This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft File: t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json) Hash identifier: ATGtyo970hAgQ50n/tV3jM0g/THI7PsQIQgz43XOwuM= Subject key identifier: F3:D8:9A:A2:43:41:F8:D2:9C:A8:8F:11:88:C2:FC:70:40:27:DE:35 Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74 Certificate issuer: /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774 Certificate serial: 019AF464F44AD033E67A5E9F10517276BA30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:00:48 +0000 Manifest this update: Sat 06 Dec 2025 16:00:48 +0000 Manifest next update: Sun 07 Dec 2025 16:00:48 +0000 Files and hashes: 1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=) 2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: RQyi4ZHbRGlbK0fkixBOA9dsluyH1v3qon0SHCnPeHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f4:4a:d0:33:e6:7a:5e:9f:10:51:72:76:ba:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774 Validity Not Before: Dec 6 16:00:48 2025 GMT Not After : Dec 7 16:00:48 2025 GMT Subject: CN=f3d89aa24341f8d29ca88f1188c2fc704027de35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:05:41:88:41:e3:06:76:9b:29:7d:f3:20: 78:03:50:eb:bc:48:85:dc:a9:0d:9d:dc:54:c4:13: 9d:62:39:13:f7:ec:d7:87:98:bf:3b:25:29:41:5e: a4:d0:30:a9:a7:0d:47:12:b0:da:9e:8b:f2:d3:fa: d5:4a:21:e9:da:29:cc:80:9a:16:06:2c:6c:82:d1: d2:fd:78:e7:2a:b6:44:de:f5:2e:f1:df:1d:65:db: a1:af:71:13:e3:80:2b:11:bd:75:7c:22:2f:4b:77: bc:3c:df:40:06:c6:d6:7d:47:39:5f:a1:28:9f:b4: de:e2:41:89:12:72:62:61:a6:e9:8b:b3:7e:43:c6: 2a:2a:6b:a2:7d:de:e8:59:33:5c:7d:9b:36:46:75: 35:bb:40:fd:f2:d5:1f:3d:94:31:c3:96:dd:16:fb: bf:95:75:31:7b:f8:26:b0:7e:43:23:7a:2f:cf:e3: 95:3f:2b:c9:8e:ee:db:70:f4:74:bf:e5:68:1c:46: b1:30:fc:a6:b1:cd:70:2b:b0:56:b7:dc:39:2a:64: 21:7e:f5:1b:a0:98:84:a1:5e:69:21:33:e8:95:82: ac:4c:63:97:0a:7d:79:33:6c:dd:01:6a:7f:0a:44: c5:d0:80:59:ac:dd:52:33:71:55:9c:df:f8:33:66: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D8:9A:A2:43:41:F8:D2:9C:A8:8F:11:88:C2:FC:70:40:27:DE:35 X509v3 Authority Key Identifier: keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3b:bb:e4:45:af:ba:a6:19:8b:b2:17:44:d5:13:b6:96:bb: d0:7f:95:1f:51:3f:ae:60:5d:97:23:bb:bb:56:ac:91:86:21: 61:8a:1f:1b:29:c4:09:1f:43:65:ff:5e:e9:64:4f:49:00:e5: cd:c7:c5:e0:09:9c:68:3f:9c:d7:6e:a7:6c:5a:1d:41:76:4b: 31:86:55:43:cb:85:56:f7:9b:20:15:0a:47:14:70:de:b2:c4: 48:a1:a9:dd:f1:bd:d9:70:c9:46:11:a9:a6:3f:d9:ad:5c:9e: 51:68:0f:6d:11:ec:9b:79:35:f9:d6:58:66:a1:26:03:cf:3d: 19:23:e6:02:c3:ea:c2:c2:15:46:3d:c8:78:ac:71:e1:34:8e: de:2b:64:26:cf:e0:a5:5b:c0:eb:13:f7:a3:53:de:11:db:c6: e1:f2:3c:68:18:ba:02:bb:f5:72:61:1d:9f:23:f8:af:b1:0d: 0f:d4:8c:ae:cb:9a:02:3e:14:7b:b0:fd:10:95:7c:20:34:d9: f1:63:c3:2f:86:fc:c8:54:b0:38:23:32:74:69:00:3f:78:0f: 25:22:28:e6:b3:8c:85:ff:e8:1c:5b:4a:fc:b5:07:80:eb:77: 2c:e9:94:59:0a:df:5d:32:58:9e:aa:90:76:72:ea:a5:34:18: ae:cb:18:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPRK0DPmel6fEFFydrowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YmMxYWRmYmYzNjI2NDhmYzYzNWMzMzMyZjM4M2JjYmMw MWU3NzQwHhcNMjUxMjA2MTYwMDQ4WhcNMjUxMjA3MTYwMDQ4WjAzMTEwLwYDVQQD EyhmM2Q4OWFhMjQzNDFmOGQyOWNhODhmMTE4OGMyZmM3MDQwMjdkZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fwFQYhB4wZ2myl98yB4A1DrvEiF 3KkNndxUxBOdYjkT9+zXh5i/OyUpQV6k0DCppw1HErDanovy0/rVSiHp2inMgJoW BixsgtHS/XjnKrZE3vUu8d8dZduhr3ET44ArEb11fCIvS3e8PN9ABsbWfUc5X6Eo n7Te4kGJEnJiYabpi7N+Q8YqKmuifd7oWTNcfZs2RnU1u0D98tUfPZQxw5bdFvu/ lXUxe/gmsH5DI3ovz+OVPyvJju7bcPR0v+VoHEaxMPymsc1wK7BWt9w5KmQhfvUb oJiEoV5pITPolYKsTGOXCn15M2zdAWp/CkTF0IBZrN1SM3FVnN/4M2YpNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPYmqJDQfjSnKiPEYjC/HBAJ941MB8GA1UdIwQY MBaAFLe8Gt+/NiZI/GNcMzLzg7y8Aed0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUt ZmQ2MDZiMDZhMDFhLzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUtZmQ2MDZiMDZhMDFh LzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmju75EWv uqYZi7IXRNUTtpa70H+VH1E/rmBdlyO7u1askYYhYYofGynECR9DZf9e6WRPSQDl zcfF4AmcaD+c126nbFodQXZLMYZVQ8uFVvebIBUKRxRw3rLESKGp3fG92XDJRhGp pj/ZrVyeUWgPbRHsm3k1+dZYZqEmA889GSPmAsPqwsIVRj3IeKxx4TSO3itkJs/g pVvA6xP3o1PeEdvG4fI8aBi6Arv1cmEdnyP4r7END9SMrsuaAj4Ue7D9EJV8IDTZ 8WPDL4b8yFSwOCMydGkAP3gPJSIo5rOMhf/oHFtK/LUHgOt3LOmUWQrfXTJYnqqQ dnLqpTQYrssYVw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:21 2025 by rpki-client