This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft File: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json) Hash identifier: quz82+EQd3Qaleqc187PKfVmQcQojVCtmDUi3381c6k= Subject key identifier: D0:9A:64:D0:08:21:1F:F4:F4:E9:FE:A9:05:E7:14:F7:43:C4:BC:3C Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45 Certificate issuer: /CN=f2beed4df207c3609adfded80dddd9316f0a9b45 Certificate serial: 019AF208D93908D253ACF8891427BD5587EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: neQNTHbEgsK3Trt3/ybPc+gELhWkKhz21HN8w4UUuKs=) 2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d9:39:08:d2:53:ac:f8:89:14:27:bd:55:87:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45 Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=d09a64d008211ff4f4e9fea905e714f743c4bc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:fe:32:4a:be:72:fc:e7:52:30:31:99:3a: 7b:34:f1:2b:39:8e:43:a5:28:cf:e0:0a:ac:cb:62: 0e:c6:21:74:7d:2e:0c:7a:e2:69:51:23:5f:f6:f3: c8:e4:f0:a8:b3:b8:7e:ee:f1:42:45:59:ce:39:ee: 5c:37:7a:af:63:59:4d:ba:92:18:0e:82:ce:7c:01: 8d:bd:de:33:e2:75:c8:30:13:38:47:78:06:ec:9d: 25:e5:9c:52:d8:b2:8b:23:8e:e8:02:c9:fa:1a:55: c8:d3:08:e9:c3:c4:e0:af:d1:bf:e9:a4:aa:21:5d: 14:26:e9:da:ab:ad:ed:25:85:fd:ee:12:b7:f4:2c: f6:b2:0a:4f:5c:12:b8:95:63:a1:ba:c8:b6:b4:64: ad:f4:7c:0a:ca:bd:59:ef:70:f8:a1:41:be:a9:2c: 76:d3:ff:e0:24:c1:cc:e6:d2:cb:d6:c2:62:cc:46: a1:64:d0:2b:2c:5a:64:db:8a:ff:2f:5b:e6:4c:38: 94:0c:35:c9:0c:52:35:cd:73:19:a4:2d:a2:5d:11: 7b:c9:e7:fa:6d:9a:ae:5f:bb:fa:73:7b:12:03:f5: 42:a1:4a:79:00:01:69:35:a8:9f:a6:e7:35:62:d1: 0b:29:a5:0d:be:b0:f0:f2:78:7f:71:ad:b3:3a:c2: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:64:D0:08:21:1F:F4:F4:E9:FE:A9:05:E7:14:F7:43:C4:BC:3C X509v3 Authority Key Identifier: keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:12:a3:f0:b6:36:0f:a2:c8:7d:bd:f5:89:32:b6:7c:84:ce: d6:45:2a:43:3c:96:4a:d3:53:2d:c2:49:9d:db:6d:7f:2c:0a: 7e:0e:f8:12:73:e8:52:ad:42:09:25:fa:64:c6:44:a1:14:f2: c2:39:18:95:0f:b2:41:0d:5b:02:a2:5c:42:ca:fd:81:5c:85: 08:93:71:4c:08:92:5b:e6:b1:ce:31:f8:56:46:b4:1b:07:77: 67:69:58:3b:49:d8:77:82:78:6c:ed:f1:e1:5b:e0:7b:1b:f8: 11:94:71:40:bd:cf:c4:a3:58:79:67:c4:57:09:05:e8:a1:a3: 86:4a:97:37:33:df:29:17:e0:24:cc:08:50:34:4b:71:73:db: ce:45:63:53:eb:9d:02:22:55:8b:14:a7:79:17:10:c4:c8:22: 92:51:a2:0d:18:55:c9:52:a5:f0:66:4b:50:9c:c6:5f:f5:ab: ef:96:d8:5f:a2:18:fa:e6:09:a5:96:ba:4e:6b:37:4b:f4:36: 36:48:58:ba:40:53:5c:a0:4c:67:79:f8:7c:a0:85:4b:8f:0b: 11:cd:72:74:e6:98:e3:d6:cd:a8:10:5d:f1:c8:2b:3a:e8:99: 74:5c:5c:e4:b0:4f:89:c8:38:78:d1:3c:d2:aa:de:78:32:f3: 77:28:12:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNk5CNJTrPiJFCe9VYfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmVlZDRkZjIwN2MzNjA5YWRmZGVkODBkZGRkOTMxNmYw YTliNDUwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD EyhkMDlhNjRkMDA4MjExZmY0ZjRlOWZlYTkwNWU3MTRmNzQzYzRiYzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHz+Mkq+cvznUjAxmTp7NPErOY5D pSjP4Aqsy2IOxiF0fS4MeuJpUSNf9vPI5PCos7h+7vFCRVnOOe5cN3qvY1lNupIY DoLOfAGNvd4z4nXIMBM4R3gG7J0l5ZxS2LKLI47oAsn6GlXI0wjpw8Tgr9G/6aSq IV0UJunaq63tJYX97hK39Cz2sgpPXBK4lWOhusi2tGSt9HwKyr1Z73D4oUG+qSx2 0//gJMHM5tLL1sJizEahZNArLFpk24r/L1vmTDiUDDXJDFI1zXMZpC2iXRF7yef6 bZquX7v6c3sSA/VCoUp5AAFpNaifpuc1YtELKaUNvrDw8nh/ca2zOsKzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCaZNAIIR/09On+qQXnFPdDxLw8MB8GA1UdIwQY MBaAFPK+7U3yB8Ngmt/e2A3d2TFvCptFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEt YTQ2MTUzMTQ1Y2Y4LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEtYTQ2MTUzMTQ1Y2Y4 LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRKj8LY2 D6LIfb31iTK2fITO1kUqQzyWStNTLcJJndttfywKfg74EnPoUq1CCSX6ZMZEoRTy wjkYlQ+yQQ1bAqJcQsr9gVyFCJNxTAiSW+axzjH4Vka0Gwd3Z2lYO0nYd4J4bO3x 4Vvgexv4EZRxQL3PxKNYeWfEVwkF6KGjhkqXNzPfKRfgJMwIUDRLcXPbzkVjU+ud AiJVixSneRcQxMgiklGiDRhVyVKl8GZLUJzGX/Wr75bYX6IY+uYJpZa6Tms3S/Q2 NkhYukBTXKBMZ3n4fKCFS48LEc1ydOaY49bNqBBd8cgrOuiZdFxc5LBPicg4eNE8 0qreeDLzdygSjw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:16 2025 by rpki-client