This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json) Hash identifier: sXw71xz6gzMQw9asObY6pvy3tNZtKUdxhurqHtkqtsk= Subject key identifier: 7E:E5:40:84:36:CF:4D:00:E3:60:67:C2:0B:1B:28:FC:84:E8:4F:78 Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019AF19B29E69E246AAD5492370521F5E2F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft Manifest number: 171A Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=) 2: QsA63htkLwfYnYHs-Kq4o8mj9CE.roa (hash: rn3uqwJBUFxLOERoWp4bxdCoGJiytcYNcQK3zAQq29M=) 3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=) 4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=) 5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=) 6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: jnc3k2Z55EQ6TAV05sVjCBrbCPLyUQdMwv4teVaWt3U=) 7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=) 8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=) 9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:29:e6:9e:24:6a:ad:54:92:37:05:21:f5:e2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=7ee5408436cf4d00e36067c20b1b28fc84e84f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:59:d0:00:16:c3:ad:98:5c:7f:9c:6d:21: c2:20:c7:0b:77:05:dc:c9:2c:81:24:6f:39:cc:da: 66:03:5e:91:2f:c4:0c:af:32:f9:71:57:ef:d8:95: 16:eb:c7:ad:b7:ec:a2:a6:8a:50:b4:58:a6:20:ec: ca:32:ac:70:f2:ac:a5:1f:80:79:1a:6c:ca:f8:ca: d6:10:5f:22:bf:d3:3f:aa:af:b7:73:0e:b1:18:dd: ff:37:ce:3e:ec:44:ca:47:a1:c1:3b:63:93:38:19: 2a:0f:63:e7:32:41:c7:14:fb:1d:83:e9:ef:cf:1c: ab:29:a5:88:f1:22:73:27:28:86:0f:aa:e7:4b:21: b2:4b:f3:57:76:ef:d6:7c:8f:92:e8:bf:d5:fa:f7: 41:a2:45:d5:7f:51:98:07:43:7a:39:28:e3:ce:fb: 23:7a:25:f1:06:13:33:03:5a:46:2a:84:43:79:57: 0c:23:e3:31:c8:cc:98:87:7d:ab:1c:a1:e0:65:bd: 45:43:de:0b:ae:eb:2a:47:78:f3:a0:18:8f:36:1b: c1:ff:ed:19:4b:cc:5c:e0:a5:0f:2a:84:28:cc:06: 45:3d:3c:4d:b5:f4:f5:b1:95:0d:07:f3:b7:07:51: 09:a5:1a:3a:3e:39:cb:21:51:09:f0:13:b9:7e:0a: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E5:40:84:36:CF:4D:00:E3:60:67:C2:0B:1B:28:FC:84:E8:4F:78 X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:48:75:27:10:f5:cc:49:d4:ff:8f:11:c2:d5:39:44:ce:0c: ec:13:39:3f:30:47:76:ae:db:bf:f1:8c:ff:12:c0:7c:0b:c6: a4:ea:13:8f:fe:ce:19:81:bf:92:00:97:e7:43:de:21:9c:b6: ee:5d:4c:e4:99:6c:9f:dd:a0:9d:61:b0:c7:48:09:5d:8d:91: c2:3a:5a:c1:c3:c0:da:e0:ae:ee:d7:78:1b:1d:15:e5:f4:d0: 4e:47:9f:51:4c:07:13:96:79:be:5a:40:75:93:78:4e:fb:e1: fe:02:81:c2:ef:00:8e:96:b1:ec:cd:e4:f1:a4:a6:5b:6f:80: f9:e7:bd:61:c1:b0:fe:28:2f:2d:a6:55:a8:1a:86:9a:46:83: 9b:a6:82:ef:1f:08:71:a3:d2:d9:4a:5a:14:f6:48:b0:ce:19: fc:e5:0e:32:11:62:6b:68:52:27:2d:59:ec:0c:4f:78:97:82: e5:f2:4f:87:b1:47:ef:c9:60:87:e3:87:dc:9c:e4:d9:7e:b9: 46:04:95:65:1f:3d:2d:ab:86:38:f5:64:2e:0d:a9:1d:e0:10: 2c:55:94:81:92:7e:87:cb:1b:35:16:f7:4c:4f:e8:80:ba:b8: f7:a3:0f:d2:12:d8:03:fa:a4:ee:f5:86:fa:83:4f:5c:a9:6a: 3f:95:60:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmynmniRqrVSSNwUh9eLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD Eyg3ZWU1NDA4NDM2Y2Y0ZDAwZTM2MDY3YzIwYjFiMjhmYzg0ZTg0Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+9Z0AAWw62YXH+cbSHCIMcLdwXc ySyBJG85zNpmA16RL8QMrzL5cVfv2JUW68ett+yipopQtFimIOzKMqxw8qylH4B5 GmzK+MrWEF8iv9M/qq+3cw6xGN3/N84+7ETKR6HBO2OTOBkqD2PnMkHHFPsdg+nv zxyrKaWI8SJzJyiGD6rnSyGyS/NXdu/WfI+S6L/V+vdBokXVf1GYB0N6OSjjzvsj eiXxBhMzA1pGKoRDeVcMI+MxyMyYh32rHKHgZb1FQ94LrusqR3jzoBiPNhvB/+0Z S8xc4KUPKoQozAZFPTxNtfT1sZUNB/O3B1EJpRo6PjnLIVEJ8BO5fgovbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7lQIQ2z00A42BnwgsbKPyE6E94MB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEh1JxD1 zEnU/48RwtU5RM4M7BM5PzBHdq7bv/GM/xLAfAvGpOoTj/7OGYG/kgCX50PeIZy2 7l1M5Jlsn92gnWGwx0gJXY2RwjpawcPA2uCu7td4Gx0V5fTQTkefUUwHE5Z5vlpA dZN4Tvvh/gKBwu8Ajpax7M3k8aSmW2+A+ee9YcGw/igvLaZVqBqGmkaDm6aC7x8I caPS2UpaFPZIsM4Z/OUOMhFia2hSJy1Z7AxPeJeC5fJPh7FH78lgh+OH3Jzk2X65 RgSVZR89LauGOPVkLg2pHeAQLFWUgZJ+h8sbNRb3TE/ogLq496MP0hLYA/qk7vWG +oNPXKlqP5VglQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:38 2025 by rpki-client