This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft File: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json) Hash identifier: GtvwcIO/2Y/9w4V3iiof9T2+yUyTy/2tWNLIJ8V3Ivs= Subject key identifier: 06:BC:71:62:56:14:0A:E0:AE:99:91:25:CE:7A:F3:D5:63:FD:26:2B Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05 Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105 Certificate serial: 019AF164153D1AA697CC0D213DC49E66272C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: 6heBkyALCUUxhFNrBE/yAuxIdMX5lr9BqHd7XRUbxNU=) 2: BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa (hash: r1MEUEAOwAoEFh1pzdmgOC6wzXGzNLeScD3RSXz3sR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:15:3d:1a:a6:97:cc:0d:21:3d:c4:9e:66:27:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=06bc716256140ae0ae999125ce7af3d563fd262b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:22:7f:7a:7b:2d:22:45:41:85:0a:fc:3f: bb:f3:16:b7:6e:18:2a:ab:6d:f5:0c:ff:8c:8f:67: 07:66:6a:e6:8c:65:9f:7f:bd:d9:aa:39:30:a6:53: 42:5f:7e:ee:f8:ed:f8:38:46:26:ab:18:09:46:22: d2:36:38:c3:19:78:71:79:ce:6e:68:b6:0f:36:90: 60:bb:97:1a:01:26:5d:a8:ad:89:7a:40:8b:90:c7: fc:6c:3c:3f:d6:88:88:a4:c5:50:80:69:4f:0d:7e: f7:a9:85:0d:ef:59:28:07:46:68:af:75:28:22:d2: 08:9c:c9:f1:e2:34:64:3c:ca:b4:21:1e:92:08:e3: 45:b6:c4:f5:db:e4:3f:0c:d1:77:50:fd:3a:6e:d5: d1:b9:7b:ae:14:e9:e1:c2:96:58:79:3b:26:29:40: a4:a4:51:9f:d1:40:49:84:f6:0e:8e:66:f5:c7:52: 2b:31:09:ed:d4:f9:4b:cb:34:cf:2f:a2:8b:c9:00: 67:9e:c3:19:46:2e:f8:b3:39:7b:39:3f:17:e4:a3: 4c:9f:b2:bb:d6:4d:c9:16:78:0b:70:30:d2:e7:fe: ac:6b:f1:fe:89:7e:30:4a:5c:d6:12:26:dd:45:7d: 4b:6a:48:1c:e1:56:4c:26:a4:4d:fe:03:70:31:e1: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BC:71:62:56:14:0A:E0:AE:99:91:25:CE:7A:F3:D5:63:FD:26:2B X509v3 Authority Key Identifier: keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:76:f3:d8:27:a6:e1:87:68:09:4d:d9:22:4f:a2:aa:cb:3a: 93:19:da:b7:db:e3:f3:58:ee:29:d2:a5:21:9d:be:8d:7a:c8: 20:7d:ae:7b:2a:41:93:d9:b2:32:8d:24:22:8b:45:fe:18:1d: 4a:8c:33:fc:8c:35:cf:b9:b8:d7:da:11:af:db:fe:b3:84:5f: be:eb:1c:33:b0:18:6b:35:31:e8:fe:d3:db:92:5d:59:de:48: 28:11:1f:1c:2b:b0:8e:c4:e4:2c:8c:48:e9:9a:9b:99:96:e1: 67:d0:23:1d:81:c1:cd:1e:b7:cb:08:6a:67:68:32:5d:cd:6c: 41:c3:b5:7b:59:cd:e0:1f:a0:d9:88:c1:8b:56:3a:63:73:32: 94:c7:1e:91:27:df:22:47:3f:48:45:ea:b8:80:0f:63:3c:22: a4:c0:ff:ea:10:32:80:54:da:0f:01:44:5a:8b:1e:a5:1f:32: 01:b7:36:15:9f:ca:fa:f8:7c:cb:4d:e2:8a:d8:7b:bc:5f:61: 36:f7:b5:58:ef:e9:cc:9c:4c:b8:23:43:85:2d:3b:80:cb:19: e7:d3:1b:4a:c5:80:27:c9:cf:35:f1:2a:c5:60:1e:5e:bd:d7: b2:50:ea:49:01:26:5f:f0:5e:44:df:cc:e6:e8:59:f3:d9:b6: c3:11:03:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBU9GqaXzA0hPcSeZicsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjdjMmU4NDUzZWQ0YzA5MjljNzUwNGJhZjA0NjA0MzE1 OWQxMDUwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EygwNmJjNzE2MjU2MTQwYWUwYWU5OTkxMjVjZTdhZjNkNTYzZmQyNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBEif3p7LSJFQYUK/D+78xa3bhgq q231DP+Mj2cHZmrmjGWff73ZqjkwplNCX37u+O34OEYmqxgJRiLSNjjDGXhxec5u aLYPNpBgu5caASZdqK2JekCLkMf8bDw/1oiIpMVQgGlPDX73qYUN71koB0Zor3Uo ItIInMnx4jRkPMq0IR6SCONFtsT12+Q/DNF3UP06btXRuXuuFOnhwpZYeTsmKUCk pFGf0UBJhPYOjmb1x1IrMQnt1PlLyzTPL6KLyQBnnsMZRi74szl7OT8X5KNMn7K7 1k3JFngLcDDS5/6sa/H+iX4wSlzWEibdRX1Lakgc4VZMJqRN/gNwMeEpmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAa8cWJWFArgrpmRJc5689Vj/SYrMB8GA1UdIwQY MBaAFPe3wuhFPtTAkpx1BLrwRgQxWdEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYt OGNmMjU0YjQ4Nzk0LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYtOGNmMjU0YjQ4Nzk0 LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXbz2Cem 4YdoCU3ZIk+iqss6kxnat9vj81juKdKlIZ2+jXrIIH2ueypBk9myMo0kIotF/hgd Sowz/Iw1z7m419oRr9v+s4RfvuscM7AYazUx6P7T25JdWd5IKBEfHCuwjsTkLIxI 6ZqbmZbhZ9AjHYHBzR63ywhqZ2gyXc1sQcO1e1nN4B+g2YjBi1Y6Y3MylMcekSff Ikc/SEXquIAPYzwipMD/6hAygFTaDwFEWosepR8yAbc2FZ/K+vh8y03iith7vF9h Nve1WO/pzJxMuCNDhS07gMsZ59MbSsWAJ8nPNfEqxWAeXr3XslDqSQEmX/BeRN/M 5uhZ89m2wxEDQw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:45 2025 by rpki-client