This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json) Hash identifier: qVjUwJdmrj/YsaPyO6VrmeCohxIK4hRrUK07LIyZgsw= Subject key identifier: 1D:E1:67:CE:37:B3:5D:ED:BC:82:54:4B:0F:3B:D4:BE:C0:79:6E:AC Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Certificate serial: 019AF19AF5CEED932213B861B8D8FD690210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft Manifest number: 16A7 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=) 2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: sy9wDZVApiRDMjuUnknwGyxD4utITYHMK/W+Qoru+b8=) 3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f5:ce:ed:93:22:13:b8:61:b8:d8:fd:69:02:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=1de167ce37b35dedbc82544b0f3bd4bec0796eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:59:12:3b:47:2a:35:7c:5b:02:e7:d9:b5: 21:22:ea:c8:80:3c:f7:82:d0:8c:66:5a:1f:6f:9d: 11:a6:7d:a8:a0:a5:77:a8:5d:ef:e0:aa:41:5a:83: 0e:9f:64:eb:00:8d:85:cd:58:e4:e4:6d:9c:78:c6: 55:94:50:b3:9a:32:9c:0b:01:30:ae:0e:73:24:ec: 06:e2:8b:79:7a:02:31:43:21:45:8f:ed:9a:44:14: bc:d6:27:93:44:3a:a8:08:28:96:7f:bd:25:26:a4: 6d:d2:ff:d4:20:84:31:b9:63:04:a0:13:19:46:7c: 80:63:f2:8d:4c:ac:e6:65:2c:30:9d:78:c5:7d:fb: aa:d0:4d:26:1f:91:9c:47:db:fa:ce:34:c7:41:cd: 7c:bd:80:10:0c:de:e8:0b:d7:bb:29:b6:1a:58:b7: 4a:dc:0f:b5:d5:80:8d:3c:00:d3:ce:18:52:ef:53: f5:c6:48:76:70:f1:4b:78:b9:93:ee:c6:3d:09:e9: 2c:0d:ce:81:e8:9b:e3:9b:eb:57:57:2b:a9:64:96: bd:c7:e5:3d:5a:a5:ad:c4:fd:08:3f:17:32:e8:f7: a6:82:d4:18:4f:6e:8f:a7:ff:77:f2:32:9f:f7:18: 9c:a4:58:28:c4:08:c4:56:8f:7b:95:bc:72:c7:a8: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E1:67:CE:37:B3:5D:ED:BC:82:54:4B:0F:3B:D4:BE:C0:79:6E:AC X509v3 Authority Key Identifier: keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:cc:00:ff:41:43:17:c9:44:e1:4c:fa:1a:ca:a6:f1:64:7d: d2:35:ab:65:84:f1:73:33:96:85:5b:a1:6c:3d:78:46:4a:10: 36:6a:a8:aa:30:32:57:44:e1:8d:03:0a:fa:f1:f9:39:ab:ea: a9:f5:a2:bb:eb:c3:ca:7f:58:26:67:50:30:a2:d2:d1:ca:fd: 0d:e8:4d:b6:e7:05:73:40:7f:ee:0e:03:1e:70:d7:82:95:22: 40:99:20:68:c5:06:22:08:30:ba:5c:e5:2a:58:ef:d1:f6:f8: 85:93:9f:35:94:06:c8:5c:32:15:60:cb:e5:fd:65:a5:79:fb: 8a:bb:86:e1:47:2e:34:d9:23:6c:de:69:5e:3a:86:10:88:3b: 21:a6:ce:b2:15:81:b4:eb:fc:8f:f5:50:fa:cd:5d:cb:35:33: ba:1d:37:ff:c5:3e:e2:9d:1d:70:f6:6c:bc:6b:d6:ec:79:7d: 1b:a4:62:c7:b3:9f:43:64:b4:f5:f4:67:45:aa:41:67:a5:5a: cb:38:0d:3a:e9:96:85:15:37:7d:d1:ae:d3:b5:0b:c1:4e:ed: 36:41:48:84:de:cb:f4:fb:cd:12:1e:b7:31:a4:bc:3c:9c:2c: c8:7f:67:3f:16:db:bd:b4:75:ee:d6:31:8c:4a:ed:a2:22:3a: 2e:ad:a8:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvXO7ZMiE7hhuNj9aQIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm OWFhMzcwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EygxZGUxNjdjZTM3YjM1ZGVkYmM4MjU0NGIwZjNiZDRiZWMwNzk2ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mpZEjtHKjV8WwLn2bUhIurIgDz3 gtCMZlofb50Rpn2ooKV3qF3v4KpBWoMOn2TrAI2FzVjk5G2ceMZVlFCzmjKcCwEw rg5zJOwG4ot5egIxQyFFj+2aRBS81ieTRDqoCCiWf70lJqRt0v/UIIQxuWMEoBMZ RnyAY/KNTKzmZSwwnXjFffuq0E0mH5GcR9v6zjTHQc18vYAQDN7oC9e7KbYaWLdK 3A+11YCNPADTzhhS71P1xkh2cPFLeLmT7sY9CeksDc6B6Jvjm+tXVyupZJa9x+U9 WqWtxP0IPxcy6PemgtQYT26Pp/938jKf9xicpFgoxAjEVo97lbxyx6imTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3hZ843s13tvIJUSw871L7AeW6sMB8GA1UdIwQY MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt ZjAxYTJmNThlZjg4LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4 LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMwA/0FD F8lE4Uz6Gsqm8WR90jWrZYTxczOWhVuhbD14RkoQNmqoqjAyV0ThjQMK+vH5Oavq qfWiu+vDyn9YJmdQMKLS0cr9DehNtucFc0B/7g4DHnDXgpUiQJkgaMUGIggwulzl Kljv0fb4hZOfNZQGyFwyFWDL5f1lpXn7iruG4UcuNNkjbN5pXjqGEIg7IabOshWB tOv8j/VQ+s1dyzUzuh03/8U+4p0dcPZsvGvW7Hl9G6Rix7OfQ2S09fRnRapBZ6Va yzgNOumWhRU3fdGu07ULwU7tNkFIhN7L9PvNEh63MaS8PJwsyH9nPxbbvbR17tYx jErtoiI6Lq2oWg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:51 2025 by rpki-client