This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft File: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json) Hash identifier: 0ko/aWRkHSxwgy3BdFC9kKdkjfBH0yTGBES7+QEi3WU= Subject key identifier: 2B:02:FB:D3:0C:0E:E1:87:39:9A:81:1E:B4:43:65:E9:5A:3A:53:94 Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45 Certificate issuer: /CN=f2beed4df207c3609adfded80dddd9316f0a9b45 Certificate serial: 019B10EECDE4C6D7B81EB5AF6039CF8303A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 05:00:44 +0000 Manifest this update: Fri 12 Dec 2025 05:00:44 +0000 Manifest next update: Sat 13 Dec 2025 05:00:44 +0000 Files and hashes: 1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: /vltHcKUwEfg/UpOAhRT/mJBu2fod+xfOgDVbKt5a14=) 2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:cd:e4:c6:d7:b8:1e:b5:af:60:39:cf:83:03:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45 Validity Not Before: Dec 12 05:00:44 2025 GMT Not After : Dec 13 05:00:44 2025 GMT Subject: CN=2b02fbd30c0ee187399a811eb44365e95a3a5394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:e3:81:24:c1:6a:99:c5:91:f1:1e:83:81: 56:29:fe:58:ab:09:ca:81:44:59:46:36:76:00:6c: 44:9c:a6:1d:61:4c:d3:ce:ec:97:c7:39:c2:65:f8: c4:74:09:13:90:33:66:c7:55:c5:5c:b9:70:da:e5: bf:d1:b1:eb:09:33:ef:e6:2b:8f:d0:ce:a8:ec:82: 1f:62:e7:4d:c2:f6:8b:8f:9d:4a:93:6e:ff:05:f1: d3:56:ee:e4:94:74:2d:7b:6f:6c:3e:43:8d:17:51: e2:5b:bb:16:f2:f2:de:e7:4b:32:43:56:8c:a2:66: 11:18:83:18:8a:a5:b3:03:84:fd:69:d1:c8:08:fa: ce:86:80:6a:72:51:54:70:43:0b:a8:2f:4d:ac:b1: c1:5f:3c:c6:82:21:59:1f:ea:9a:fd:86:ab:4a:b5: e4:5f:df:0b:6b:1d:51:47:ba:35:cb:d2:00:4a:21: fe:29:ab:58:bc:32:5f:67:d8:c9:d0:19:4c:e4:9a: 39:ed:ca:6f:3d:5e:eb:f8:e6:ff:97:b2:27:06:4c: 0e:6e:9e:ad:12:81:db:03:9a:ee:06:7e:59:02:f5: 8d:a2:90:67:81:69:4c:09:99:f4:aa:8a:9b:ce:a4: 00:08:d3:cd:b1:cf:ed:69:da:75:d1:09:06:e8:fb: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:02:FB:D3:0C:0E:E1:87:39:9A:81:1E:B4:43:65:E9:5A:3A:53:94 X509v3 Authority Key Identifier: keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:14:c6:6f:27:d2:2e:64:5b:64:f6:c1:d2:ed:e1:3b:5a:87: 5d:a7:b8:cc:76:14:22:e4:ab:a9:b5:95:f8:66:a4:80:7b:f3: 55:33:60:26:ac:34:5c:79:88:0b:40:99:fc:16:e1:26:4b:14: b6:2b:c5:43:9c:79:4a:ac:f0:be:18:34:a0:97:3a:db:ec:a3: f2:51:eb:a6:5c:3c:52:a3:c4:06:a3:b3:b2:12:34:ec:11:95: f9:fd:1f:d6:ab:fe:7c:70:80:02:d0:07:6a:c9:2f:a6:1c:80: 04:1a:96:0f:1b:10:b3:5f:50:48:b4:a8:68:fa:c5:9c:9d:95: ff:fd:c4:16:c9:1b:4c:6e:2c:99:de:0e:59:8e:91:15:e1:cc: 65:0e:74:9a:5d:06:8c:4a:be:a6:d9:80:5c:e7:3a:61:6e:cd: 82:93:9e:8e:bf:aa:8e:8b:c5:c8:f2:a4:b2:21:7a:08:f1:75: 4e:d3:f9:a1:80:3a:3e:0a:ed:a6:f1:bf:e0:cc:85:5f:b8:87: bd:96:3c:b4:99:20:58:55:6c:68:ae:fc:aa:d7:5e:3d:82:5e: f8:f7:18:20:31:90:b6:88:a7:5d:da:e7:d0:4b:1b:03:ee:97: 3e:c6:1f:84:bb:90:2d:c7:e1:dc:58:85:c3:a6:0e:07:4a:fc: 00:c5:f2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7s3kxte4HrWvYDnPgwOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmVlZDRkZjIwN2MzNjA5YWRmZGVkODBkZGRkOTMxNmYw YTliNDUwHhcNMjUxMjEyMDUwMDQ0WhcNMjUxMjEzMDUwMDQ0WjAzMTEwLwYDVQQD EygyYjAyZmJkMzBjMGVlMTg3Mzk5YTgxMWViNDQzNjVlOTVhM2E1Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodzjgSTBapnFkfEeg4FWKf5YqwnK gURZRjZ2AGxEnKYdYUzTzuyXxznCZfjEdAkTkDNmx1XFXLlw2uW/0bHrCTPv5iuP 0M6o7IIfYudNwvaLj51Kk27/BfHTVu7klHQte29sPkONF1HiW7sW8vLe50syQ1aM omYRGIMYiqWzA4T9adHICPrOhoBqclFUcEMLqC9NrLHBXzzGgiFZH+qa/YarSrXk X98Lax1RR7o1y9IASiH+KatYvDJfZ9jJ0BlM5Jo57cpvPV7r+Ob/l7InBkwObp6t EoHbA5ruBn5ZAvWNopBngWlMCZn0qoqbzqQACNPNsc/tadp10QkG6PtjxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsC+9MMDuGHOZqBHrRDZelaOlOUMB8GA1UdIwQY MBaAFPK+7U3yB8Ngmt/e2A3d2TFvCptFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEt YTQ2MTUzMTQ1Y2Y4LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEtYTQ2MTUzMTQ1Y2Y4 LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBTGbyfS LmRbZPbB0u3hO1qHXae4zHYUIuSrqbWV+GakgHvzVTNgJqw0XHmIC0CZ/BbhJksU tivFQ5x5Sqzwvhg0oJc62+yj8lHrplw8UqPEBqOzshI07BGV+f0f1qv+fHCAAtAH askvphyABBqWDxsQs19QSLSoaPrFnJ2V//3EFskbTG4smd4OWY6RFeHMZQ50ml0G jEq+ptmAXOc6YW7NgpOejr+qjovFyPKksiF6CPF1TtP5oYA6PgrtpvG/4MyFX7iH vZY8tJkgWFVsaK78qtdePYJe+PcYIDGQtoinXdrn0EsbA+6XPsYfhLuQLcfh3FiF w6YOB0r8AMXyKw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:59:58 2025 by rpki-client