This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json) Hash identifier: k1ksvTyxtk4JASZ0gpOug0PreLiCJ8Ou4sp7RpT0/VY= Subject key identifier: 87:6F:AC:42:F5:DB:09:5A:B0:1D:B6:5D:B5:D2:9B:88:97:5A:44:07 Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877 Certificate serial: 019B548701D5162B71A346877E83054BEB74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft Manifest number: 048A Signing time: Thu 25 Dec 2025 08:01:32 +0000 Manifest this update: Thu 25 Dec 2025 08:01:32 +0000 Manifest next update: Fri 26 Dec 2025 08:01:32 +0000 Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: WdFxa56CvSDfyn+yHwo7KSLHqVGryGAUVF5rRXRWJbQ=) 2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:87:01:d5:16:2b:71:a3:46:87:7e:83:05:4b:eb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877 Validity Not Before: Dec 25 08:01:32 2025 GMT Not After : Dec 26 08:01:32 2025 GMT Subject: CN=876fac42f5db095ab01db65db5d29b88975a4407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:3e:ae:6d:64:59:f9:74:41:43:18:17:6c: b5:58:0d:f0:ac:7d:b2:48:e0:cb:80:e0:93:c4:30: 9a:c1:fd:84:d4:b4:5a:e3:fc:6f:93:c5:e8:5c:7f: 5c:dd:6c:46:71:ba:37:22:a0:84:5b:58:97:17:06: 42:3c:14:10:3d:5e:76:9c:a9:b7:59:ad:e6:48:a8: fd:8c:94:d4:ff:3d:12:09:88:93:14:cc:2c:20:06: 21:c3:50:09:eb:3a:81:c7:ab:d6:97:ca:49:89:65: eb:d6:87:72:ec:5d:30:30:fe:6e:91:52:5b:76:32: 88:a6:60:18:80:5c:0e:8d:bb:37:11:c6:1b:3e:96: 62:69:33:1a:bf:61:0e:ca:f4:df:a2:be:b8:3c:ef: 2e:cb:75:0e:59:6f:63:02:38:99:7f:c1:d0:57:91: 10:b4:d4:1b:e4:29:4a:bf:8e:07:2a:0f:b9:b8:2f: 5c:77:a2:6b:80:9a:dc:c1:93:d2:29:da:60:3d:f7: 8f:ae:9f:f2:63:a4:5d:d5:73:ca:26:e2:ab:a2:28: 0e:ba:ab:f7:bf:1d:79:ff:72:27:a4:1c:fa:ea:98: d5:a6:f1:16:9b:a3:57:d5:1f:a5:c9:8f:03:5f:f3: 7a:f3:9b:e6:1d:d0:a5:e3:5d:d6:33:cc:f1:12:c2: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6F:AC:42:F5:DB:09:5A:B0:1D:B6:5D:B5:D2:9B:88:97:5A:44:07 X509v3 Authority Key Identifier: keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a7:84:26:34:29:2b:d2:b8:e2:60:72:65:06:4c:b0:fc:ba: 74:19:44:a8:6e:6f:e1:42:fd:d7:fc:8b:11:8b:e5:d1:f2:c1: 71:4a:1b:56:a6:5d:07:17:3b:43:47:0e:a5:3d:c4:d2:9c:dd: a1:4c:15:f9:35:c3:fa:fe:7f:1d:f7:d0:5a:d7:34:50:6f:9f: e8:fd:e3:8a:22:9c:e4:42:3d:d9:5c:86:e2:20:89:4e:a1:4b: 52:9a:12:84:ff:f6:f2:b5:33:b4:ac:a9:e5:32:76:c6:7a:70: 9b:3b:fd:d2:0f:1d:fb:ac:6e:ed:f9:ac:c8:0c:2a:52:3b:f8: 70:77:0c:fb:1b:e9:e2:f0:14:56:57:31:2a:c0:b9:75:68:b3: 03:f7:63:74:24:c8:57:e1:92:02:bd:40:3d:4b:05:30:17:b4: ac:33:80:bf:df:80:3b:b6:cd:e3:b0:f9:0b:86:47:88:60:bb: 4e:99:34:03:3b:2c:bc:38:22:3d:5d:57:e3:be:4b:8c:24:c8: 31:39:da:66:c8:4f:9c:a2:ca:83:81:79:56:9e:32:d1:71:0d: e3:78:ac:4c:de:88:2e:49:25:41:c1:ec:3a:53:50:73:7d:53: f8:5b:bc:fe:eb:b0:03:60:e4:ed:7b:a7:3c:0f:56:ce:7b:b3: 18:f4:ec:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhwHVFitxo0aHfoMFS+t0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjA2OWQzM2RmMTIyNWE4YjM2NDNhMDEzNjRmMjc5ZGY0 MGQ4NzcwHhcNMjUxMjI1MDgwMTMyWhcNMjUxMjI2MDgwMTMyWjAzMTEwLwYDVQQD Eyg4NzZmYWM0MmY1ZGIwOTVhYjAxZGI2NWRiNWQyOWI4ODk3NWE0NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pw+rm1kWfl0QUMYF2y1WA3wrH2y SODLgOCTxDCawf2E1LRa4/xvk8XoXH9c3WxGcbo3IqCEW1iXFwZCPBQQPV52nKm3 Wa3mSKj9jJTU/z0SCYiTFMwsIAYhw1AJ6zqBx6vWl8pJiWXr1ody7F0wMP5ukVJb djKIpmAYgFwOjbs3EcYbPpZiaTMav2EOyvTfor64PO8uy3UOWW9jAjiZf8HQV5EQ tNQb5ClKv44HKg+5uC9cd6JrgJrcwZPSKdpgPfePrp/yY6Rd1XPKJuKroigOuqv3 vx15/3InpBz66pjVpvEWm6NX1R+lyY8DX/N685vmHdCl413WM8zxEsI82wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdvrEL12wlasB22XbXSm4iXWkQHMB8GA1UdIwQY MBaAFPewadM98SJaizZDoBNk8nnfQNh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMt NWZkY2I3ODNhNmVjLzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMtNWZkY2I3ODNhNmVj LzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6eEJjQp K9K44mByZQZMsPy6dBlEqG5v4UL91/yLEYvl0fLBcUobVqZdBxc7Q0cOpT3E0pzd oUwV+TXD+v5/HffQWtc0UG+f6P3jiiKc5EI92VyG4iCJTqFLUpoShP/28rUztKyp 5TJ2xnpwmzv90g8d+6xu7fmsyAwqUjv4cHcM+xvp4vAUVlcxKsC5dWizA/djdCTI V+GSAr1APUsFMBe0rDOAv9+AO7bN47D5C4ZHiGC7Tpk0AzssvDgiPV1X475LjCTI MTnaZshPnKLKg4F5Vp4y0XEN43isTN6ILkklQcHsOlNQc31T+Fu8/uuwA2Dk7Xun PA9WznuzGPTsow== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:09 2025 by rpki-client