This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json) Hash identifier: ky8t8B4DPQVG28l49k4VtxsezboXfC1YtRpy/ja1BDw= Subject key identifier: 17:F6:1E:EB:EA:71:29:D7:DA:FB:38:B2:37:47:83:5C:61:FE:14:08 Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69 Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169 Certificate serial: 019AF31BDCF10D8C0CF3B8F70257C886538D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft Manifest number: 1257 Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: cwvcA8MXC7qvzkzXLnhE4JdBvSltyVkithBeVNxkYE0=) 2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:dc:f1:0d:8c:0c:f3:b8:f7:02:57:c8:86:53:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169 Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=17f61eebea7129d7dafb38b23747835c61fe1408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9f:98:9c:50:3b:b3:2f:dc:7d:1b:80:da:93: 5b:a6:be:5a:83:59:ac:51:4e:6c:37:f0:44:88:ad: f9:d4:1d:0d:01:a9:6e:48:05:0f:aa:f4:86:dd:6f: 08:85:21:9c:6b:12:a2:9e:e0:66:6c:b5:1d:ae:96: 56:e6:90:74:a5:7d:ce:bc:fc:2e:e3:2b:95:b4:da: 82:63:1b:5b:5b:cc:9f:6e:34:06:0f:50:d7:4d:ff: 98:fd:37:02:09:36:80:8f:05:ad:fb:97:f3:68:fb: c7:3d:8d:02:aa:39:2c:9e:cb:94:3e:44:39:74:91: c6:97:59:76:14:b4:57:ae:85:4e:27:43:8a:6e:64: 57:d7:a2:7a:89:57:78:26:24:63:89:92:50:8e:17: 1d:7b:39:5f:68:9a:82:9c:3c:7c:0d:6a:a5:d6:e1: d2:62:1f:97:47:61:3b:0b:54:42:b6:e5:69:6c:26: 5d:ff:0b:de:3b:9a:a5:e3:84:9c:f7:35:5d:d1:37: 73:ee:25:b9:ef:66:6a:2d:91:f0:a0:67:dc:a3:fd: c8:e8:f3:36:42:8a:5b:38:a1:1a:f9:3b:c9:5d:94: 9f:96:11:dc:85:6b:ea:f3:7f:70:0a:78:54:16:f4: 5f:29:ed:14:ba:a2:e3:24:50:4f:3c:07:6b:bc:66: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F6:1E:EB:EA:71:29:D7:DA:FB:38:B2:37:47:83:5C:61:FE:14:08 X509v3 Authority Key Identifier: keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fb:56:ba:95:2e:64:52:76:34:2a:24:06:49:05:37:a6:cc: 17:55:01:2f:b6:69:8d:60:0a:b4:c4:36:af:20:66:5f:34:c0: 7d:e2:2b:02:74:f2:62:d2:21:c4:0c:8c:1b:6a:c1:fb:93:5d: 39:18:c4:e1:1d:3d:71:2f:86:28:6a:4b:c9:54:08:1e:c1:86: 09:61:5a:89:3b:0b:7b:9b:9e:3e:16:3b:a2:a5:95:9b:66:1b: c1:59:a2:4d:6e:3d:1b:27:41:54:db:be:58:1f:ee:9d:fa:7b: 93:83:fc:1b:67:f3:de:92:23:5e:15:66:9a:de:8b:08:55:0d: 17:15:c7:4a:a7:5a:82:35:ac:ef:ad:7e:73:68:21:1d:eb:0f: 22:6a:bf:79:ef:37:df:39:50:ec:12:a4:6c:39:df:14:8e:e8: 78:f3:79:3b:55:5b:45:4c:35:71:02:b0:5a:ce:d0:a6:81:37: 86:2c:3f:e9:e9:be:70:ba:9b:53:64:6a:da:23:9b:72:68:81: 1e:3d:f5:86:1f:35:36:f9:5d:99:69:1b:02:b3:b6:88:25:39: c4:47:45:16:dc:3a:9a:db:cb:d8:28:cc:2d:77:c0:be:aa:00: c8:f4:a0:40:3c:6a:06:b4:06:04:7f:4d:ce:d4:2a:af:99:7e: 81:3c:64:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9zxDYwM87j3AlfIhlONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk ZjkxNjkwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EygxN2Y2MWVlYmVhNzEyOWQ3ZGFmYjM4YjIzNzQ3ODM1YzYxZmUxNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p+YnFA7sy/cfRuA2pNbpr5ag1ms UU5sN/BEiK351B0NAaluSAUPqvSG3W8IhSGcaxKinuBmbLUdrpZW5pB0pX3OvPwu 4yuVtNqCYxtbW8yfbjQGD1DXTf+Y/TcCCTaAjwWt+5fzaPvHPY0CqjksnsuUPkQ5 dJHGl1l2FLRXroVOJ0OKbmRX16J6iVd4JiRjiZJQjhcdezlfaJqCnDx8DWql1uHS Yh+XR2E7C1RCtuVpbCZd/wveO5ql44Sc9zVd0Tdz7iW572ZqLZHwoGfco/3I6PM2 QopbOKEa+TvJXZSflhHchWvq839wCnhUFvRfKe0UuqLjJFBPPAdrvGYn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf2HuvqcSnX2vs4sjdHg1xh/hQIMB8GA1UdIwQY MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/tWupUu ZFJ2NCokBkkFN6bMF1UBL7ZpjWAKtMQ2ryBmXzTAfeIrAnTyYtIhxAyMG2rB+5Nd ORjE4R09cS+GKGpLyVQIHsGGCWFaiTsLe5uePhY7oqWVm2YbwVmiTW49GydBVNu+ WB/unfp7k4P8G2fz3pIjXhVmmt6LCFUNFxXHSqdagjWs761+c2ghHesPImq/ee83 3zlQ7BKkbDnfFI7oePN5O1VbRUw1cQKwWs7QpoE3hiw/6em+cLqbU2Rq2iObcmiB Hj31hh81NvldmWkbArO2iCU5xEdFFtw6mtvL2CjMLXfAvqoAyPSgQDxqBrQGBH9N ztQqr5l+gTxkAA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:57 2025 by rpki-client