This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json) Hash identifier: HM4zJcYce+ZnWNZsVEkUnYdjpufc2ATL1XEp0HULL3U= Subject key identifier: 0C:9B:83:9C:4B:C3:5E:3A:3C:2D:9B:E6:66:FD:AB:B1:CD:66:65:D8 Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Certificate serial: 019B115D34588D688A37888499A5C085FDE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 07:01:19 +0000 Manifest this update: Fri 12 Dec 2025 07:01:19 +0000 Manifest next update: Sat 13 Dec 2025 07:01:19 +0000 Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=) 2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: OA9tmW2WaCZAOdu1hWQtSmV9kfhScFSr90AtEkVDJCo=) 3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:34:58:8d:68:8a:37:88:84:99:a5:c0:85:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Validity Not Before: Dec 12 07:01:19 2025 GMT Not After : Dec 13 07:01:19 2025 GMT Subject: CN=0c9b839c4bc35e3a3c2d9be666fdabb1cd6665d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:c6:ad:ae:61:45:f2:37:e9:ec:2c:ca:f0: 60:d8:4e:d0:cd:5c:39:17:5a:ae:7b:d3:ca:b7:a1: 16:fa:d3:09:1c:c8:95:6e:6d:85:6b:4b:3f:a0:e3: 33:d8:2a:1f:e8:03:c7:8b:08:0c:9d:66:fc:2a:68: bd:82:d9:41:c7:d4:8a:d3:b3:cb:1d:2a:6a:c3:a9: 79:0a:d2:7c:bd:55:02:6b:db:40:8f:ce:d9:17:0a: 84:64:5f:1e:dc:58:d4:c7:81:c2:1c:c8:7d:13:d9: c4:8c:cc:c2:58:3f:3c:56:90:cc:dc:e7:05:5a:0d: f7:e2:38:8e:4d:96:58:2c:07:cc:b7:ec:d5:c2:88: e0:1a:fa:7a:2f:f8:49:11:78:f7:82:50:a6:f0:56: c9:6f:aa:b8:21:05:03:cb:68:9c:68:53:5d:cf:60: d8:91:25:01:52:8d:06:dd:d6:13:45:b4:8e:85:90: 98:6f:ae:f9:f6:8d:19:97:99:15:e8:7e:d3:fe:50: ad:0a:9d:b1:83:48:ef:4d:92:a2:a1:20:70:2c:4c: e7:15:e9:63:e7:29:47:61:20:84:a6:e3:18:70:d6: 2f:d2:8c:77:81:63:4b:5a:ca:80:f5:15:02:19:9f: a9:65:a0:e5:d1:54:31:9b:aa:50:aa:e8:5c:e3:c1: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9B:83:9C:4B:C3:5E:3A:3C:2D:9B:E6:66:FD:AB:B1:CD:66:65:D8 X509v3 Authority Key Identifier: keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:57:53:8e:e6:9b:3b:3f:f8:d6:68:82:8b:0b:22:5e:6f:79: 69:0d:ac:3d:36:3e:d2:f7:5f:29:37:b7:64:52:48:a0:5c:c4: c1:66:42:e6:03:d5:d0:ec:f5:b7:72:cc:42:2e:98:6f:02:c0: 22:31:b5:7c:6e:8e:23:9d:14:ec:cc:4c:2d:dc:f1:61:76:ab: 3a:c9:ec:6f:e7:f6:74:4d:26:60:62:c5:33:fd:63:64:1d:03: 5b:a3:39:94:09:b0:d2:ed:7e:d3:62:8a:63:f4:79:c5:ac:29: 32:3a:c5:91:13:d3:6b:0f:79:7c:c5:18:f4:f4:d2:1a:9f:bc: c8:9f:66:8c:e5:f1:91:8d:45:bb:f4:a6:c5:a0:8f:c6:2f:99: a0:9d:08:27:70:80:a5:6b:4f:10:07:9f:09:37:60:86:78:73: 5e:1c:3f:df:e0:5f:1c:4f:6f:42:26:19:a4:ea:e4:9f:b4:1d: 88:8e:06:f5:58:84:ab:9f:b8:70:f1:e8:c9:f4:91:db:7e:4f: 59:2d:c1:0a:af:be:32:f4:d4:e8:8d:cc:1c:d3:ee:57:9f:99: 1d:5e:dc:3f:d4:7f:be:1f:e7:7c:5c:7a:48:8c:35:87:1e:39: 7e:ad:99:30:dd:e0:5a:75:d9:56:60:d8:04:6f:d1:48:66:24: c0:2a:3f:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXTRYjWiKN4iEmaXAhf3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmNiZWU0NGY0Y2VmMDkxOTg1ZTU0NmE2ODU0ZjljY2Iy YWRhOGEwHhcNMjUxMjEyMDcwMTE5WhcNMjUxMjEzMDcwMTE5WjAzMTEwLwYDVQQD EygwYzliODM5YzRiYzM1ZTNhM2MyZDliZTY2NmZkYWJiMWNkNjY2NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt/Gra5hRfI36ewsyvBg2E7QzVw5 F1que9PKt6EW+tMJHMiVbm2Fa0s/oOMz2Cof6APHiwgMnWb8Kmi9gtlBx9SK07PL HSpqw6l5CtJ8vVUCa9tAj87ZFwqEZF8e3FjUx4HCHMh9E9nEjMzCWD88VpDM3OcF Wg334jiOTZZYLAfMt+zVwojgGvp6L/hJEXj3glCm8FbJb6q4IQUDy2icaFNdz2DY kSUBUo0G3dYTRbSOhZCYb6759o0Zl5kV6H7T/lCtCp2xg0jvTZKioSBwLEznFelj 5ylHYSCEpuMYcNYv0ox3gWNLWsqA9RUCGZ+pZaDl0VQxm6pQquhc48FONQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAybg5xLw146PC2b5mb9q7HNZmXYMB8GA1UdIwQY MBaAFJe8vuRPTO8JGYXlRqaFT5zLKtqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgt ODMwM2FkMTM3MWRkLzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgtODMwM2FkMTM3MWRk LzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFdTjuab Oz/41miCiwsiXm95aQ2sPTY+0vdfKTe3ZFJIoFzEwWZC5gPV0Oz1t3LMQi6YbwLA IjG1fG6OI50U7MxMLdzxYXarOsnsb+f2dE0mYGLFM/1jZB0DW6M5lAmw0u1+02KK Y/R5xawpMjrFkRPTaw95fMUY9PTSGp+8yJ9mjOXxkY1Fu/SmxaCPxi+ZoJ0IJ3CA pWtPEAefCTdghnhzXhw/3+BfHE9vQiYZpOrkn7QdiI4G9ViEq5+4cPHoyfSR235P WS3BCq++MvTU6I3MHNPuV5+ZHV7cP9R/vh/nfFx6SIw1hx45fq2ZMN3gWnXZVmDY BG/RSGYkwCo/nw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:04:26 2025 by rpki-client