This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json) Hash identifier: xLaYzUqMzwABSW+hTc7MhuF4r+BZWan3rGRdrFgpdEg= Subject key identifier: FB:47:44:0B:AC:DD:12:E1:04:F5:9C:12:2E:A2:A6:84:72:AC:CC:6C Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50 Certificate serial: 019B22BE4E95BEB9C5D630D28553CEFAE63F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft Manifest number: 1784 Signing time: Mon 15 Dec 2025 16:00:55 +0000 Manifest this update: Mon 15 Dec 2025 16:00:55 +0000 Manifest next update: Tue 16 Dec 2025 16:00:55 +0000 Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: xP2kw3RZb0XhZWq+093g+FQFYlDSOJRc2RXhYHeX+xk=) 2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=) 3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:4e:95:be:b9:c5:d6:30:d2:85:53:ce:fa:e6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50 Validity Not Before: Dec 15 16:00:55 2025 GMT Not After : Dec 16 16:00:55 2025 GMT Subject: CN=fb47440bacdd12e104f59c122ea2a68472accc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:04:5a:84:b0:71:d6:5b:c0:d8:87:df:12:39: e8:24:3d:22:3a:1b:09:7a:3c:3d:01:db:85:98:8e: 79:49:70:00:3f:cf:5b:03:80:99:6f:ef:ad:2d:87: 9e:5a:aa:70:80:8c:21:06:65:62:79:0d:ac:9f:64: b8:b7:df:d0:5d:0f:d9:82:17:65:32:8d:b0:da:3b: 56:c7:63:c0:45:95:f8:14:99:d5:78:aa:6d:74:14: e0:b1:6d:df:3d:b8:fd:36:08:4d:e3:d5:6b:6a:47: b9:41:c9:07:c2:6d:b0:9d:95:49:d4:d9:86:dd:98: f6:36:44:40:40:b7:bc:6b:73:34:05:ab:4a:25:88: 2a:7b:ad:56:12:43:2a:5e:8c:19:bf:26:d1:02:b2: ed:2e:32:79:12:f2:bb:94:cf:e3:ea:c3:66:1a:3a: c4:bb:a9:8a:0d:0f:28:48:c2:f2:1b:18:7d:b2:05: b1:bb:64:c3:21:b8:b6:e8:91:a5:d0:1d:5d:ea:73: 45:4e:db:e2:3f:a8:c8:9c:38:74:77:7f:cf:9d:23: f8:b1:6f:d5:8e:80:60:bc:04:58:b2:4a:e5:44:a8: 9d:d7:d3:95:03:76:63:b8:6b:e4:63:dc:56:b9:95: aa:cc:ae:69:49:30:4a:0e:08:71:9e:97:c2:7c:b4: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:47:44:0B:AC:DD:12:E1:04:F5:9C:12:2E:A2:A6:84:72:AC:CC:6C X509v3 Authority Key Identifier: keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c1:60:f6:d7:c5:79:f7:07:7d:3e:a7:8d:57:3c:9d:74:4d: 76:16:cf:4e:b8:8d:4b:7a:9c:dd:79:26:c0:6b:ea:56:0f:85: 53:11:9a:24:c9:0e:cb:26:af:14:5a:d8:2e:d9:32:7b:b4:b9: b6:c5:36:46:c9:4d:3f:53:5d:cd:dd:cd:6c:33:9d:05:60:ae: 45:0c:12:d8:84:68:4b:99:32:14:f8:82:6e:9e:fe:04:64:c6: 60:7a:b7:9d:fc:a5:5c:dc:09:4c:2b:ce:2f:c4:ab:a8:c8:3b: f3:32:32:0d:d3:44:c7:2b:34:09:95:42:f2:f6:a6:f4:73:d2: 4d:1a:f9:5c:70:38:4d:dc:8a:0a:40:45:26:05:55:e6:c3:a1: f9:bb:d1:98:f2:9f:08:e7:26:88:13:42:fe:80:a3:28:27:cc: db:a3:1c:7f:58:5b:9e:47:9f:d4:a1:4e:b7:bd:65:cb:7b:6f: 54:cc:00:76:04:5f:b5:37:51:ce:e7:46:e6:49:20:35:ba:cf: b3:51:39:fd:81:33:a7:b0:a4:24:6b:fb:24:87:8f:2e:ad:0c: ad:3b:b5:37:ea:d2:e9:93:6c:f9:40:e4:fc:17:66:2f:08:dc: 31:cb:3c:14:b1:6f:a6:f6:f1:07:88:59:f3:5c:fa:2d:e1:99: b5:e0:a2:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivk6VvrnF1jDShVPO+uY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0 ZTlmNTAwHhcNMjUxMjE1MTYwMDU1WhcNMjUxMjE2MTYwMDU1WjAzMTEwLwYDVQQD EyhmYjQ3NDQwYmFjZGQxMmUxMDRmNTljMTIyZWEyYTY4NDcyYWNjYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QRahLBx1lvA2IffEjnoJD0iOhsJ ejw9AduFmI55SXAAP89bA4CZb++tLYeeWqpwgIwhBmVieQ2sn2S4t9/QXQ/Zghdl Mo2w2jtWx2PARZX4FJnVeKptdBTgsW3fPbj9NghN49Vrake5QckHwm2wnZVJ1NmG 3Zj2NkRAQLe8a3M0BatKJYgqe61WEkMqXowZvybRArLtLjJ5EvK7lM/j6sNmGjrE u6mKDQ8oSMLyGxh9sgWxu2TDIbi26JGl0B1d6nNFTtviP6jInDh0d3/PnSP4sW/V joBgvARYskrlRKid19OVA3ZjuGvkY9xWuZWqzK5pSTBKDghxnpfCfLRO9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtHRAus3RLhBPWcEi6ipoRyrMxsMB8GA1UdIwQY MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0 LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMFg9tfF efcHfT6njVc8nXRNdhbPTriNS3qc3XkmwGvqVg+FUxGaJMkOyyavFFrYLtkye7S5 tsU2RslNP1Ndzd3NbDOdBWCuRQwS2IRoS5kyFPiCbp7+BGTGYHq3nfylXNwJTCvO L8SrqMg78zIyDdNExys0CZVC8vam9HPSTRr5XHA4TdyKCkBFJgVV5sOh+bvRmPKf COcmiBNC/oCjKCfM26Mcf1hbnkef1KFOt71ly3tvVMwAdgRftTdRzudG5kkgNbrP s1E5/YEzp7CkJGv7JIePLq0MrTu1N+rS6ZNs+UDk/BdmLwjcMcs8FLFvpvbxB4hZ 81z6LeGZteCiXw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:47:54 2025 by rpki-client