This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft File: 7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json) Hash identifier: SD7AWdGN2P3MzvtO8OaXTyZWrLh7gpWL8k2L6SQGGFY= Subject key identifier: 3E:68:89:04:FF:CF:0A:A8:28:F3:5F:A6:7C:02:A5:57:65:83:99:9B Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b Certificate serial: 019AF12D5733DE351F8E8186F03A9717C6F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft Manifest number: 0BB4 Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: W0U/hEPCqHutYjcxEih4wCHE4gsRARa5Rjl5ydiaPrU=) 2: Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa (hash: 4MgcyURZP/QIugzfGvm0/MM0dlghCJFIzgyt28gsogw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:57:33:de:35:1f:8e:81:86:f0:3a:97:17:c6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=3e688904ffcf0aa828f35fa67c02a5576583999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:29:98:2c:20:29:1d:9a:fb:4d:3b:5e:2d: 42:f0:97:39:88:97:e9:43:0d:f0:c5:43:1b:86:2e: 3c:41:c1:42:6c:37:4f:30:e6:26:62:d2:0b:40:76: cc:63:da:8b:2e:99:75:e0:cb:af:08:14:2c:ba:d3: f4:0b:16:40:2d:4e:2f:b6:25:58:a8:ba:1c:b6:86: a0:f3:1f:78:fb:86:b3:cb:4c:b7:4e:46:8b:a9:a4: 60:80:c5:0e:5e:96:b2:b2:95:65:55:73:44:59:40: 6c:da:ab:84:ab:6c:2c:f0:14:b7:31:2d:48:11:89: 9c:aa:b5:ed:0d:48:1e:b7:94:fe:7d:4a:02:4d:db: a6:20:7e:17:06:71:49:af:11:a3:21:a3:c3:d3:67: 3e:a6:f8:16:ce:80:fb:89:0e:67:88:4b:ce:e3:ac: cd:db:8c:c4:36:51:a0:c8:f0:82:6e:cb:4e:2a:59: bd:05:96:72:30:1d:99:cf:79:68:63:8a:40:f4:3a: 68:3b:1e:03:42:b0:16:a1:23:cc:58:e3:56:59:3c: 87:ff:e2:96:e3:5d:8c:c2:4c:23:d1:86:6d:10:7f: f4:03:2e:ed:2a:d9:eb:9d:23:97:ad:9f:fb:52:c6: aa:ff:aa:c5:63:57:64:f5:03:48:e3:46:d8:31:6f: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:68:89:04:FF:CF:0A:A8:28:F3:5F:A6:7C:02:A5:57:65:83:99:9B X509v3 Authority Key Identifier: keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:51:e0:80:4d:a4:39:ff:f6:5a:00:bc:c2:1e:24:a2:92:c0: 9f:e1:e4:f1:72:0c:df:a7:41:da:56:9b:1c:d6:3f:1f:7c:b2: a9:6c:89:be:86:d4:56:50:32:ec:02:1e:34:3e:58:8f:2c:e4: 0f:26:34:9f:0b:5e:50:d9:20:6a:54:84:d7:cc:11:f0:4e:10: 88:c6:0d:05:79:ea:57:3b:fd:47:d1:9f:ff:dc:e6:f1:42:19: 48:1a:a9:3a:4f:19:9f:1a:91:cc:61:7f:51:40:bf:a4:60:28: 15:04:8e:7a:38:44:bc:d3:26:3f:0f:72:1c:74:06:54:a5:54: ad:2b:a3:69:89:bb:1e:a3:fb:5d:2b:90:f4:e7:d1:86:b5:8d: 05:e4:ac:b4:64:22:82:d5:51:29:87:8d:48:31:3f:38:c5:8f: a0:53:40:f0:09:a5:16:b5:b6:76:97:5d:71:d8:39:d3:5c:43: 9a:47:a6:ed:c7:e7:f8:b8:d2:3f:bd:95:fd:97:41:56:87:79: 36:1f:9a:36:5b:f3:b5:5c:f1:f4:9e:07:cd:94:e5:50:20:1a: 76:dc:de:91:d9:2a:84:47:1b:8c:41:79:b3:42:79:fa:c7:26: 8a:53:7d:1d:37:eb:54:f8:20:d7:bd:2d:e1:9b:55:b0:fa:64: 33:6e:2c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVcz3jUfjoGG8DqXF8b3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjUxOGM0MjZjZmM0MDgyZmI5MmVjNzQwZDdjM2M3ODgy NTU2M2IwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD EygzZTY4ODkwNGZmY2YwYWE4MjhmMzVmYTY3YzAyYTU1NzY1ODM5OTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5MpmCwgKR2a+007Xi1C8Jc5iJfp Qw3wxUMbhi48QcFCbDdPMOYmYtILQHbMY9qLLpl14MuvCBQsutP0CxZALU4vtiVY qLoctoag8x94+4azy0y3TkaLqaRggMUOXpayspVlVXNEWUBs2quEq2ws8BS3MS1I EYmcqrXtDUget5T+fUoCTdumIH4XBnFJrxGjIaPD02c+pvgWzoD7iQ5niEvO46zN 24zENlGgyPCCbstOKlm9BZZyMB2Zz3loY4pA9DpoOx4DQrAWoSPMWONWWTyH/+KW 412Mwkwj0YZtEH/0Ay7tKtnrnSOXrZ/7Usaq/6rFY1dk9QNI40bYMW8VWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5oiQT/zwqoKPNfpnwCpVdlg5mbMB8GA1UdIwQY MBaAFO1lGMQmz8QIL7kux0DXw8eIJVY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYt MDViM2I5NzA5ZjA5LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYtMDViM2I5NzA5ZjA5 LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVHggE2k Of/2WgC8wh4kopLAn+Hk8XIM36dB2labHNY/H3yyqWyJvobUVlAy7AIeND5Yjyzk DyY0nwteUNkgalSE18wR8E4QiMYNBXnqVzv9R9Gf/9zm8UIZSBqpOk8ZnxqRzGF/ UUC/pGAoFQSOejhEvNMmPw9yHHQGVKVUrSujaYm7HqP7XSuQ9OfRhrWNBeSstGQi gtVRKYeNSDE/OMWPoFNA8AmlFrW2dpddcdg501xDmkem7cfn+LjSP72V/ZdBVod5 Nh+aNlvztVzx9J4HzZTlUCAadtzekdkqhEcbjEF5s0J5+scmilN9HTfrVPgg170t 4ZtVsPpkM24sVA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:29 2025 by rpki-client