This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json) Hash identifier: sZAWqc1hqQdR/nJmoeOYNxCSWb5D9vwIFAB31kHGWXU= Subject key identifier: 16:D0:28:AB:63:99:91:76:AB:11:8F:71:59:0E:3D:07:D2:A3:BC:F5 Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03 Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903 Certificate serial: 019B6EEA993A9CF889B314849AF1E1455B0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 11:00:26 +0000 Manifest this update: Tue 30 Dec 2025 11:00:26 +0000 Manifest next update: Wed 31 Dec 2025 11:00:26 +0000 Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=) 2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=) 3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: d08E2uSnYd/8sb/q6j9AgyveDiEDK1hZkrkyqCuIpZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:ea:99:3a:9c:f8:89:b3:14:84:9a:f1:e1:45:5b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903 Validity Not Before: Dec 30 11:00:26 2025 GMT Not After : Dec 31 11:00:26 2025 GMT Subject: CN=16d028ab63999176ab118f71590e3d07d2a3bcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:ae:90:f5:d1:f5:ad:fa:a0:14:16:5c:59: 2f:f5:f5:b0:44:68:1b:5e:6b:98:51:36:45:7a:d6: 1e:78:09:01:0a:3e:40:bf:2c:72:53:18:a4:01:b2: b6:ab:a9:77:31:28:bf:6a:5e:5e:84:a2:3e:ef:ad: ff:a6:dc:c0:34:e3:c2:29:69:14:40:07:5d:eb:de: 9e:32:57:13:ce:db:42:4f:bf:76:3a:4a:39:c9:1e: f6:d8:27:ba:a1:62:65:bc:a0:67:af:0e:1f:81:d6: 1e:64:01:43:43:62:9c:1e:dc:e9:1e:ce:c8:46:08: d6:ef:da:5a:02:ee:a6:4e:1e:71:2f:11:db:c8:85: 45:03:cb:85:d2:b8:5d:0e:95:cd:53:67:b5:d1:a6: 1d:1b:ee:1a:e4:34:45:ba:51:08:d0:f9:ab:05:6e: 3f:27:56:88:36:a9:55:d5:bf:d6:df:e8:02:75:60: a9:9b:f4:88:f2:f4:12:a9:c9:8a:8b:1b:00:6e:c8: 2c:23:7a:e9:12:f8:af:a6:4b:b3:f2:c2:09:2c:c1: 79:01:bc:db:b6:0c:35:49:8d:1b:7b:05:bc:78:b2: bb:fa:cf:bf:82:c9:2f:7c:d4:2a:bc:01:e4:ea:dd: 80:38:4b:d5:e0:a2:38:51:60:54:2a:80:30:db:5d: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D0:28:AB:63:99:91:76:AB:11:8F:71:59:0E:3D:07:D2:A3:BC:F5 X509v3 Authority Key Identifier: keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:18:4b:d9:0f:13:d5:1e:7b:9d:6c:05:0f:34:7f:ae:6d:58: 63:ee:be:10:04:c4:00:23:05:00:41:7e:52:61:7f:e5:45:92: b6:49:3b:f6:cf:bf:a8:75:f3:5a:20:2e:76:9a:ab:d7:90:25: e9:52:f1:c4:44:c4:2d:4e:2f:0a:be:82:36:6e:0f:1f:0f:82: 7e:87:0a:be:20:45:dd:6a:2c:56:e0:4a:30:95:fb:0b:30:79: 57:5d:d1:83:be:c1:18:02:a2:8b:d3:12:30:96:84:05:2f:6c: 58:bb:e2:45:1a:fd:72:16:85:96:5b:05:4e:de:ad:b7:71:ef: af:ac:e6:ae:fc:51:c5:0e:b3:75:83:7f:8d:13:d3:d3:31:8b: f9:29:86:cd:d5:44:3c:99:2e:db:87:b7:6d:0a:da:65:a4:cf: 26:3c:c7:f4:d5:58:ef:40:17:bd:31:f3:9f:0e:51:2d:4b:fc: 68:19:d1:16:03:64:b4:8a:72:01:7c:d6:ee:e3:34:1a:8b:cc: 6b:9a:a7:67:a1:11:66:11:3a:d9:0b:21:a0:36:7f:db:ad:64: 4c:b7:6a:e8:48:0b:1c:26:1c:65:b9:bd:0a:0c:56:b9:f5:83: fb:f2:22:29:c6:a5:11:e1:41:c3:cd:dd:d9:fe:11:a3:a2:46: 27:c6:e3:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtu6pk6nPiJsxSEmvHhRVsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmIyYTQzMDIwOTRmNGMzZjViYWRhNTQ3ZWY0ZjdlZGUx OGU5MDMwHhcNMjUxMjMwMTEwMDI2WhcNMjUxMjMxMTEwMDI2WjAzMTEwLwYDVQQD EygxNmQwMjhhYjYzOTk5MTc2YWIxMThmNzE1OTBlM2QwN2QyYTNiY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAeukPXR9a36oBQWXFkv9fWwRGgb XmuYUTZFetYeeAkBCj5AvyxyUxikAbK2q6l3MSi/al5ehKI+763/ptzANOPCKWkU QAdd696eMlcTzttCT792Oko5yR722Ce6oWJlvKBnrw4fgdYeZAFDQ2KcHtzpHs7I RgjW79paAu6mTh5xLxHbyIVFA8uF0rhdDpXNU2e10aYdG+4a5DRFulEI0PmrBW4/ J1aINqlV1b/W3+gCdWCpm/SI8vQSqcmKixsAbsgsI3rpEvivpkuz8sIJLMF5Abzb tgw1SY0bewW8eLK7+s+/gskvfNQqvAHk6t2AOEvV4KI4UWBUKoAw21135wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbQKKtjmZF2qxGPcVkOPQfSo7z1MB8GA1UdIwQY MBaAFLu7KkMCCU9MP1utpUfvT37eGOkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAt MzJiZjE2NDFmYjNiLzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAtMzJiZjE2NDFmYjNi LzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchhL2Q8T 1R57nWwFDzR/rm1YY+6+EATEACMFAEF+UmF/5UWStkk79s+/qHXzWiAudpqr15Al 6VLxxETELU4vCr6CNm4PHw+CfocKviBF3WosVuBKMJX7CzB5V13Rg77BGAKii9MS MJaEBS9sWLviRRr9chaFllsFTt6tt3Hvr6zmrvxRxQ6zdYN/jRPT0zGL+SmGzdVE PJku24e3bQraZaTPJjzH9NVY70AXvTHznw5RLUv8aBnRFgNktIpyAXzW7uM0GovM a5qnZ6ERZhE62QshoDZ/261kTLdq6EgLHCYcZbm9CgxWufWD+/IiKcalEeFBw83d 2f4Ro6JGJ8bj7A== -----END CERTIFICATE-----Generated at Tue Dec 30 18:43:18 2025 by rpki-client