This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft File: r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json) Hash identifier: lW1oLaYwf/L+DOcc4ilFBjJOYnozESuT8M1fGmOn0iI= Subject key identifier: 42:0C:39:08:93:BE:72:06:05:CF:A4:4B:DE:32:67:4A:74:53:E9:57 Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52 Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652 Certificate serial: 019AF31B74633677DB72D00537054C009419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:00:53 +0000 Manifest this update: Sat 06 Dec 2025 10:00:53 +0000 Manifest next update: Sun 07 Dec 2025 10:00:53 +0000 Files and hashes: 1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=) 2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: +ybtDceT/SuCUe+m9H96zPv/2FUTVHHH52rxIKcSJEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:74:63:36:77:db:72:d0:05:37:05:4c:00:94:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652 Validity Not Before: Dec 6 10:00:53 2025 GMT Not After : Dec 7 10:00:53 2025 GMT Subject: CN=420c390893be720605cfa44bde32674a7453e957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:91:55:4a:e9:08:05:9b:14:da:dc:19:83: d8:dc:e8:27:ed:e0:ae:10:00:64:5b:65:41:9c:b1: 76:c4:83:02:ef:8c:9f:19:9e:3d:c5:49:f6:0f:0d: e1:38:3a:bf:3e:4e:27:df:88:41:96:eb:4f:80:c0: 69:67:cb:de:25:11:31:85:e0:b6:a0:89:86:56:15: 06:f1:73:3b:6b:12:f9:95:fc:b0:db:89:6c:0d:15: ac:53:f2:06:9e:f6:3d:10:6b:a6:a8:cd:18:24:ef: a9:13:18:2a:bd:bd:c9:2e:12:04:f5:51:9a:ed:6e: 02:73:a1:3c:59:9b:65:22:e3:44:0d:2b:19:fe:85: c1:05:55:c5:72:f6:6c:00:3c:e8:5d:ef:68:c0:98: a9:72:2f:f9:56:1c:37:d0:4b:e6:46:74:90:1e:19: 2d:a0:4f:df:95:ff:49:8a:24:b4:f4:c6:01:3d:2b: 4b:0e:c6:64:3e:44:ac:2c:f7:24:94:29:3c:c3:1c: ad:1b:c3:a9:d9:90:d0:f2:6b:f8:e6:e9:86:dc:83: ff:fa:0d:48:19:ee:fb:6c:7d:ca:68:97:27:50:60: 9d:dc:66:99:21:26:69:e7:65:e2:1d:21:76:b4:b5: 51:b6:00:a5:86:d4:3b:6b:46:5b:b1:b7:49:c1:b7: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0C:39:08:93:BE:72:06:05:CF:A4:4B:DE:32:67:4A:74:53:E9:57 X509v3 Authority Key Identifier: keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ab:85:c1:77:a5:31:5a:3a:82:8d:5d:93:10:8a:64:95:74: f4:7e:b9:22:ad:a9:d0:04:10:b0:59:88:06:4a:4c:48:c8:f2: c4:79:4e:6a:e4:01:41:04:c4:73:b8:c6:62:bf:a0:02:79:3b: 8d:b0:84:2e:9b:0f:56:06:94:9f:cf:7b:03:e1:bf:ff:5f:3f: 7d:0e:22:b5:73:70:79:61:2a:21:5d:02:6f:11:50:b1:89:a0: 08:8a:1c:5a:bb:8b:2c:50:29:08:12:aa:fa:ce:da:69:b7:a4: 3b:8a:90:2e:bc:22:28:f5:35:35:97:c7:71:b4:af:6a:6c:d3: 2c:50:8c:02:75:3c:e9:87:5f:5d:d4:3f:2b:a7:83:c2:74:c1: 34:e3:da:3a:f6:6f:5a:f6:34:11:ad:38:a1:d6:ed:9e:a6:ff: cf:98:f3:51:31:c6:94:69:db:30:3e:81:e9:a8:0e:89:00:11: 73:13:bb:8f:84:89:6b:ce:43:c5:94:f7:e3:65:7b:09:29:3c: 1b:80:4a:5d:9a:b4:eb:51:74:a4:70:e9:fc:0e:cf:21:bd:bd: af:97:f2:7f:30:f0:8f:b5:34:23:72:e3:8e:32:50:ee:ff:89: a1:7a:39:1f:14:50:37:87:e7:07:43:d7:ca:9e:68:71:61:b2: aa:71:21:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3RjNnfbctAFNwVMAJQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYmExMGIwYTY3NmQzZTFmYWI1NjUyODQzMGZhYzg5MWEw ODM2NTIwHhcNMjUxMjA2MTAwMDUzWhcNMjUxMjA3MTAwMDUzWjAzMTEwLwYDVQQD Eyg0MjBjMzkwODkzYmU3MjA2MDVjZmE0NGJkZTMyNjc0YTc0NTNlOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr2RVUrpCAWbFNrcGYPY3Ogn7eCu EABkW2VBnLF2xIMC74yfGZ49xUn2Dw3hODq/Pk4n34hBlutPgMBpZ8veJRExheC2 oImGVhUG8XM7axL5lfyw24lsDRWsU/IGnvY9EGumqM0YJO+pExgqvb3JLhIE9VGa 7W4Cc6E8WZtlIuNEDSsZ/oXBBVXFcvZsADzoXe9owJipci/5Vhw30EvmRnSQHhkt oE/flf9JiiS09MYBPStLDsZkPkSsLPcklCk8wxytG8Op2ZDQ8mv45umG3IP/+g1I Ge77bH3KaJcnUGCd3GaZISZp52XiHSF2tLVRtgClhtQ7a0ZbsbdJwbfnpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIMOQiTvnIGBc+kS94yZ0p0U+lXMB8GA1UdIwQY MBaAFK+6ELCmdtPh+rVlKEMPrIkaCDZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdvUXNLWjIwLUg2dFdVb1F3LXNpUm9JTmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYTljOWYtMGMwNy00Nzc2LWFlNjUt ZTAyN2RjYjFkMTg2LzEvcjdvUXNLWjIwLUg2dFdVb1F3LXNpUm9JTmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYTljOWYtMGMwNy00Nzc2LWFlNjUtZTAyN2RjYjFkMTg2 LzEvcjdvUXNLWjIwLUg2dFdVb1F3LXNpUm9JTmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGquFwXel MVo6go1dkxCKZJV09H65Iq2p0AQQsFmIBkpMSMjyxHlOauQBQQTEc7jGYr+gAnk7 jbCELpsPVgaUn897A+G//18/fQ4itXNweWEqIV0CbxFQsYmgCIocWruLLFApCBKq +s7aabekO4qQLrwiKPU1NZfHcbSvamzTLFCMAnU86YdfXdQ/K6eDwnTBNOPaOvZv WvY0Ea04odbtnqb/z5jzUTHGlGnbMD6B6agOiQARcxO7j4SJa85DxZT342V7CSk8 G4BKXZq061F0pHDp/A7PIb29r5fyfzDwj7U0I3LjjjJQ7v+JoXo5HxRQN4fnB0PX yp5ocWGyqnEhdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:26 2025 by rpki-client