This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json) Hash identifier: NHeEe2Qn0q7Co+nVx424t+LC4S6lZ2lcfY9hXT6q/3M= Subject key identifier: 8B:40:B7:48:4D:08:2D:73:4F:84:BE:21:FE:ED:AB:10:AD:25:09:65 Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Certificate serial: 019AF208F41411F47BE5CB2C5DDC35CF916A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft Manifest number: 0F36 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: RlZJQQcsW6KZ5U+X1Ia3H5SQsTITtCWdhu9ZvK4ZJR4=) 2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f4:14:11:f4:7b:e5:cb:2c:5d:dc:35:cf:91:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=8b40b7484d082d734f84be21feedab10ad250965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:c4:1a:b0:84:36:9b:8d:06:9b:2e:0b:a1: 8b:99:d4:d0:50:36:eb:65:fb:06:35:7e:42:5d:98: 44:b8:98:51:8b:c6:42:b5:12:54:f6:75:7b:3d:4b: 08:21:77:3d:fa:d9:24:82:54:be:96:6e:75:53:52: bc:fa:ce:e6:c3:d2:1a:70:37:9e:d7:59:5f:ee:ca: c5:90:d7:59:e9:b8:0a:74:4f:7c:89:d5:fe:f2:f7: dc:41:59:d3:b8:8a:c4:ee:9e:af:fd:2f:aa:00:38: 56:97:d5:62:dd:65:e5:bd:09:aa:6d:87:f7:94:81: 18:ab:d8:c5:ad:48:e3:f3:63:97:fe:06:e4:c8:d8: d1:a2:41:4c:28:b5:b8:d2:20:f8:17:78:40:d9:5d: c5:3c:3b:74:93:3c:73:a1:d4:b1:c5:3e:81:50:d6: 9d:6e:bb:ac:27:fe:00:09:31:99:68:cf:6a:f4:0c: 1e:26:71:8a:aa:95:8a:32:29:fd:e5:b5:74:cc:03: eb:f8:e6:04:6c:f0:78:62:dc:a2:23:fe:05:f7:5f: 19:e4:aa:c7:c8:2b:8d:5f:87:2c:89:27:3f:36:2b: a8:ea:86:80:2f:94:2e:8c:d4:6b:85:5d:d6:59:ed: dc:76:d9:1c:c3:06:56:c4:b1:3b:6e:bd:8e:09:45: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:40:B7:48:4D:08:2D:73:4F:84:BE:21:FE:ED:AB:10:AD:25:09:65 X509v3 Authority Key Identifier: keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7b:98:79:21:3d:93:46:8e:d2:06:7c:64:54:f2:6e:61:6e: cb:d3:8b:a7:17:29:b0:26:72:50:a2:91:dd:12:68:e5:6f:2b: 11:6a:1b:bd:10:33:cf:07:9e:14:26:37:19:23:f1:87:be:91: 2f:68:d4:c7:d5:60:6c:6f:40:06:f1:0b:2b:53:0c:34:9e:e2: e7:14:d3:58:4b:2d:26:78:7b:ae:c2:d5:dd:5e:05:94:6b:81: 44:33:1c:26:73:c4:6e:7e:98:fe:25:e1:3f:03:a2:4f:f4:30: 52:35:75:e5:df:df:40:f8:aa:5e:80:fa:c2:11:62:c6:07:2f: 97:77:2f:76:11:9c:1b:e7:24:a8:dc:03:b7:95:40:86:e8:14: 40:55:7a:a7:70:e8:c0:65:07:bc:6c:2d:66:c6:95:c2:3c:4d: 84:8f:63:cc:44:c0:27:0e:8d:5e:97:fc:50:97:30:ff:12:e3: 89:65:ab:03:c4:be:0a:32:bb:0e:69:07:34:53:1e:50:80:50: c4:8d:c5:bd:59:56:4e:47:1f:e1:3b:77:c4:46:b4:61:d6:cc: 6d:2e:40:10:76:00:1a:38:40:5e:59:50:a1:6b:cc:d9:c0:c0: c0:b6:1e:77:d3:bf:27:d5:2f:50:13:9d:2f:18:59:92:80:bc: 8b:f4:01:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPQUEfR75cssXdw1z5FqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx ODFhNGMwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD Eyg4YjQwYjc0ODRkMDgyZDczNGY4NGJlMjFmZWVkYWIxMGFkMjUwOTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufnEGrCENpuNBpsuC6GLmdTQUDbr ZfsGNX5CXZhEuJhRi8ZCtRJU9nV7PUsIIXc9+tkkglS+lm51U1K8+s7mw9IacDee 11lf7srFkNdZ6bgKdE98idX+8vfcQVnTuIrE7p6v/S+qADhWl9Vi3WXlvQmqbYf3 lIEYq9jFrUjj82OX/gbkyNjRokFMKLW40iD4F3hA2V3FPDt0kzxzodSxxT6BUNad brusJ/4ACTGZaM9q9AweJnGKqpWKMin95bV0zAPr+OYEbPB4YtyiI/4F918Z5KrH yCuNX4csiSc/Niuo6oaAL5QujNRrhV3WWe3cdtkcwwZWxLE7br2OCUVJawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItAt0hNCC1zT4S+If7tqxCtJQllMB8GA1UdIwQY MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt OGNjYzE5NTJlYjRmLzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinuYeSE9 k0aO0gZ8ZFTybmFuy9OLpxcpsCZyUKKR3RJo5W8rEWobvRAzzweeFCY3GSPxh76R L2jUx9VgbG9ABvELK1MMNJ7i5xTTWEstJnh7rsLV3V4FlGuBRDMcJnPEbn6Y/iXh PwOiT/QwUjV15d/fQPiqXoD6whFixgcvl3cvdhGcG+ckqNwDt5VAhugUQFV6p3Do wGUHvGwtZsaVwjxNhI9jzETAJw6NXpf8UJcw/xLjiWWrA8S+CjK7DmkHNFMeUIBQ xI3FvVlWTkcf4Tt3xEa0YdbMbS5AEHYAGjhAXllQoWvM2cDAwLYed9O/J9UvUBOd LxhZkoC8i/QBAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:50 2025 by rpki-client