This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft File: 7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json) Hash identifier: jbBZ8YrXd5fY+ee/PhPmcyrYwZeY8UcPALBpmnwN0DM= Subject key identifier: 8B:61:1D:AD:8D:25:82:DE:AE:29:4C:6F:F2:88:49:CB:44:98:43:1C Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b Certificate serial: 019B19BB6A8747FD5EA3D5963EFA60570095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft Manifest number: 0BC9 Signing time: Sat 13 Dec 2025 22:01:11 +0000 Manifest this update: Sat 13 Dec 2025 22:01:11 +0000 Manifest next update: Sun 14 Dec 2025 22:01:11 +0000 Files and hashes: 1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: VFFj/pQCAIGdprHzKpYomgISZ3G66L6xI4Oj94hblXg=) 2: Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa (hash: 4MgcyURZP/QIugzfGvm0/MM0dlghCJFIzgyt28gsogw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:6a:87:47:fd:5e:a3:d5:96:3e:fa:60:57:00:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b Validity Not Before: Dec 13 22:01:11 2025 GMT Not After : Dec 14 22:01:11 2025 GMT Subject: CN=8b611dad8d2582deae294c6ff28849cb4498431c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:f9:8d:65:f0:65:09:3e:09:03:0e:e5:0f: 86:bd:e0:32:e7:2a:6a:e5:78:1b:f2:1f:10:be:40: 30:b9:8e:0a:c6:f1:db:d0:03:1c:b0:9f:40:0a:bc: b2:89:e7:01:c3:2c:f9:54:92:bf:e0:b1:f0:32:aa: 93:8a:cd:b2:0b:23:75:b9:3c:bb:d0:94:0b:7f:61: 61:27:e7:79:b3:a3:03:af:fb:46:65:eb:f2:fa:cd: 43:71:f9:d3:fc:5b:c8:1f:69:ce:d7:b2:c9:f9:88: 0b:59:65:80:30:31:b6:22:0e:bb:c0:5a:76:df:47: 3f:36:0f:a9:ed:9d:be:21:e2:a8:60:3d:ee:0e:b6: 95:c6:c9:12:d7:5d:3c:ae:c7:77:1f:bd:78:cc:cc: dc:34:41:62:96:34:22:ef:3c:f4:b6:c8:cd:c7:75: 2d:b4:65:9d:fb:0a:b4:e8:c2:c0:fc:7e:32:db:01: 50:7c:70:d0:f3:01:d7:2b:88:59:f1:7b:b9:f6:7a: c7:c0:68:d8:e1:f8:63:e4:da:3b:97:06:62:4d:d9: 2b:e1:74:f6:4a:f3:db:3b:e4:1c:d9:d0:c9:b9:46: 94:82:d7:17:07:82:c1:1f:b4:ca:75:ec:3f:3f:69: d2:f9:01:21:15:f6:68:9b:a0:20:bc:8c:75:27:e6: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:61:1D:AD:8D:25:82:DE:AE:29:4C:6F:F2:88:49:CB:44:98:43:1C X509v3 Authority Key Identifier: keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:05:73:2e:b0:a1:02:7d:dc:34:a4:02:9c:9f:5c:6e:39:b8: 21:0a:f5:78:a3:21:cc:db:0f:b7:a0:88:cc:81:48:20:f9:ee: ae:97:4c:a8:0d:b5:63:28:bc:ab:d5:49:58:28:52:58:c9:ce: d5:73:88:fc:e7:63:7f:65:b2:80:8d:eb:19:a2:6e:2a:62:1f: 0b:eb:e4:70:93:6a:48:f5:c6:af:46:64:70:be:f4:25:41:b6: 56:61:0b:42:84:fa:d8:29:9e:2a:57:62:0b:1b:40:ce:bc:01: cf:c8:35:db:4e:e1:33:36:ff:4f:d8:65:dc:c5:39:9e:38:ef: 8f:10:19:8b:a1:9e:c7:7a:4f:17:39:f2:82:b9:f5:81:1b:eb: 9b:1e:42:01:fd:56:b6:ff:7c:1c:52:a2:67:a1:b1:c9:2c:f4: 42:2a:1b:3b:e6:5d:52:90:05:59:62:a8:3f:df:fc:43:4e:b1: 9c:f2:62:fa:d9:33:84:44:57:8c:42:e0:87:d9:2b:bf:f4:aa: 84:0e:33:c4:ed:60:69:c0:1f:96:04:c9:1d:eb:22:3b:2f:8a: ed:32:53:a6:15:63:55:ca:6b:73:7a:c6:04:2a:cb:0d:8c:62: 05:38:56:90:46:e2:73:63:7e:fe:30:d3:1c:14:a4:ed:8c:5a: 03:29:a9:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu2qHR/1eo9WWPvpgVwCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjUxOGM0MjZjZmM0MDgyZmI5MmVjNzQwZDdjM2M3ODgy NTU2M2IwHhcNMjUxMjEzMjIwMTExWhcNMjUxMjE0MjIwMTExWjAzMTEwLwYDVQQD Eyg4YjYxMWRhZDhkMjU4MmRlYWUyOTRjNmZmMjg4NDljYjQ0OTg0MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPr5jWXwZQk+CQMO5Q+GveAy5ypq 5Xgb8h8QvkAwuY4KxvHb0AMcsJ9ACryyiecBwyz5VJK/4LHwMqqTis2yCyN1uTy7 0JQLf2FhJ+d5s6MDr/tGZevy+s1DcfnT/FvIH2nO17LJ+YgLWWWAMDG2Ig67wFp2 30c/Ng+p7Z2+IeKoYD3uDraVxskS1108rsd3H714zMzcNEFiljQi7zz0tsjNx3Ut tGWd+wq06MLA/H4y2wFQfHDQ8wHXK4hZ8Xu59nrHwGjY4fhj5No7lwZiTdkr4XT2 SvPbO+Qc2dDJuUaUgtcXB4LBH7TKdew/P2nS+QEhFfZom6AgvIx1J+b7FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIthHa2NJYLerilMb/KISctEmEMcMB8GA1UdIwQY MBaAFO1lGMQmz8QIL7kux0DXw8eIJVY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYt MDViM2I5NzA5ZjA5LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYtMDViM2I5NzA5ZjA5 LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwVzLrCh An3cNKQCnJ9cbjm4IQr1eKMhzNsPt6CIzIFIIPnurpdMqA21Yyi8q9VJWChSWMnO 1XOI/Odjf2WygI3rGaJuKmIfC+vkcJNqSPXGr0ZkcL70JUG2VmELQoT62CmeKldi CxtAzrwBz8g1207hMzb/T9hl3MU5njjvjxAZi6Gex3pPFznygrn1gRvrmx5CAf1W tv98HFKiZ6GxySz0QiobO+ZdUpAFWWKoP9/8Q06xnPJi+tkzhERXjELgh9krv/Sq hA4zxO1gacAflgTJHesiOy+K7TJTphVjVcprc3rGBCrLDYxiBThWkEbic2N+/jDT HBSk7YxaAympEg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:59 2025 by rpki-client