This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json) Hash identifier: Zs6AM05ICndOkSYkhm3gSpcnB84yAC19El2Td7ZC+4I= Subject key identifier: CC:13:E5:93:2C:1C:28:31:EA:7B:B0:4A:18:E2:80:49:01:A2:6D:55 Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50 Certificate serial: 019B39EAC02DCAAA69BEE04D71613BF4EB41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 04:00:44 +0000 Manifest this update: Sat 20 Dec 2025 04:00:44 +0000 Manifest next update: Sun 21 Dec 2025 04:00:44 +0000 Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: 0/EdbSZH/PeEVFjaz/DlKvDgeOLBT3/mNmnmh1ouR4I=) 2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=) 3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:c0:2d:ca:aa:69:be:e0:4d:71:61:3b:f4:eb:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50 Validity Not Before: Dec 20 04:00:44 2025 GMT Not After : Dec 21 04:00:44 2025 GMT Subject: CN=cc13e5932c1c2831ea7bb04a18e2804901a26d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:e4:d7:b5:a4:53:1a:d6:46:ba:6a:98:f5: 5a:9e:78:20:b7:10:2a:32:82:5f:83:9b:36:62:63: 6e:0c:3c:2b:2c:2d:de:0a:bd:8f:64:37:b2:c1:24: b3:12:dc:e1:96:07:a2:4d:9e:7d:6c:59:8f:ac:cf: c8:c2:e4:83:f9:10:03:94:1a:5e:bd:d9:df:00:e4: a4:32:8d:08:95:0d:04:ab:bb:19:91:9f:87:99:74: da:36:19:65:c1:1b:e4:3e:8f:b6:ae:f8:d8:4a:da: 11:8c:04:ca:fe:8e:64:b6:a4:2e:a3:7f:21:c9:9a: cb:ac:56:2c:0a:b9:48:73:50:17:ec:85:f2:1b:11: d3:b2:77:aa:58:df:4e:75:dd:64:4e:01:f4:0e:b7: 0f:1f:9f:1c:7c:5b:cb:8e:57:a3:34:ff:3c:94:5c: 5e:b5:6e:6a:65:e5:b6:6c:33:e4:53:cd:e1:70:fc: 16:5f:aa:ea:94:7c:75:83:61:9a:7c:3d:3f:e6:c8: 8c:1d:0a:8f:f6:af:70:fc:97:a5:b5:6e:a5:dc:2b: 02:72:9c:11:b0:60:2e:54:7f:68:cb:b4:ed:3b:5d: 89:68:3e:98:3e:72:43:d2:81:c0:e5:5b:25:df:c9: 8d:05:17:27:7d:07:be:44:f3:6f:91:77:d8:7d:3b: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:13:E5:93:2C:1C:28:31:EA:7B:B0:4A:18:E2:80:49:01:A2:6D:55 X509v3 Authority Key Identifier: keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2f:0c:20:01:da:6e:75:75:23:13:e8:ae:8d:fe:e0:ce:e9: d8:bd:d3:54:37:ca:77:7c:8d:63:ca:84:74:9e:06:dc:f6:ec: 99:2f:0d:0d:6e:70:f2:cd:81:2f:2e:5f:cd:d0:e1:b9:fd:7f: bd:e8:58:51:e4:ff:99:ad:58:5b:1d:bc:89:ef:ed:9e:28:ff: 09:d6:02:96:56:65:70:79:d8:ac:41:3e:0e:8b:2c:ee:f8:cc: 06:7a:83:5b:a3:09:92:8e:95:c1:97:f9:54:76:be:55:9a:c8: dc:5e:50:5e:ef:df:3a:02:98:d6:11:14:b3:4d:82:52:3b:60: 22:46:06:51:46:b8:6a:d7:05:67:4d:03:c1:d4:17:d2:2c:6b: 28:42:1e:8d:56:b8:79:9d:8b:74:45:5e:9d:a0:fe:6e:a6:80: 26:93:2b:55:4e:f9:f1:0a:66:af:8e:80:2e:2e:dd:44:4c:d2: 42:27:8d:ef:2c:cc:7f:db:76:1b:9d:12:a7:d1:b1:e2:4d:03: c9:a4:0c:03:cb:22:c0:6d:e4:19:95:c1:8f:43:ca:55:06:98: e8:a7:17:86:48:c4:f4:75:02:16:bc:97:d9:c1:92:81:99:34: 40:70:06:c1:fe:e0:b9:a6:93:8e:7b:c3:ed:68:47:94:8e:d1: 4a:4a:f1:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56sAtyqppvuBNcWE79OtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0 ZTlmNTAwHhcNMjUxMjIwMDQwMDQ0WhcNMjUxMjIxMDQwMDQ0WjAzMTEwLwYDVQQD EyhjYzEzZTU5MzJjMWMyODMxZWE3YmIwNGExOGUyODA0OTAxYTI2ZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjrk17WkUxrWRrpqmPVannggtxAq MoJfg5s2YmNuDDwrLC3eCr2PZDeywSSzEtzhlgeiTZ59bFmPrM/IwuSD+RADlBpe vdnfAOSkMo0IlQ0Eq7sZkZ+HmXTaNhllwRvkPo+2rvjYStoRjATK/o5ktqQuo38h yZrLrFYsCrlIc1AX7IXyGxHTsneqWN9Odd1kTgH0DrcPH58cfFvLjlejNP88lFxe tW5qZeW2bDPkU83hcPwWX6rqlHx1g2GafD0/5siMHQqP9q9w/JeltW6l3CsCcpwR sGAuVH9oy7TtO12JaD6YPnJD0oHA5Vsl38mNBRcnfQe+RPNvkXfYfTtc7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwT5ZMsHCgx6nuwShjigEkBom1VMB8GA1UdIwQY MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0 LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOS8MIAHa bnV1IxPoro3+4M7p2L3TVDfKd3yNY8qEdJ4G3PbsmS8NDW5w8s2BLy5fzdDhuf1/ vehYUeT/ma1YWx28ie/tnij/CdYCllZlcHnYrEE+Doss7vjMBnqDW6MJko6VwZf5 VHa+VZrI3F5QXu/fOgKY1hEUs02CUjtgIkYGUUa4atcFZ00DwdQX0ixrKEIejVa4 eZ2LdEVenaD+bqaAJpMrVU758Qpmr46ALi7dREzSQieN7yzMf9t2G50Sp9Gx4k0D yaQMA8siwG3kGZXBj0PKVQaY6KcXhkjE9HUCFryX2cGSgZk0QHAGwf7guaaTjnvD 7WhHlI7RSkrxbw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:14:50 2025 by rpki-client