This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft File: 7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json) Hash identifier: /IVTu0XKSsY2aT1IXPXZAHWTwA6KpsfrZN9kZ0h8Yq4= Subject key identifier: 28:BD:2B:43:D3:D4:F0:A2:4A:84:23:8D:F1:B4:46:DF:36:3A:1A:A2 Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4 Certificate serial: 019AF2AD76321884C82477A07981AFD9C361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft Manifest number: 0D3F Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: HGuSddyKR91IHd/Y0/N62S+h02YisB9HpVCpp6lTdmc=) 2: Xc0IWZbMmju7pbBifzTAy_VFZls.roa (hash: ieHjZYyTowrkAjtUXCZ6gebps3wJnEiAbxYcxuJzbhs=) 3: gRffKuEX0czsrnlZBP9RuWOhUxc.roa (hash: ZNpwDIB3C/ZPnj8Whylo5eGsxYBRndXhcd3COmk7erw=) 4: yxisVf5RbQd_iyu5bjOm2uTCJqY.roa (hash: TlTPbndQ3fvJ6HctsZUhUZG2cQbNIxMU2U4IlG98W/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:76:32:18:84:c8:24:77:a0:79:81:af:d9:c3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4 Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=28bd2b43d3d4f0a24a84238df1b446df363a1aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:67:d2:62:37:9e:d5:dc:f6:16:4b:da:9a: 91:77:82:e1:1d:14:49:c8:da:d6:71:a6:61:4f:aa: 36:20:b1:04:4e:ae:95:40:6c:4b:d9:d1:52:ea:0e: cd:0d:8c:ea:0a:6a:36:85:64:eb:a0:82:46:10:a0: 96:e3:60:0a:f8:4d:6f:5f:5d:84:e7:2d:03:35:b1: 07:78:d8:c9:fc:e8:7f:51:b4:70:37:79:26:4c:99: d8:6f:e3:34:7e:c7:bb:21:b0:af:46:d1:a9:b8:ac: 24:68:ea:bc:2a:54:ea:05:2b:07:ff:5c:17:01:6f: e9:6a:59:ec:83:d4:55:67:ee:38:15:e0:f7:d8:ea: d7:d7:0b:5d:1a:9a:b3:3b:69:34:c3:14:cc:f6:4d: 5d:72:95:18:06:70:cb:03:f7:0f:d9:a1:c8:de:06: 00:db:06:85:1e:0c:6c:d3:64:6a:47:70:a7:51:f3: e4:33:9a:74:f6:8c:56:8f:8a:ee:4a:88:d0:21:e4: e6:02:0d:e5:71:60:91:52:f5:08:59:e9:c5:20:12: 29:54:c9:ff:81:98:3c:f8:e5:14:5e:41:a2:05:2a: 2b:57:00:25:5c:7a:af:96:e5:36:0d:c3:4e:f8:83: 22:eb:d6:c8:b5:c6:37:ac:17:83:68:5e:c9:0c:a8: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BD:2B:43:D3:D4:F0:A2:4A:84:23:8D:F1:B4:46:DF:36:3A:1A:A2 X509v3 Authority Key Identifier: keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:67:b7:5c:3e:36:1d:f4:e0:30:ae:f6:84:16:b4:71:9c:98: d3:c4:66:fc:50:6e:a3:ba:47:e4:bf:eb:88:8b:44:11:45:07: be:b7:6c:da:28:99:c7:82:b4:a7:b2:1b:b3:b7:ba:73:0c:7d: 75:04:78:9e:ee:6c:00:2f:0f:f2:18:74:a2:bd:54:0f:d2:f0: 5c:b4:e5:f9:b2:10:e2:65:9d:41:16:93:e7:6d:7d:04:1f:9f: df:85:85:7d:c5:f5:26:fd:ea:2f:bc:cf:f4:ac:2b:da:79:ac: ce:2c:20:fb:b3:1f:b9:03:5f:27:61:1f:7c:f9:5b:5e:39:ac: cf:74:46:2f:02:57:ba:e2:d2:38:50:c9:c6:5e:b0:f1:0c:a0: ce:68:82:01:3d:75:d2:34:e6:70:b1:64:bd:1b:17:e6:51:6e: 88:b9:08:ab:4c:19:bc:e9:73:49:aa:5b:0e:88:e5:f8:19:2b: 60:99:90:37:41:5e:9a:5e:79:8c:4b:4a:19:e2:b4:f4:cc:c7: 48:f4:bd:83:d5:06:c5:9f:ee:72:0e:0a:50:ec:21:2c:2a:50: ee:8a:bb:d4:f6:ab:54:84:b8:58:87:0b:e6:1c:0b:94:c2:97: b2:d8:b7:f5:2a:eb:bd:54:9f:61:37:0f:21:76:a8:26:1f:28: 4d:8e:f0:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXYyGITIJHegeYGv2cNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4 ZWJiYjQwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD EygyOGJkMmI0M2QzZDRmMGEyNGE4NDIzOGRmMWI0NDZkZjM2M2ExYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBdn0mI3ntXc9hZL2pqRd4LhHRRJ yNrWcaZhT6o2ILEETq6VQGxL2dFS6g7NDYzqCmo2hWTroIJGEKCW42AK+E1vX12E 5y0DNbEHeNjJ/Oh/UbRwN3kmTJnYb+M0fse7IbCvRtGpuKwkaOq8KlTqBSsH/1wX AW/palnsg9RVZ+44FeD32OrX1wtdGpqzO2k0wxTM9k1dcpUYBnDLA/cP2aHI3gYA 2waFHgxs02RqR3CnUfPkM5p09oxWj4ruSojQIeTmAg3lcWCRUvUIWenFIBIpVMn/ gZg8+OUUXkGiBSorVwAlXHqvluU2DcNO+IMi69bItcY3rBeDaF7JDKjZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi9K0PT1PCiSoQjjfG0Rt82OhqiMB8GA1UdIwQY MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It ZTQ1ZmE2NGQ0ZDJkLzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWe3XD42 HfTgMK72hBa0cZyY08Rm/FBuo7pH5L/riItEEUUHvrds2iiZx4K0p7Ibs7e6cwx9 dQR4nu5sAC8P8hh0or1UD9LwXLTl+bIQ4mWdQRaT5219BB+f34WFfcX1Jv3qL7zP 9Kwr2nmsziwg+7MfuQNfJ2EffPlbXjmsz3RGLwJXuuLSOFDJxl6w8QygzmiCAT11 0jTmcLFkvRsX5lFuiLkIq0wZvOlzSapbDojl+BkrYJmQN0Feml55jEtKGeK09MzH SPS9g9UGxZ/ucg4KUOwhLCpQ7oq71ParVIS4WIcL5hwLlMKXsti39SrrvVSfYTcP IXaoJh8oTY7wIA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:58 2025 by rpki-client