This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json) Hash identifier: mmwBjP2HkBwpVyMaaXvLS1TSUiT08P54D6b/wXthOgI= Subject key identifier: CF:70:2C:B0:B1:E6:4A:7E:76:F0:C4:F6:18:96:16:18:5E:F7:7E:D4 Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877 Certificate serial: 019AF208DE2D5580495E6E859AD5759F0478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft Manifest number: 0457 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: tKqkEjUcFBuUDtVpj6ViOzY5ZKJQFxSDjtPjllcglmA=) 2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:de:2d:55:80:49:5e:6e:85:9a:d5:75:9f:04:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=cf702cb0b1e64a7e76f0c4f6189616185ef77ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:f1:1b:76:99:a8:e8:68:19:1a:e0:43:a3: 10:58:b2:d9:5b:e7:e2:31:64:97:ce:1b:a1:05:8b: 7b:17:c7:22:60:54:3d:ac:7c:a6:b9:9b:df:92:69: 5f:6b:6f:c8:6c:64:6a:a1:e9:04:f8:0f:9a:6c:32: 67:dd:02:21:2e:97:3c:1d:a2:5d:34:02:7d:ce:28: 17:77:7a:71:96:25:6b:3d:55:4a:c5:e9:8d:8e:c4: 83:25:d1:d4:c4:6a:fd:aa:f8:ab:25:fc:8e:bd:1f: da:09:57:8e:c3:18:37:70:ba:a9:50:ae:c2:37:62: 91:32:0f:0c:6c:41:66:24:d3:60:cf:96:6b:84:43: 58:1c:56:a2:17:6b:3f:da:e4:68:8b:09:e7:93:c1: 8f:1a:38:8b:f6:43:3f:5b:0e:d2:63:ca:7d:88:e6: ed:ac:1f:ac:3d:28:ca:6c:b7:c1:15:62:9d:b0:f3: af:6f:44:1d:30:0a:19:3d:16:83:56:f4:7b:e6:17: 88:2d:72:7d:f9:d1:4c:37:a1:a1:1f:73:45:5a:f8: a2:89:37:6e:4f:e4:a4:61:df:c8:c7:f2:97:d0:f8: 63:32:b3:f5:98:27:e7:a7:ee:ea:0d:c7:f0:7e:37: a7:47:a4:ac:8e:39:36:8b:df:c7:91:24:97:74:3c: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:70:2C:B0:B1:E6:4A:7E:76:F0:C4:F6:18:96:16:18:5E:F7:7E:D4 X509v3 Authority Key Identifier: keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:93:a8:ce:df:28:43:8f:e3:8b:b1:7a:f7:50:e1:3b:eb:88: 05:54:ec:86:87:36:0b:a4:8b:eb:3e:4b:da:e0:0f:a0:df:f7: ea:e0:4e:ba:28:5e:7c:3a:e6:39:b7:ce:12:f3:fb:24:6a:e6: 17:71:5c:68:a1:a7:b1:14:a3:0f:54:4e:16:70:4b:94:33:87: 0d:c2:f2:31:30:f8:10:8d:78:07:c3:f1:53:7e:5f:02:59:e1: 83:c4:1c:cf:9c:ba:46:1f:a8:c6:7c:a1:ba:77:8b:e9:38:92: 8a:68:0c:b8:eb:34:4d:1c:11:e8:28:b4:db:63:d9:77:7a:c0: fd:c6:00:13:2d:f5:44:d6:bc:00:f4:6a:f4:8a:5d:a5:65:b1: c5:23:60:a1:77:76:6f:d9:4a:ff:54:8e:04:ac:65:75:1a:fe: 74:a0:df:b3:f6:47:ea:05:d4:d8:c0:30:91:8c:8f:50:71:30: b4:c9:be:12:4b:45:46:2e:81:5c:2d:c4:25:87:d3:44:a4:67: 9e:3f:b4:75:11:72:b5:ae:09:2d:42:de:41:5f:48:53:87:f4: f6:5e:fd:24:e5:4c:9c:cd:f0:29:15:cb:b2:01:29:7b:31:61: 42:8e:16:e1:35:74:fa:29:3b:70:fc:b4:ce:19:72:06:7d:36: c8:f5:57:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN4tVYBJXm6FmtV1nwR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjA2OWQzM2RmMTIyNWE4YjM2NDNhMDEzNjRmMjc5ZGY0 MGQ4NzcwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhjZjcwMmNiMGIxZTY0YTdlNzZmMGM0ZjYxODk2MTYxODVlZjc3ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN3xG3aZqOhoGRrgQ6MQWLLZW+fi MWSXzhuhBYt7F8ciYFQ9rHymuZvfkmlfa2/IbGRqoekE+A+abDJn3QIhLpc8HaJd NAJ9zigXd3pxliVrPVVKxemNjsSDJdHUxGr9qvirJfyOvR/aCVeOwxg3cLqpUK7C N2KRMg8MbEFmJNNgz5ZrhENYHFaiF2s/2uRoiwnnk8GPGjiL9kM/Ww7SY8p9iObt rB+sPSjKbLfBFWKdsPOvb0QdMAoZPRaDVvR75heILXJ9+dFMN6GhH3NFWviiiTdu T+SkYd/Ix/KX0PhjMrP1mCfnp+7qDcfwfjenR6Ssjjk2i9/HkSSXdDwS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9wLLCx5kp+dvDE9hiWFhhe937UMB8GA1UdIwQY MBaAFPewadM98SJaizZDoBNk8nnfQNh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMt NWZkY2I3ODNhNmVjLzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMtNWZkY2I3ODNhNmVj LzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5Oozt8o Q4/ji7F691DhO+uIBVTshoc2C6SL6z5L2uAPoN/36uBOuihefDrmObfOEvP7JGrm F3FcaKGnsRSjD1ROFnBLlDOHDcLyMTD4EI14B8PxU35fAlnhg8Qcz5y6Rh+oxnyh uneL6TiSimgMuOs0TRwR6Ci022PZd3rA/cYAEy31RNa8APRq9IpdpWWxxSNgoXd2 b9lK/1SOBKxldRr+dKDfs/ZH6gXU2MAwkYyPUHEwtMm+EktFRi6BXC3EJYfTRKRn nj+0dRFyta4JLULeQV9IU4f09l79JOVMnM3wKRXLsgEpezFhQo4W4TV0+ik7cPy0 zhlyBn02yPVX/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:53 2025 by rpki-client