This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json) Hash identifier: AJsMC2rRV9TvuHRTILne5o6aZqgAyh4MX3F+GpmTabE= Subject key identifier: 95:9E:68:2D:66:2F:E2:56:99:38:58:12:5B:2C:DB:6B:29:D1:2F:45 Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69 Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169 Certificate serial: 019B5788ECACA0B4CA9D475974BFC9C7D011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft Manifest number: 128B Signing time: Thu 25 Dec 2025 22:02:29 +0000 Manifest this update: Thu 25 Dec 2025 22:02:29 +0000 Manifest next update: Fri 26 Dec 2025 22:02:29 +0000 Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: 7w92nT5eTd9RHXyVwc5CziCz+WYc3B8l3xsQMimmmYs=) 2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:ec:ac:a0:b4:ca:9d:47:59:74:bf:c9:c7:d0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169 Validity Not Before: Dec 25 22:02:29 2025 GMT Not After : Dec 26 22:02:29 2025 GMT Subject: CN=959e682d662fe256993858125b2cdb6b29d12f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:26:01:2a:47:c9:b0:c7:6f:a8:cd:ad:74: de:c3:e2:94:69:98:e4:b0:f3:5c:d4:e9:94:21:a7: 7d:f1:5f:7d:b5:32:df:0f:1b:af:ac:e8:05:95:f0: 06:d3:d4:07:ed:81:9a:b8:db:f8:b3:eb:3d:f5:86: 5c:58:5b:08:7a:96:d0:8c:26:02:71:48:2d:bb:52: 51:78:c5:8c:92:ed:1a:09:e9:e2:15:fe:e6:97:c6: cf:0a:32:2c:2f:c4:dd:fb:2d:74:8d:63:5e:5e:df: 84:96:e4:2d:b0:f9:3d:29:09:90:01:1a:5a:10:44: a5:b2:e9:22:81:d9:7f:82:03:2b:c1:f6:22:0f:cd: fa:24:c5:82:0e:45:7d:8f:fb:74:d3:81:4c:1e:68: 28:83:83:fb:4f:ac:2b:00:8c:98:70:5d:77:41:a6: 6f:fb:5d:c6:1a:8d:37:7a:2e:29:52:c5:44:9a:42: 2f:1e:c5:05:41:40:a5:98:c1:d4:32:11:5a:b0:d1: 35:99:3d:a6:e1:32:23:66:9a:eb:95:00:18:eb:b8: d1:94:be:7c:77:3e:3a:90:ea:81:f3:e9:aa:a1:0d: b2:7a:db:b9:12:91:52:43:a6:92:8c:bc:a6:a6:cf: 4e:d5:0b:60:e8:90:5c:3b:73:40:59:77:60:b4:32: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9E:68:2D:66:2F:E2:56:99:38:58:12:5B:2C:DB:6B:29:D1:2F:45 X509v3 Authority Key Identifier: keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e0:db:97:c4:7e:c1:7c:ce:f9:a5:c8:79:9f:f6:bc:e4:94: 5e:1c:ff:e2:41:49:82:2b:6c:9d:06:7b:d4:bb:9e:9d:b2:ea: 77:63:a0:ea:ab:66:b3:bb:55:98:40:eb:da:dc:8c:d7:03:a4: c1:2b:64:43:59:4a:d4:80:1d:97:ed:ec:d6:fb:55:6b:d3:b1: 1d:d6:42:54:1b:c2:9a:5a:2d:1c:06:bd:94:8e:bd:0a:da:b7: fd:58:c1:70:cb:a2:87:e2:46:fa:20:6f:d2:02:8f:9f:57:21: 67:fe:3f:ac:ff:c2:d0:18:a1:7e:f3:cc:47:89:87:2b:32:5c: 23:2d:33:b0:58:99:a3:49:46:8f:d5:57:b4:44:2f:66:71:e1: c7:50:6d:3d:de:ed:d6:c4:e4:16:d9:1b:74:2f:ab:95:91:ac: 52:61:df:42:93:43:2c:94:a7:24:e7:39:18:79:74:4c:76:f6: a7:33:7d:d1:50:d6:fd:b5:e0:3c:24:c5:fc:45:1a:5d:3d:15: 61:63:b3:8e:ef:56:8d:10:18:2b:dc:08:8f:03:31:48:ed:2e: 73:db:b9:98:34:ba:87:66:cd:1b:54:a7:ec:42:55:c3:9b:e3: 97:15:9d:6b:b0:e8:ba:1b:ea:e8:59:e4:bd:7f:e4:8d:2e:bc: fe:a9:eb:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiOysoLTKnUdZdL/Jx9ARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk ZjkxNjkwHhcNMjUxMjI1MjIwMjI5WhcNMjUxMjI2MjIwMjI5WjAzMTEwLwYDVQQD Eyg5NTllNjgyZDY2MmZlMjU2OTkzODU4MTI1YjJjZGI2YjI5ZDEyZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskkmASpHybDHb6jNrXTew+KUaZjk sPNc1OmUIad98V99tTLfDxuvrOgFlfAG09QH7YGauNv4s+s99YZcWFsIepbQjCYC cUgtu1JReMWMku0aCeniFf7ml8bPCjIsL8Td+y10jWNeXt+EluQtsPk9KQmQARpa EESlsukigdl/ggMrwfYiD836JMWCDkV9j/t004FMHmgog4P7T6wrAIyYcF13QaZv +13GGo03ei4pUsVEmkIvHsUFQUClmMHUMhFasNE1mT2m4TIjZprrlQAY67jRlL58 dz46kOqB8+mqoQ2yetu5EpFSQ6aSjLymps9O1Qtg6JBcO3NAWXdgtDJrGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWeaC1mL+JWmThYElss22sp0S9FMB8GA1UdIwQY MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeDbl8R+ wXzO+aXIeZ/2vOSUXhz/4kFJgitsnQZ71LuenbLqd2Og6qtms7tVmEDr2tyM1wOk wStkQ1lK1IAdl+3s1vtVa9OxHdZCVBvCmlotHAa9lI69Ctq3/VjBcMuih+JG+iBv 0gKPn1chZ/4/rP/C0BihfvPMR4mHKzJcIy0zsFiZo0lGj9VXtEQvZnHhx1BtPd7t 1sTkFtkbdC+rlZGsUmHfQpNDLJSnJOc5GHl0THb2pzN90VDW/bXgPCTF/EUaXT0V YWOzju9WjRAYK9wIjwMxSO0uc9u5mDS6h2bNG1Sn7EJVw5vjlxWda7Douhvq6Fnk vX/kjS68/qnrFA== -----END CERTIFICATE-----Generated at Thu Dec 25 23:51:53 2025 by rpki-client