This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json) Hash identifier: qH+zHR+TPRbIBKXBsJlDv/xWAFj/fYtf3hOv7INZFpA= Subject key identifier: 40:7D:C4:C1:4D:26:1C:31:73:1E:5C:34:B8:B1:CE:C5:58:92:8F:68 Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945 Certificate serial: 019B631ECBD055E0B9E3168AAE7D64EC35AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft Manifest number: 06AF Signing time: Sun 28 Dec 2025 04:02:01 +0000 Manifest this update: Sun 28 Dec 2025 04:02:01 +0000 Manifest next update: Mon 29 Dec 2025 04:02:01 +0000 Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: xTiBFHMN5YVetWmsKngK+XBjd2oSXhyLJI+/E2YPh9Y=) 2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:cb:d0:55:e0:b9:e3:16:8a:ae:7d:64:ec:35:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945 Validity Not Before: Dec 28 04:02:01 2025 GMT Not After : Dec 29 04:02:01 2025 GMT Subject: CN=407dc4c14d261c31731e5c34b8b1cec558928f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:a4:c9:18:7e:66:62:2a:2b:05:0e:60:39: d9:ad:85:2b:49:76:f6:fc:b6:33:ba:26:3c:a0:83: 32:80:d8:36:8b:df:37:0a:31:c4:72:ef:ee:31:e9: 3a:8a:15:ee:59:68:0e:33:50:e3:e9:de:84:18:dd: bd:ca:02:17:e2:53:2c:68:40:10:7f:0e:3d:cd:9e: 59:75:94:41:ce:65:7e:d5:4d:2f:f0:69:9a:e6:3a: f6:a6:f2:65:e7:f9:35:0b:f1:c8:ef:ad:eb:c1:62: fb:51:cb:d1:4a:d0:c7:3e:5c:e6:46:cc:43:0f:88: c7:4d:ae:df:37:70:5b:0b:d4:93:eb:e2:48:f3:36: 09:58:5b:05:67:cd:09:c2:c8:2d:9e:c0:7c:2c:3c: fa:30:1b:da:0f:fb:a7:7d:ec:de:69:e7:3d:a6:1d: 08:0e:31:f6:3e:ab:41:d9:06:db:36:5b:31:33:50: 05:0e:45:38:d2:07:d9:19:2a:7d:14:98:f6:4a:b2: a0:76:53:8c:ff:b4:72:e7:d3:ab:7d:33:02:ff:fd: a0:a9:28:a3:6b:06:88:a1:78:0f:33:f3:7c:4b:b8: 78:5d:37:c0:00:8c:a1:b4:aa:85:1c:23:ff:59:8a: 24:44:1f:7f:77:5d:1e:4d:40:1d:b7:96:d5:24:51: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7D:C4:C1:4D:26:1C:31:73:1E:5C:34:B8:B1:CE:C5:58:92:8F:68 X509v3 Authority Key Identifier: keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ad:cb:ab:29:39:8f:62:39:68:e9:74:dc:60:aa:7a:ee:76: e3:d1:7a:e4:77:0a:31:ce:38:f2:5d:08:7f:21:9d:cb:7d:7d: bb:0f:3f:ee:d2:34:b2:f5:c5:c2:9a:2f:35:fb:e1:bf:1a:7e: 3e:87:09:8f:b4:de:88:4a:6c:39:59:4d:be:92:d4:70:0a:93: ec:89:fe:19:da:37:2d:7c:84:57:77:fa:23:6f:5d:ea:86:4d: c8:6c:6b:5d:7d:6a:23:78:10:77:76:56:d8:0f:89:01:2a:85: 89:80:18:13:1a:f1:c0:34:8a:11:1b:da:e8:4c:e8:83:4f:b1: d9:e3:00:6a:a4:f1:1a:bf:ca:8a:51:8f:c0:34:df:c9:92:c5: f6:dd:4f:5d:28:fc:46:01:3e:e0:5f:3a:ae:7f:99:96:9e:f5: 14:4b:4b:29:a2:59:dc:f2:90:59:29:6b:ec:f8:6f:e8:58:11: f9:6c:62:b5:74:e0:ea:c2:55:7f:50:57:5b:81:36:61:f3:91: b6:bb:15:97:e0:2a:e0:ff:a8:b3:ee:c1:39:f6:1f:7d:85:88: d8:31:ec:00:8c:02:f0:ae:d9:48:0f:74:0d:24:93:c5:0a:18: 41:c9:60:b6:35:8c:74:96:d1:67:e9:e5:b4:ca:14:8a:a0:e1: 1e:2a:91:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHsvQVeC54xaKrn1k7DWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy MGM5NDUwHhcNMjUxMjI4MDQwMjAxWhcNMjUxMjI5MDQwMjAxWjAzMTEwLwYDVQQD Eyg0MDdkYzRjMTRkMjYxYzMxNzMxZTVjMzRiOGIxY2VjNTU4OTI4ZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqmkyRh+ZmIqKwUOYDnZrYUrSXb2 /LYzuiY8oIMygNg2i983CjHEcu/uMek6ihXuWWgOM1Dj6d6EGN29ygIX4lMsaEAQ fw49zZ5ZdZRBzmV+1U0v8Gma5jr2pvJl5/k1C/HI763rwWL7UcvRStDHPlzmRsxD D4jHTa7fN3BbC9ST6+JI8zYJWFsFZ80JwsgtnsB8LDz6MBvaD/unfezeaec9ph0I DjH2PqtB2QbbNlsxM1AFDkU40gfZGSp9FJj2SrKgdlOM/7Ry59OrfTMC//2gqSij awaIoXgPM/N8S7h4XTfAAIyhtKqFHCP/WYokRB9/d10eTUAdt5bVJFG+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB9xMFNJhwxcx5cNLixzsVYko9oMB8GA1UdIwQY MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct MjI2YjhkNGE1ZjYwLzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq3Lqyk5 j2I5aOl03GCqeu5249F65HcKMc448l0IfyGdy319uw8/7tI0svXFwpovNfvhvxp+ PocJj7TeiEpsOVlNvpLUcAqT7In+Gdo3LXyEV3f6I29d6oZNyGxrXX1qI3gQd3ZW 2A+JASqFiYAYExrxwDSKERva6Ezog0+x2eMAaqTxGr/KilGPwDTfyZLF9t1PXSj8 RgE+4F86rn+Zlp71FEtLKaJZ3PKQWSlr7Phv6FgR+WxitXTg6sJVf1BXW4E2YfOR trsVl+Aq4P+os+7BOfYffYWI2DHsAIwC8K7ZSA90DSSTxQoYQclgtjWMdJbRZ+nl tMoUiqDhHiqR7Q== -----END CERTIFICATE-----Generated at Sun Dec 28 06:38:23 2025 by rpki-client