This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json) Hash identifier: DUUcEotj6afeyTIVtylMsZrKphLBpN9bdjL+ekMrd2s= Subject key identifier: 9F:48:8A:8B:E0:EC:04:78:D5:B5:BF:48:39:C1:57:EB:81:E1:FE:A3 Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69 Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169 Certificate serial: 019B4816274A0DCD508B10B1E9A77BB76A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft Manifest number: 1283 Signing time: Mon 22 Dec 2025 22:02:49 +0000 Manifest this update: Mon 22 Dec 2025 22:02:49 +0000 Manifest next update: Tue 23 Dec 2025 22:02:49 +0000 Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: 5RI+nAXhEMifSBo6UwkTYgfFhszTByBKKPwURlJyass=) 2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:16:27:4a:0d:cd:50:8b:10:b1:e9:a7:7b:b7:6a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169 Validity Not Before: Dec 22 22:02:49 2025 GMT Not After : Dec 23 22:02:49 2025 GMT Subject: CN=9f488a8be0ec0478d5b5bf4839c157eb81e1fea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:e5:c7:77:a1:4a:1e:b9:d6:7c:45:ac:79: 4b:1f:e6:72:a1:da:1f:6b:8c:30:f6:b2:ff:96:d0: 94:fc:8a:55:e3:63:ba:ad:35:8d:e1:1c:e6:d5:08: 14:b6:1b:58:7a:74:e6:eb:04:70:7b:25:e3:a2:2f: df:3d:ef:35:11:d9:0e:b7:0c:86:b2:00:2f:20:28: 60:be:e2:29:4a:1c:a3:dc:87:3b:1b:67:e7:df:ed: 45:63:aa:1e:dc:7e:f8:a3:ec:8e:e1:d5:fd:93:c8: 6a:1e:de:86:d3:82:1c:a4:74:ca:c3:d8:26:fb:1e: df:82:f0:43:74:a3:9f:b9:2b:8f:c0:53:46:11:8e: 88:d4:5c:18:0d:16:17:91:fa:ec:f5:1c:bc:95:92: d0:33:c8:48:89:b4:b1:51:3b:28:44:ce:59:73:97: 00:29:14:6a:02:0b:2d:1f:a3:56:b0:1f:9c:fb:70: 92:2c:d9:b4:dd:43:be:6f:85:73:7c:dc:46:f1:6e: af:12:02:e5:57:b4:71:70:f9:c8:0a:9a:87:cf:59: 1b:19:f9:4d:1d:15:a0:47:44:0e:a1:52:a1:00:42: b1:61:77:3f:76:5f:b3:6f:e3:c8:12:d0:c5:a8:88: a5:17:9b:c2:1e:e9:5d:5e:85:9a:22:e2:4a:a1:65: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:48:8A:8B:E0:EC:04:78:D5:B5:BF:48:39:C1:57:EB:81:E1:FE:A3 X509v3 Authority Key Identifier: keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:8b:d7:0e:c9:f9:0a:6e:b8:c5:5c:28:8a:dc:0a:c6:2c:0b: df:d6:f8:f1:73:d3:28:6f:32:fe:fa:c8:ee:1c:c2:11:4a:21: f1:8d:19:23:7e:e0:f5:ff:dd:71:d2:1f:53:d3:85:40:13:83: d4:01:58:37:28:9a:8f:73:17:2a:3e:0c:bd:a0:d2:73:63:be: 1e:ec:83:31:f5:41:7c:ea:0d:70:1c:19:a8:ec:ae:f3:44:d1: d9:69:1f:b5:c0:50:90:40:26:58:fb:6d:9a:a4:81:0e:e6:d1: 94:19:12:76:5c:e5:7a:45:9f:c4:5e:38:17:6f:41:e7:d4:75: 56:6e:be:2d:30:e2:86:00:25:92:64:fd:03:23:28:08:da:80: e0:be:13:b9:a2:30:7a:10:8e:db:31:71:d0:3e:fb:99:2b:b9: db:1e:ff:fc:27:8b:bd:51:0e:bf:9b:39:ef:ae:12:01:3a:23: 8c:6f:11:ff:f6:41:65:0b:4d:4c:28:ba:d9:c5:5a:a8:2b:ed: 6d:41:1b:d4:fb:23:fb:1f:6a:34:d4:db:b0:bf:d6:df:94:ab: 03:02:3e:c9:6c:40:32:90:2f:13:aa:12:53:7a:d9:b5:a9:e6: ac:17:b4:c3:08:17:d0:34:12:eb:18:34:e4:cc:4b:09:1a:e1: 1d:4c:52:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFidKDc1QixCx6ad7t2pBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk ZjkxNjkwHhcNMjUxMjIyMjIwMjQ5WhcNMjUxMjIzMjIwMjQ5WjAzMTEwLwYDVQQD Eyg5ZjQ4OGE4YmUwZWMwNDc4ZDViNWJmNDgzOWMxNTdlYjgxZTFmZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFDlx3ehSh651nxFrHlLH+Zyodof a4ww9rL/ltCU/IpV42O6rTWN4Rzm1QgUthtYenTm6wRweyXjoi/fPe81EdkOtwyG sgAvIChgvuIpShyj3Ic7G2fn3+1FY6oe3H74o+yO4dX9k8hqHt6G04IcpHTKw9gm +x7fgvBDdKOfuSuPwFNGEY6I1FwYDRYXkfrs9Ry8lZLQM8hIibSxUTsoRM5Zc5cA KRRqAgstH6NWsB+c+3CSLNm03UO+b4VzfNxG8W6vEgLlV7RxcPnICpqHz1kbGflN HRWgR0QOoVKhAEKxYXc/dl+zb+PIEtDFqIilF5vCHuldXoWaIuJKoWW6mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Iiovg7AR41bW/SDnBV+uB4f6jMB8GA1UdIwQY MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMovXDsn5 Cm64xVwoitwKxiwL39b48XPTKG8y/vrI7hzCEUoh8Y0ZI37g9f/dcdIfU9OFQBOD 1AFYNyiaj3MXKj4MvaDSc2O+HuyDMfVBfOoNcBwZqOyu80TR2WkftcBQkEAmWPtt mqSBDubRlBkSdlzlekWfxF44F29B59R1Vm6+LTDihgAlkmT9AyMoCNqA4L4TuaIw ehCO2zFx0D77mSu52x7//CeLvVEOv5s5764SATojjG8R//ZBZQtNTCi62cVaqCvt bUEb1Psj+x9qNNTbsL/W35SrAwI+yWxAMpAvE6oSU3rZtanmrBe0wwgX0DQS6xg0 5MxLCRrhHUxSGA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:56:03 2025 by rpki-client