This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json) Hash identifier: gvcwPy/HRCaHA1K+GQwBpjNbMltZD3qKyB6TW9jOvnI= Subject key identifier: 40:35:84:3B:CB:64:EC:9D:87:C0:35:59:D4:EB:0F:54:E8:31:B9:E7 Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269 Certificate serial: 019B3AFD9FE35C2797EDF8D48FF6F9DF0A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft Manifest number: B7 Signing time: Sat 20 Dec 2025 09:00:58 +0000 Manifest this update: Sat 20 Dec 2025 09:00:58 +0000 Manifest next update: Sun 21 Dec 2025 09:00:58 +0000 Files and hashes: 1: BTfaTJRkv38NK3OV8P41ApchwpU.roa (hash: YG+c62cfsP2iujTwoHOL3MZnp6ckxYppxq1JP02lQgk=) 2: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: nwRXWyd9bKmm78V+LqBwhjqP4Ak8Hclc6pGnt7OXPTM=) 3: MhT_ic0uhnvyZeHmGUuSvJeWPpk.roa (hash: wzWvYEFygdswmUnUlDOzRDuit/r9AHiuR6372yT7GYk=) 4: cB9xqUxjR_79aecOOGTzKVEOeHA.roa (hash: 9DUWHqOG8gb/DeXTd26wEcsU2zpp7UNCMb6aEl1X4eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:9f:e3:5c:27:97:ed:f8:d4:8f:f6:f9:df:0a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269 Validity Not Before: Dec 20 09:00:58 2025 GMT Not After : Dec 21 09:00:58 2025 GMT Subject: CN=4035843bcb64ec9d87c03559d4eb0f54e831b9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:57:06:9a:d1:8b:2b:43:c7:91:de:d4:3d: cb:84:07:7c:93:0a:ed:27:fe:31:9e:8f:f5:04:5e: 81:b4:9c:f8:33:fd:a6:d2:37:8e:ff:d2:9b:12:e2: eb:dc:09:f1:cd:87:b7:24:e5:5e:ae:21:a7:39:f7: 36:92:35:44:66:ae:9f:89:46:5c:aa:b4:b0:b7:a0: 5f:ae:03:39:cb:20:32:35:63:bc:78:d6:7b:9d:df: 52:6b:39:a7:89:f8:46:ed:14:d7:c4:54:44:3e:62: 4b:88:9c:36:87:c9:ae:91:1c:44:df:7f:ed:62:14: 3f:0d:d8:4f:3b:a1:da:e0:b6:44:69:dd:36:31:2b: 26:06:23:8a:27:d2:03:69:2b:c5:24:c9:c1:a4:04: f2:b4:74:f0:3a:e3:c0:a5:ad:cd:8a:b6:3e:ca:fd: 51:5b:e8:69:10:f4:3d:9c:15:6e:3f:e6:b6:ac:21: 74:7a:3f:ac:20:a4:81:6c:42:e5:0c:1d:fd:05:59: 27:99:d0:b3:24:ba:26:76:ee:11:b7:6b:d7:99:44: 62:a8:58:39:68:46:1a:ba:e9:68:67:3e:80:52:dd: cd:fe:b9:cb:0e:14:53:de:20:c7:a3:83:bb:2a:80: 5a:98:3d:aa:61:bc:bc:6d:b2:16:d1:ba:07:cf:b8: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:35:84:3B:CB:64:EC:9D:87:C0:35:59:D4:EB:0F:54:E8:31:B9:E7 X509v3 Authority Key Identifier: keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:94:2e:c2:8a:e5:77:ca:ef:e6:52:85:03:db:df:b4:bc:14: 3d:00:43:46:82:30:70:20:fb:4b:b0:f2:62:65:3a:89:4a:85: 22:52:6d:ba:63:64:94:94:d6:d9:3a:58:de:a3:c1:a9:24:f5: 1d:ae:a7:70:db:89:91:df:f5:aa:a0:86:cc:3a:48:0d:a2:d0: c1:5c:8d:17:59:b2:81:e7:95:bc:b8:4f:2b:d7:9a:27:9a:b6: 64:2c:dc:58:d3:aa:6a:9c:25:8b:68:9d:01:cc:ea:0c:5f:bd: 81:1f:2d:da:83:c4:5b:ab:b0:1b:d0:e8:25:17:a6:31:95:4c: 4c:b6:c8:93:04:29:24:9d:02:27:cd:6c:4e:de:fb:18:38:7a: c7:54:ec:e5:b9:86:6e:26:1b:97:91:e5:cd:c1:78:3f:cd:3d: f4:ef:6a:d0:34:88:fe:ae:d7:9f:d4:34:91:80:f8:e2:3a:14: e9:27:03:a2:85:2f:8d:a3:f9:17:e7:11:66:d6:b4:aa:42:40: 9e:a0:7c:7e:51:01:bb:96:43:92:8a:be:ea:2e:52:9d:f1:87: 26:62:b2:bf:0c:69:39:a8:c1:9d:50:84:42:d2:01:ed:96:58: 7f:33:2e:e0:f0:85:ae:06:5a:ed:3d:14:d1:03:bd:23:30:91: e1:04:57:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/Z/jXCeX7fjUj/b53wpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3 NzgyNjkwHhcNMjUxMjIwMDkwMDU4WhcNMjUxMjIxMDkwMDU4WjAzMTEwLwYDVQQD Eyg0MDM1ODQzYmNiNjRlYzlkODdjMDM1NTlkNGViMGY1NGU4MzFiOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRhXBprRiytDx5He1D3LhAd8kwrt J/4xno/1BF6BtJz4M/2m0jeO/9KbEuLr3AnxzYe3JOVeriGnOfc2kjVEZq6fiUZc qrSwt6BfrgM5yyAyNWO8eNZ7nd9SazmnifhG7RTXxFREPmJLiJw2h8mukRxE33/t YhQ/DdhPO6Ha4LZEad02MSsmBiOKJ9IDaSvFJMnBpATytHTwOuPApa3NirY+yv1R W+hpEPQ9nBVuP+a2rCF0ej+sIKSBbELlDB39BVknmdCzJLomdu4Rt2vXmURiqFg5 aEYauuloZz6AUt3N/rnLDhRT3iDHo4O7KoBamD2qYby8bbIW0boHz7gCHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA1hDvLZOydh8A1WdTrD1ToMbnnMB8GA1UdIwQY MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt YjMxZjI1MmYxOTY5LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5 LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5Quworl d8rv5lKFA9vftLwUPQBDRoIwcCD7S7DyYmU6iUqFIlJtumNklJTW2TpY3qPBqST1 Ha6ncNuJkd/1qqCGzDpIDaLQwVyNF1mygeeVvLhPK9eaJ5q2ZCzcWNOqapwli2id AczqDF+9gR8t2oPEW6uwG9DoJRemMZVMTLbIkwQpJJ0CJ81sTt77GDh6x1Ts5bmG biYbl5HlzcF4P8099O9q0DSI/q7Xn9Q0kYD44joU6ScDooUvjaP5F+cRZta0qkJA nqB8flEBu5ZDkoq+6i5SnfGHJmKyvwxpOajBnVCEQtIB7ZZYfzMu4PCFrgZa7T0U 0QO9IzCR4QRXaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:02:04 2025 by rpki-client