This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json) Hash identifier: J22jOXjlBslgZ3W5hswwrStempKQ/K9ROAjag7i5a1Q= Subject key identifier: 10:E9:6F:92:D9:6D:8B:62:98:9A:D4:5C:E6:C4:F7:18:9E:99:84:C3 Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb Certificate serial: 019AF6F93F06F7559CB10727BC946D5606E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft Manifest number: 0989 Signing time: Sun 07 Dec 2025 04:02:00 +0000 Manifest this update: Sun 07 Dec 2025 04:02:00 +0000 Manifest next update: Mon 08 Dec 2025 04:02:00 +0000 Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: WnOB38SO2HlDLVqQ/qDtozJVJrl2G+fygZz5Ww5iy6c=) 2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:3f:06:f7:55:9c:b1:07:27:bc:94:6d:56:06:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb Validity Not Before: Dec 7 04:02:00 2025 GMT Not After : Dec 8 04:02:00 2025 GMT Subject: CN=10e96f92d96d8b62989ad45ce6c4f7189e9984c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:e2:15:21:b3:2c:f4:83:67:f4:8b:60:1a: 1d:f5:0e:ff:7c:c2:e6:2b:ee:0e:85:6d:b8:2a:6d: ce:44:7c:ae:74:0f:cd:a8:4e:11:16:9f:26:b8:db: 16:0d:41:b4:49:64:f3:de:8f:03:ea:ee:fe:45:ab: 18:79:41:94:88:b1:fd:7d:d8:ba:89:26:1b:c0:b6: 5e:6b:b0:88:11:77:60:0d:e2:5e:2d:f5:b8:29:cb: d5:d8:ab:03:c8:b1:4a:3c:cc:b5:95:50:e4:4a:c4: 73:6e:e7:f7:b4:2c:d1:67:d3:88:d5:df:8d:67:c6: aa:7f:45:be:3e:43:2f:ec:10:8d:11:02:2b:97:fe: 58:53:61:18:73:37:f9:6a:de:ce:0b:48:85:be:9e: b0:57:67:3b:aa:94:39:01:28:6c:06:d7:e5:f2:74: 91:5a:d1:e4:43:f1:8c:7f:46:1f:c8:17:02:f9:7e: f2:34:fb:62:51:be:42:32:16:4c:76:1c:de:b0:ef: c8:31:65:b4:16:a5:91:47:60:82:30:ef:c7:90:03: 42:2f:e2:9f:80:b3:eb:17:72:ec:ee:35:b5:24:1f: fd:c4:2b:28:fd:7b:32:c2:98:27:32:34:05:a0:70: 2a:bd:8e:bf:85:ff:4a:44:8d:ce:be:d9:4b:05:26: a7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E9:6F:92:D9:6D:8B:62:98:9A:D4:5C:E6:C4:F7:18:9E:99:84:C3 X509v3 Authority Key Identifier: keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1b:23:a6:96:c9:0b:ba:3e:06:c3:96:98:9e:a5:0e:ea:df: e6:58:c8:97:4e:1d:c5:33:b5:14:85:02:2a:c7:b0:2c:ab:2e: 21:b9:3f:96:6b:2c:3a:89:39:45:3c:9a:8f:41:bb:ce:56:03: ef:f7:fa:e3:f0:aa:52:fe:8f:a2:ba:4f:24:7b:d1:9a:8b:d7: 95:be:fd:f3:2a:46:70:cd:42:43:ee:15:83:03:dc:c1:b7:d7: a1:8a:e3:ff:43:95:94:7b:a7:9b:77:df:c9:46:28:bd:44:dd: 95:50:1b:e5:f6:ff:d0:dd:71:62:6d:0c:3e:ea:92:f9:5a:9d: 21:72:09:69:8d:87:4d:be:32:61:10:4c:9f:b0:61:4c:14:61: f5:85:f2:80:e3:f2:22:2d:77:5c:84:f3:86:bb:43:42:19:87: d3:eb:ce:d0:a8:74:25:e0:df:d2:6a:5f:8c:72:1d:d5:60:d8: 1e:e2:d3:0a:56:57:42:89:cd:9d:86:f1:2e:4b:75:ef:55:d0: 9c:ab:30:a9:e9:74:88:3d:c3:ae:45:dc:49:3e:8e:16:04:a4: 20:15:91:d2:63:b0:fc:12:35:02:8d:5e:39:50:a5:5f:c9:20: 6e:77:28:34:6c:99:84:c6:5c:28:ef:66:05:40:ee:9d:7b:fc: 83:16:3b:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+T8G91WcsQcnvJRtVgbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYjBiMTdkZDg5YjM4NjQyNDk3MjhiOWZjMmVlYWU1MTBm ZGU0ZmIwHhcNMjUxMjA3MDQwMjAwWhcNMjUxMjA4MDQwMjAwWjAzMTEwLwYDVQQD EygxMGU5NmY5MmQ5NmQ4YjYyOTg5YWQ0NWNlNmM0ZjcxODllOTk4NGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRfiFSGzLPSDZ/SLYBod9Q7/fMLm K+4OhW24Km3ORHyudA/NqE4RFp8muNsWDUG0SWTz3o8D6u7+RasYeUGUiLH9fdi6 iSYbwLZea7CIEXdgDeJeLfW4KcvV2KsDyLFKPMy1lVDkSsRzbuf3tCzRZ9OI1d+N Z8aqf0W+PkMv7BCNEQIrl/5YU2EYczf5at7OC0iFvp6wV2c7qpQ5AShsBtfl8nSR WtHkQ/GMf0YfyBcC+X7yNPtiUb5CMhZMdhzesO/IMWW0FqWRR2CCMO/HkANCL+Kf gLPrF3Ls7jW1JB/9xCso/XsywpgnMjQFoHAqvY6/hf9KRI3OvtlLBSan/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDpb5LZbYtimJrUXObE9xiemYTDMB8GA1UdIwQY MBaAFIuwsX3YmzhkJJcoufwu6uUQ/eT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQt ZTAxOTE5ZmNmZWRmLzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQtZTAxOTE5ZmNmZWRm LzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRsjppbJ C7o+BsOWmJ6lDurf5ljIl04dxTO1FIUCKsewLKsuIbk/lmssOok5RTyaj0G7zlYD 7/f64/CqUv6PorpPJHvRmovXlb798ypGcM1CQ+4VgwPcwbfXoYrj/0OVlHunm3ff yUYovUTdlVAb5fb/0N1xYm0MPuqS+VqdIXIJaY2HTb4yYRBMn7BhTBRh9YXygOPy Ii13XITzhrtDQhmH0+vO0Kh0JeDf0mpfjHId1WDYHuLTClZXQonNnYbxLkt171XQ nKswqel0iD3DrkXcST6OFgSkIBWR0mOw/BI1Ao1eOVClX8kgbncoNGyZhMZcKO9m BUDunXv8gxY7yQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:08:59 2025 by rpki-client