This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft File: 7WRpHDGJLMmRrU6alnEUd1nkF6s.mft (raw, json) Hash identifier: 1SWHvOH6dwBq05Yisk5fgcVUqIaaHWY4kExTDuvqXqo= Subject key identifier: 19:9D:57:72:E3:B4:FA:6F:28:97:30:05:85:88:21:C4:3C:D4:6C:7A Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab Certificate serial: 019B0E265D72B974B81F1B0773BA6D59AD58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft Manifest number: 0A31 Signing time: Thu 11 Dec 2025 16:02:33 +0000 Manifest this update: Thu 11 Dec 2025 16:02:33 +0000 Manifest next update: Fri 12 Dec 2025 16:02:33 +0000 Files and hashes: 1: 7WRpHDGJLMmRrU6alnEUd1nkF6s.crl (hash: 30W2ddXVW76I2beAZFWemw3gmIsmd9yk/eCGPNW2pbY=) 2: dV2OtRjSyQPY4YCyr9lFdLU27E8.roa (hash: eomTnqbffaVsgF38WkF2EttPiM+DiZupJiWYxVCsPt8=) 3: sicbdCG2iYzhu-629rtfi9Mdacc.roa (hash: 15ZqEI24vxjg+kbWFjzN5AwwcoD44VA0JvYiQO2NJFQ=) 4: xx8xA0JnzBykNL-Z7GzXL0j5bD0.roa (hash: 476qF8QW7rlffGimT6vIV2UtU8yiqDsBP0tdI7yQI0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:5d:72:b9:74:b8:1f:1b:07:73:ba:6d:59:ad:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab Validity Not Before: Dec 11 16:02:33 2025 GMT Not After : Dec 12 16:02:33 2025 GMT Subject: CN=199d5772e3b4fa6f28973005858821c43cd46c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:65:a5:f3:2e:02:3f:e8:d9:43:7b:67:67: 5b:d0:d9:5c:63:ae:fa:12:8b:3e:ba:cc:9e:5b:52: ff:7e:05:df:f9:24:42:db:1f:75:a0:96:c2:d1:95: ab:57:2e:46:3a:25:a6:ce:6d:e4:00:f0:1a:f4:81: 93:6f:b0:33:f5:eb:f8:a6:53:76:27:01:6f:d2:c4: 89:75:23:90:61:00:28:9d:bc:b9:62:65:2b:70:1a: 0a:c5:f2:06:b3:ae:bf:36:03:23:6e:91:13:5a:1d: 5d:0f:56:a9:e5:d4:ab:9e:99:61:6c:fb:66:41:ee: 73:6f:84:eb:23:e0:cf:ab:21:78:2d:bc:7a:33:b3: e0:59:c1:6b:f9:11:16:ed:86:29:d0:30:32:76:b7: c5:7c:34:75:10:44:24:7f:72:c9:0f:33:a8:e3:85: ee:fa:bf:80:81:92:c6:56:d2:19:f1:47:e6:ce:cf: b0:3a:46:84:c4:4e:d2:10:bd:6a:9f:9e:2b:c5:3e: 60:c8:d7:af:82:7e:41:8a:b5:72:6b:d8:d2:7d:b0: 3b:c1:51:16:e7:3b:3d:54:91:d2:62:b4:8b:50:89: e5:76:7a:cc:fb:fe:54:8a:93:05:17:fd:4d:b7:5a: 1c:67:81:8c:59:c7:d8:80:6c:44:e2:22:a2:38:c2: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:57:72:E3:B4:FA:6F:28:97:30:05:85:88:21:C4:3C:D4:6C:7A X509v3 Authority Key Identifier: keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:21:b2:a0:7e:89:56:0f:09:bf:30:fe:b2:07:da:3e:be:09: b9:97:ea:f7:e0:35:79:4c:55:fc:c1:05:e6:cc:88:56:57:33: bd:a6:7b:2b:67:13:93:f6:18:dc:2b:75:b6:d3:e3:68:38:c0: 2f:6c:02:b2:66:ef:fd:4c:7c:1b:d7:1f:68:43:a2:6b:7d:a2: f0:78:5a:19:16:06:3e:fd:94:e9:77:06:be:b6:ce:0d:9c:42: 4d:4b:98:d9:6c:75:06:18:64:fa:bb:54:9c:65:c4:2c:f9:38: 06:92:c4:45:0d:ef:67:6d:94:bc:43:de:1c:c5:b0:b8:c3:44: b8:c2:18:ef:f7:96:e4:03:64:f1:50:e3:c1:7c:bd:14:aa:3a: da:3d:81:8b:59:3a:48:1b:11:73:dc:f8:73:3c:00:55:ca:5d: f1:be:25:8e:23:fc:83:43:20:97:ca:a6:73:07:46:4d:dc:02: df:91:70:cd:ce:bb:92:53:43:2f:ad:79:7d:14:a5:8d:91:c8: d9:36:fe:90:f2:0c:6e:60:e9:f0:44:57:0e:a6:51:04:a8:a4: 21:51:ea:82:e6:0d:13:bc:2c:42:14:7d:f9:7a:2e:c7:f3:63: 22:19:53:59:0b:a8:03:37:8f:1e:96:d7:f8:c8:31:ca:89:d8: 27:c3:40:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJl1yuXS4HxsHc7ptWa1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjQ2OTFjMzE4OTJjYzk5MWFkNGU5YTk2NzExNDc3NTll NDE3YWIwHhcNMjUxMjExMTYwMjMzWhcNMjUxMjEyMTYwMjMzWjAzMTEwLwYDVQQD EygxOTlkNTc3MmUzYjRmYTZmMjg5NzMwMDU4NTg4MjFjNDNjZDQ2YzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPNlpfMuAj/o2UN7Z2db0NlcY676 Eos+usyeW1L/fgXf+SRC2x91oJbC0ZWrVy5GOiWmzm3kAPAa9IGTb7Az9ev4plN2 JwFv0sSJdSOQYQAonby5YmUrcBoKxfIGs66/NgMjbpETWh1dD1ap5dSrnplhbPtm Qe5zb4TrI+DPqyF4Lbx6M7PgWcFr+REW7YYp0DAydrfFfDR1EEQkf3LJDzOo44Xu +r+AgZLGVtIZ8Ufmzs+wOkaExE7SEL1qn54rxT5gyNevgn5BirVya9jSfbA7wVEW 5zs9VJHSYrSLUInldnrM+/5UipMFF/1Nt1ocZ4GMWcfYgGxE4iKiOMKDXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmdV3LjtPpvKJcwBYWIIcQ81Gx6MB8GA1UdIwQY MBaAFO1kaRwxiSzJka1OmpZxFHdZ5BerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjIt N2M3ZGIyMTIzMGEzLzEvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjItN2M3ZGIyMTIzMGEz LzEvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCGyoH6J Vg8JvzD+sgfaPr4JuZfq9+A1eUxV/MEF5syIVlczvaZ7K2cTk/YY3Ct1ttPjaDjA L2wCsmbv/Ux8G9cfaEOia32i8HhaGRYGPv2U6XcGvrbODZxCTUuY2Wx1Bhhk+rtU nGXELPk4BpLERQ3vZ22UvEPeHMWwuMNEuMIY7/eW5ANk8VDjwXy9FKo62j2Bi1k6 SBsRc9z4czwAVcpd8b4ljiP8g0Mgl8qmcwdGTdwC35Fwzc67klNDL615fRSljZHI 2Tb+kPIMbmDp8ERXDqZRBKikIVHqguYNE7wsQhR9+Xoux/NjIhlTWQuoAzePHpbX +MgxyonYJ8NATw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:51 2025 by rpki-client