This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json) Hash identifier: iHrDFLLYuK4WB50AxQaHSfh0vRxYw5ZnwA3PnygoWxE= Subject key identifier: 95:18:75:4A:05:BE:20:1D:87:2F:D8:00:21:67:CE:C9:19:9A:F0:5C Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa Certificate serial: 019B3E6D16C277065A089494DDCF1B62FC47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft Manifest number: 163F Signing time: Sun 21 Dec 2025 01:01:35 +0000 Manifest this update: Sun 21 Dec 2025 01:01:35 +0000 Manifest next update: Mon 22 Dec 2025 01:01:35 +0000 Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=) 2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: HJ8m7rXWFgBDaKah586KXRbNF9uHFoaZ0aakT1MsrPw=) 3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:16:c2:77:06:5a:08:94:94:dd:cf:1b:62:fc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa Validity Not Before: Dec 21 01:01:35 2025 GMT Not After : Dec 22 01:01:35 2025 GMT Subject: CN=9518754a05be201d872fd8002167cec9199af05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:02:d3:f7:ca:71:35:2f:96:2e:13:45:ad: 0f:66:6e:bd:3b:c4:ed:b9:e9:79:bc:98:56:08:5b: 72:31:fb:4c:1b:58:c5:38:20:6a:ff:77:d2:a4:1b: 34:a6:e4:15:1f:93:08:2e:56:8d:45:90:53:77:90: 15:df:e8:a3:6a:25:56:81:c4:c8:fb:23:1c:c7:d8: 9a:34:67:bd:e4:55:81:8a:ad:73:f8:aa:9e:89:83: eb:1e:46:2a:35:2a:cc:d1:a9:1d:61:ec:0e:c3:0f: 7c:f2:18:90:9e:ff:7d:ba:20:48:1f:fe:c0:eb:e3: e8:6c:af:bf:54:85:90:e3:cc:3c:7b:9f:f2:77:6c: 67:0a:dd:90:11:f4:d5:56:d4:b6:92:74:65:f6:f6: 18:d2:52:5e:64:14:d3:8e:3b:ce:97:c8:87:b9:26: 17:8f:80:5b:67:6a:0c:d4:b8:2f:10:c0:c1:43:0c: 5d:fe:86:35:28:b6:24:e7:44:48:b3:c4:8a:be:b6: 14:01:07:cb:bf:fa:75:7e:47:31:95:ce:b4:05:96: 20:6e:a8:6a:55:bf:24:16:64:5a:ed:04:0a:c9:05: 17:1f:2d:be:fe:02:fa:95:f8:02:a7:e0:07:aa:dc: 6d:aa:72:9c:b8:a1:84:13:0e:86:13:b4:7b:ed:f9: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:18:75:4A:05:BE:20:1D:87:2F:D8:00:21:67:CE:C9:19:9A:F0:5C X509v3 Authority Key Identifier: keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:f4:e8:b1:e2:0c:67:45:69:46:a8:24:ba:fb:cc:ff:fa:ba: e5:01:e3:11:f2:3e:59:3f:5b:67:52:99:2e:3b:71:a7:a6:c7: 64:e0:90:91:a1:85:5c:1c:23:8c:9c:c4:c8:74:5d:1c:aa:90: 3e:20:36:08:36:6a:c5:b4:f2:9a:6b:95:8e:12:38:6f:b8:b0: c6:5e:93:40:fe:1f:0f:f9:5a:83:a6:64:7a:ec:bc:02:0d:56: e7:fe:02:01:d6:b6:53:9c:ec:6c:7d:e8:01:92:74:46:1d:70: 50:84:6c:37:b4:30:ab:a4:92:dc:34:35:17:55:fd:f4:5f:45: db:f2:35:3f:a6:45:26:32:2a:da:11:93:12:48:6b:8e:64:d3: 01:95:fd:65:52:cd:30:fc:31:d1:79:d2:6f:2d:73:96:25:6d: ff:68:f1:f4:68:7b:b5:f3:c6:c8:c7:36:ab:a8:02:04:b6:95: 4d:06:44:50:b5:3a:93:81:ff:41:fa:d8:96:94:af:8f:a6:6d: 2e:5a:20:6f:cc:6e:f3:db:30:5b:ba:74:f1:27:f5:09:3c:76: 08:12:47:5b:b3:6f:a3:af:c4:54:78:b1:6f:65:b6:2b:79:90: e4:ae:66:21:b4:0c:5b:47:75:84:b2:a2:ba:e4:c5:04:49:29: c4:96:da:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bRbCdwZaCJSU3c8bYvxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDViM2FmMDA2NDk4MWU5NmJiNWUyN2Q4ZjA0ZDg2ZTYz MDZjZmEwHhcNMjUxMjIxMDEwMTM1WhcNMjUxMjIyMDEwMTM1WjAzMTEwLwYDVQQD Eyg5NTE4NzU0YTA1YmUyMDFkODcyZmQ4MDAyMTY3Y2VjOTE5OWFmMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHkC0/fKcTUvli4TRa0PZm69O8Tt uel5vJhWCFtyMftMG1jFOCBq/3fSpBs0puQVH5MILlaNRZBTd5AV3+ijaiVWgcTI +yMcx9iaNGe95FWBiq1z+KqeiYPrHkYqNSrM0akdYewOww988hiQnv99uiBIH/7A 6+PobK+/VIWQ48w8e5/yd2xnCt2QEfTVVtS2knRl9vYY0lJeZBTTjjvOl8iHuSYX j4BbZ2oM1LgvEMDBQwxd/oY1KLYk50RIs8SKvrYUAQfLv/p1fkcxlc60BZYgbqhq Vb8kFmRa7QQKyQUXHy2+/gL6lfgCp+AHqtxtqnKcuKGEEw6GE7R77flTEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUYdUoFviAdhy/YACFnzskZmvBcMB8GA1UdIwQY MBaAFO7Vs68AZJgelrteJ9jwTYbmMGz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAt MDMwYWNkM2FlMzM2LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAtMDMwYWNkM2FlMzM2 LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2PToseIM Z0VpRqgkuvvM//q65QHjEfI+WT9bZ1KZLjtxp6bHZOCQkaGFXBwjjJzEyHRdHKqQ PiA2CDZqxbTymmuVjhI4b7iwxl6TQP4fD/lag6Zkeuy8Ag1W5/4CAda2U5zsbH3o AZJ0Rh1wUIRsN7Qwq6SS3DQ1F1X99F9F2/I1P6ZFJjIq2hGTEkhrjmTTAZX9ZVLN MPwx0XnSby1zliVt/2jx9Gh7tfPGyMc2q6gCBLaVTQZEULU6k4H/QfrYlpSvj6Zt Llogb8xu89swW7p08Sf1CTx2CBJHW7Nvo6/EVHixb2W2K3mQ5K5mIbQMW0d1hLKi uuTFBEkpxJbaLw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:34:06 2025 by rpki-client