This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json) Hash identifier: 8hnELWRcrhZ+zXFbMPUt2LpLf4RIN+n7EHpXYlgD+Ns= Subject key identifier: 87:03:39:6A:17:1F:33:F8:25:7F:E2:C5:3D:99:9D:EB:28:9F:F4:5B Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362 Certificate serial: 019B0935FB22CBF81900BA03319DF33904B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft Manifest number: 18 Signing time: Wed 10 Dec 2025 17:01:31 +0000 Manifest this update: Wed 10 Dec 2025 17:01:31 +0000 Manifest next update: Thu 11 Dec 2025 17:01:31 +0000 Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: /51YMFMKdK5FCkK0dNwtOsA7ZRtb9VNTbYqJxxfHIFE=) 2: FH7sO2w4buuUxe4Xni3YZHcOAgs.roa (hash: kJoB+cGjyVW2fni2uIlOIfUSADoKT5LoOeBxc8WKnUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 17:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:35:fb:22:cb:f8:19:00:ba:03:31:9d:f3:39:04:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362 Validity Not Before: Dec 10 17:01:31 2025 GMT Not After : Dec 11 17:01:31 2025 GMT Subject: CN=8703396a171f33f8257fe2c53d999deb289ff45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:57:8c:d5:00:5c:c8:b0:8b:56:fb:0b:3d: 42:ee:a5:21:f2:3e:c6:6f:98:65:19:a1:5b:8f:ef: a7:af:c2:d9:13:66:e5:4c:65:4d:e9:6b:8e:91:3a: 6f:fc:2c:41:be:c7:11:de:6a:3f:64:b7:b2:b0:ed: aa:37:6a:91:99:17:55:0e:e2:49:9c:ed:00:ea:20: 05:26:d1:1b:c2:2b:5e:c7:0d:84:d1:81:4d:bd:a2: f5:16:91:40:e0:3c:bc:eb:e8:ef:f5:79:0d:1f:a6: a4:4e:3d:91:6c:6e:76:52:23:80:d9:ba:4d:20:23: 6a:82:7c:7d:23:cf:1a:d1:a3:df:34:8a:9b:6e:3c: 75:e9:4e:48:c0:7b:50:83:1a:f8:a2:50:0f:86:74: 50:b8:f0:49:fa:b9:91:a4:cd:d9:7d:d9:5c:d5:8b: a1:06:89:db:98:ff:77:71:1e:5c:78:cb:da:0c:fe: ea:cf:2a:29:bb:f1:be:6a:89:3c:54:5c:ac:f7:02: a7:51:ea:9c:61:a9:04:6b:b8:7c:4e:68:75:af:45: 00:88:99:50:91:ab:a7:55:d0:18:2b:6c:56:e2:46: a8:6a:01:43:0e:09:fb:7e:b5:ac:33:54:c3:9c:20: e3:d4:7e:71:e8:59:b5:53:29:c3:cf:89:0c:8c:bf: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:03:39:6A:17:1F:33:F8:25:7F:E2:C5:3D:99:9D:EB:28:9F:F4:5B X509v3 Authority Key Identifier: keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:03:88:8e:90:47:aa:e0:68:75:10:4c:20:a4:6e:c4:70:2d: b1:e5:08:85:ed:12:36:fc:70:3e:3c:48:cb:b0:c4:68:36:ee: 0a:2c:ec:35:ee:3a:0b:9b:0a:27:05:6c:f1:8b:79:48:d6:6e: 1d:c1:07:f3:e9:ed:8e:c6:fe:d0:b8:54:f9:19:b3:ab:dc:66: d8:92:a3:03:0d:99:3a:54:3c:b6:91:30:c4:ff:28:52:29:21: 52:0e:51:1e:5e:8f:0b:db:20:fb:95:18:c5:5a:14:e7:14:87: 4f:ee:88:72:48:8f:31:d6:82:10:f6:03:72:44:95:c0:da:81: ef:1c:33:4a:e6:bf:f9:10:82:11:58:db:13:c7:d4:5d:d0:d2: d9:86:14:36:d1:04:6d:ab:89:da:85:21:11:d2:3e:25:e5:8f: 2f:84:72:32:e5:ce:86:1f:b4:49:fe:52:a9:ad:20:21:94:c7: 26:0a:b8:c3:1a:a4:b8:8e:80:f8:47:78:c7:e5:97:d6:d7:e6: f7:29:2b:f1:c7:e9:cc:79:6f:ab:fb:87:16:43:38:55:96:aa: 1a:11:00:43:c3:44:a1:b9:cd:aa:c1:5d:c7:f1:da:17:ed:1e: 82:74:82:50:bf:87:7d:d1:04:81:f8:a3:fa:2b:4e:62:a4:66: af:5c:de:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJNfsiy/gZALoDMZ3zOQS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0 NTYzNjIwHhcNMjUxMjEwMTcwMTMxWhcNMjUxMjExMTcwMTMxWjAzMTEwLwYDVQQD Eyg4NzAzMzk2YTE3MWYzM2Y4MjU3ZmUyYzUzZDk5OWRlYjI4OWZmNDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/BXjNUAXMiwi1b7Cz1C7qUh8j7G b5hlGaFbj++nr8LZE2blTGVN6WuOkTpv/CxBvscR3mo/ZLeysO2qN2qRmRdVDuJJ nO0A6iAFJtEbwitexw2E0YFNvaL1FpFA4Dy86+jv9XkNH6akTj2RbG52UiOA2bpN ICNqgnx9I88a0aPfNIqbbjx16U5IwHtQgxr4olAPhnRQuPBJ+rmRpM3Zfdlc1Yuh BonbmP93cR5ceMvaDP7qzyopu/G+aok8VFys9wKnUeqcYakEa7h8Tmh1r0UAiJlQ kaunVdAYK2xW4kaoagFDDgn7frWsM1TDnCDj1H5x6Fm1UynDz4kMjL9GtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcDOWoXHzP4JX/ixT2Zneson/RbMB8GA1UdIwQY MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5 LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQOIjpBH quBodRBMIKRuxHAtseUIhe0SNvxwPjxIy7DEaDbuCizsNe46C5sKJwVs8Yt5SNZu HcEH8+ntjsb+0LhU+Rmzq9xm2JKjAw2ZOlQ8tpEwxP8oUikhUg5RHl6PC9sg+5UY xVoU5xSHT+6IckiPMdaCEPYDckSVwNqB7xwzSua/+RCCEVjbE8fUXdDS2YYUNtEE bauJ2oUhEdI+JeWPL4RyMuXOhh+0Sf5Sqa0gIZTHJgq4wxqkuI6A+Ed4x+WX1tfm 9ykr8cfpzHlvq/uHFkM4VZaqGhEAQ8NEobnNqsFdx/HaF+0egnSCUL+HfdEEgfij +itOYqRmr1ze3g== -----END CERTIFICATE-----Generated at Thu Dec 11 02:42:37 2025 by rpki-client