This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json) Hash identifier: 1Gc/ZvDNiaVGU9znb28L0sDhwZam8tHypuDaEBSwVPM= Subject key identifier: EC:D8:05:1C:65:E2:C0:14:3E:91:09:C6:FC:0E:23:57:F7:0C:D6:A0 Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Certificate serial: 019B6A325F3478258483990DA0A5F190FA0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 13:00:44 +0000 Manifest this update: Mon 29 Dec 2025 13:00:44 +0000 Manifest next update: Tue 30 Dec 2025 13:00:44 +0000 Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=) 2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: 1Vt8evLatn9tOU1LCsPLJaMygCW6E2P0rybhBC5FfEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:5f:34:78:25:84:83:99:0d:a0:a5:f1:90:fa:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Validity Not Before: Dec 29 13:00:44 2025 GMT Not After : Dec 30 13:00:44 2025 GMT Subject: CN=ecd8051c65e2c0143e9109c6fc0e2357f70cd6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6a:e3:27:b7:e0:60:a3:51:5f:d7:f1:55:f4: f5:a4:81:4f:1e:d9:5a:d9:11:8d:54:fd:ba:f9:d3: d1:47:b8:1c:5a:f6:8e:88:bb:cf:8a:d7:ea:41:51: 97:09:fe:b8:86:1e:70:8f:4a:bc:e5:de:a1:36:10: b1:fb:1d:d6:3d:fc:1d:3b:7b:0b:4d:86:4e:56:40: 6d:12:f7:7b:54:d2:81:74:5b:e4:a3:27:29:29:10: 8c:a7:8f:05:25:51:20:8a:69:1b:8c:77:18:ca:35: e7:55:fc:46:b6:95:05:eb:01:11:99:6b:8c:e1:78: 3e:c0:85:18:5f:62:18:39:c1:40:d2:50:23:b2:9f: 73:00:05:94:6b:7f:08:0f:68:2d:8f:f5:03:55:15: 32:0c:1b:f3:85:24:6e:ad:b0:b3:53:f3:5c:37:33: 37:78:c7:d9:1c:11:a9:c4:9f:cc:3e:b8:68:46:b1: 4e:78:e6:ff:8d:2b:3d:f7:59:63:c4:cf:28:2b:de: 5b:c7:0d:52:e5:35:7b:ee:0d:f4:9c:75:38:54:00: 60:24:fd:50:24:52:6e:1e:f5:d4:bc:eb:bd:ae:25: b8:c0:ca:de:4e:b9:e6:ce:8f:fe:ba:a7:88:95:2d: 66:b1:b1:30:86:50:d5:50:9a:d4:bb:ed:02:30:e8: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D8:05:1C:65:E2:C0:14:3E:91:09:C6:FC:0E:23:57:F7:0C:D6:A0 X509v3 Authority Key Identifier: keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:58:de:67:38:8f:33:73:5d:7a:ed:db:42:1d:f3:d8:3a:bc: dd:50:08:38:b7:38:fa:52:17:86:fa:c6:f8:30:9a:7c:b0:d7: 2c:75:0d:76:b4:31:dc:b2:13:a3:6a:d1:28:49:0e:33:a4:bf: 3e:d8:83:a8:bc:c7:ca:a8:93:52:71:31:16:65:dd:e8:f6:53: 34:5f:e6:8d:8b:98:c2:8e:ea:73:06:15:02:66:a1:45:3f:5d: 00:82:8c:1a:cd:70:79:f6:53:23:b2:d9:16:d1:59:5b:f4:ce: ea:98:0e:b7:09:d0:1f:ee:25:81:c1:c9:32:7f:e6:d6:66:c5: 95:93:f5:38:e9:bc:78:7a:f0:d0:a2:57:72:78:da:6c:0d:3f: aa:82:b0:dc:1e:ff:e0:1a:cf:c7:d2:79:9c:58:84:53:d5:77: f3:53:ba:f6:cd:94:52:4e:4c:9e:8a:ff:b9:99:34:11:a9:23: 52:56:a4:18:39:eb:61:95:46:05:3e:f3:d8:4c:0e:4f:1e:7d: 5c:60:34:ab:59:f0:96:9e:9a:b1:7c:14:60:e0:ab:5a:01:59: e4:6e:4f:c0:24:cd:d7:d8:02:a3:56:15:e0:eb:32:87:32:f7: 4b:f6:0c:94:4c:2c:9b:d3:b0:9a:90:dc:13:91:7c:fd:f0:79: 55:01:40:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMl80eCWEg5kNoKXxkPoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz M2I3OGIwHhcNMjUxMjI5MTMwMDQ0WhcNMjUxMjMwMTMwMDQ0WjAzMTEwLwYDVQQD EyhlY2Q4MDUxYzY1ZTJjMDE0M2U5MTA5YzZmYzBlMjM1N2Y3MGNkNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2rjJ7fgYKNRX9fxVfT1pIFPHtla 2RGNVP26+dPRR7gcWvaOiLvPitfqQVGXCf64hh5wj0q85d6hNhCx+x3WPfwdO3sL TYZOVkBtEvd7VNKBdFvkoycpKRCMp48FJVEgimkbjHcYyjXnVfxGtpUF6wERmWuM 4Xg+wIUYX2IYOcFA0lAjsp9zAAWUa38ID2gtj/UDVRUyDBvzhSRurbCzU/NcNzM3 eMfZHBGpxJ/MPrhoRrFOeOb/jSs991ljxM8oK95bxw1S5TV77g30nHU4VABgJP1Q JFJuHvXUvOu9riW4wMreTrnmzo/+uqeIlS1msbEwhlDVUJrUu+0CMOj1DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzYBRxl4sAUPpEJxvwOI1f3DNagMB8GA1UdIwQY MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt YWQwOTUzZjdmZDQ5LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5 LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1jeZziP M3Ndeu3bQh3z2Dq83VAIOLc4+lIXhvrG+DCafLDXLHUNdrQx3LITo2rRKEkOM6S/ PtiDqLzHyqiTUnExFmXd6PZTNF/mjYuYwo7qcwYVAmahRT9dAIKMGs1wefZTI7LZ FtFZW/TO6pgOtwnQH+4lgcHJMn/m1mbFlZP1OOm8eHrw0KJXcnjabA0/qoKw3B7/ 4BrPx9J5nFiEU9V381O69s2UUk5Mnor/uZk0EakjUlakGDnrYZVGBT7z2EwOTx59 XGA0q1nwlp6asXwUYOCrWgFZ5G5PwCTN19gCo1YV4OsyhzL3S/YMlEwsm9OwmpDc E5F8/fB5VQFA6Q== -----END CERTIFICATE-----Generated at Mon Dec 29 16:14:00 2025 by rpki-client