This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft File: e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json) Hash identifier: Gav1EaaGfsvImhdry1y5nF484LFjnsjeCGyyOGEfopI= Subject key identifier: 7A:A9:24:44:4E:0E:F5:D3:D5:7C:85:C3:0C:48:08:A2:78:7E:A2:B7 Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2 Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2 Certificate serial: 019B1201E4A9405B85E0F64145732CA90AED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft Manifest number: 0762 Signing time: Fri 12 Dec 2025 10:01:12 +0000 Manifest this update: Fri 12 Dec 2025 10:01:12 +0000 Manifest next update: Sat 13 Dec 2025 10:01:12 +0000 Files and hashes: 1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=) 2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: 6uxkhmXdWxL0yW0ReTO+LdLXszvOBGPjqdFzPWwbEsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:e4:a9:40:5b:85:e0:f6:41:45:73:2c:a9:0a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2 Validity Not Before: Dec 12 10:01:12 2025 GMT Not After : Dec 13 10:01:12 2025 GMT Subject: CN=7aa924444e0ef5d3d57c85c30c4808a2787ea2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:77:ca:d8:92:41:1a:b1:c5:f8:0d:f9:22: 3b:35:78:cc:de:35:b1:36:ef:1e:f7:8d:22:39:81: ff:89:f3:23:97:7b:09:60:94:f6:22:db:71:2b:ed: 3b:3e:e3:bf:ca:69:96:d0:f1:eb:7d:45:e9:e7:54: 40:07:56:cf:c0:6f:6e:22:57:17:42:20:8c:61:df: e0:aa:9e:93:3d:50:d3:d5:87:45:a2:03:8c:9c:5a: e0:d3:27:4c:37:32:23:de:8c:31:36:b5:c4:34:51: 1f:a3:87:7c:c0:a1:0b:d2:6d:ca:6c:ed:46:45:9e: 73:44:c0:70:14:92:00:c5:6d:2a:03:fd:42:c0:65: 4e:fe:af:11:86:9e:06:74:df:33:1e:b2:a9:0d:f7: 96:52:7e:d2:ad:93:af:92:7b:d8:dc:a2:33:8d:ce: 84:13:68:61:c6:b9:14:ef:5a:55:9e:25:c6:40:69: 46:fa:09:d1:ec:fa:7b:8c:c3:b3:09:bd:63:0f:87: 00:18:0d:b8:97:21:c7:77:d8:23:50:56:03:1f:9d: 6e:5f:f0:8b:b6:19:26:e6:c5:ee:8e:3f:70:58:1d: 77:15:fc:53:ba:90:55:4d:a1:af:8a:4b:d6:28:60: f6:8c:a1:81:63:99:e4:80:24:30:26:1d:97:a8:1b: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A9:24:44:4E:0E:F5:D3:D5:7C:85:C3:0C:48:08:A2:78:7E:A2:B7 X509v3 Authority Key Identifier: keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:00:c6:71:c9:e9:4f:96:34:0d:1a:d1:c5:21:c4:d5:6a:31: 20:38:d4:7b:e3:85:50:cc:30:6d:0b:d8:f4:2e:39:a8:f1:7a: b8:b3:f5:93:2d:6d:08:32:57:d8:a4:79:6a:b0:c0:4b:94:0b: da:a3:3d:d6:a4:11:b3:ab:ee:eb:ff:5d:41:66:17:c2:74:90: 74:93:f8:aa:85:30:e9:34:2e:b8:ec:04:37:a7:44:b4:77:99: a6:84:00:95:f8:e1:79:53:f8:46:e0:01:df:12:de:9b:a5:6d: fc:c7:07:7a:3b:50:88:fb:ea:b2:f3:0c:92:ba:dc:9e:ce:d3: 98:2c:68:7d:8d:0e:5b:01:da:14:94:5d:1d:18:c9:e4:2a:8a: 51:43:cf:34:7e:90:1b:f1:82:82:40:f7:4b:49:d6:ac:ee:79: dd:87:4a:4c:eb:eb:a0:b9:cd:0a:6f:31:df:d9:72:75:e7:90: 7f:d7:bf:63:a6:b6:0d:a2:33:ec:ed:8e:94:4c:88:7d:2c:94: 3f:1e:a0:75:a5:c8:af:be:80:81:53:6e:41:a1:e4:07:fa:08: fa:2a:aa:9b:4a:65:32:6c:f6:0b:8c:a4:0a:0c:8b:b3:fa:2d: e4:ab:27:65:69:07:61:31:03:0c:84:cd:5b:2d:70:58:8d:1d: 0a:a2:23:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAeSpQFuF4PZBRXMsqQrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiN2RlOGQxMzUzM2QxZTM2YjExMzVhNWQyZTlhNmZmMzk4 NWNkYTIwHhcNMjUxMjEyMTAwMTEyWhcNMjUxMjEzMTAwMTEyWjAzMTEwLwYDVQQD Eyg3YWE5MjQ0NDRlMGVmNWQzZDU3Yzg1YzMwYzQ4MDhhMjc4N2VhMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo53ytiSQRqxxfgN+SI7NXjM3jWx Nu8e940iOYH/ifMjl3sJYJT2IttxK+07PuO/ymmW0PHrfUXp51RAB1bPwG9uIlcX QiCMYd/gqp6TPVDT1YdFogOMnFrg0ydMNzIj3owxNrXENFEfo4d8wKEL0m3KbO1G RZ5zRMBwFJIAxW0qA/1CwGVO/q8Rhp4GdN8zHrKpDfeWUn7SrZOvknvY3KIzjc6E E2hhxrkU71pVniXGQGlG+gnR7Pp7jMOzCb1jD4cAGA24lyHHd9gjUFYDH51uX/CL thkm5sXujj9wWB13FfxTupBVTaGvikvWKGD2jKGBY5nkgCQwJh2XqBuM/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqpJERODvXT1XyFwwxICKJ4fqK3MB8GA1UdIwQY MBaAFHt96NE1M9HjaxE1pdLppv85hc2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2It MmU5YjJkODhkNTQ3LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2ItMmU5YjJkODhkNTQ3 LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwDGccnp T5Y0DRrRxSHE1WoxIDjUe+OFUMwwbQvY9C45qPF6uLP1ky1tCDJX2KR5arDAS5QL 2qM91qQRs6vu6/9dQWYXwnSQdJP4qoUw6TQuuOwEN6dEtHeZpoQAlfjheVP4RuAB 3xLem6Vt/McHejtQiPvqsvMMkrrcns7TmCxofY0OWwHaFJRdHRjJ5CqKUUPPNH6Q G/GCgkD3S0nWrO553YdKTOvroLnNCm8x39lydeeQf9e/Y6a2DaIz7O2OlEyIfSyU Px6gdaXIr76AgVNuQaHkB/oI+iqqm0plMmz2C4ykCgyLs/ot5KsnZWkHYTEDDITN Wy1wWI0dCqIjdQ== -----END CERTIFICATE-----Generated at Fri Dec 12 19:12:10 2025 by rpki-client