMmY5NzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNous+xgwfuJxO3DJXx+Dp7mmBWp 9iHQX95ssIcjktcNBsHXE7UXxRuIag3NUkX2eOJDo5/5zqJ4uFUUumHcxhu2ckDq s9kZk8dGhyOfTl9T0sexdEp6bFZlwNA4e6bLhSyska/378QodjeTIhmszH7JiXee knmbirM/tMa3rIQ+Ko9Safav1IqpzHp8vnzJQ3KP5eebT5FCV+gV98VPS6LpsdR7 tcaIuCoL3XqfAfEd7c7ejdH+MppKxW+NbBLjig+RMrDFsQhQOqKvnIBmayjK1OPm 6K4qSQEMTATH12LTkYk5KD8v+pAlev2sKh2gH/Q9jxE7LfthS4VbrHSoNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlb3jVX/UBHrk8oyB5x9xlAL5eMMB8GA1UdIwQY MBaAFP8+09TUe46CX7/QeUgvegwh3JHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2Mzct NWIwOWE2NzQzMzc1LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2MzctNWIwOWE2NzQzMzc1 LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8BhIzik QTT0svT0/yvorUG7x308OeCQtbpEUPrI+ml/nGO/XyaqbUoDsEd3fTKiuyM4BRKa xJcSf6JRodPFKwODqX93UVLzWGc+RPR6FJ/KZoqGrg8tkPpYjyT1gEBEOIuS46rP BPKX9IL3qQITd7s3sKVfDJrCNRmt3z2o8OeTH8dS6ku7QTfxh8QjwpQQpaU58Lbs tM2UrnFdtH9vZXIikZJNjb2bbpjXLieBfFzkxMWE/z/dApqjvvE2GXOMQDITse08 K/Uzfi+83xOYbxMwn0KwHfXN4l3MrHsrfGdy+9v5Zh1abcv27yR7JWPP18MTwosA 3PauyOhdq6BWzw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:41 2025 by rpki-client