This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json) Hash identifier: 0Pp786GtB5sFQibyKwoBkv3BZiydgSJhk7aP8Fyzmmo= Subject key identifier: 7E:A6:67:C5:22:38:E2:3D:83:E3:9A:3B:26:9A:F9:FD:95:35:8A:87 Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6 Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6 Certificate serial: 019AF2767073C22E497B853E076C16DE369F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft Manifest number: 0E1D Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: JDURHrDTG1i1uyInRiRvVlZRLAxL0YxVm7MiC5j3JmI=) 2: x5BCA2nXSzjfqsyhw28GUZqlIA0.roa (hash: XYC94H5SlTsc3HXQBpsVEd85N9+lJ9Ig2x3jNjrZbWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:70:73:c2:2e:49:7b:85:3e:07:6c:16:de:36:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6 Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=7ea667c52238e23d83e39a3b269af9fd95358a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:50:51:72:74:a6:db:4b:e5:51:ba:5d:34:2a: 0e:6f:39:92:82:25:59:d1:53:96:74:57:93:e7:61: 23:d2:28:22:6f:91:10:bc:6a:e6:ad:40:f3:de:8a: d1:c5:26:12:35:3c:3b:f8:9a:97:40:db:0d:6f:0a: 22:1a:25:55:3d:bc:75:99:d7:21:65:4d:bc:eb:2b: af:ce:f1:c3:2a:1d:33:f4:72:6b:fe:f8:27:7f:0e: 62:ea:4e:04:2e:4b:68:32:f7:17:9a:da:36:f0:3f: e2:f9:49:2a:9d:02:b0:c2:b2:ac:7a:71:2a:37:c5: 19:3d:8f:42:43:60:ce:de:2e:60:13:07:be:cb:2f: f9:c4:90:b2:09:83:d6:97:4d:61:52:a7:e2:f2:a5: 70:ca:9c:31:90:3a:25:cf:d8:4e:da:ad:ee:b5:dd: 1f:e4:eb:1c:c0:63:5b:98:bf:08:e9:6e:bd:2c:f0: 65:ab:75:38:12:6f:2c:89:e8:c4:dc:6c:e7:13:27: b2:48:fb:5e:7d:b8:e1:94:f5:86:73:fe:12:8d:98: 25:27:39:b2:65:10:a6:a8:9e:01:f4:2f:41:2d:51: 6e:86:22:e8:b1:e9:f3:5d:73:b5:aa:82:49:85:8f: 58:5c:66:0b:11:88:6c:30:0f:b1:88:ab:4e:84:97: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A6:67:C5:22:38:E2:3D:83:E3:9A:3B:26:9A:F9:FD:95:35:8A:87 X509v3 Authority Key Identifier: keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:68:ee:d5:60:45:a3:4f:6e:ee:2f:75:bf:01:4e:30:f8:6b: 3d:2f:66:62:47:5a:63:1a:82:93:91:a1:7c:ee:81:d4:b3:d7: cc:19:fd:93:7c:4c:71:ac:80:71:1b:b2:ab:dc:8b:b6:be:08: fa:10:46:8c:d0:d6:49:80:9b:6e:58:97:11:c1:bf:37:74:88: b8:b5:5a:86:b0:bb:4d:e6:ed:62:f0:00:91:11:ff:f8:b8:2d: 8d:39:9a:72:18:56:31:7a:43:ba:ba:0a:91:21:ce:d7:81:e9: 2c:d1:be:2c:52:b2:30:cd:6a:18:30:1e:af:9b:ac:5f:b3:12: 34:ca:32:57:5b:3c:62:a6:e4:08:87:05:b6:cc:40:88:80:98: e8:67:00:10:b0:c7:c9:c9:10:a2:1e:bb:db:fd:d4:08:15:d8: e8:05:50:d8:38:3a:af:c4:51:3c:61:f6:f4:c3:21:fb:94:25: 31:21:01:fb:4a:5b:a0:37:46:b0:a7:f6:4d:9d:ea:71:de:2b: 08:44:6b:c6:58:b8:b0:4f:8d:e6:f3:b9:c9:2c:12:53:d8:19: eb:e8:82:9c:84:bb:3e:bb:8a:33:c8:1c:55:67:af:07:bc:36: a1:dd:fd:81:c0:39:6f:04:c0:42:58:c8:52:40:97:61:a5:a3: 41:af:03:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnBzwi5Je4U+B2wW3jafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOGU3MDk3OTkwZTVhNjcxNzhlMjk3ODc1YTBkOWY0NjA1 ODkyYTYwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD Eyg3ZWE2NjdjNTIyMzhlMjNkODNlMzlhM2IyNjlhZjlmZDk1MzU4YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFBRcnSm20vlUbpdNCoObzmSgiVZ 0VOWdFeT52Ej0igib5EQvGrmrUDz3orRxSYSNTw7+JqXQNsNbwoiGiVVPbx1mdch ZU286yuvzvHDKh0z9HJr/vgnfw5i6k4ELktoMvcXmto28D/i+UkqnQKwwrKsenEq N8UZPY9CQ2DO3i5gEwe+yy/5xJCyCYPWl01hUqfi8qVwypwxkDolz9hO2q3utd0f 5OscwGNbmL8I6W69LPBlq3U4Em8siejE3GznEyeySPtefbjhlPWGc/4SjZglJzmy ZRCmqJ4B9C9BLVFuhiLosenzXXO1qoJJhY9YXGYLEYhsMA+xiKtOhJcyMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6mZ8UiOOI9g+OaOyaa+f2VNYqHMB8GA1UdIwQY MBaAFHyOcJeZDlpnF44peHWg2fRgWJKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWNhZjctZTBjYS00MzQ0LTlkZmQt YThhYzQxODA5ZjVmLzEvZkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84YWNhZjctZTBjYS00MzQ0LTlkZmQtYThhYzQxODA5ZjVm LzEvZkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2ju1WBF o09u7i91vwFOMPhrPS9mYkdaYxqCk5GhfO6B1LPXzBn9k3xMcayAcRuyq9yLtr4I +hBGjNDWSYCbbliXEcG/N3SIuLVahrC7TebtYvAAkRH/+LgtjTmachhWMXpDuroK kSHO14HpLNG+LFKyMM1qGDAer5usX7MSNMoyV1s8YqbkCIcFtsxAiICY6GcAELDH yckQoh672/3UCBXY6AVQ2Dg6r8RRPGH29MMh+5QlMSEB+0pboDdGsKf2TZ3qcd4r CERrxli4sE+N5vO5ySwSU9gZ6+iCnIS7PruKM8gcVWevB7w2od39gcA5bwTAQljI UkCXYaWjQa8DMg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:31 2025 by rpki-client