This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json) Hash identifier: Qi0CqHeJpycamvrnM2VOVCcgRsNBq7MKOl12UdDSAuU= Subject key identifier: 4F:4E:82:B7:89:08:D2:66:D7:48:9A:09:09:CD:6A:4E:BD:7B:13:79 Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945 Certificate serial: 019AF12EEB6192896B928028DB6D3BE48AAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft Manifest number: 0674 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: Bp3d6VsnDq1b9B93zcwmSOpFonWSG+VFvo3/Vvggl3g=) 2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:eb:61:92:89:6b:92:80:28:db:6d:3b:e4:8a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=4f4e82b78908d266d7489a0909cd6a4ebd7b1379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:b2:22:29:e4:4f:9b:58:09:6e:00:d0:2d: 8f:23:f7:26:bb:e7:db:a0:d5:1c:1f:ce:80:3e:93: fe:8f:72:81:79:bf:43:2f:3a:86:be:cb:c8:4e:7a: c3:1e:18:d8:5e:d8:ca:d6:a2:71:61:3f:fd:20:96: 6a:7f:36:03:4b:75:bc:bf:26:7e:89:90:28:95:45: 15:c7:79:f6:29:43:ef:d3:74:03:03:30:30:f9:68: bf:6b:1e:c6:8f:1d:a5:8a:8d:c8:2b:aa:b4:d4:10: fd:6a:96:ae:89:c0:bb:fa:81:ed:39:f9:dd:d4:dd: 4d:8d:a1:d5:56:51:90:f6:68:72:be:1e:ec:b4:ae: d0:5a:a6:22:cd:2a:66:47:03:e0:48:dc:db:13:a8: fd:87:aa:ce:de:87:4d:6e:10:7b:9e:4f:49:83:5f: 7e:80:f5:a4:0d:6c:d4:ee:91:ed:e4:ec:41:6d:d0: 07:9f:38:5e:d4:4c:98:66:b3:5c:0e:cb:4c:65:b3: f9:5a:ff:07:df:35:76:ea:de:92:1e:c7:f1:22:7d: 3a:bc:3d:d1:ef:ba:a2:7a:aa:62:e4:46:61:a3:e4: 51:18:87:62:c9:3b:01:8c:c6:04:c1:8c:59:3e:73: fe:7e:3e:6f:b3:6b:d1:1b:3a:0a:d1:c4:a4:b9:59: a6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4E:82:B7:89:08:D2:66:D7:48:9A:09:09:CD:6A:4E:BD:7B:13:79 X509v3 Authority Key Identifier: keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9b:2f:9b:ce:e1:4a:c6:86:24:94:fe:0d:bf:58:ab:6d:16: 1f:3f:42:6b:ba:8f:bf:aa:ce:e2:39:69:fc:43:d7:cc:b1:27: 83:9b:70:52:89:d1:c8:5c:4b:cc:89:e1:69:ef:24:fc:f9:de: ce:29:17:81:57:d0:ba:1a:70:0c:7a:b9:50:a1:63:c9:86:25: d4:8d:71:8c:41:f0:d8:10:e1:b4:54:3a:aa:be:78:2b:a2:8f: 5f:1f:23:7b:48:83:31:7c:ca:50:39:5a:1a:29:7d:2c:d9:60: 8c:3e:e8:37:54:33:7a:e8:ce:f4:fe:ce:aa:0c:61:7e:fd:d7: 03:35:bb:32:b1:cf:cd:d8:db:95:37:c0:8b:25:69:72:da:b9: 22:5c:5b:35:d9:ec:86:84:ed:d3:d7:9c:0d:10:81:7a:5d:c1: 18:d0:9d:95:78:0a:72:b1:f5:fb:8e:6a:39:d5:01:15:d4:cc: e2:9d:f0:72:62:5e:ec:c5:47:24:36:72:50:3b:e7:e6:dc:42: 0e:ae:cf:c2:f6:1d:65:47:be:a4:c7:d8:1d:d6:31:e5:b9:77: 32:d5:3a:15:5d:ce:d8:6e:3f:c1:71:ef:e9:64:2b:96:36:f0: 72:b0:94:33:4e:18:00:4d:b7:c6:50:b9:98:49:c1:ad:fc:9b: f4:1a:c9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuthkolrkoAo22075IqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy MGM5NDUwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD Eyg0ZjRlODJiNzg5MDhkMjY2ZDc0ODlhMDkwOWNkNmE0ZWJkN2IxMzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzemyIinkT5tYCW4A0C2PI/cmu+fb oNUcH86APpP+j3KBeb9DLzqGvsvITnrDHhjYXtjK1qJxYT/9IJZqfzYDS3W8vyZ+ iZAolUUVx3n2KUPv03QDAzAw+Wi/ax7Gjx2lio3IK6q01BD9apauicC7+oHtOfnd 1N1NjaHVVlGQ9mhyvh7stK7QWqYizSpmRwPgSNzbE6j9h6rO3odNbhB7nk9Jg19+ gPWkDWzU7pHt5OxBbdAHnzhe1EyYZrNcDstMZbP5Wv8H3zV26t6SHsfxIn06vD3R 77qieqpi5EZho+RRGIdiyTsBjMYEwYxZPnP+fj5vs2vRGzoK0cSkuVmmMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9OgreJCNJm10iaCQnNak69exN5MB8GA1UdIwQY MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct MjI2YjhkNGE1ZjYwLzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJsvm87h SsaGJJT+Db9Yq20WHz9Ca7qPv6rO4jlp/EPXzLEng5twUonRyFxLzInhae8k/Pne zikXgVfQuhpwDHq5UKFjyYYl1I1xjEHw2BDhtFQ6qr54K6KPXx8je0iDMXzKUDla Gil9LNlgjD7oN1QzeujO9P7Oqgxhfv3XAzW7MrHPzdjblTfAiyVpctq5IlxbNdns hoTt09ecDRCBel3BGNCdlXgKcrH1+45qOdUBFdTM4p3wcmJe7MVHJDZyUDvn5txC Dq7PwvYdZUe+pMfYHdYx5bl3MtU6FV3O2G4/wXHv6WQrljbwcrCUM04YAE23xlC5 mEnBrfyb9BrJrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:55 2025 by rpki-client