This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft File: 97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json) Hash identifier: tG4UkJndwpIKDzEMOKcNj/nBc1IS5xIILYrrizKn5Sc= Subject key identifier: AA:C4:AB:EE:2A:BB:55:48:51:EB:68:AC:8E:D4:BF:AE:58:DC:3D:C6 Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3 Certificate issuer: /CN=f7bc29f353852d180d23410997d0f047ec1778d3 Certificate serial: 019B3CEC79DBEEB0786E87091025F5075CD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 18:01:29 +0000 Manifest this update: Sat 20 Dec 2025 18:01:29 +0000 Manifest next update: Sun 21 Dec 2025 18:01:29 +0000 Files and hashes: 1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: YZWg6Rys2zgGPAAcCHnS/E7Zk6obAM7GJGGFuU/Ypr8=) 2: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (hash: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:79:db:ee:b0:78:6e:87:09:10:25:f5:07:5c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3 Validity Not Before: Dec 20 18:01:29 2025 GMT Not After : Dec 21 18:01:29 2025 GMT Subject: CN=aac4abee2abb554851eb68ac8ed4bfae58dc3dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:5b:9b:d3:aa:cf:da:de:a5:78:13:fb:03: cf:31:42:8b:f6:2b:f9:f1:fd:f6:af:ff:ba:32:49: e0:0d:b3:fb:42:f4:91:34:d8:47:47:f8:85:f1:fc: 1a:d5:8d:b4:fd:43:ae:fe:09:e9:45:e1:b2:f5:80: d9:38:a8:f4:37:2f:37:4d:f5:88:b5:67:dd:58:45: bb:c1:96:08:54:5e:7e:64:58:15:67:45:d5:bb:d7: 5d:20:17:28:66:cc:93:97:c0:04:32:0b:79:e9:66: 0d:43:3b:d0:94:8b:23:86:7a:dc:8e:2c:a4:d3:c5: 2e:26:ba:ef:64:0d:08:f9:5c:b4:fb:40:b9:49:a2: 9d:61:70:4d:aa:86:b2:42:fe:55:30:d1:46:d4:e3: 31:b3:79:e4:d9:28:21:5a:39:74:2d:26:71:80:ff: 93:ef:65:55:59:d8:9e:3c:25:1d:70:01:7b:6e:03: 2c:6c:46:fc:0f:02:b7:cd:d5:36:81:ac:74:db:be: c8:13:e7:3b:b9:6d:f4:f1:97:13:b8:d4:c9:56:30: b4:8c:96:b1:09:6c:e8:25:1f:05:8e:a2:69:f0:1d: 1c:18:96:e4:c7:d6:c3:19:8d:aa:cc:ea:bf:d9:61: be:df:88:2e:66:99:e7:80:62:4f:5e:0d:17:0e:dd: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C4:AB:EE:2A:BB:55:48:51:EB:68:AC:8E:D4:BF:AE:58:DC:3D:C6 X509v3 Authority Key Identifier: keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:31:aa:f5:26:ec:94:a4:c3:6a:d4:7b:34:98:fc:f2:1f:f9: fd:37:59:a0:c1:5e:70:da:dd:9a:82:2c:e7:7f:b7:65:6c:e1: 2a:de:63:f6:98:4f:5b:d8:de:3e:d1:d2:4b:32:3c:8a:65:d8: 81:da:ac:df:dd:e0:b6:58:82:a8:b2:68:d2:24:fe:f6:1f:bb: 35:c5:33:4f:ad:f6:c3:e3:51:7b:24:02:11:9f:c5:45:69:44: 58:e5:1b:56:29:e7:9f:41:62:06:42:a6:7e:16:3e:9b:a6:8b: c8:b8:7b:d0:74:81:43:c3:4c:1a:45:12:45:db:1a:3a:42:f7: 5a:1e:32:06:f8:88:56:71:92:5f:e0:ed:df:2b:7c:4b:e5:48: db:8f:d4:b9:03:c2:2b:29:7a:a1:35:5c:6f:46:87:f4:5c:55: 45:d5:17:b0:d7:a4:da:53:8d:29:f2:0b:d9:11:0c:fc:83:e2: 40:ad:d8:22:5d:06:e3:ad:71:f1:ef:f6:e1:96:2c:dd:6f:2c: 13:6b:e1:ec:bb:df:76:34:60:94:ed:66:58:07:c6:3c:b1:7d: df:8d:36:d0:b7:e2:bf:b4:eb:fd:21:8e:8c:a1:4a:fd:1a:4a: 95:3a:fe:cd:ee:af:c7:f1:17:77:59:26:d2:32:ce:dc:ff:7c: f1:dc:4d:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Hnb7rB4bocJECX1B1zYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YmMyOWYzNTM4NTJkMTgwZDIzNDEwOTk3ZDBmMDQ3ZWMx Nzc4ZDMwHhcNMjUxMjIwMTgwMTI5WhcNMjUxMjIxMTgwMTI5WjAzMTEwLwYDVQQD EyhhYWM0YWJlZTJhYmI1NTQ4NTFlYjY4YWM4ZWQ0YmZhZTU4ZGMzZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYZbm9Oqz9repXgT+wPPMUKL9iv5 8f32r/+6MkngDbP7QvSRNNhHR/iF8fwa1Y20/UOu/gnpReGy9YDZOKj0Ny83TfWI tWfdWEW7wZYIVF5+ZFgVZ0XVu9ddIBcoZsyTl8AEMgt56WYNQzvQlIsjhnrcjiyk 08UuJrrvZA0I+Vy0+0C5SaKdYXBNqoayQv5VMNFG1OMxs3nk2SghWjl0LSZxgP+T 72VVWdiePCUdcAF7bgMsbEb8DwK3zdU2gax0277IE+c7uW308ZcTuNTJVjC0jJax CWzoJR8FjqJp8B0cGJbkx9bDGY2qzOq/2WG+34guZpnngGJPXg0XDt17CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrEq+4qu1VIUetorI7Uv65Y3D3GMB8GA1UdIwQY MBaAFPe8KfNThS0YDSNBCZfQ8EfsF3jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUt ZmU1NzNiMDIzZmQyLzEvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUtZmU1NzNiMDIzZmQy LzEvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTGq9Sbs lKTDatR7NJj88h/5/TdZoMFecNrdmoIs53+3ZWzhKt5j9phPW9jePtHSSzI8imXY gdqs393gtliCqLJo0iT+9h+7NcUzT632w+NReyQCEZ/FRWlEWOUbVinnn0FiBkKm fhY+m6aLyLh70HSBQ8NMGkUSRdsaOkL3Wh4yBviIVnGSX+Dt3yt8S+VI24/UuQPC Kyl6oTVcb0aH9FxVRdUXsNek2lONKfIL2REM/IPiQK3YIl0G461x8e/24ZYs3W8s E2vh7LvfdjRglO1mWAfGPLF934020Lfiv7Tr/SGOjKFK/RpKlTr+ze6vx/EXd1km 0jLO3P988dxNAw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:50:05 2025 by rpki-client