This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json) Hash identifier: mX09MQSpJAgHFrNrdKOMbbQkaUiiVssqo2rp25x3SZU= Subject key identifier: 70:BD:B6:C8:2E:87:63:69:41:FB:70:CF:07:B2:4C:6B:4F:D2:2C:61 Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e Certificate serial: 019AF12CEF9D47536CC7FD7E09D748C72BCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft Manifest number: 0E57 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: 3fLDcvqSp38bbS3Qc1Lac0FfTC35W/HYDFfb2HF6U2g=) 2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=) 3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ef:9d:47:53:6c:c7:fd:7e:09:d7:48:c7:2b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=70bdb6c82e87636941fb70cf07b24c6b4fd22c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:32:a8:5b:68:72:e0:44:0f:25:ea:b3:e0: 08:a9:75:b8:a1:d0:a1:f1:a3:3e:58:3d:2b:2a:55: 67:67:94:b9:a2:4a:02:f8:8c:7e:78:6a:24:41:ce: 9b:3c:c5:7e:d9:09:72:df:db:ab:21:b5:4f:31:f0: f1:ee:b7:c0:3d:15:59:7b:97:60:6c:8e:88:82:db: e3:46:8c:b4:c2:36:cf:df:26:0a:47:6d:f2:cc:ad: dd:41:95:44:18:e9:08:69:e4:1b:58:e2:da:81:e0: cd:51:08:f8:19:22:99:f1:72:15:51:bb:83:ba:e2: cd:e5:7e:fa:0f:71:f6:fd:a3:94:66:48:8d:bc:f6: 9f:16:a0:1b:d7:21:29:98:3b:5d:b5:f5:81:d4:b3: f7:ec:08:28:c9:02:bd:d4:4b:71:b1:39:d2:69:00: 10:9a:d3:68:32:06:b8:79:49:50:04:26:65:cf:39: 1e:4d:3b:71:02:0f:5d:96:86:5c:e5:41:de:d9:f8: 40:77:5f:d8:6a:35:10:38:5c:ae:92:df:b5:79:b9: ec:06:5f:7f:5f:cc:18:ab:e9:2e:88:19:5f:f4:ed: 73:25:fd:f9:26:f9:73:ba:5e:fd:7e:6a:c1:7f:69: df:21:cc:52:c1:87:2b:f0:67:60:4c:ef:9d:63:8d: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BD:B6:C8:2E:87:63:69:41:FB:70:CF:07:B2:4C:6B:4F:D2:2C:61 X509v3 Authority Key Identifier: keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ce:54:8e:9a:e9:d0:d7:93:53:cb:9c:66:0d:92:f8:f1:c2: a9:96:f5:f2:61:51:02:bc:7c:ee:52:dc:86:93:70:54:6d:81: 89:a2:39:e7:18:c6:53:c5:58:78:44:0e:6b:4c:9d:ed:4e:68: 30:f1:54:49:b4:49:0c:49:6e:37:f2:02:bd:6c:73:7d:84:a1: f0:0f:ba:9d:23:5b:8d:d6:a7:9f:78:cd:b1:d2:5e:0e:ca:76: 86:dd:38:e5:6f:f1:dc:ac:fc:2a:74:29:58:45:7f:d0:1b:3b: d6:e2:01:af:4f:6f:6e:d3:fa:b7:a1:6a:69:d3:68:83:3f:03: 78:00:c4:c3:dd:19:4f:57:58:e0:1b:25:2c:f1:f2:04:9b:9a: a8:de:b2:5c:62:b6:5d:01:65:1c:19:da:fe:ee:68:b1:80:10: 3d:f3:27:22:67:1b:1d:24:b0:d7:9b:af:e8:06:e2:53:2b:59: 38:88:0c:43:5d:ed:b6:b7:06:3f:b5:bf:69:cc:8c:c3:f8:25: ef:36:c6:9b:62:f5:fa:69:2a:dc:86:ca:3e:ac:6e:b1:af:4c: 56:21:3f:bf:99:8c:3f:d9:ef:1e:31:17:42:5e:52:d9:a1:a9: f4:4d:54:55:22:9f:3d:34:63:4d:89:5f:47:a5:3e:a9:38:92: d6:de:a2:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO+dR1Nsx/1+CddIxyvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjNhOGE0YTBkOGM1YWUwMWE5Njk1YjA0MWVkMmM2ZDAy OTZhOWUwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD Eyg3MGJkYjZjODJlODc2MzY5NDFmYjcwY2YwN2IyNGM2YjRmZDIyYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlcyqFtocuBEDyXqs+AIqXW4odCh 8aM+WD0rKlVnZ5S5okoC+Ix+eGokQc6bPMV+2Qly39urIbVPMfDx7rfAPRVZe5dg bI6IgtvjRoy0wjbP3yYKR23yzK3dQZVEGOkIaeQbWOLageDNUQj4GSKZ8XIVUbuD uuLN5X76D3H2/aOUZkiNvPafFqAb1yEpmDtdtfWB1LP37AgoyQK91EtxsTnSaQAQ mtNoMga4eUlQBCZlzzkeTTtxAg9dloZc5UHe2fhAd1/YajUQOFyukt+1ebnsBl9/ X8wYq+kuiBlf9O1zJf35Jvlzul79fmrBf2nfIcxSwYcr8GdgTO+dY41cPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC9tsguh2NpQftwzweyTGtP0ixhMB8GA1UdIwQY MBaAFE+zqKSg2MWuAalpWwQe0sbQKWqeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82ZWYyM2UtOTliYS00YzY5LTkyZTMt NmJiNzA4MDQwOWI0LzEvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82ZWYyM2UtOTliYS00YzY5LTkyZTMtNmJiNzA4MDQwOWI0 LzEvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd85Ujprp 0NeTU8ucZg2S+PHCqZb18mFRArx87lLchpNwVG2BiaI55xjGU8VYeEQOa0yd7U5o MPFUSbRJDEluN/ICvWxzfYSh8A+6nSNbjdann3jNsdJeDsp2ht045W/x3Kz8KnQp WEV/0Bs71uIBr09vbtP6t6FqadNogz8DeADEw90ZT1dY4BslLPHyBJuaqN6yXGK2 XQFlHBna/u5osYAQPfMnImcbHSSw15uv6AbiUytZOIgMQ13ttrcGP7W/acyMw/gl 7zbGm2L1+mkq3IbKPqxusa9MViE/v5mMP9nvHjEXQl5S2aGp9E1UVSKfPTRjTYlf R6U+qTiS1t6igw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:10 2025 by rpki-client