This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json) Hash identifier: AIm6sX65W1k7Z7sngLWFI1ZlyUsWykIb9ykD2ZZ3tWk= Subject key identifier: 4A:8E:4C:51:AB:02:68:83:40:29:47:F6:E9:D5:FA:6E:34:CF:A6:B2 Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2 Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2 Certificate serial: 019AF1D228E86CCB52A8BB1AB0010943B212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft Manifest number: 0B86 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: 1-QcSYLdpveuStLYqlBunMp4JJ5g.roa (hash: NQizYlwEjERl0X/bxZE2nkkRnRTSix4QkB1fVvIKAMg=) 2: ayI-UL4oibibFX4cW3YWUk6xSTs.roa (hash: N1Uh/40VgHWlkmnSe6ILZ6Uts2Fhgd/GOVLIcEzqLXQ=) 3: gnkHs-huFz_Mv1gh2f--oMoTlbI.roa (hash: cAkEhiie/5ypOg0o3pr7TFLqNT0IK1/cxJALcW2pMbg=) 4: njDEZbySu24l3-7pqiEP7cKTkYk.roa (hash: sJSOzcEBtzhJa/6Rsm70KNeiGLuydqUWSSlaAXnP8xU=) 5: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: d/RuiamXLyRqvL01gRkLTtyRHaxLHvn9jOFpplHy7yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:28:e8:6c:cb:52:a8:bb:1a:b0:01:09:43:b2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=4a8e4c51ab026883402947f6e9d5fa6e34cfa6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:63:7c:64:26:ca:fa:80:96:ba:4c:ba:4f: a1:ad:75:ae:0a:a7:bb:96:f6:b1:1d:4c:71:37:8a: 9f:b1:dc:98:51:28:5d:af:94:1f:63:8d:7e:fa:02: ff:98:e5:b8:30:20:0a:a1:94:fe:b4:20:1f:ef:e3: 89:62:11:6e:7f:43:39:5f:52:f4:e4:7f:56:9a:54: 30:7d:f1:ae:b5:d4:c2:7a:9d:e5:bd:7f:c5:26:f9: 75:3e:91:06:35:57:2a:f4:dd:a8:f2:9c:e2:83:b3: 53:36:ae:0a:9c:b9:60:2e:b0:a4:49:7c:43:ff:5c: 41:03:23:b0:c1:db:6a:a9:ea:1f:c8:26:8d:80:a5: f0:26:84:61:3a:e5:98:d1:e9:7b:23:35:58:fd:c2: b0:1b:09:9b:b5:41:63:e1:3d:fb:6d:83:2d:62:ab: bb:09:e4:8b:05:79:e9:86:cd:36:08:fa:4c:bf:3b: ae:05:2d:fd:36:5c:a4:ef:f4:3f:58:5a:8b:fb:b6: 28:03:3a:4f:9a:70:f1:84:61:13:23:54:40:f3:8d: 70:84:29:a8:df:23:c5:74:82:00:57:a9:b6:64:11: 5f:ee:9f:dc:dd:2d:de:b4:e7:a7:5a:66:0b:91:ba: 86:2a:46:dd:a3:80:ef:4b:e8:f1:59:89:e3:3d:22: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8E:4C:51:AB:02:68:83:40:29:47:F6:E9:D5:FA:6E:34:CF:A6:B2 X509v3 Authority Key Identifier: keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:88:0b:cb:ad:20:95:59:c9:62:b4:df:75:99:ee:02:72:71: b3:5d:94:31:fb:62:e2:7e:18:7e:b4:a4:ef:5a:45:9e:6a:0a: 06:dc:eb:63:74:83:81:f9:b7:b7:67:e0:69:9f:3a:63:b7:c6: 96:b3:d9:0a:a6:0a:c3:7e:bc:8f:b8:75:8b:80:ea:30:61:b3: 4e:c3:5c:98:9f:af:ce:ee:a2:cb:ff:b1:8c:a5:28:15:4b:1b: 12:ee:93:6c:ca:09:64:46:cd:d3:c0:40:f0:ce:ec:94:cc:cd: 68:7f:8b:78:b1:c0:ea:d2:e6:30:2d:16:08:7c:bb:f7:b6:8b: 56:80:5d:41:81:47:b3:29:15:e8:6f:33:eb:91:45:3d:b9:92: 8e:f8:c5:0d:60:62:f5:3c:3f:b5:e0:ed:29:f6:00:b9:2f:3e: 0b:93:e6:4b:29:89:d5:45:17:f8:9b:18:9f:75:b1:03:3b:1f: 2b:5c:30:02:54:5b:97:6f:91:76:f7:3a:81:9c:8e:39:25:fe: b6:3e:2e:7d:67:1d:f0:c3:28:bc:8d:d3:3d:35:f0:08:0d:c4: 62:39:01:b7:76:fe:c9:7e:6a:3e:bf:d3:58:41:98:f2:74:1c: 28:e3:d2:28:b6:0e:b1:34:fc:a7:b8:f1:74:0c:51:b4:ec:2e: d0:09:73:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ijobMtSqLsasAEJQ7ISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYjRlMDRhMGVkMzQ0MTEyYzE4NTNjYWIwOWY1MmUxY2Q5 YWJhZjIwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD Eyg0YThlNGM1MWFiMDI2ODgzNDAyOTQ3ZjZlOWQ1ZmE2ZTM0Y2ZhNmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQpjfGQmyvqAlrpMuk+hrXWuCqe7 lvaxHUxxN4qfsdyYUShdr5QfY41++gL/mOW4MCAKoZT+tCAf7+OJYhFuf0M5X1L0 5H9WmlQwffGutdTCep3lvX/FJvl1PpEGNVcq9N2o8pzig7NTNq4KnLlgLrCkSXxD /1xBAyOwwdtqqeofyCaNgKXwJoRhOuWY0el7IzVY/cKwGwmbtUFj4T37bYMtYqu7 CeSLBXnphs02CPpMvzuuBS39Nlyk7/Q/WFqL+7YoAzpPmnDxhGETI1RA841whCmo 3yPFdIIAV6m2ZBFf7p/c3S3etOenWmYLkbqGKkbdo4DvS+jxWYnjPSKLFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqOTFGrAmiDQClH9unV+m40z6ayMB8GA1UdIwQY MBaAFK+04EoO00QRLBhTyrCfUuHNmrryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTct ODA5NWYzMjk3MTc5LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTctODA5NWYzMjk3MTc5 LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATogLy60g lVnJYrTfdZnuAnJxs12UMfti4n4YfrSk71pFnmoKBtzrY3SDgfm3t2fgaZ86Y7fG lrPZCqYKw368j7h1i4DqMGGzTsNcmJ+vzu6iy/+xjKUoFUsbEu6TbMoJZEbN08BA 8M7slMzNaH+LeLHA6tLmMC0WCHy797aLVoBdQYFHsykV6G8z65FFPbmSjvjFDWBi 9Tw/teDtKfYAuS8+C5PmSymJ1UUX+JsYn3WxAzsfK1wwAlRbl2+Rdvc6gZyOOSX+ tj4ufWcd8MMovI3TPTXwCA3EYjkBt3b+yX5qPr/TWEGY8nQcKOPSKLYOsTT8p7jx dAxRtOwu0AlzVA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:47 2025 by rpki-client