This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json) Hash identifier: HLTAjy5HhkMkPupmhe0KPuWoR9LRd5X7BmqCJrIFwwA= Subject key identifier: CD:AF:1B:07:C8:E3:9F:26:54:D0:22:72:C5:EA:31:7F:EF:AD:7C:FF Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c Certificate serial: 019AF31BFE8E80CED22BF7DE1CE4604D2F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:29 +0000 Manifest this update: Sat 06 Dec 2025 10:01:29 +0000 Manifest next update: Sun 07 Dec 2025 10:01:29 +0000 Files and hashes: 1: L6BmwALeicC8VgFsadJhZLZOhdw.roa (hash: jlbIuI51ox4C1wny8/EXm0XGuTxyG7RmZ5JEvI5tNCo=) 2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: BmfkDU9vvHMG1e1k4xn0Wf5aP77AKAqCVap1fLgRSzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fe:8e:80:ce:d2:2b:f7:de:1c:e4:60:4d:2f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c Validity Not Before: Dec 6 10:01:29 2025 GMT Not After : Dec 7 10:01:29 2025 GMT Subject: CN=cdaf1b07c8e39f2654d02272c5ea317fefad7cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:09:36:9b:bc:05:b4:c4:c4:e9:ba:e1:87: 02:61:c9:77:43:cf:f1:3d:ad:a3:95:06:a3:a8:cb: e3:42:a3:69:2d:fd:2b:4d:18:46:be:ec:5d:c1:29: e1:f0:f8:f7:4d:66:fa:39:c0:17:3f:42:5a:82:ae: c0:86:57:28:13:ac:5c:11:d2:26:4c:25:0b:d8:c6: fc:66:20:03:97:1c:a0:7f:24:91:26:c6:e7:b8:c7: 29:e7:99:82:00:b7:01:7d:ec:db:2d:32:11:8b:d7: 6b:bc:ff:b1:57:6d:8b:ae:da:4b:35:74:8e:53:16: f6:1e:9c:08:52:09:eb:96:bf:3e:b3:89:3e:80:58: ef:04:8d:cc:03:ce:1c:54:27:22:cd:56:7e:0e:c4: 09:52:38:af:fd:ae:de:31:1e:cf:7f:94:77:fd:11: 4b:ee:eb:7b:05:dd:3d:c8:83:ae:97:75:6a:94:e4: 18:45:11:ae:2a:7e:fb:a8:2f:80:f8:d6:fb:e0:50: 93:3d:67:2e:4b:d6:eb:9c:cd:4b:2f:fd:f3:cf:ad: 72:42:fc:61:e5:4c:54:9b:43:40:88:e1:13:44:4c: f4:be:c6:f6:9c:c6:7f:b6:68:d7:6b:f5:4c:48:ac: ff:f6:7e:12:86:af:87:66:5d:1b:a5:0c:6f:7b:54: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AF:1B:07:C8:E3:9F:26:54:D0:22:72:C5:EA:31:7F:EF:AD:7C:FF X509v3 Authority Key Identifier: keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4a:ce:5c:77:c4:e6:a9:99:48:5c:a9:b2:9c:c9:81:f5:ce: 0c:65:f5:e6:e8:35:89:66:f2:9d:87:95:6f:65:a5:87:33:40: 2d:c3:e9:67:ed:c7:7b:72:cc:54:61:7f:6a:57:23:25:6d:4d: aa:27:37:f0:c6:e9:e7:8d:78:5a:aa:b8:9e:67:9f:cb:04:b3: 25:9c:0f:b3:ea:38:44:4b:a1:f2:cb:97:2b:8e:d9:9d:31:f9: 5b:63:db:8d:9e:df:30:0b:4c:09:c7:c0:2b:52:55:7c:b3:72: 3f:3b:69:62:59:75:eb:f7:10:25:ce:ae:53:c7:37:a2:2d:de: 8b:d4:04:b3:0b:24:6c:1a:24:5e:f4:a7:fe:c7:90:b5:03:35: 82:32:0b:d1:77:39:dc:42:99:5b:28:38:3f:21:63:98:c9:77: f0:8a:21:5d:7e:50:ab:87:7d:7b:09:b1:72:a1:26:06:e4:50: 7c:32:7d:d9:52:49:9b:8a:e8:d4:5d:5e:0b:9c:c9:56:c5:d2: 73:38:d1:e9:3e:52:46:7d:97:ac:ed:f8:33:e6:a1:66:f0:95: 8a:a1:ec:9d:e4:62:85:a9:c5:37:58:d6:7e:58:87:56:70:df: 71:c1:e3:7c:ab:b0:07:49:eb:53:8b:c5:cd:54:d0:33:b2:e6: b9:00:6f:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/6OgM7SK/feHORgTS9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYjc3MzgxODUxMjQ5MGE1MDBhZDg0M2VhMmFlNzE3ZWYy MWIxNGMwHhcNMjUxMjA2MTAwMTI5WhcNMjUxMjA3MTAwMTI5WjAzMTEwLwYDVQQD EyhjZGFmMWIwN2M4ZTM5ZjI2NTRkMDIyNzJjNWVhMzE3ZmVmYWQ3Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJoJNpu8BbTExOm64YcCYcl3Q8/x Pa2jlQajqMvjQqNpLf0rTRhGvuxdwSnh8Pj3TWb6OcAXP0Jagq7AhlcoE6xcEdIm TCUL2Mb8ZiADlxygfySRJsbnuMcp55mCALcBfezbLTIRi9drvP+xV22LrtpLNXSO Uxb2HpwIUgnrlr8+s4k+gFjvBI3MA84cVCcizVZ+DsQJUjiv/a7eMR7Pf5R3/RFL 7ut7Bd09yIOul3VqlOQYRRGuKn77qC+A+Nb74FCTPWcuS9brnM1LL/3zz61yQvxh 5UxUm0NAiOETREz0vsb2nMZ/tmjXa/VMSKz/9n4Shq+HZl0bpQxve1Tp0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2vGwfI458mVNAicsXqMX/vrXz/MB8GA1UdIwQY MBaAFIu3c4GFEkkKUArYQ+oq5xfvIbFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUt NTJiM2Y2OGRjMGMyLzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUtNTJiM2Y2OGRjMGMy LzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkrOXHfE 5qmZSFypspzJgfXODGX15ug1iWbynYeVb2WlhzNALcPpZ+3He3LMVGF/alcjJW1N qic38Mbp5414Wqq4nmefywSzJZwPs+o4REuh8suXK47ZnTH5W2PbjZ7fMAtMCcfA K1JVfLNyPztpYll16/cQJc6uU8c3oi3ei9QEswskbBokXvSn/seQtQM1gjIL0Xc5 3EKZWyg4PyFjmMl38IohXX5Qq4d9ewmxcqEmBuRQfDJ92VJJm4ro1F1eC5zJVsXS czjR6T5SRn2XrO34M+ahZvCViqHsneRihanFN1jWfliHVnDfccHjfKuwB0nrU4vF zVTQM7LmuQBv2w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:52 2025 by rpki-client