This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json) Hash identifier: SnDD9aiHwrWLLro1OrOa6yR8Tr9G3Kl9s0aojGfPK9g= Subject key identifier: FD:E8:4D:47:E0:5E:36:BD:F0:EB:E2:52:AE:E5:A2:B9:4E:2A:CC:C2 Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50 Certificate serial: 019AF2767D63F84C22C5ED065070BC48E302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: Wtoza3WB5ldClV7kfP0Eodkgj5evkbaSKXAKSGESp9I=) 2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=) 3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7d:63:f8:4c:22:c5:ed:06:50:70:bc:48:e3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=fde84d47e05e36bdf0ebe252aee5a2b94e2accc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:ab:9e:18:a5:ea:e2:0d:61:c8:57:92:2b: 52:4b:05:3c:02:13:fc:37:11:96:50:82:1a:1c:fc: a2:61:5a:78:ea:c2:89:de:d8:b4:fc:26:d2:3b:4e: 27:6c:89:fb:d8:49:42:8f:11:a9:99:92:1d:78:b3: ab:93:6c:42:b2:96:25:e2:27:7b:db:00:ed:5d:4e: ee:f5:3d:09:14:85:3d:25:25:2c:59:4e:c5:8f:cd: 5c:df:4b:6b:77:8b:2d:0b:b7:0d:b8:47:dd:d8:44: 3b:cc:1f:d7:d3:53:34:4f:c7:bc:5f:db:89:8c:05: 5a:82:60:aa:d5:e1:69:d0:57:45:48:83:ba:37:9a: 4e:22:1b:d7:7f:af:1c:57:9d:69:11:0d:c4:c8:66: 5a:7d:31:24:e4:b3:73:d7:d4:27:16:b1:5d:46:25: 91:96:f1:69:82:54:01:fe:54:52:60:40:7a:9b:10: 75:3d:c1:a9:6c:28:a7:cc:2f:49:76:aa:3e:68:db: a4:44:17:fd:24:8c:97:f5:1c:0a:86:e7:e4:2d:be: 51:0b:a2:cc:80:bd:72:29:bc:d8:26:0b:c6:8a:4d: 56:f6:74:23:1c:0a:e6:e9:9e:94:c0:17:59:15:06: 6f:d9:64:5a:05:ca:ff:cf:cd:2e:65:fa:cd:3f:ba: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E8:4D:47:E0:5E:36:BD:F0:EB:E2:52:AE:E5:A2:B9:4E:2A:CC:C2 X509v3 Authority Key Identifier: keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:da:92:be:3c:2d:8c:ca:e0:d7:79:d3:f3:7e:6e:0c:15:e5: b9:bb:48:a4:05:50:2a:0b:87:1d:87:6c:ae:e0:0c:eb:1c:2f: e3:1f:00:9c:5c:c6:0f:9e:57:a9:07:4b:70:f7:55:e8:0c:7a: 9a:7a:a6:98:03:c1:eb:d5:92:50:26:70:1a:21:37:99:81:d1: b5:43:9a:15:a0:12:0d:10:15:48:a2:b7:ce:01:e9:36:fb:b2: 6a:a6:a8:b9:79:a8:0d:f2:11:b5:ce:ac:48:94:ae:48:29:db: a1:ab:c7:d0:5b:eb:dc:30:95:4e:ae:40:20:a8:d7:25:19:43: 79:38:50:45:f6:38:4c:00:32:69:65:5e:14:dd:8b:75:08:be: 67:3b:71:91:aa:8c:5b:e5:ad:97:2e:7c:24:0d:a7:e3:81:a6: 72:3d:ed:48:0c:18:4f:e3:9b:8f:a9:bf:d9:c8:d4:b3:a5:22: 2c:f4:8b:1b:28:54:63:e4:5f:cd:9a:ad:a0:54:7d:e5:ce:2b: a5:10:7e:cd:9b:c7:0a:53:5c:aa:81:79:4c:69:bd:e4:f2:b1: 47:66:df:da:d5:0c:8c:d3:a0:3e:c7:79:2b:95:93:52:25:36: 5a:9c:29:a1:46:36:ce:d7:49:03:06:2c:9e:1a:42:bf:b2:d2: 0d:bd:85:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn1j+Ewixe0GUHC8SOMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0 ZTlmNTAwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD EyhmZGU4NGQ0N2UwNWUzNmJkZjBlYmUyNTJhZWU1YTJiOTRlMmFjY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxWrnhil6uINYchXkitSSwU8AhP8 NxGWUIIaHPyiYVp46sKJ3ti0/CbSO04nbIn72ElCjxGpmZIdeLOrk2xCspYl4id7 2wDtXU7u9T0JFIU9JSUsWU7Fj81c30trd4stC7cNuEfd2EQ7zB/X01M0T8e8X9uJ jAVagmCq1eFp0FdFSIO6N5pOIhvXf68cV51pEQ3EyGZafTEk5LNz19QnFrFdRiWR lvFpglQB/lRSYEB6mxB1PcGpbCinzC9Jdqo+aNukRBf9JIyX9RwKhufkLb5RC6LM gL1yKbzYJgvGik1W9nQjHArm6Z6UwBdZFQZv2WRaBcr/z80uZfrNP7o/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3oTUfgXja98OviUq7lorlOKszCMB8GA1UdIwQY MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0 LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtqSvjwt jMrg13nT835uDBXlubtIpAVQKguHHYdsruAM6xwv4x8AnFzGD55XqQdLcPdV6Ax6 mnqmmAPB69WSUCZwGiE3mYHRtUOaFaASDRAVSKK3zgHpNvuyaqaouXmoDfIRtc6s SJSuSCnboavH0Fvr3DCVTq5AIKjXJRlDeThQRfY4TAAyaWVeFN2LdQi+ZztxkaqM W+Wtly58JA2n44Gmcj3tSAwYT+Obj6m/2cjUs6UiLPSLGyhUY+RfzZqtoFR95c4r pRB+zZvHClNcqoF5TGm95PKxR2bf2tUMjNOgPsd5K5WTUiU2WpwpoUY2ztdJAwYs nhpCv7LSDb2Fdw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:14 2025 by rpki-client