This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json) Hash identifier: 9zJCT9wxI9uDOOouZVCajRC25zpy13apdtA0vjclcoc= Subject key identifier: E2:1D:F6:43:5C:C3:66:6F:D6:21:C4:9C:B5:52:D7:12:56:E2:97:E1 Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05 Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605 Certificate serial: 019B3B6B11DDE557D5DF3DFA58030FD1567B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft Manifest number: 0F48 Signing time: Sat 20 Dec 2025 11:00:31 +0000 Manifest this update: Sat 20 Dec 2025 11:00:31 +0000 Manifest next update: Sun 21 Dec 2025 11:00:31 +0000 Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: 02o8mIQXhXonhJl19WFSQ9/gf7W/KIjLgWTgvGcAqjg=) 2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:11:dd:e5:57:d5:df:3d:fa:58:03:0f:d1:56:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605 Validity Not Before: Dec 20 11:00:31 2025 GMT Not After : Dec 21 11:00:31 2025 GMT Subject: CN=e21df6435cc3666fd621c49cb552d71256e297e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:2c:0a:c3:5e:ad:97:a8:e7:54:1b:fb:7c: 35:5c:46:6e:40:eb:2c:b3:a9:65:14:5a:34:97:d9: c1:ab:13:f0:f2:1d:cd:04:92:02:54:6c:92:47:91: e6:62:14:c2:14:22:fb:24:92:a5:54:74:0d:5c:0b: 09:c9:5a:d8:12:6e:d0:a0:d9:c1:b8:ee:00:75:0c: 52:33:3a:bd:5d:9b:57:eb:78:fb:7b:fe:d7:f7:d7: 6c:7e:75:a4:49:96:43:09:e6:86:4c:e0:64:e5:c0: 2a:1c:07:74:aa:bc:9e:99:8b:e5:08:0a:e4:56:27: e5:23:59:be:84:14:9c:5a:55:8a:3f:69:4b:2a:9a: a2:16:9c:19:5d:f6:80:a8:fc:9f:32:8e:92:cf:b8: a3:77:5d:78:da:45:61:8b:b1:65:e3:0d:69:06:49: 49:ee:b9:28:ff:f6:97:3d:09:f5:1c:75:07:0c:c8: 6a:c6:7f:85:3a:f2:87:2f:30:05:4d:7d:57:bc:3d: ea:8d:fa:6d:09:ff:ab:f3:45:7c:28:49:f3:1c:bf: f2:40:01:95:af:74:79:59:47:a2:4f:cd:f9:cd:c9: 91:a2:9f:d1:04:30:0a:56:2e:70:01:db:dd:ef:3b: 82:11:aa:02:ee:8e:d2:c9:aa:64:25:63:6d:dd:2f: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:F6:43:5C:C3:66:6F:D6:21:C4:9C:B5:52:D7:12:56:E2:97:E1 X509v3 Authority Key Identifier: keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:de:ce:4f:4e:e1:64:f4:e3:aa:80:14:b1:fb:d9:44:40:06: f7:16:0f:18:20:4c:65:2a:6e:c6:0b:93:80:e3:15:cf:fd:90: 4b:1f:91:19:de:7a:03:1e:dc:93:12:ef:e9:bc:ef:1b:10:26: 9d:48:2f:48:55:32:c2:16:b6:de:f7:31:61:b0:d0:db:97:ff: e2:af:4f:43:cd:e6:86:c6:14:37:71:19:39:a8:d4:e6:9e:1d: c4:2f:e6:86:3d:e4:4d:5a:15:60:b6:39:cd:d5:79:f6:b0:89: b3:e2:ee:26:75:a9:0c:b2:d1:c8:3a:7e:cf:02:07:27:83:ee: cc:15:0e:00:44:12:f9:6c:c4:ce:74:48:8e:a9:30:3f:46:76: 85:4b:a3:d8:2c:b4:2c:82:5b:d6:cd:a2:82:21:5d:9c:6a:97: e1:61:62:21:21:8f:21:f6:a5:80:87:5f:e6:61:8d:11:24:fc: 86:90:ee:8a:14:b1:44:63:37:41:0c:31:de:56:b0:fd:2d:17: a9:97:5c:09:f1:1a:36:16:f9:2e:1f:79:fd:b8:09:6a:ec:68: 70:68:d0:16:4f:42:f7:34:89:45:06:7e:69:e6:9a:16:d2:62: 16:6e:6e:fe:98:64:74:3c:d1:85:05:ea:9d:ed:08:85:e2:dc: 3e:93:07:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7axHd5VfV3z36WAMP0VZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3Y2VkMDIxZjk5MTRkMTJkNDE4ZDlhYTIzOGM5MzgyNWVh NWY2MDUwHhcNMjUxMjIwMTEwMDMxWhcNMjUxMjIxMTEwMDMxWjAzMTEwLwYDVQQD EyhlMjFkZjY0MzVjYzM2NjZmZDYyMWM0OWNiNTUyZDcxMjU2ZTI5N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum0sCsNerZeo51Qb+3w1XEZuQOss s6llFFo0l9nBqxPw8h3NBJICVGySR5HmYhTCFCL7JJKlVHQNXAsJyVrYEm7QoNnB uO4AdQxSMzq9XZtX63j7e/7X99dsfnWkSZZDCeaGTOBk5cAqHAd0qryemYvlCArk ViflI1m+hBScWlWKP2lLKpqiFpwZXfaAqPyfMo6Sz7ijd1142kVhi7Fl4w1pBklJ 7rko//aXPQn1HHUHDMhqxn+FOvKHLzAFTX1XvD3qjfptCf+r80V8KEnzHL/yQAGV r3R5WUeiT835zcmRop/RBDAKVi5wAdvd7zuCEaoC7o7SyapkJWNt3S/dRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOId9kNcw2Zv1iHEnLVS1xJW4pfhMB8GA1UdIwQY MBaAFPfO0CH5kU0S1BjZqiOMk4JepfYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQt YzM4NjYxZmJmMjJhLzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQtYzM4NjYxZmJmMjJh LzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIN7OT07h ZPTjqoAUsfvZREAG9xYPGCBMZSpuxguTgOMVz/2QSx+RGd56Ax7ckxLv6bzvGxAm nUgvSFUywha23vcxYbDQ25f/4q9PQ83mhsYUN3EZOajU5p4dxC/mhj3kTVoVYLY5 zdV59rCJs+LuJnWpDLLRyDp+zwIHJ4PuzBUOAEQS+WzEznRIjqkwP0Z2hUuj2Cy0 LIJb1s2igiFdnGqX4WFiISGPIfalgIdf5mGNEST8hpDuihSxRGM3QQwx3law/S0X qZdcCfEaNhb5Lh95/bgJauxocGjQFk9C9zSJRQZ+aeaaFtJiFm5u/phkdDzRhQXq ne0IheLcPpMHVA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:20 2025 by rpki-client