This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft File: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json) Hash identifier: 9ogstFrCeVYTfBbmTpz5Nk16bTo6slUCQebj/5I/xKU= Subject key identifier: 64:13:27:DB:20:3C:8E:D8:B5:31:63:5F:CE:96:0C:32:34:13:55:05 Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F Certificate issuer: /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f Certificate serial: 019AF20979C65BDCD6B9C1565EECC2F4ECB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: OuSwcmM9c4io+zM8zU9s6vu8D8ZxslnCX16qF3iL9B0=) 2: 8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa (hash: 1dw+M1Du1swLbJQllbUZmU++FExETkfzODZl6r8vVPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:79:c6:5b:dc:d6:b9:c1:56:5e:ec:c2:f4:ec:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=641327db203c8ed8b531635fce960c3234135505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:ea:34:b3:4c:d0:13:9f:65:59:a1:a8:90: de:b1:b4:92:60:80:b4:90:45:f8:30:45:ad:06:59: a7:b5:d4:9b:4e:57:e3:01:2b:6f:26:2e:bc:ac:0d: c7:75:cd:31:52:1c:51:bd:ec:e5:f8:bc:f5:29:81: 1c:01:a9:19:be:c2:18:b1:6d:4d:fc:eb:78:3b:fd: 51:f2:41:03:ab:7e:e7:26:b7:c6:e3:49:ad:9e:0f: 38:fb:2a:e1:37:70:5b:12:b5:94:af:0d:78:b8:47: 30:27:65:d5:0c:0c:f1:09:56:cb:7e:d2:37:15:fc: cc:d7:67:c2:0d:17:5b:6b:99:f0:57:2a:59:d3:83: 72:b0:1e:bb:0c:97:b4:32:18:be:26:a4:f5:ce:fe: 9a:50:27:37:11:61:74:75:fe:77:df:16:26:dc:14: 89:4b:0f:00:44:ae:28:6d:34:c2:a0:7e:9f:bf:b9: 04:ce:7e:a1:02:9c:f2:aa:ec:46:84:c1:87:25:db: 28:83:d7:d5:ac:5a:ac:a2:8b:4c:07:74:aa:87:bf: 56:1a:b9:d6:c6:9d:f9:2a:34:5f:88:9d:90:b0:62: 40:bd:9b:56:62:a0:e7:85:ee:24:51:59:dd:a7:0c: 7d:ee:cd:7e:9c:c9:11:74:be:90:ff:eb:81:24:69: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:13:27:DB:20:3C:8E:D8:B5:31:63:5F:CE:96:0C:32:34:13:55:05 X509v3 Authority Key Identifier: keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6b:02:58:0a:92:b8:6e:a1:fb:ff:14:29:19:c3:2b:1d:b7: 8a:05:ef:3b:7c:f0:a5:58:08:88:8b:1d:8f:d1:fa:50:46:1a: ee:63:0b:3f:09:2a:65:05:5a:5e:40:c5:8a:a2:99:9d:e5:5f: 19:26:62:46:d6:69:cb:14:b6:fc:f4:d2:b0:5b:15:b4:81:07: ee:0f:e5:75:41:fc:e7:3a:42:23:14:97:ae:9e:16:c5:a1:67: 68:c1:c8:94:94:6b:2f:40:2c:ca:f7:2c:9f:05:10:29:39:14: 21:de:e5:2b:c2:47:16:19:4c:8f:74:3e:49:ce:a5:ad:f6:64: 78:86:e0:9f:0a:3a:50:d1:a6:4e:9f:c8:41:1b:03:3d:40:07: 36:2b:00:60:fc:c6:f1:7a:c2:93:42:85:79:f8:5f:c1:e4:2d: 01:e1:e9:ec:cd:58:d4:f7:bb:8b:85:18:30:ed:ff:9f:43:26: d2:be:27:cf:5e:ce:bd:0a:68:25:ca:4a:0c:c6:30:7a:77:83: c8:05:5f:37:40:b2:16:34:43:9b:7e:a5:ba:44:25:c2:35:ca: 71:d3:ab:98:8b:20:f0:37:21:80:8f:66:5a:89:e2:23:47:b2: 7a:f1:97:59:92:d6:73:bb:5d:3c:ce:2f:9c:3a:d5:f6:a4:9b: 20:55:e5:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXnGW9zWucFWXuzC9Oy1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDc1NWM1MTI3NWFiMjM0MmQ4ZjZmY2E1YjU2NjA2YWI5 YzNiNGYwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD Eyg2NDEzMjdkYjIwM2M4ZWQ4YjUzMTYzNWZjZTk2MGMzMjM0MTM1NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR7qNLNM0BOfZVmhqJDesbSSYIC0 kEX4MEWtBlmntdSbTlfjAStvJi68rA3Hdc0xUhxRvezl+Lz1KYEcAakZvsIYsW1N /Ot4O/1R8kEDq37nJrfG40mtng84+yrhN3BbErWUrw14uEcwJ2XVDAzxCVbLftI3 FfzM12fCDRdba5nwVypZ04NysB67DJe0Mhi+JqT1zv6aUCc3EWF0df533xYm3BSJ Sw8ARK4obTTCoH6fv7kEzn6hApzyquxGhMGHJdsog9fVrFqsootMB3Sqh79WGrnW xp35KjRfiJ2QsGJAvZtWYqDnhe4kUVndpwx97s1+nMkRdL6Q/+uBJGmKewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQTJ9sgPI7YtTFjX86WDDI0E1UFMB8GA1UdIwQY MBaAFO7XVcUSdasjQtj2/KW1ZgarnDtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2Ut ZWM5YjY5YjQ2Y2MwLzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2UtZWM5YjY5YjQ2Y2Mw LzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWsCWAqS uG6h+/8UKRnDKx23igXvO3zwpVgIiIsdj9H6UEYa7mMLPwkqZQVaXkDFiqKZneVf GSZiRtZpyxS2/PTSsFsVtIEH7g/ldUH85zpCIxSXrp4WxaFnaMHIlJRrL0Asyvcs nwUQKTkUId7lK8JHFhlMj3Q+Sc6lrfZkeIbgnwo6UNGmTp/IQRsDPUAHNisAYPzG 8XrCk0KFefhfweQtAeHp7M1Y1Pe7i4UYMO3/n0Mm0r4nz17OvQpoJcpKDMYweneD yAVfN0CyFjRDm36lukQlwjXKcdOrmIsg8DchgI9mWoniI0eyevGXWZLWc7tdPM4v nDrV9qSbIFXl7w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:19 2025 by rpki-client