This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json) Hash identifier: ONjtYKTiYnL5ind5a/WZkVDDmmnVwIRO9rD5sUB29ss= Subject key identifier: 66:7C:65:AD:1F:3A:99:7D:FB:C3:60:65:33:9C:98:9E:82:39:59:AA Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Certificate serial: 019B0F379264E54350CE0757FC47946F50E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft Manifest number: 0FF7 Signing time: Thu 11 Dec 2025 21:00:58 +0000 Manifest this update: Thu 11 Dec 2025 21:00:58 +0000 Manifest next update: Fri 12 Dec 2025 21:00:58 +0000 Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=) 2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: NBGkni0MPUVX/1wHeYujcDbhbMRU/czn1a9u5TOIwSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:92:64:e5:43:50:ce:07:57:fc:47:94:6f:50:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Validity Not Before: Dec 11 21:00:58 2025 GMT Not After : Dec 12 21:00:58 2025 GMT Subject: CN=667c65ad1f3a997dfbc36065339c989e823959aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:82:db:06:4b:14:38:7c:31:ce:22:02:d4: b9:6c:06:d3:08:22:f5:8b:f1:64:dd:a6:11:92:7e: 3c:b9:e7:0a:9f:2f:82:82:d6:7d:74:39:a8:af:12: 49:fe:7b:4e:c6:b9:40:d1:fa:3a:02:fa:c9:e0:a3: 41:df:8f:35:f3:59:d0:b5:c5:02:e8:61:c3:04:78: b5:fe:a8:5d:20:5a:53:89:4d:f9:4c:58:69:ab:c2: 77:a6:26:ef:6d:58:6e:57:c6:f3:d1:c0:d5:4a:9d: ec:c2:57:5f:8d:5b:9d:80:28:71:66:77:cc:45:5c: 59:09:03:1d:ce:c1:c1:a1:a9:a8:e1:7d:38:8e:f1: 0b:90:f2:f5:62:59:78:bf:ae:b2:88:d3:e9:fd:74: 57:e2:a5:c5:04:2f:4d:f3:e7:fd:3c:15:8c:4b:7c: f7:4f:8f:98:c5:fe:fc:10:35:3a:a5:25:91:db:2d: 11:e0:7a:c6:81:0d:5c:60:09:10:ca:ba:15:da:80: 5c:87:e3:f4:21:93:0a:17:99:54:ab:a9:19:de:34: ac:48:75:98:a4:8b:30:d5:84:ee:1d:53:cd:bf:df: 5b:de:a3:78:ff:15:99:6c:8b:0e:52:e5:85:53:c5: f2:c6:75:e9:24:e9:60:8a:68:01:04:a8:d4:fe:90: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7C:65:AD:1F:3A:99:7D:FB:C3:60:65:33:9C:98:9E:82:39:59:AA X509v3 Authority Key Identifier: keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:89:92:d8:08:37:40:29:83:e1:89:9e:b8:27:5f:ec:b4:ec: 80:7e:23:27:be:1e:e2:27:10:5f:a2:17:ed:25:07:76:83:d2: c4:82:48:86:20:9e:6a:43:9e:da:29:22:14:b1:4d:3e:b1:56: e4:b6:12:03:b0:ec:ea:29:ec:40:e3:6e:25:f8:f0:a2:8f:ca: 7a:bb:82:8b:2c:3f:22:3e:a7:d5:8d:07:0d:ac:d3:d0:a5:0d: 35:fb:85:d7:dd:1d:f2:03:99:2f:89:1e:ec:f5:e6:c7:0a:e4: 69:f2:dd:f5:e9:c8:bf:cf:b8:bf:3a:e4:13:6a:f5:25:62:71: 4e:ba:b0:b6:be:c5:40:43:5a:94:f5:50:2e:8a:7b:1a:d7:b6: b2:da:d9:3f:a4:60:c2:92:6e:ae:af:9f:e2:ac:35:fc:29:de: 6a:ab:94:fe:4a:51:fc:b3:88:8b:c6:26:e1:c4:aa:7d:14:6f: 8e:2b:6f:8d:5c:49:91:cb:34:81:e2:98:23:c2:60:f1:22:54: c9:8a:58:3d:e1:98:fe:5c:f2:51:d9:52:13:3c:9c:d7:fe:af: 51:cc:92:80:a1:2c:f6:40:90:be:07:4d:a6:2c:d3:2e:08:a8: 97:61:69:98:27:7a:0e:7b:a1:f1:28:08:50:61:84:e9:1c:9b: 57:92:09:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5Jk5UNQzgdX/EeUb1DnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2Y4M2RlZTkyZDhkM2UyOGQ3MzYyZGZjNzE4NzU1M2Q4 OGM3NWMwHhcNMjUxMjExMjEwMDU4WhcNMjUxMjEyMjEwMDU4WjAzMTEwLwYDVQQD Eyg2NjdjNjVhZDFmM2E5OTdkZmJjMzYwNjUzMzljOTg5ZTgyMzk1OWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD2C2wZLFDh8Mc4iAtS5bAbTCCL1 i/Fk3aYRkn48uecKny+CgtZ9dDmorxJJ/ntOxrlA0fo6AvrJ4KNB348181nQtcUC 6GHDBHi1/qhdIFpTiU35TFhpq8J3pibvbVhuV8bz0cDVSp3swldfjVudgChxZnfM RVxZCQMdzsHBoamo4X04jvELkPL1Yll4v66yiNPp/XRX4qXFBC9N8+f9PBWMS3z3 T4+Yxf78EDU6pSWR2y0R4HrGgQ1cYAkQyroV2oBch+P0IZMKF5lUq6kZ3jSsSHWY pIsw1YTuHVPNv99b3qN4/xWZbIsOUuWFU8XyxnXpJOlgimgBBKjU/pDroQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ8Za0fOpl9+8NgZTOcmJ6COVmqMB8GA1UdIwQY MBaAFHE/g97pLY0+KNc2Lfxxh1U9iMdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAt NzkxNDM4MzM2M2Y3LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAtNzkxNDM4MzM2M2Y3 LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHomS2Ag3 QCmD4YmeuCdf7LTsgH4jJ74e4icQX6IX7SUHdoPSxIJIhiCeakOe2ikiFLFNPrFW 5LYSA7Ds6insQONuJfjwoo/KeruCiyw/Ij6n1Y0HDazT0KUNNfuF190d8gOZL4ke 7PXmxwrkafLd9enIv8+4vzrkE2r1JWJxTrqwtr7FQENalPVQLop7Gte2strZP6Rg wpJurq+f4qw1/CneaquU/kpR/LOIi8Ym4cSqfRRvjitvjVxJkcs0geKYI8Jg8SJU yYpYPeGY/lzyUdlSEzyc1/6vUcySgKEs9kCQvgdNpizTLgiol2FpmCd6Dnuh8SgI UGGE6RybV5IJVg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:13:04 2025 by rpki-client