This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json) Hash identifier: fcx2K0jRFJCxEe8mWPg8xZcOLp12e72mER2P/inWoC4= Subject key identifier: 2B:56:71:0E:10:CB:4B:EC:59:7F:18:B8:AA:3D:18:DC:27:58:3B:03 Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90 Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990 Certificate serial: 019AF209707C6E581B1E74CF729FBCFB9AC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: dj+WCW1qwXJkksU2BuQ5FPt+cjnUBCt0ABgNsYT63CU=) 2: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (hash: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:70:7c:6e:58:1b:1e:74:cf:72:9f:bc:fb:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990 Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=2b56710e10cb4bec597f18b8aa3d18dc27583b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:de:2b:0a:35:f2:e3:96:8d:97:91:7a:50:b9: 11:d4:a3:c1:bd:6c:5e:df:80:9b:22:39:9c:57:84: 8e:8a:a3:32:b9:dc:d0:2d:dd:bd:89:2f:71:b7:0a: 34:fe:03:08:24:54:79:db:ab:a0:78:0e:23:eb:96: 37:d5:53:d2:e5:c8:d6:86:e6:ae:bf:02:8c:6a:1f: e1:45:d6:15:ec:cf:f5:86:bc:b7:94:76:dc:06:22: b7:c8:c6:45:fe:e7:06:b7:46:9e:04:59:86:73:1a: a2:1a:29:ce:56:f9:3d:aa:e3:2d:b2:41:06:ea:a9: 6c:49:f3:4b:d6:d0:07:d8:2d:47:7e:42:4b:35:02: 73:6b:3f:a0:1e:5b:4c:f0:c9:81:68:b7:aa:66:f8: 86:73:10:70:b6:d4:cb:b6:7c:47:1b:72:fb:5d:c2: 28:3b:da:f5:b0:ed:28:7e:f2:9f:54:8c:c0:6e:f5: 3f:7f:b7:36:b5:58:b0:b7:79:c3:17:8c:8d:a8:d4: cb:34:7b:0c:cd:ca:51:9c:fa:f9:2b:cd:05:08:aa: ae:5f:4c:03:ed:60:f5:7e:69:36:0a:df:4e:55:ba: 1c:48:ae:8a:f5:74:dc:34:58:b6:d9:93:85:bd:36: 2e:41:d3:60:4a:7d:73:b1:7d:01:c1:45:02:90:c2: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:56:71:0E:10:CB:4B:EC:59:7F:18:B8:AA:3D:18:DC:27:58:3B:03 X509v3 Authority Key Identifier: keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d7:52:42:cf:29:fc:93:ef:69:8b:ce:c7:4b:a2:02:97:25: af:88:2c:3e:4a:57:2a:9f:c6:8b:54:9d:58:41:15:b6:35:7b: 0e:5e:19:42:bc:4c:4b:ca:9c:f6:9e:20:77:d1:cc:94:51:d0: 58:3b:42:f2:0f:c4:6f:35:4d:f4:76:7c:26:db:de:63:eb:15: 61:a1:65:e1:d9:20:a0:4f:16:70:c2:5f:c9:85:05:9a:3c:12: e2:68:8e:0c:b1:e9:0f:ad:bd:6a:97:f8:9c:3e:8c:2b:15:41: a8:04:ae:fa:01:99:eb:c3:26:78:e9:db:2e:a4:90:67:05:cd: 36:70:cd:7c:1b:24:75:f0:52:27:61:a9:28:d8:02:e3:e2:8d: 90:6f:ee:30:6d:e2:45:a6:ee:9c:68:39:69:2f:f3:97:be:4b: b0:99:80:dc:3f:2f:7d:0d:db:fa:d4:95:63:34:c5:70:1a:dd: ab:3d:e8:12:83:40:fe:86:40:20:d5:61:5a:c4:a7:74:ef:b8: e4:91:44:fe:d1:12:f8:7d:19:c2:5d:8c:dc:ff:7b:be:0f:b2: b5:60:ce:a5:ac:37:2d:15:d3:8f:fb:0e:b9:82:6c:63:8e:b4: 3b:d4:4e:c2:ed:24:90:4d:30:4b:1a:49:f6:9a:75:dc:36:79: ae:68:17:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXB8blgbHnTPcp+8+5rAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj M2M5OTAwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EygyYjU2NzEwZTEwY2I0YmVjNTk3ZjE4YjhhYTNkMThkYzI3NTgzYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d4rCjXy45aNl5F6ULkR1KPBvWxe 34CbIjmcV4SOiqMyudzQLd29iS9xtwo0/gMIJFR526ugeA4j65Y31VPS5cjWhuau vwKMah/hRdYV7M/1hry3lHbcBiK3yMZF/ucGt0aeBFmGcxqiGinOVvk9quMtskEG 6qlsSfNL1tAH2C1HfkJLNQJzaz+gHltM8MmBaLeqZviGcxBwttTLtnxHG3L7XcIo O9r1sO0ofvKfVIzAbvU/f7c2tViwt3nDF4yNqNTLNHsMzcpRnPr5K80FCKquX0wD 7WD1fmk2Ct9OVbocSK6K9XTcNFi22ZOFvTYuQdNgSn1zsX0BwUUCkMI63wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtWcQ4Qy0vsWX8YuKo9GNwnWDsDMB8GA1UdIwQY MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt OGE4NjVmZDYyMWM4LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4 LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuddSQs8p /JPvaYvOx0uiApclr4gsPkpXKp/Gi1SdWEEVtjV7Dl4ZQrxMS8qc9p4gd9HMlFHQ WDtC8g/EbzVN9HZ8JtveY+sVYaFl4dkgoE8WcMJfyYUFmjwS4miODLHpD629apf4 nD6MKxVBqASu+gGZ68MmeOnbLqSQZwXNNnDNfBskdfBSJ2GpKNgC4+KNkG/uMG3i RabunGg5aS/zl75LsJmA3D8vfQ3b+tSVYzTFcBrdqz3oEoNA/oZAINVhWsSndO+4 5JFE/tES+H0Zwl2M3P97vg+ytWDOpaw3LRXTj/sOuYJsY460O9ROwu0kkE0wSxpJ 9pp13DZ5rmgXsA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:41 2025 by rpki-client