This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json) Hash identifier: FldoPcJ9ipZFmj3WkZQLqGhFsyMqXf0hVKfRAWCytz0= Subject key identifier: 45:38:CD:69:30:59:13:72:11:8A:05:60:06:30:85:28:68:D9:AD:CC Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7 Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7 Certificate serial: 019B3C7F4834624D4E040DC3D34D2CC64A99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft Manifest number: 138E Signing time: Sat 20 Dec 2025 16:02:13 +0000 Manifest this update: Sat 20 Dec 2025 16:02:13 +0000 Manifest next update: Sun 21 Dec 2025 16:02:13 +0000 Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=) 2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=) 3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: nyP1WWDC1seiYYQWqbYIvBNs9fEklwpFdw0Qzqh4618=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:48:34:62:4d:4e:04:0d:c3:d3:4d:2c:c6:4a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7 Validity Not Before: Dec 20 16:02:13 2025 GMT Not After : Dec 21 16:02:13 2025 GMT Subject: CN=4538cd6930591372118a05600630852868d9adcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:46:75:b4:8c:a2:88:f1:c6:ef:e1:5f:32: 08:35:55:99:7c:fa:6b:c6:4d:84:ea:7a:a1:96:f9: 7f:ff:23:7a:25:98:54:f4:7a:9f:83:bc:b5:5d:6a: a9:aa:33:6d:99:57:bc:6c:e3:7e:d2:0e:88:fd:61: 9c:99:54:37:b6:73:af:05:4e:1e:c2:46:93:ab:40: d3:57:07:fb:1e:6e:7c:c0:f2:e5:87:94:ee:3c:d4: b5:f0:06:3a:bd:0f:ce:f4:1f:cd:f9:97:e5:bd:2d: f8:15:7d:b7:14:8d:55:9d:a6:9e:5d:ec:74:27:fb: df:8e:b6:a0:ac:b5:a9:06:c6:28:07:66:c7:73:72: 86:dc:20:12:6e:9d:cb:b2:bd:6a:05:db:f1:df:c7: 27:01:62:d1:a8:df:a7:f8:17:2d:f7:01:88:13:3b: df:fc:e4:5a:c3:8c:45:5c:e5:2e:43:40:30:e8:a8: 72:46:33:52:6b:92:30:ea:62:95:6e:2a:7a:3a:98: 61:1f:22:f5:f5:84:ab:43:47:ea:c7:c4:53:99:0b: fe:6d:e1:e8:2d:52:80:04:0c:a9:96:ff:79:db:31: c1:64:22:62:83:6c:9e:c4:8b:db:6f:01:ec:74:83: 83:1c:58:06:d7:bb:29:e1:67:b2:21:77:1e:d5:6e: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:38:CD:69:30:59:13:72:11:8A:05:60:06:30:85:28:68:D9:AD:CC X509v3 Authority Key Identifier: keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:78:c4:33:3f:cc:fd:83:0d:03:8c:ac:04:da:60:d5:11: de:6b:b4:91:ec:16:96:22:11:28:87:30:aa:49:66:b5:d0:d1: 8c:8f:64:03:4d:ae:20:b6:14:05:dd:a7:39:82:ad:fc:b0:0e: 7b:e8:22:d0:66:d0:46:d0:d2:3b:01:ba:00:4f:14:12:51:17: 1a:da:ea:3b:bf:3c:a4:11:37:bc:0d:05:d4:f5:74:4c:6d:4b: 8c:04:64:bc:5a:a7:db:5c:c1:7c:72:8b:74:bb:02:df:dc:32: 6f:06:ae:29:81:eb:9b:80:42:de:5b:1b:28:70:ab:0a:c4:b0: a9:e6:6c:96:27:72:96:89:e5:6c:5a:a1:6a:a1:60:44:42:bf: 94:78:2d:4b:43:da:7d:c0:7c:5a:62:73:08:80:c9:2c:37:70: 08:11:15:74:0b:8d:39:09:23:fc:62:60:99:a7:58:cd:13:e7: a3:11:74:23:6e:e1:47:ff:b6:13:73:33:da:ce:fc:59:05:61: 56:78:fb:b8:1f:5d:19:98:f6:fc:bf:d5:2b:09:23:6b:5b:c4: e9:f1:ba:7a:6d:c8:62:ea:d1:b5:f9:81:5e:b2:bc:a3:0b:f5: ae:f7:75:dc:00:b8:3d:82:aa:b9:2a:59:82:cb:1a:b6:10:b2: 9e:64:63:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f0g0Yk1OBA3D000sxkqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZThiYmY4NjQzYWJkNjJmZjNmNDJiZWM0YzBiMmRiOTc3 NTk2ZDcwHhcNMjUxMjIwMTYwMjEzWhcNMjUxMjIxMTYwMjEzWjAzMTEwLwYDVQQD Eyg0NTM4Y2Q2OTMwNTkxMzcyMTE4YTA1NjAwNjMwODUyODY4ZDlhZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqxGdbSMoojxxu/hXzIINVWZfPpr xk2E6nqhlvl//yN6JZhU9Hqfg7y1XWqpqjNtmVe8bON+0g6I/WGcmVQ3tnOvBU4e wkaTq0DTVwf7Hm58wPLlh5TuPNS18AY6vQ/O9B/N+ZflvS34FX23FI1VnaaeXex0 J/vfjragrLWpBsYoB2bHc3KG3CASbp3Lsr1qBdvx38cnAWLRqN+n+Bct9wGIEzvf /ORaw4xFXOUuQ0Aw6KhyRjNSa5Iw6mKVbip6OphhHyL19YSrQ0fqx8RTmQv+beHo LVKABAyplv952zHBZCJig2yexIvbbwHsdIODHFgG17sp4WeyIXce1W5bUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU4zWkwWRNyEYoFYAYwhSho2a3MMB8GA1UdIwQY MBaAFHfou/hkOr1i/z9CvsTAstuXdZbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjkt NDRjY2QxYjUxZjEwLzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjktNDRjY2QxYjUxZjEw LzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn94xDM/ zP2DDQOMrATaYNUR3mu0kewWliIRKIcwqklmtdDRjI9kA02uILYUBd2nOYKt/LAO e+gi0GbQRtDSOwG6AE8UElEXGtrqO788pBE3vA0F1PV0TG1LjARkvFqn21zBfHKL dLsC39wybwauKYHrm4BC3lsbKHCrCsSwqeZslidylonlbFqhaqFgREK/lHgtS0Pa fcB8WmJzCIDJLDdwCBEVdAuNOQkj/GJgmadYzRPnoxF0I27hR/+2E3Mz2s78WQVh Vnj7uB9dGZj2/L/VKwkja1vE6fG6em3IYurRtfmBXrK8owv1rvd13AC4PYKquSpZ gssathCynmRjog== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:31 2025 by rpki-client