This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json) Hash identifier: 4EDtpGVuVyBSWh1rkpO5t3PhRUSSGjqTI5K5GSddLwo= Subject key identifier: 35:43:88:43:57:89:B5:23:94:C9:6E:AB:81:10:9D:E0:76:98:32:A3 Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05 Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605 Certificate serial: 019B3F4850BB1218138FA94C8268DD940921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft Manifest number: 0F4A Signing time: Sun 21 Dec 2025 05:01:02 +0000 Manifest this update: Sun 21 Dec 2025 05:01:02 +0000 Manifest next update: Mon 22 Dec 2025 05:01:02 +0000 Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: M3DD01aY4rMmC9YEVV5yNqbcmtjuP+0Y3fcS3taofZc=) 2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:50:bb:12:18:13:8f:a9:4c:82:68:dd:94:09:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605 Validity Not Before: Dec 21 05:01:02 2025 GMT Not After : Dec 22 05:01:02 2025 GMT Subject: CN=354388435789b52394c96eab81109de0769832a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:2a:b4:bd:79:84:0a:2b:d4:53:a7:5f:ad: e3:dc:61:e3:2c:cb:80:0a:c4:cc:92:72:15:e3:62: 33:8a:02:fa:c5:2f:15:4b:51:15:57:ff:f8:68:b2: 19:8b:69:a4:8b:46:be:15:27:33:b2:f2:11:5f:13: 9b:4a:02:b2:d2:77:d7:b3:f0:50:be:05:55:e3:98: 0f:ab:be:4f:47:2b:12:3f:ec:db:9b:1e:0c:d6:b2: f8:b1:26:5e:c7:63:24:b2:03:60:5b:12:06:8d:9e: 97:bb:86:de:ff:13:73:38:f4:a1:84:3f:51:0d:95: 81:cd:cd:01:e0:10:7e:ae:91:26:4a:a7:a1:c8:21: 23:3f:46:f1:65:94:e2:6c:67:b9:e1:22:b2:f5:79: 87:11:fd:84:e0:e9:97:b4:ab:e3:25:fa:a8:da:52: 7e:7f:47:1b:69:e9:77:70:4f:19:57:e4:07:60:74: 01:2f:e0:2c:bc:4a:5f:19:6d:d3:3e:74:5e:b1:c6: d8:e5:df:78:74:b5:8e:fc:70:0a:25:c8:e7:1d:9b: c9:f1:f6:68:b5:c2:7e:e3:70:d5:d4:fa:f0:71:44: 76:88:27:ae:6d:82:33:29:36:ee:a9:c3:de:4c:a8: c2:55:f9:4c:c1:b0:86:b6:ac:ca:0d:75:78:88:2e: b9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:43:88:43:57:89:B5:23:94:C9:6E:AB:81:10:9D:E0:76:98:32:A3 X509v3 Authority Key Identifier: keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:de:fd:4e:1b:61:b6:3d:06:0f:98:c4:e0:c7:79:18:23:96: 1c:08:25:48:85:b0:24:cf:7d:c9:e0:70:71:ad:4a:c1:3b:32: bd:ca:f9:b9:8e:ba:b5:fe:55:c2:ad:53:9f:8c:44:22:6d:d3: e2:b6:05:94:7d:e3:da:1a:d4:f1:67:ae:e1:5b:f9:03:a6:f0: 3a:f7:3d:08:1d:b7:a5:61:af:f7:77:67:28:3c:03:9d:06:f7: 05:bc:37:5b:2c:9d:d3:11:b3:81:4c:92:e9:1d:9b:e8:19:59: 41:eb:47:ac:29:a5:9b:06:ba:76:e3:c7:f5:a8:bf:7b:1c:1c: 38:1d:80:63:c2:e9:97:21:05:9d:b4:81:e8:59:f1:5d:57:20: 26:30:bd:96:6a:ba:1c:76:cc:1b:4c:a9:2a:36:67:fb:6b:e0: 72:b2:b9:87:13:f5:b3:fa:95:d1:a9:60:0b:ac:a5:93:bd:f3: 14:26:ef:22:a4:e7:fe:c7:71:22:e3:e3:70:36:57:51:54:79: 8d:ff:d9:df:a2:b4:8c:e6:e9:cf:17:70:be:54:3e:6c:3e:8b: 47:23:14:bc:70:4c:a5:27:38:3f:e2:78:6a:b2:07:e3:b6:f3: 09:e8:51:87:6e:9c:2f:67:db:6f:99:43:ab:82:9d:87:9a:ec: 00:40:cd:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SFC7EhgTj6lMgmjdlAkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3Y2VkMDIxZjk5MTRkMTJkNDE4ZDlhYTIzOGM5MzgyNWVh NWY2MDUwHhcNMjUxMjIxMDUwMTAyWhcNMjUxMjIyMDUwMTAyWjAzMTEwLwYDVQQD EygzNTQzODg0MzU3ODliNTIzOTRjOTZlYWI4MTEwOWRlMDc2OTgzMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/8qtL15hAor1FOnX63j3GHjLMuA CsTMknIV42IzigL6xS8VS1EVV//4aLIZi2mki0a+FSczsvIRXxObSgKy0nfXs/BQ vgVV45gPq75PRysSP+zbmx4M1rL4sSZex2MksgNgWxIGjZ6Xu4be/xNzOPShhD9R DZWBzc0B4BB+rpEmSqehyCEjP0bxZZTibGe54SKy9XmHEf2E4OmXtKvjJfqo2lJ+ f0cbael3cE8ZV+QHYHQBL+AsvEpfGW3TPnRescbY5d94dLWO/HAKJcjnHZvJ8fZo tcJ+43DV1PrwcUR2iCeubYIzKTbuqcPeTKjCVflMwbCGtqzKDXV4iC65JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVDiENXibUjlMluq4EQneB2mDKjMB8GA1UdIwQY MBaAFPfO0CH5kU0S1BjZqiOMk4JepfYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQt YzM4NjYxZmJmMjJhLzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQtYzM4NjYxZmJmMjJh LzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApt79Thth tj0GD5jE4Md5GCOWHAglSIWwJM99yeBwca1KwTsyvcr5uY66tf5Vwq1Tn4xEIm3T 4rYFlH3j2hrU8Weu4Vv5A6bwOvc9CB23pWGv93dnKDwDnQb3Bbw3Wyyd0xGzgUyS 6R2b6BlZQetHrCmlmwa6duPH9ai/exwcOB2AY8LplyEFnbSB6FnxXVcgJjC9lmq6 HHbMG0ypKjZn+2vgcrK5hxP1s/qV0algC6ylk73zFCbvIqTn/sdxIuPjcDZXUVR5 jf/Z36K0jObpzxdwvlQ+bD6LRyMUvHBMpSc4P+J4arIH47bzCehRh26cL2fbb5lD q4Kdh5rsAEDNTg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:27:04 2025 by rpki-client