This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json) Hash identifier: tI5DQ7+bLTEEPJw1qWSPEzKJepuquxhvYAjECkySD5M= Subject key identifier: E7:3D:69:A7:53:02:8C:A0:32:2D:90:52:DE:F0:EA:55:25:43:19:33 Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66 Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166 Certificate serial: 019B0DB6E7E7D73D0041AFF81D40E558AC6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 14:00:49 +0000 Manifest this update: Thu 11 Dec 2025 14:00:49 +0000 Manifest next update: Fri 12 Dec 2025 14:00:49 +0000 Files and hashes: 1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=) 2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: XKaA/nQY2QEn3Tq6W71wnxIJZacYMA/R/NZzEd9kU8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:e7:e7:d7:3d:00:41:af:f8:1d:40:e5:58:ac:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166 Validity Not Before: Dec 11 14:00:49 2025 GMT Not After : Dec 12 14:00:49 2025 GMT Subject: CN=e73d69a753028ca0322d9052def0ea5525431933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:80:70:3e:cf:4b:01:12:13:2c:84:38:69:56: 65:e9:8f:7f:25:19:b8:a8:79:28:6c:83:75:a6:e0: d2:e6:07:ff:e3:d8:7a:93:c3:da:e2:05:d0:00:d0: 01:8a:f9:b0:05:3f:40:a1:aa:7e:f9:64:9c:c9:29: d0:06:1f:60:f7:7d:d2:83:e6:3b:86:59:6e:c6:8d: f0:60:87:c7:44:e4:b9:f4:1d:28:c5:98:36:25:64: 51:7f:2e:fe:f0:db:2f:67:6d:b0:20:f0:9c:ae:46: 72:d4:25:34:d1:6e:7e:f7:8b:bf:11:4f:b6:7c:df: ee:ef:3b:70:d7:fe:77:0b:2f:a9:55:9d:75:ce:37: eb:38:6f:bc:73:a4:aa:51:71:04:09:85:ee:e5:0c: d1:ee:26:cd:e7:4c:44:9e:96:fe:98:a8:8f:0a:b7: dc:e0:e3:60:47:62:cc:55:3d:e1:f1:1b:8d:3a:95: 7f:f8:46:dd:f3:8b:98:65:a3:98:b6:c1:a2:66:a7: ee:4a:77:55:ee:a1:91:03:4e:5c:9b:24:db:cd:7c: 79:78:41:9d:7c:df:93:17:67:1b:73:c6:f5:ca:32: 79:5a:8d:89:a3:72:97:8e:cd:57:be:39:44:38:d5: 7c:b3:71:9b:b1:39:c8:ae:3f:b4:cc:91:f4:45:ce: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3D:69:A7:53:02:8C:A0:32:2D:90:52:DE:F0:EA:55:25:43:19:33 X509v3 Authority Key Identifier: keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:89:69:2f:13:fc:50:5b:ea:d0:16:8f:93:be:20:31:dc:fd: d8:1c:8d:d8:f6:41:cd:6f:90:91:02:e9:94:8e:9c:d3:a8:8d: 55:8a:6f:e4:f4:ae:49:05:61:c0:e1:3f:75:56:4f:4b:cf:b5: 1a:06:c2:3f:53:5e:bf:e6:74:ea:0e:74:bb:1d:1f:b7:fd:3d: 99:71:70:b8:9b:33:f0:7a:3a:54:53:95:e5:7c:21:cd:5e:96: 4c:ef:f2:28:d4:17:cb:04:9d:8b:b0:42:9a:52:3a:ee:8d:cf: 66:cb:13:c3:06:07:7a:93:3c:3c:4c:50:46:80:99:a3:d9:8d: eb:f2:ee:f1:a4:52:8f:35:44:80:5d:6c:12:15:7f:0f:b7:47: 0e:8c:b3:a1:74:0c:3a:4e:55:9a:33:c7:6a:cf:f8:50:82:cd: df:96:47:08:0f:33:69:16:48:5b:a2:66:09:0d:c0:3a:59:79: 99:61:fb:b4:a0:74:26:ef:e5:b7:5a:50:15:ab:ec:c5:98:84: 9a:d8:3c:88:06:58:9c:f2:e5:a0:67:86:fc:5d:92:61:81:04: 29:28:68:b5:0d:24:67:38:30:0a:a1:a2:0d:00:56:c8:a7:c4: 77:19:e4:a0:c3:e8:00:28:7f:8a:68:e1:e6:51:4e:db:25:63: 7c:b6:6d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtufn1z0AQa/4HUDlWKxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZGVjN2IyZTlmODY2ZWFjMzZiYzMxY2E0YzRmZjYyZDUz ZGQxNjYwHhcNMjUxMjExMTQwMDQ5WhcNMjUxMjEyMTQwMDQ5WjAzMTEwLwYDVQQD EyhlNzNkNjlhNzUzMDI4Y2EwMzIyZDkwNTJkZWYwZWE1NTI1NDMxOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIBwPs9LARITLIQ4aVZl6Y9/JRm4 qHkobIN1puDS5gf/49h6k8Pa4gXQANABivmwBT9Aoap++WScySnQBh9g933Sg+Y7 hlluxo3wYIfHROS59B0oxZg2JWRRfy7+8NsvZ22wIPCcrkZy1CU00W5+94u/EU+2 fN/u7ztw1/53Cy+pVZ11zjfrOG+8c6SqUXEECYXu5QzR7ibN50xEnpb+mKiPCrfc 4ONgR2LMVT3h8RuNOpV/+Ebd84uYZaOYtsGiZqfuSndV7qGRA05cmyTbzXx5eEGd fN+TF2cbc8b1yjJ5Wo2Jo3KXjs1XvjlEONV8s3GbsTnIrj+0zJH0Rc6lfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc9aadTAoygMi2QUt7w6lUlQxkzMB8GA1UdIwQY MBaAFGzex7Lp+Gbqw2vDHKTE/2LVPdFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDIt NGU2N2JlNGU0MzJlLzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDItNGU2N2JlNGU0MzJl LzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIlpLxP8 UFvq0BaPk74gMdz92ByN2PZBzW+QkQLplI6c06iNVYpv5PSuSQVhwOE/dVZPS8+1 GgbCP1Nev+Z06g50ux0ft/09mXFwuJsz8Ho6VFOV5XwhzV6WTO/yKNQXywSdi7BC mlI67o3PZssTwwYHepM8PExQRoCZo9mN6/Lu8aRSjzVEgF1sEhV/D7dHDoyzoXQM Ok5VmjPHas/4UILN35ZHCA8zaRZIW6JmCQ3AOll5mWH7tKB0Ju/lt1pQFavsxZiE mtg8iAZYnPLloGeG/F2SYYEEKShotQ0kZzgwCqGiDQBWyKfEdxnkoMPoACh/imjh 5lFO2yVjfLZtRA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:39 2025 by rpki-client