This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft File: i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json) Hash identifier: rICOnwNh1IfJiPLgBEWhah9Kty+KuivWN5sKozGqpQM= Subject key identifier: 77:24:B4:00:C2:B9:76:0F:05:0A:87:C7:CD:FC:74:E7:55:2A:A2:7B Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05 Certificate issuer: /CN=8bb016ccc05c5765746b3f7642d043e811203705 Certificate serial: 019AF1648D6A85BB332438C1D81BE63DA889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft Manifest number: 024B Signing time: Sat 06 Dec 2025 02:01:29 +0000 Manifest this update: Sat 06 Dec 2025 02:01:29 +0000 Manifest next update: Sun 07 Dec 2025 02:01:29 +0000 Files and hashes: 1: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: QTXtfIscb91aiywMwapi4t/B7qx66Ja2KzYZWdGupKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8d:6a:85:bb:33:24:38:c1:d8:1b:e6:3d:a8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705 Validity Not Before: Dec 6 02:01:29 2025 GMT Not After : Dec 7 02:01:29 2025 GMT Subject: CN=7724b400c2b9760f050a87c7cdfc74e7552aa27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:22:39:7c:30:28:70:0e:b5:ab:6b:e8:72: 56:c4:92:33:04:15:b3:49:91:e0:d3:9a:90:c2:8d: 7a:75:c6:c7:01:25:1a:d3:fa:c6:bb:57:13:31:3a: ee:bf:73:b4:3d:d8:38:6f:cd:22:dd:56:ba:74:d3: 3d:ea:b0:58:01:b2:e5:e5:62:0c:a2:46:46:1e:f1: b1:b7:35:f1:3f:d6:2f:de:0d:77:d9:08:b5:dc:3f: 83:e2:1a:db:09:03:e0:49:ed:71:10:ee:d6:b1:aa: d3:dd:30:26:bc:05:10:9f:34:eb:52:6f:40:2b:e7: 28:b1:b6:69:cb:f7:53:a3:f9:2b:c5:c6:39:6a:58: 0a:33:3f:51:c2:d2:27:67:62:ce:6f:f2:0e:7f:6d: b5:8f:6e:21:e5:c5:de:1e:c6:16:32:55:57:5c:db: be:46:66:51:0c:3e:09:a0:cc:9e:87:52:86:cb:9b: c2:e4:10:43:78:c2:7c:45:7b:9d:b2:28:ad:b6:b9: 03:5c:0f:a8:7e:34:b5:f4:08:5a:b5:35:8a:65:59: ab:4f:e6:ec:5e:7a:e4:61:aa:af:3d:19:81:00:4b: 2a:2c:48:f9:4c:e9:9d:6d:a7:a9:5a:87:ad:ce:a3: 48:8a:80:51:5d:61:2a:9f:21:b4:d2:ca:75:ec:ed: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:24:B4:00:C2:B9:76:0F:05:0A:87:C7:CD:FC:74:E7:55:2A:A2:7B X509v3 Authority Key Identifier: keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2f:9b:f6:e9:23:bf:6c:5c:95:52:ae:8e:5a:97:13:c5:bd: 70:23:77:13:69:0a:93:e5:15:b8:fb:a3:f1:19:36:3a:9c:9e: 04:55:31:7e:de:1c:ea:37:65:ee:c7:d0:82:79:ca:6a:eb:b4: 2d:82:5e:6e:2d:f7:fd:5c:b5:22:93:ab:60:6f:1b:5b:f9:e8: b6:21:b1:d5:b2:26:3f:c1:45:f6:c7:93:7c:0e:14:ac:a8:0b: da:ab:3e:fe:7e:3c:14:2d:ae:8c:51:be:ca:ac:67:0e:a8:38: 91:15:62:a6:dd:07:07:9d:ef:03:cc:3d:d2:a7:34:e2:6f:82: 77:8d:ec:b7:95:1a:3e:f6:eb:14:4e:23:e8:c8:81:12:62:8d: 14:ec:e6:91:61:f2:73:fb:59:f3:61:65:5a:20:9c:25:07:f8: c6:3f:12:01:95:cd:88:82:4f:bb:ab:78:5f:33:58:db:b2:ed: b4:e0:b3:58:d8:b7:6e:72:1b:bf:2d:74:2f:9e:4b:b7:06:2a: dc:2e:01:ad:84:dd:8e:9f:c9:5c:2b:d4:3a:8e:25:25:6e:b3: 32:ef:f5:39:c9:95:a2:31:98:88:43:2d:a5:c8:47:16:8b:da: 70:c5:75:32:d4:e8:53:f1:a1:0d:3f:5e:d0:a9:98:9c:0e:26: 28:cb:13:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZI1qhbszJDjB2BvmPaiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYjAxNmNjYzA1YzU3NjU3NDZiM2Y3NjQyZDA0M2U4MTEy MDM3MDUwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD Eyg3NzI0YjQwMGMyYjk3NjBmMDUwYTg3YzdjZGZjNzRlNzU1MmFhMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDgiOXwwKHAOtatr6HJWxJIzBBWz SZHg05qQwo16dcbHASUa0/rGu1cTMTruv3O0Pdg4b80i3Va6dNM96rBYAbLl5WIM okZGHvGxtzXxP9Yv3g132Qi13D+D4hrbCQPgSe1xEO7WsarT3TAmvAUQnzTrUm9A K+cosbZpy/dTo/krxcY5algKMz9RwtInZ2LOb/IOf221j24h5cXeHsYWMlVXXNu+ RmZRDD4JoMyeh1KGy5vC5BBDeMJ8RXudsiittrkDXA+ofjS19AhatTWKZVmrT+bs XnrkYaqvPRmBAEsqLEj5TOmdbaepWoetzqNIioBRXWEqnyG00sp17O1xNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcktADCuXYPBQqHx838dOdVKqJ7MB8GA1UdIwQY MBaAFIuwFszAXFdldGs/dkLQQ+gRIDcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTdBV3pNQmNWMlYwYXo5MlF0QkQ2QkVnTndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMThmZTctZTg2YS00NjZjLWI3MTAt ZmVkNTVlNmU1MmVmLzEvaTdBV3pNQmNWMlYwYXo5MlF0QkQ2QkVnTndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wMThmZTctZTg2YS00NjZjLWI3MTAtZmVkNTVlNmU1MmVm LzEvaTdBV3pNQmNWMlYwYXo5MlF0QkQ2QkVnTndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni+b9ukj v2xclVKujlqXE8W9cCN3E2kKk+UVuPuj8Rk2OpyeBFUxft4c6jdl7sfQgnnKauu0 LYJebi33/Vy1IpOrYG8bW/notiGx1bImP8FF9seTfA4UrKgL2qs+/n48FC2ujFG+ yqxnDqg4kRVipt0HB53vA8w90qc04m+Cd43st5UaPvbrFE4j6MiBEmKNFOzmkWHy c/tZ82FlWiCcJQf4xj8SAZXNiIJPu6t4XzNY27LttOCzWNi3bnIbvy10L55LtwYq 3C4BrYTdjp/JXCvUOo4lJW6zMu/1OcmVojGYiEMtpchHFovacMV1MtToU/GhDT9e 0KmYnA4mKMsTuw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:52 2025 by rpki-client