This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json) Hash identifier: JUZcoW8HLOTNma2RQKXgAnC+qraeUZkWZKbatKkxCgA= Subject key identifier: 02:F3:2F:B5:F2:69:F8:86:84:67:96:4D:5E:A5:CC:6A:1B:25:CB:04 Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b Certificate serial: 019AF12EA67A3901D4933497BBF8BF07B3B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft Manifest number: 67 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: TcSp7o6uwH24irSRe8iMFLsbk94.roa (hash: c25HUD+HppjHQuOQwqciQrtoVauED60d+2+faqqkKIY=) 2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: K4LQ+5TOAJpdTpA+lqHBxgvPBaQ+d4UtJqhrKPyJYa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a6:7a:39:01:d4:93:34:97:bb:f8:bf:07:b3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=02f32fb5f269f8868467964d5ea5cc6a1b25cb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:8f:1d:4c:5d:e0:a4:40:52:3e:08:85:bc: ae:75:5d:b5:ca:fd:25:e3:31:72:3a:c4:42:cd:e3: 1e:f7:e9:8c:90:32:00:54:ab:b0:ba:87:a3:eb:e4: bf:28:b0:5f:c1:23:e2:f7:e3:21:d3:dc:01:8e:f3: 33:6c:47:05:18:57:45:a7:97:27:68:29:7c:d3:68: 4a:d9:39:7d:ad:07:4b:a6:a5:9e:83:85:ea:2a:8f: f0:2a:4c:31:e2:9f:92:ed:69:5a:82:9a:38:10:a2: a7:9a:71:e2:e3:45:55:a9:6e:04:bc:95:e0:be:26: b1:a8:73:e6:73:e8:06:45:9d:a9:3e:bb:40:25:85: 13:70:16:9d:f4:22:bd:84:60:9b:97:4c:3c:fd:e2: 71:0c:44:2a:73:26:82:ce:75:6b:bb:01:af:6b:2f: 36:ef:8f:ff:2d:10:3b:66:78:38:c7:e5:e5:40:02: 9b:e8:6a:e2:12:6f:5f:93:c8:e6:43:86:77:7e:f8: c6:06:07:34:3f:4e:0e:d3:a8:9f:5b:16:f0:41:43: 1d:98:d1:ff:bd:71:9a:59:73:3a:e6:3c:ca:36:a5: aa:7c:8f:ff:5b:df:79:bc:2d:2d:0c:a3:49:3a:c9: a8:84:a1:00:18:ee:7f:64:e9:3a:21:5d:20:75:1e: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F3:2F:B5:F2:69:F8:86:84:67:96:4D:5E:A5:CC:6A:1B:25:CB:04 X509v3 Authority Key Identifier: keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f4:34:63:08:b1:75:80:13:a8:18:cd:f4:de:5b:c1:fd:cb: 55:73:a2:a6:31:48:a9:c7:19:aa:95:3c:85:69:d2:13:6a:90: de:9a:9c:93:7b:63:aa:8e:93:00:3d:d8:d3:6b:01:e6:0a:d7: 22:17:75:f7:73:cf:52:92:8e:a6:dd:a4:41:86:ad:32:3c:08: 8e:fc:b7:f7:a3:77:0d:68:85:22:95:21:ba:cc:c5:95:f0:1f: 18:82:74:cd:6a:cc:a0:84:4e:c5:71:ed:07:bc:99:4e:50:a4: 42:08:bc:29:43:62:4c:ec:1b:91:43:20:ff:ec:61:b1:d4:18: fb:a2:27:79:54:5d:02:28:76:5c:9f:dd:42:00:cc:34:d5:9d: 73:e5:a1:f7:4f:99:af:7b:be:34:14:9b:98:8c:cc:4e:fc:11: 50:24:43:d9:35:51:ca:d2:98:fa:c6:d3:cd:db:f5:8a:a0:da: 4b:13:7f:1b:37:41:94:c9:06:8e:17:c2:e7:fb:d9:47:f0:ae: 90:be:63:71:20:e7:b0:2d:0a:5f:1b:94:0a:df:80:d7:c2:f2: e2:3d:09:75:b9:8a:11:2e:63:a3:9b:b4:0e:6e:67:f5:a3:b3: 7d:dc:5e:4e:c4:c4:eb:20:2b:25:1b:74:e8:f4:cb:12:e6:33: 3a:9c:15:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqZ6OQHUkzSXu/i/B7O3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGVkMjY1N2IwMzQ0OGRhMjhiYzI0OGMyZjdlYzQ5NzNk YTZlM2IwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD EygwMmYzMmZiNWYyNjlmODg2ODQ2Nzk2NGQ1ZWE1Y2M2YTFiMjVjYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzImPHUxd4KRAUj4IhbyudV21yv0l 4zFyOsRCzeMe9+mMkDIAVKuwuoej6+S/KLBfwSPi9+Mh09wBjvMzbEcFGFdFp5cn aCl802hK2Tl9rQdLpqWeg4XqKo/wKkwx4p+S7Wlagpo4EKKnmnHi40VVqW4EvJXg viaxqHPmc+gGRZ2pPrtAJYUTcBad9CK9hGCbl0w8/eJxDEQqcyaCznVruwGvay82 74//LRA7Zng4x+XlQAKb6GriEm9fk8jmQ4Z3fvjGBgc0P04O06ifWxbwQUMdmNH/ vXGaWXM65jzKNqWqfI//W995vC0tDKNJOsmohKEAGO5/ZOk6IV0gdR7EbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALzL7XyafiGhGeWTV6lzGobJcsEMB8GA1UdIwQY MBaAFJCO0mV7A0SNoovCSML37Elz2m47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUt NmExN2UyMWNhNmM3LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUtNmExN2UyMWNhNmM3 LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPQ0Ywix dYATqBjN9N5bwf3LVXOipjFIqccZqpU8hWnSE2qQ3pqck3tjqo6TAD3Y02sB5grX Ihd193PPUpKOpt2kQYatMjwIjvy396N3DWiFIpUhuszFlfAfGIJ0zWrMoIROxXHt B7yZTlCkQgi8KUNiTOwbkUMg/+xhsdQY+6IneVRdAih2XJ/dQgDMNNWdc+Wh90+Z r3u+NBSbmIzMTvwRUCRD2TVRytKY+sbTzdv1iqDaSxN/GzdBlMkGjhfC5/vZR/Cu kL5jcSDnsC0KXxuUCt+A18Ly4j0JdbmKES5jo5u0Dm5n9aOzfdxeTsTE6yArJRt0 6PTLEuYzOpwVew== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:30 2025 by rpki-client