This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json) Hash identifier: +b4jsD0Bnd/QwXkvnYhhok4dmQMEkDewc38HjIFe3Qk= Subject key identifier: 3F:1F:3D:2F:19:C8:6E:C1:32:3D:74:32:8A:EA:D2:B6:50:7B:08:6C Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29 Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029 Certificate serial: 019B0E2600148B3134AD180BDA2A482861DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 16:02:09 +0000 Manifest this update: Thu 11 Dec 2025 16:02:09 +0000 Manifest next update: Fri 12 Dec 2025 16:02:09 +0000 Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: EhlvE//c20ruTAFzbNAYskTb6Z1JlIYX2hi0X2Ex2tE=) 2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=) 3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:00:14:8b:31:34:ad:18:0b:da:2a:48:28:61:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029 Validity Not Before: Dec 11 16:02:09 2025 GMT Not After : Dec 12 16:02:09 2025 GMT Subject: CN=3f1f3d2f19c86ec1323d74328aead2b6507b086c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:d3:eb:1e:04:00:b0:31:3b:de:3e:18:07: a9:54:cb:89:9f:41:02:a5:32:51:9f:79:36:1e:d9: 86:7e:00:8d:54:75:ba:00:00:81:57:79:47:1d:8c: 77:ef:d2:76:96:8f:ba:a3:3c:f0:4c:5a:2d:fc:33: f1:2f:ac:25:a8:bb:a4:b6:8d:ff:1d:ca:f0:99:9f: ee:ae:09:3a:77:2a:fc:d0:bb:ef:89:3d:ed:f7:0a: 1a:4e:1f:06:a2:1e:50:b6:5a:f6:c6:59:3e:8d:0c: 54:8a:58:e0:69:ad:f2:52:ad:16:e1:8c:3b:bf:55: 65:20:8e:d4:f7:76:08:67:5a:a8:97:4b:8c:1e:51: a3:d2:d8:10:4f:6b:98:e4:d2:35:92:4b:36:d2:25: ba:98:b0:2a:47:47:f1:a9:cd:7b:f8:21:b1:6b:c6: 97:6b:93:b8:29:4a:e9:aa:fa:ba:9d:58:da:c2:fe: 34:82:9f:88:db:52:d1:e7:c8:fd:03:5b:ba:40:3c: d7:84:5b:bc:c5:ca:85:1a:fb:bf:bd:77:d4:d6:21: dc:73:72:54:db:cc:b0:95:6d:78:1c:6c:21:3f:ec: a7:24:fb:1d:23:fb:25:73:03:61:f2:96:9b:cd:1c: 04:d0:b9:02:d9:79:eb:f0:3d:2e:72:0c:b7:8f:11: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1F:3D:2F:19:C8:6E:C1:32:3D:74:32:8A:EA:D2:B6:50:7B:08:6C X509v3 Authority Key Identifier: keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f6:14:d6:35:63:41:d5:5a:33:30:af:f9:3f:03:b5:92:81: 3d:0a:74:db:dc:de:f0:c4:89:59:c9:43:12:01:a7:fb:43:4f: f8:99:4f:33:b6:6c:e9:33:fa:e6:2f:24:7b:e0:3d:a3:97:2b: 70:ec:bb:91:c5:eb:56:e2:49:c9:eb:ed:cf:61:20:8a:e0:c4: 5c:71:a9:c7:a6:2c:67:76:6b:75:15:d2:1e:40:fa:19:62:f7: 04:5e:a0:2a:ec:2a:a1:fe:51:22:23:7a:fe:28:3c:ca:a3:e3: 6f:60:22:98:d0:c0:88:3a:02:17:0f:a6:95:3f:6d:1f:9d:c2: 4f:ae:9b:26:be:92:69:74:69:a2:c5:8b:dc:29:f1:db:2d:ac: 93:98:96:83:7b:2a:20:ea:53:5c:db:db:2b:ba:c0:72:ce:b8: 00:58:7f:79:0c:f5:f4:10:d6:5f:ce:9f:f5:97:90:bb:36:e0: d5:0a:4c:fb:94:e9:16:1b:ab:af:b9:22:62:73:cb:f8:d8:69: c6:1a:77:b1:e5:1a:f3:48:7d:b7:6a:8b:96:c7:c6:b5:09:e5: b1:b5:11:25:cb:8e:02:f1:2b:57:ab:8b:1f:99:1a:ef:89:3f: bc:60:b3:e2:2e:e3:13:d9:6a:a7:8b:eb:71:c0:f8:02:58:62: 06:68:86:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJgAUizE0rRgL2ipIKGHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjRmNDBmMzIxMTU2MWMyOWYxYmJjMzIwYmQ4N2NmYTJk ZGQwMjkwHhcNMjUxMjExMTYwMjA5WhcNMjUxMjEyMTYwMjA5WjAzMTEwLwYDVQQD EygzZjFmM2QyZjE5Yzg2ZWMxMzIzZDc0MzI4YWVhZDJiNjUwN2IwODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXbT6x4EALAxO94+GAepVMuJn0EC pTJRn3k2HtmGfgCNVHW6AACBV3lHHYx379J2lo+6ozzwTFot/DPxL6wlqLukto3/ HcrwmZ/urgk6dyr80LvviT3t9woaTh8Goh5Qtlr2xlk+jQxUiljgaa3yUq0W4Yw7 v1VlII7U93YIZ1qol0uMHlGj0tgQT2uY5NI1kks20iW6mLAqR0fxqc17+CGxa8aX a5O4KUrpqvq6nVjawv40gp+I21LR58j9A1u6QDzXhFu8xcqFGvu/vXfU1iHcc3JU 28ywlW14HGwhP+ynJPsdI/slcwNh8pabzRwE0LkC2Xnr8D0ucgy3jxGQfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8fPS8ZyG7BMj10Morq0rZQewhsMB8GA1UdIwQY MBaAFP+09A8yEVYcKfG7wyC9h8+i3dApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGIt ZDUzZjk0ZTIwN2E5LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGItZDUzZjk0ZTIwN2E5 LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfYU1jVj QdVaMzCv+T8DtZKBPQp029ze8MSJWclDEgGn+0NP+JlPM7Zs6TP65i8ke+A9o5cr cOy7kcXrVuJJyevtz2EgiuDEXHGpx6YsZ3ZrdRXSHkD6GWL3BF6gKuwqof5RIiN6 /ig8yqPjb2AimNDAiDoCFw+mlT9tH53CT66bJr6SaXRposWL3Cnx2y2sk5iWg3sq IOpTXNvbK7rAcs64AFh/eQz19BDWX86f9ZeQuzbg1QpM+5TpFhurr7kiYnPL+Nhp xhp3seUa80h9t2qLlsfGtQnlsbURJcuOAvErV6uLH5ka74k/vGCz4i7jE9lqp4vr ccD4AlhiBmiGfA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:26:35 2025 by rpki-client