This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json) Hash identifier: +qiXXqR+krV4HT8gF88v66+xoXUc1NHSfAjLjQS9b04= Subject key identifier: F8:9D:4D:03:77:2F:2A:7B:F8:76:4C:41:1A:2A:84:F2:57:55:36:C0 Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8 Certificate serial: 019AF0516C92338617665658A80FC0CC1A20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft Manifest number: 16F3 Signing time: Fri 05 Dec 2025 21:00:59 +0000 Manifest this update: Fri 05 Dec 2025 21:00:59 +0000 Manifest next update: Sat 06 Dec 2025 21:00:59 +0000 Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: xtSN9Wf+WOObamvw6/dx/OewN4oK5kpwV/rj3b/GkHw=) 2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:6c:92:33:86:17:66:56:58:a8:0f:c0:cc:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8 Validity Not Before: Dec 5 21:00:59 2025 GMT Not After : Dec 6 21:00:59 2025 GMT Subject: CN=f89d4d03772f2a7bf8764c411a2a84f2575536c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:3e:2e:24:7f:09:37:db:f3:1d:51:97:10: 83:a3:1b:d9:30:72:72:f7:91:1a:16:63:91:71:df: a9:3c:65:96:ee:7d:66:43:bf:64:fc:8a:15:5f:c0: 50:32:94:c2:56:9c:52:c4:4e:df:16:9f:30:8e:db: 78:79:2b:c5:86:bd:ad:28:31:47:ff:d7:4c:39:bc: f6:6e:dd:cb:35:9d:17:a3:67:39:5b:30:ce:53:cf: ee:b0:6b:8f:b0:63:3a:14:68:da:3f:3f:50:01:ea: 2e:f0:75:a6:ab:34:9e:68:08:86:2f:78:3f:f4:4e: 73:7f:1d:41:f0:76:be:0c:85:87:0b:58:94:14:bc: cd:7d:1c:ed:1e:0f:85:c7:08:21:6e:f7:77:81:b9: bb:12:af:d1:84:f5:43:4f:42:41:90:b0:38:40:5a: 1b:fc:7a:3a:1e:65:a1:d5:68:15:74:d1:70:45:dc: 77:82:b3:06:3d:b6:e3:d3:0a:98:81:9c:4e:ca:70: ae:90:3e:61:8e:60:07:0a:57:e7:f1:69:c4:a2:ed: a6:6f:ec:99:36:91:27:cb:13:95:bb:1f:bf:3f:2c: 1b:07:65:db:dd:ef:f1:f5:e6:76:9e:33:f5:54:d4: 5c:28:e8:e4:16:90:37:4c:fb:98:8b:d6:44:21:4b: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:4D:03:77:2F:2A:7B:F8:76:4C:41:1A:2A:84:F2:57:55:36:C0 X509v3 Authority Key Identifier: keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1c:30:fc:3d:7e:c1:a0:b1:69:51:c7:f6:6d:6d:d4:45:f1: 0f:c1:5a:a6:73:4d:29:a4:82:60:a0:cc:6d:2e:09:a3:b0:47: aa:fd:65:4b:10:f2:46:18:a2:28:63:c1:50:54:7e:36:7e:9e: 75:8e:7a:fa:d3:cd:4f:97:33:f2:74:a5:87:9d:a3:07:25:e6: 77:e3:46:f2:d4:3a:7c:62:7f:3d:28:d8:78:7b:43:24:3e:12: 27:15:58:31:3e:6c:0c:af:0c:4b:8c:1d:42:4a:ab:ba:82:34: 3f:82:00:92:31:9a:dc:5e:1e:cd:1b:fb:66:9c:d5:eb:9f:15: bf:6b:d6:6e:80:ae:81:9f:df:00:92:a4:a4:71:2b:10:0b:5a: 9d:7b:4b:be:f1:d1:d7:31:a5:c4:bc:58:97:87:93:5a:56:16: bb:ff:92:19:d6:37:07:d8:a0:eb:14:06:ca:11:79:9c:07:f2: 22:82:92:69:19:87:7d:20:00:5b:0f:04:5e:2f:ca:9a:0b:b9: 7c:80:e1:20:cb:c4:04:14:24:04:b8:03:0b:d0:56:a6:5c:0a: 4b:1b:de:d3:a9:a2:18:f8:34:d0:7a:7d:13:25:d4:8e:fc:4a: fc:13:d5:a5:ef:48:76:19:cb:b6:44:3f:ce:6c:b1:02:9a:78: 5b:0b:54:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUWySM4YXZlZYqA/AzBogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDc2YTc0ODZiNzg1NDUxMjkzNTcxMTI2YzVmOWRhM2Vj NDg1ZDgwHhcNMjUxMjA1MjEwMDU5WhcNMjUxMjA2MjEwMDU5WjAzMTEwLwYDVQQD EyhmODlkNGQwMzc3MmYyYTdiZjg3NjRjNDExYTJhODRmMjU3NTUzNmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYc+LiR/CTfb8x1RlxCDoxvZMHJy 95EaFmORcd+pPGWW7n1mQ79k/IoVX8BQMpTCVpxSxE7fFp8wjtt4eSvFhr2tKDFH /9dMObz2bt3LNZ0Xo2c5WzDOU8/usGuPsGM6FGjaPz9QAeou8HWmqzSeaAiGL3g/ 9E5zfx1B8Ha+DIWHC1iUFLzNfRztHg+Fxwghbvd3gbm7Eq/RhPVDT0JBkLA4QFob /Ho6HmWh1WgVdNFwRdx3grMGPbbj0wqYgZxOynCukD5hjmAHClfn8WnEou2mb+yZ NpEnyxOVux+/PywbB2Xb3e/x9eZ2njP1VNRcKOjkFpA3TPuYi9ZEIUt6/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPidTQN3Lyp7+HZMQRoqhPJXVTbAMB8GA1UdIwQY MBaAFO1HanSGt4VFEpNXESbF+do+xIXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMt NjFmOWU1NGVkMjM5LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMtNjFmOWU1NGVkMjM5 LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxww/D1+ waCxaVHH9m1t1EXxD8FapnNNKaSCYKDMbS4Jo7BHqv1lSxDyRhiiKGPBUFR+Nn6e dY56+tPNT5cz8nSlh52jByXmd+NG8tQ6fGJ/PSjYeHtDJD4SJxVYMT5sDK8MS4wd QkqruoI0P4IAkjGa3F4ezRv7ZpzV658Vv2vWboCugZ/fAJKkpHErEAtanXtLvvHR 1zGlxLxYl4eTWlYWu/+SGdY3B9ig6xQGyhF5nAfyIoKSaRmHfSAAWw8EXi/Kmgu5 fIDhIMvEBBQkBLgDC9BWplwKSxve06miGPg00Hp9EyXUjvxK/BPVpe9IdhnLtkQ/ zmyxApp4WwtUeg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:52 2025 by rpki-client