This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json) Hash identifier: RUlPzVlnn6fK1TRNqvfjNqagFKu+S4mGxd0zdwZcOhY= Subject key identifier: 17:34:F1:B6:50:66:64:FE:C3:E3:1E:CD:01:03:F0:02:9C:41:B9:11 Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28 Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28 Certificate serial: 019B1BAB1E965A836D03B8E8545A4758D4E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 07:02:37 +0000 Manifest this update: Sun 14 Dec 2025 07:02:37 +0000 Manifest next update: Mon 15 Dec 2025 07:02:37 +0000 Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: Jov2386zhYndYG+n0h4xwAolJNCj1RjW/mUe5Yc/yV8=) 2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:ab:1e:96:5a:83:6d:03:b8:e8:54:5a:47:58:d4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28 Validity Not Before: Dec 14 07:02:37 2025 GMT Not After : Dec 15 07:02:37 2025 GMT Subject: CN=1734f1b6506664fec3e31ecd0103f0029c41b911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:6d:29:ab:38:64:68:89:44:b0:ca:bc:de: 32:fa:ac:c1:a5:b9:de:0e:27:7f:c7:3a:83:10:1b: e8:69:bc:73:94:80:d4:75:ea:72:1f:63:99:5c:92: 05:62:74:2f:a4:f0:41:0b:95:5e:da:74:42:e6:30: 5e:16:2b:46:6b:6f:3f:ff:78:2f:11:3b:84:e3:8d: be:56:1c:6b:51:0c:13:17:06:fb:6f:29:11:cf:84: fe:72:38:93:81:57:0d:d2:5a:a6:20:1f:a9:83:f3: 4b:1b:f9:63:2f:dd:d4:c9:48:7f:96:c4:4a:04:97: e4:24:9b:8d:09:88:a4:0d:89:72:55:75:59:5a:b2: e1:4a:13:78:69:09:b3:0b:49:f6:b6:92:bb:cc:00: 22:c6:8b:4e:7f:9c:56:fe:06:cc:f8:64:13:0c:64: 66:f9:42:41:b9:f2:48:9e:96:f9:1d:99:6f:02:c4: 55:83:55:04:31:2c:e9:7c:a2:da:13:df:8a:79:be: c6:fc:fd:57:af:16:b4:d1:09:81:48:f9:6b:c6:59: 3e:5e:cd:8c:45:19:9c:5b:63:31:41:81:c1:e3:ef: 89:d9:7c:b1:1c:8d:ff:b7:84:2e:94:5f:fb:1b:f9: e8:84:c6:8e:3b:4a:4b:42:3e:2b:91:0c:88:37:f2: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:34:F1:B6:50:66:64:FE:C3:E3:1E:CD:01:03:F0:02:9C:41:B9:11 X509v3 Authority Key Identifier: keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d9:bc:7e:76:3d:b9:b1:57:32:19:30:67:36:0f:d7:9f:98: a4:55:26:aa:bc:ee:5d:4b:5a:c5:1c:a2:f6:79:d8:ba:44:25: 8f:cd:55:ac:b8:6b:77:b8:fb:ef:0b:6b:6d:b4:ef:ac:33:f0: 65:c7:65:44:4a:fa:f5:b6:3d:0b:64:4d:8d:c5:06:72:67:6c: 43:5e:9c:31:d7:0f:e9:bc:22:36:47:83:fb:19:77:7f:24:4c: 2b:13:ab:19:30:d2:70:50:c9:5b:2a:4a:84:17:5d:bc:68:b8: 26:48:26:43:ba:8c:5b:7e:41:bb:fa:32:cb:a0:f2:7f:93:22: 3d:11:fe:1d:2f:12:b6:18:9e:87:da:39:57:1d:a2:d0:13:42: ba:e6:b9:c7:1a:66:de:9a:97:a2:aa:69:38:ab:8a:35:c6:fb: d4:fe:b7:81:96:dc:09:b6:66:0b:45:8e:3d:fc:d7:ca:df:fd: 0b:41:66:d2:55:51:ec:40:30:8f:66:7b:36:25:02:f3:9a:64: 2f:28:31:ce:0f:85:ff:13:7f:e6:73:d0:12:27:38:30:6c:2d: 4d:b6:43:42:4f:77:f4:ef:3c:5a:8d:a1:d9:13:28:80:c2:c0: ad:02:64:0c:77:fc:f6:6b:85:b5:4f:38:72:d0:14:42:96:09: 57:7c:fc:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqx6WWoNtA7joVFpHWNTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOWUwYTU5MWNjNTI5MTRjYzcwMGUzODc1ZWQ3NWE5MWVj OThjMjgwHhcNMjUxMjE0MDcwMjM3WhcNMjUxMjE1MDcwMjM3WjAzMTEwLwYDVQQD EygxNzM0ZjFiNjUwNjY2NGZlYzNlMzFlY2QwMTAzZjAwMjljNDFiOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbFtKas4ZGiJRLDKvN4y+qzBpbne Did/xzqDEBvoabxzlIDUdepyH2OZXJIFYnQvpPBBC5Ve2nRC5jBeFitGa28//3gv ETuE442+VhxrUQwTFwb7bykRz4T+cjiTgVcN0lqmIB+pg/NLG/ljL93UyUh/lsRK BJfkJJuNCYikDYlyVXVZWrLhShN4aQmzC0n2tpK7zAAixotOf5xW/gbM+GQTDGRm +UJBufJInpb5HZlvAsRVg1UEMSzpfKLaE9+Keb7G/P1Xrxa00QmBSPlrxlk+Xs2M RRmcW2MxQYHB4++J2XyxHI3/t4QulF/7G/nohMaOO0pLQj4rkQyIN/Lq0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBc08bZQZmT+w+MezQED8AKcQbkRMB8GA1UdIwQY MBaAFH2eClkcxSkUzHAOOHXtdakeyYwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDIt YzRkODhiMTNmMTNhLzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDItYzRkODhiMTNmMTNh LzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNm8fnY9 ubFXMhkwZzYP15+YpFUmqrzuXUtaxRyi9nnYukQlj81VrLhrd7j77wtrbbTvrDPw ZcdlREr69bY9C2RNjcUGcmdsQ16cMdcP6bwiNkeD+xl3fyRMKxOrGTDScFDJWypK hBddvGi4JkgmQ7qMW35Bu/oyy6Dyf5MiPRH+HS8Sthieh9o5Vx2i0BNCuua5xxpm 3pqXoqppOKuKNcb71P63gZbcCbZmC0WOPfzXyt/9C0Fm0lVR7EAwj2Z7NiUC85pk Lygxzg+F/xN/5nPQEic4MGwtTbZDQk939O88Wo2h2RMogMLArQJkDHf89muFtU84 ctAUQpYJV3z8BQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:07:13 2025 by rpki-client