This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json) Hash identifier: vesNG5Lou+D1Tpr1uO/+r/bbFJuVwOLbDZvOBxuZMfo= Subject key identifier: 8E:D7:65:26:84:A7:1F:68:85:D0:F3:94:9D:70:23:84:C9:A0:2D:2E Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a Certificate serial: 019AAD27707E1EF4FF5C47C853FB5FE4A16C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft Manifest number: 173D Signing time: Sat 22 Nov 2025 20:00:34 +0000 Manifest this update: Sat 22 Nov 2025 20:00:34 +0000 Manifest next update: Sun 23 Nov 2025 20:00:34 +0000 Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: hV52IFvW+IKe96ZIF5bK05WHiXuEj+1PHnr2MoJTOgQ=) 2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=) 3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:70:7e:1e:f4:ff:5c:47:c8:53:fb:5f:e4:a1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a Validity Not Before: Nov 22 20:00:34 2025 GMT Not After : Nov 23 20:00:34 2025 GMT Subject: CN=8ed7652684a71f6885d0f3949d702384c9a02d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:90:f4:11:65:d6:85:63:14:25:b0:ea:3b: 01:b8:b3:ef:57:30:9f:33:c1:84:03:7f:36:f1:5e: 9c:ac:1c:f4:c0:7f:f6:dd:2a:ec:4d:d1:3d:2b:12: a3:cb:98:09:55:35:65:88:4b:f0:57:e9:53:25:ce: 4b:3a:da:83:7d:66:f5:8e:b6:1a:60:6e:58:4f:3c: 0b:dc:2c:d0:d6:9f:23:67:b8:71:61:98:7a:7b:5f: 02:d0:07:e2:c3:d9:12:d2:38:7e:92:37:4d:a0:9f: e8:f4:15:2e:ec:71:61:ca:34:5c:d0:9f:a2:67:95: 40:2a:b6:90:d6:85:a5:07:6a:95:f5:05:c6:01:b1: dc:fa:7b:64:2e:af:0e:1c:07:b1:dd:62:96:67:38: fe:24:9c:6d:a4:7f:3c:ee:f7:62:d1:17:00:3c:d0: 06:17:ca:28:a2:7d:01:0a:42:bc:0a:73:19:71:e2: 46:11:15:2a:f4:49:46:d5:43:71:95:90:76:87:f8: 37:5f:ec:7c:95:8a:1e:6f:e0:81:93:87:81:50:ba: 65:29:eb:18:65:ca:51:29:e6:44:4b:f1:e9:cd:30: a0:f3:f0:7e:5e:30:94:ff:ce:99:52:f9:ef:cb:c4: 4b:a7:59:5b:4f:b3:27:09:45:f5:9f:9d:d8:04:6b: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D7:65:26:84:A7:1F:68:85:D0:F3:94:9D:70:23:84:C9:A0:2D:2E X509v3 Authority Key Identifier: keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:64:ad:e6:42:10:bb:de:73:5c:9b:c5:da:bc:70:16:08:9d: 3a:60:1e:89:60:a7:ee:c1:aa:72:b2:5c:49:41:91:09:80:f8: a9:03:3b:71:8e:09:29:e3:9a:a2:f5:1b:f5:fd:a1:4a:28:d6: 3f:b8:6e:38:93:83:91:00:33:2f:29:e2:e6:72:7c:8e:94:3f: 2c:70:3a:2e:24:2a:33:a0:3c:63:18:fb:e3:92:17:06:13:19: b1:4e:c3:ed:45:5c:96:cb:5b:9b:74:bc:e3:b9:ce:fc:cc:f1: c7:21:26:a6:d3:32:96:27:12:db:ae:3c:b2:ed:7e:1e:61:e1: 50:f9:d9:e2:11:8e:00:72:b0:bc:8f:a8:0d:0d:a9:6e:d5:bf: a8:0f:9b:60:51:fa:c9:be:a4:90:fc:ba:59:3c:50:e8:05:5b: 55:49:84:70:f0:0c:5e:8c:dd:80:6c:e7:ff:58:e3:04:c1:48: 33:05:40:5c:8c:30:3c:01:f7:5a:10:b5:c3:71:a5:2c:27:4c: 0c:c6:70:1a:cb:2f:3a:60:40:ff:42:b8:14:17:08:bc:2a:0e: 18:1b:a0:dc:2c:bf:87:9f:2a:25:f8:53:19:bf:98:9e:da:72: ce:6f:83:30:04:38:0e:7f:73:72:45:1e:3c:9c:9d:61:60:13: 85:7e:33:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ3B+HvT/XEfIU/tf5KFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm M2VhMGEwHhcNMjUxMTIyMjAwMDM0WhcNMjUxMTIzMjAwMDM0WjAzMTEwLwYDVQQD Eyg4ZWQ3NjUyNjg0YTcxZjY4ODVkMGYzOTQ5ZDcwMjM4NGM5YTAyZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3OQ9BFl1oVjFCWw6jsBuLPvVzCf M8GEA3828V6crBz0wH/23SrsTdE9KxKjy5gJVTVliEvwV+lTJc5LOtqDfWb1jrYa YG5YTzwL3CzQ1p8jZ7hxYZh6e18C0Afiw9kS0jh+kjdNoJ/o9BUu7HFhyjRc0J+i Z5VAKraQ1oWlB2qV9QXGAbHc+ntkLq8OHAex3WKWZzj+JJxtpH887vdi0RcAPNAG F8ooon0BCkK8CnMZceJGERUq9ElG1UNxlZB2h/g3X+x8lYoeb+CBk4eBULplKesY ZcpRKeZES/HpzTCg8/B+XjCU/86ZUvnvy8RLp1lbT7MnCUX1n53YBGs7OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7XZSaEpx9ohdDzlJ1wI4TJoC0uMB8GA1UdIwQY MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1 LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWSt5kIQ u95zXJvF2rxwFgidOmAeiWCn7sGqcrJcSUGRCYD4qQM7cY4JKeOaovUb9f2hSijW P7huOJODkQAzLyni5nJ8jpQ/LHA6LiQqM6A8Yxj745IXBhMZsU7D7UVclstbm3S8 47nO/MzxxyEmptMylicS2648su1+HmHhUPnZ4hGOAHKwvI+oDQ2pbtW/qA+bYFH6 yb6kkPy6WTxQ6AVbVUmEcPAMXozdgGzn/1jjBMFIMwVAXIwwPAH3WhC1w3GlLCdM DMZwGssvOmBA/0K4FBcIvCoOGBug3Cy/h58qJfhTGb+Yntpyzm+DMAQ4Dn9zckUe PJydYWAThX4zSA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:49 2025 by rpki-client