This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json) Hash identifier: POCaoIuWNPZ3wevv7378lRKvkcxsfgn8GjRbh06dj54= Subject key identifier: DD:95:13:97:66:04:A6:0C:A4:D0:67:A4:97:60:34:D8:AF:01:7D:28 Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Certificate serial: 019B077DBD5B50938D83B5F24A98E8F859A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft Manifest number: 176B Signing time: Wed 10 Dec 2025 09:00:39 +0000 Manifest this update: Wed 10 Dec 2025 09:00:39 +0000 Manifest next update: Thu 11 Dec 2025 09:00:39 +0000 Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=) 2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: Vzoawnc+glJ5fgaGwUXror0PmxoqHocnhe+IQ+SGqBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:bd:5b:50:93:8d:83:b5:f2:4a:98:e8:f8:59:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Validity Not Before: Dec 10 09:00:39 2025 GMT Not After : Dec 11 09:00:39 2025 GMT Subject: CN=dd9513976604a60ca4d067a4976034d8af017d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:89:6e:6e:56:ec:ef:d0:04:eb:bb:4e:49: f7:27:23:2a:8a:20:ca:2a:68:38:a2:ef:dc:90:84: fa:03:39:63:5e:c9:1d:ec:57:b9:25:28:d5:e5:b1: ed:fd:aa:e9:6b:d2:bf:26:64:cd:73:be:6e:da:3a: 58:32:2e:50:62:62:13:74:c8:52:9a:23:0d:31:f0: 6d:cc:84:c1:a6:fc:38:99:f6:67:13:3f:3a:8d:70: 05:f6:38:3d:65:03:bc:4f:e9:40:7a:77:94:ab:7f: d6:b2:b5:2b:22:de:21:95:81:24:08:92:f5:1f:62: 55:de:3e:6b:0e:8c:fe:d2:12:31:90:ad:bc:4f:ef: 28:85:56:73:14:43:fe:8b:62:63:47:af:b3:a5:d1: f2:7c:e4:60:92:98:d6:73:0f:f2:b8:7b:8d:0c:50: 6b:cd:28:6c:f9:f7:f5:52:1d:6d:ea:11:c1:cc:62: 6a:3a:60:2d:d7:a9:c0:34:c4:52:60:66:07:fb:ef: 64:49:83:73:23:3a:b6:47:42:42:f6:24:c0:aa:c9: 56:d7:f0:fe:ad:66:d5:72:90:fe:80:15:19:75:04: 12:a4:22:3e:ea:44:cd:d5:a0:da:37:1d:d3:f9:a8: 0e:87:c0:12:07:93:74:83:8b:6f:97:44:4b:de:e8: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:95:13:97:66:04:A6:0C:A4:D0:67:A4:97:60:34:D8:AF:01:7D:28 X509v3 Authority Key Identifier: keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ab:c8:14:45:da:04:d9:52:ba:9c:92:02:3e:5f:13:50:78: f3:c0:c8:af:4e:71:15:c1:c9:d0:c5:2c:6e:72:d7:04:da:f9: c6:53:f7:8e:dc:83:a3:ec:7a:c7:c1:c8:17:e4:29:9b:f7:70: 7b:61:02:fe:f4:72:90:7a:d7:5f:f4:4d:b4:1a:51:01:42:df: 03:b1:54:07:f0:4c:7e:ce:18:ff:b5:b6:93:36:29:38:53:59: f8:6b:85:ef:5e:a8:07:40:0f:46:9a:ce:77:f4:8c:58:15:47: 2d:3f:26:41:7f:33:eb:6b:f6:78:1a:3a:07:22:75:5a:05:42: c2:bb:f5:45:f9:08:9c:0e:55:71:3d:d8:c1:f2:f7:0f:d6:19: bf:2d:9c:ec:d3:6a:20:4c:58:7a:b1:10:92:4c:26:6a:41:7d: 85:b7:86:69:cc:0d:a9:f7:2d:bd:b1:be:6c:11:4b:2a:b6:46: cd:4d:c5:87:75:fc:2b:e6:ce:8f:83:91:b4:9f:50:57:64:95: 12:30:ae:bb:83:26:35:d8:b3:fa:84:c9:9a:b6:32:00:94:35: 7c:7c:e0:8a:ad:c9:a0:65:17:09:05:c5:b1:38:9d:78:bc:16: ea:3f:c3:b4:9e:b1:54:7b:b1:b5:15:11:f8:92:5a:9a:a5:85: 6f:70:a5:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfb1bUJONg7XySpjo+FmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYjkxMjViOGExMGQzMjIzNDg2ODFhMmQyYWM3ZDY3ZDJh ZDI1MzUwHhcNMjUxMjEwMDkwMDM5WhcNMjUxMjExMDkwMDM5WjAzMTEwLwYDVQQD EyhkZDk1MTM5NzY2MDRhNjBjYTRkMDY3YTQ5NzYwMzRkOGFmMDE3ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz46Jbm5W7O/QBOu7Tkn3JyMqiiDK Kmg4ou/ckIT6AzljXskd7Fe5JSjV5bHt/arpa9K/JmTNc75u2jpYMi5QYmITdMhS miMNMfBtzITBpvw4mfZnEz86jXAF9jg9ZQO8T+lAeneUq3/WsrUrIt4hlYEkCJL1 H2JV3j5rDoz+0hIxkK28T+8ohVZzFEP+i2JjR6+zpdHyfORgkpjWcw/yuHuNDFBr zShs+ff1Uh1t6hHBzGJqOmAt16nANMRSYGYH++9kSYNzIzq2R0JC9iTAqslW1/D+ rWbVcpD+gBUZdQQSpCI+6kTN1aDaNx3T+agOh8ASB5N0g4tvl0RL3uia8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2VE5dmBKYMpNBnpJdgNNivAX0oMB8GA1UdIwQY MBaAFGu5EluKENMiNIaBotKsfWfSrSU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUt ODNiYzQxM2EwNDhkLzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUtODNiYzQxM2EwNDhk LzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqvIFEXa BNlSupySAj5fE1B488DIr05xFcHJ0MUsbnLXBNr5xlP3jtyDo+x6x8HIF+Qpm/dw e2EC/vRykHrXX/RNtBpRAULfA7FUB/BMfs4Y/7W2kzYpOFNZ+GuF716oB0APRprO d/SMWBVHLT8mQX8z62v2eBo6ByJ1WgVCwrv1RfkInA5VcT3YwfL3D9YZvy2c7NNq IExYerEQkkwmakF9hbeGacwNqfctvbG+bBFLKrZGzU3Fh3X8K+bOj4ORtJ9QV2SV EjCuu4MmNdiz+oTJmrYyAJQ1fHzgiq3JoGUXCQXFsTideLwW6j/DtJ6xVHuxtRUR +JJamqWFb3ClSA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:31:11 2025 by rpki-client