This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft File: d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json) Hash identifier: 9r8N04HwbFq+kxggOVkAY5+5fs3bhZNqBwjAuUvS/iw= Subject key identifier: 30:9D:2D:2E:54:D3:12:29:F0:A0:34:39:C0:43:E8:E4:40:E7:AF:5F Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61 Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61 Certificate serial: 019B39B3B2F72ACC5F2785D2CBB435665958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft Manifest number: 10F0 Signing time: Sat 20 Dec 2025 03:00:36 +0000 Manifest this update: Sat 20 Dec 2025 03:00:36 +0000 Manifest next update: Sun 21 Dec 2025 03:00:36 +0000 Files and hashes: 1: 1-CTcDUEdN5WfEm_rs3o0JHhk5XU.roa (hash: lk5WrQW7f4eLUx+kxUxuWVLfFLTkEmxU4/4R6+50tjM=) 2: QsI91EQU0FfuQWtPM8GSqH3JUGY.roa (hash: E3wsAexKJr8HQY5TnjV1zhmCkOPgMph7WKoFlQ4Vnzc=) 3: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: HR0szW+Uoc3stxOf12YLqsNa9EmAM0p+dFrF3smSacI=) 4: g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa (hash: gvrZns7JDU/MxjbK6KJTEHNI6mOo43rYah4+1PHu7cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:b2:f7:2a:cc:5f:27:85:d2:cb:b4:35:66:59:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61 Validity Not Before: Dec 20 03:00:36 2025 GMT Not After : Dec 21 03:00:36 2025 GMT Subject: CN=309d2d2e54d31229f0a03439c043e8e440e7af5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:3f:c7:0b:32:7d:d6:f1:eb:0c:8f:68:fa: 71:c4:72:6b:50:bd:35:93:9d:86:75:e3:01:f2:2e: c1:03:df:bd:c2:1f:d3:69:25:fc:e0:10:9c:00:88: 3c:82:d3:f8:51:49:fe:73:bd:4c:23:7c:51:07:1d: 5f:58:81:c1:79:42:a2:c3:d6:9d:b1:79:62:95:f3: 7e:2d:12:c4:f8:ae:c1:66:c8:80:5c:55:2d:1a:5c: 94:8d:28:70:f3:47:b6:03:2c:11:b1:b8:dd:e0:51: e3:b0:e6:b2:22:e0:6b:24:d9:d0:dd:90:2f:88:fb: e2:6a:85:31:6c:03:b0:94:6f:78:e2:32:c8:4f:07: ff:43:24:bc:ac:70:c0:fb:65:0a:5e:7d:90:27:3f: 05:d0:5f:f2:a0:4a:39:86:fa:26:0d:b2:50:98:ed: 44:b2:a8:76:09:16:95:7f:4f:f1:7b:0c:c7:38:89: 2c:4e:0f:a0:83:35:76:62:21:54:69:8b:89:69:63: 84:81:42:94:70:47:1a:0e:ae:86:71:1a:f3:c1:10: 21:82:66:c2:6d:40:c8:3f:2d:07:8f:0a:99:79:55: 85:da:f8:79:c6:4f:34:81:53:ca:f6:d9:80:4b:e0: 9b:ce:86:67:3b:00:9a:fc:9b:7a:d4:f9:91:b3:55: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9D:2D:2E:54:D3:12:29:F0:A0:34:39:C0:43:E8:E4:40:E7:AF:5F X509v3 Authority Key Identifier: keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:56:24:af:a6:3b:09:d6:57:e3:d5:d8:37:bb:aa:54:68:f7: 47:75:b2:28:3d:45:98:6f:05:e8:77:18:d0:58:2b:e6:f1:c5: f5:06:c3:af:53:50:60:7e:5d:0e:e3:17:37:02:b1:d2:b2:21: e8:96:02:ba:4c:d0:dc:6e:19:79:ad:ca:61:45:07:55:48:b0: f0:99:e7:96:5b:1c:15:47:ab:39:65:6a:73:2b:33:05:1f:7a: 23:98:07:91:2f:c2:b1:2a:c4:25:12:5c:63:78:f6:5d:56:d8: 98:21:4f:7e:fb:73:25:e0:dc:a3:4b:b1:d8:2e:ba:ff:b0:a0: 82:7f:b0:19:70:46:4d:9e:ea:48:24:d1:d1:98:fc:5c:ac:2c: 94:98:51:63:0f:de:16:01:dc:58:71:aa:ba:5b:97:6e:e6:53: 60:ee:89:c0:8e:d8:50:86:b9:77:d1:b9:9d:22:c5:f8:ea:bb: ee:5b:49:6e:70:e6:94:cf:27:f1:a8:4c:d6:48:3a:16:bc:02: 74:b3:bd:8f:98:e7:69:23:bd:bb:9c:90:3c:0b:9b:1b:e7:e2: d0:98:46:26:07:bb:ef:ea:db:36:ce:86:43:de:18:44:48:da: e5:24:69:f8:22:0a:e8:5d:46:b8:13:48:bb:1c:6b:d1:41:80: cf:42:a2:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s7L3KsxfJ4XSy7Q1ZllYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmM1MzRiYTQ0ZTlkM2NiYTJmMjQ0NmQ0YTNkZDZlZWE5 YjhmNjEwHhcNMjUxMjIwMDMwMDM2WhcNMjUxMjIxMDMwMDM2WjAzMTEwLwYDVQQD EygzMDlkMmQyZTU0ZDMxMjI5ZjBhMDM0MzljMDQzZThlNDQwZTdhZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XM/xwsyfdbx6wyPaPpxxHJrUL01 k52GdeMB8i7BA9+9wh/TaSX84BCcAIg8gtP4UUn+c71MI3xRBx1fWIHBeUKiw9ad sXlilfN+LRLE+K7BZsiAXFUtGlyUjShw80e2AywRsbjd4FHjsOayIuBrJNnQ3ZAv iPviaoUxbAOwlG944jLITwf/QyS8rHDA+2UKXn2QJz8F0F/yoEo5hvomDbJQmO1E sqh2CRaVf0/xewzHOIksTg+ggzV2YiFUaYuJaWOEgUKUcEcaDq6GcRrzwRAhgmbC bUDIPy0HjwqZeVWF2vh5xk80gVPK9tmAS+CbzoZnOwCa/Jt61PmRs1WVXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCdLS5U0xIp8KA0OcBD6ORA569fMB8GA1UdIwQY MBaAFHe8U0ukTp08ui8kRtSj3W7qm49hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODIt OWIyNTdmNGZlYThkLzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODItOWIyNTdmNGZlYThk LzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVYkr6Y7 CdZX49XYN7uqVGj3R3WyKD1FmG8F6HcY0Fgr5vHF9QbDr1NQYH5dDuMXNwKx0rIh 6JYCukzQ3G4Zea3KYUUHVUiw8JnnllscFUerOWVqcyszBR96I5gHkS/CsSrEJRJc Y3j2XVbYmCFPfvtzJeDco0ux2C66/7Cggn+wGXBGTZ7qSCTR0Zj8XKwslJhRYw/e FgHcWHGquluXbuZTYO6JwI7YUIa5d9G5nSLF+Oq77ltJbnDmlM8n8ahM1kg6FrwC dLO9j5jnaSO9u5yQPAubG+fi0JhGJge77+rbNs6GQ94YREja5SRp+CIK6F1GuBNI uxxr0UGAz0KiXw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:03:36 2025 by rpki-client