This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json) Hash identifier: 6B14O88NBfXpBUYaZVfvC44LiKTd+e7fPvgx9JOMi0o= Subject key identifier: 60:93:67:DC:4F:94:6E:49:94:F5:3C:E3:FF:75:57:A6:CF:A4:44:11 Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31 Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931 Certificate serial: 019B59085522A2ECCBA2F764DAC22523F5B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 05:01:16 +0000 Manifest this update: Fri 26 Dec 2025 05:01:16 +0000 Manifest next update: Sat 27 Dec 2025 05:01:16 +0000 Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=) 2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: 07PnyF98p1NCRBcRnt6mwwTsj5qUg0G4laBgs9LamGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:55:22:a2:ec:cb:a2:f7:64:da:c2:25:23:f5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931 Validity Not Before: Dec 26 05:01:16 2025 GMT Not After : Dec 27 05:01:16 2025 GMT Subject: CN=609367dc4f946e4994f53ce3ff7557a6cfa44411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:37:36:f5:63:72:46:9f:59:1e:f3:78:9f:ce: 6c:82:64:40:79:af:c0:7e:e6:86:a7:5e:a3:94:ef: 4e:9d:ee:17:25:4a:59:56:76:2f:33:7c:19:04:ca: 27:99:86:f9:b5:05:f9:21:09:09:e4:4b:e0:82:44: 70:af:7f:28:9e:29:57:73:c2:a8:9b:65:16:ef:b6: 6f:8c:29:08:ae:30:f8:3d:06:18:0f:68:04:7d:e2: f8:bf:fc:dd:55:29:a5:d8:67:ff:7c:1e:91:15:e4: 94:34:ad:1c:59:b8:69:3f:f3:eb:8f:28:24:da:ab: 77:22:ac:9d:6f:90:50:69:b1:0f:2c:72:5c:ee:3a: a2:c4:3d:90:34:f3:1d:d4:e8:90:8d:1b:39:84:68: a7:b0:e4:d8:30:89:76:29:1f:cb:1f:e9:57:1d:00: 3e:49:98:73:d1:b4:1a:ea:d2:3c:c1:1b:32:96:84: 21:1d:69:ee:d4:79:11:7d:51:6d:d6:07:a9:f9:80: 0d:b4:55:0f:6c:84:84:58:e6:94:42:62:10:0b:9d: d8:41:e1:74:b8:45:13:e4:bc:4a:ea:6f:64:56:d3: 58:0b:4f:6d:5c:89:e4:9a:d0:72:84:f5:ed:1b:05: af:37:a8:21:2d:11:a0:71:37:9c:c3:30:08:b8:54: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:93:67:DC:4F:94:6E:49:94:F5:3C:E3:FF:75:57:A6:CF:A4:44:11 X509v3 Authority Key Identifier: keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ec:35:98:28:92:cb:58:92:0a:22:ef:d0:1e:6b:b1:db:cb: 96:61:b8:31:1e:f0:47:6f:52:89:46:b7:4a:fa:7d:af:b9:39: 6e:f1:cc:b9:c8:82:a4:e9:aa:08:53:b4:bf:b2:f6:69:6c:aa: 07:df:00:04:75:f9:a6:a9:f7:31:8d:95:6f:75:fc:9e:bd:c3: a1:fb:18:f8:dc:6c:b6:a2:0b:38:21:d7:70:18:5a:42:58:ff: da:f2:dc:ed:33:5e:1d:b8:8f:39:3f:14:af:07:b2:08:4d:3f: b0:c5:af:d0:fb:2d:8f:f9:c2:58:5e:4d:0d:67:a1:4f:37:df: f3:e8:76:0c:ee:cd:7f:b0:cb:c3:bb:76:20:19:c8:f6:08:02: 02:5d:56:09:c6:0e:bc:bc:08:de:ca:26:0d:b1:ce:07:60:d4: 0a:c8:0e:f4:eb:0d:d6:f6:ff:79:ae:d2:4d:bb:0f:dd:24:ad: 14:db:ab:7d:0c:34:f9:e4:01:86:92:bc:74:ab:1d:01:d8:40: e5:dd:08:46:ae:62:bf:15:ab:3f:0f:b6:b7:40:15:35:1e:7b: 55:a2:81:29:5b:0a:fd:ff:ce:1f:db:e3:83:86:23:ec:c8:61: a6:1e:82:d5:51:9e:68:7b:3a:1d:09:83:9f:8e:3e:c6:01:08: a2:cc:48:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCFUiouzLovdk2sIlI/WzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmM5MWY3OGEzMzUwYmFjYmJmYmUzNzZmODgxMzIxMmQx NDk5MzEwHhcNMjUxMjI2MDUwMTE2WhcNMjUxMjI3MDUwMTE2WjAzMTEwLwYDVQQD Eyg2MDkzNjdkYzRmOTQ2ZTQ5OTRmNTNjZTNmZjc1NTdhNmNmYTQ0NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Dc29WNyRp9ZHvN4n85sgmRAea/A fuaGp16jlO9One4XJUpZVnYvM3wZBMonmYb5tQX5IQkJ5EvggkRwr38onilXc8Ko m2UW77ZvjCkIrjD4PQYYD2gEfeL4v/zdVSml2Gf/fB6RFeSUNK0cWbhpP/Prjygk 2qt3Iqydb5BQabEPLHJc7jqixD2QNPMd1OiQjRs5hGinsOTYMIl2KR/LH+lXHQA+ SZhz0bQa6tI8wRsyloQhHWnu1HkRfVFt1gep+YANtFUPbISEWOaUQmIQC53YQeF0 uEUT5LxK6m9kVtNYC09tXInkmtByhPXtGwWvN6ghLRGgcTecwzAIuFTsOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCTZ9xPlG5JlPU84/91V6bPpEQRMB8GA1UdIwQY MBaAFHe8kfeKM1C6y7++N2+IEyEtFJkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMt OWRiNTdjM2ZlNDFkLzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMtOWRiNTdjM2ZlNDFk LzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOw1mCiS y1iSCiLv0B5rsdvLlmG4MR7wR29SiUa3Svp9r7k5bvHMuciCpOmqCFO0v7L2aWyq B98ABHX5pqn3MY2Vb3X8nr3DofsY+NxstqILOCHXcBhaQlj/2vLc7TNeHbiPOT8U rweyCE0/sMWv0Pstj/nCWF5NDWehTzff8+h2DO7Nf7DLw7t2IBnI9ggCAl1WCcYO vLwI3somDbHOB2DUCsgO9OsN1vb/ea7STbsP3SStFNurfQw0+eQBhpK8dKsdAdhA 5d0IRq5ivxWrPw+2t0AVNR57VaKBKVsK/f/OH9vjg4Yj7Mhhph6C1VGeaHs6HQmD n44+xgEIosxIpQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:01 2025 by rpki-client