This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json) Hash identifier: nuzWLROvxz/AQiamhWWdoXqjXgaG0gfKkTxnh67ElrU= Subject key identifier: 6A:66:53:65:03:3D:39:6E:63:AD:12:75:3D:F1:CF:81:74:C9:74:86 Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2 Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2 Certificate serial: 019B65E82945FBD2171B25D59BFFE0901047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft Manifest number: 0378 Signing time: Sun 28 Dec 2025 17:01:12 +0000 Manifest this update: Sun 28 Dec 2025 17:01:12 +0000 Manifest next update: Mon 29 Dec 2025 17:01:12 +0000 Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=) 2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: Q1/udFc1lLxeEYWoqoK6FTnGRmkwoT1Z0Dp4y8DNue4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:29:45:fb:d2:17:1b:25:d5:9b:ff:e0:90:10:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2 Validity Not Before: Dec 28 17:01:12 2025 GMT Not After : Dec 29 17:01:12 2025 GMT Subject: CN=6a665365033d396e63ad12753df1cf8174c97486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0d:9f:86:ea:97:81:2c:f1:50:d1:19:e7:6b: 42:91:64:25:1e:dd:94:bb:25:07:d8:82:4b:96:b6: 77:90:d2:c3:76:bf:f8:58:74:de:2f:bd:fe:2c:57: 56:cc:85:9d:a2:aa:d1:a9:54:3b:9f:87:f2:a8:80: e5:54:b0:94:43:b6:48:b8:84:97:7f:bb:9d:b8:09: b3:ab:88:f0:ab:26:ee:75:1d:e0:d5:c6:b2:5c:ea: 03:df:42:fb:63:25:8b:fd:1c:44:82:be:e2:70:06: 30:b8:6a:ee:f6:9e:8a:98:05:27:42:b0:32:9b:b8: 02:c3:13:28:58:36:be:e3:d9:d7:25:ae:d6:9f:79: 15:92:88:aa:42:f4:76:ac:fc:1e:a1:5d:7c:d2:f1: c1:e0:4f:f6:10:a0:c7:20:19:e8:f2:fc:3b:03:da: 81:fb:aa:08:40:b0:27:d9:83:fb:a4:b7:72:77:fb: 6d:c6:3f:8e:41:a2:10:5a:a7:3e:53:55:22:f4:92: 59:30:ff:f5:ee:a6:a3:e8:f8:d4:71:5f:47:c6:73: 16:00:15:50:90:99:9c:fe:60:d1:10:5f:6d:b1:5c: 44:b4:c3:03:90:20:c5:aa:d8:86:fc:dd:23:af:a0: 9b:16:50:75:94:8b:8f:1a:96:c5:a3:6a:2a:cf:04: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:66:53:65:03:3D:39:6E:63:AD:12:75:3D:F1:CF:81:74:C9:74:86 X509v3 Authority Key Identifier: keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:58:84:10:22:7d:46:a9:1e:48:84:a2:88:ba:2a:83:07:33: 9e:c5:99:77:cb:bd:20:30:62:9b:c8:dc:2b:a0:a7:e0:1b:43: aa:b7:bf:16:76:f0:ee:c9:4c:b0:71:57:7f:ca:0a:24:16:b1: 18:4e:9e:04:ec:df:88:b4:3d:85:f8:64:bf:cd:16:04:f6:d7: af:d8:66:36:bc:de:29:a7:fd:b6:33:92:bc:08:5a:9b:bd:69: a2:32:5e:09:76:5b:f3:99:06:64:1f:ec:a1:82:12:d6:19:75: be:fd:b4:fb:22:eb:04:8f:3e:f7:99:f7:53:f8:b5:20:4e:6d: 93:64:63:bc:32:d5:b3:b0:dd:94:09:1d:f2:c5:cb:92:2d:ae: ff:61:7d:56:54:a9:b0:a7:4e:34:e6:14:fc:cb:d1:58:f5:5c: ab:7f:5b:4d:5c:40:e4:63:45:2b:7b:d3:72:82:ba:c8:12:2b: 3d:7f:01:d7:fd:cd:4e:47:3c:2b:d7:28:3b:95:3b:af:91:0f: 1b:9f:9e:ae:24:a7:9a:6d:ad:1e:c8:d2:99:d8:56:51:25:d0: bb:49:bb:65:56:89:cd:59:b2:7d:d4:a9:eb:f9:dd:1f:57:13: 1a:4e:08:0c:83:3e:01:cb:ba:0f:ff:bd:30:68:15:39:bd:90: 0b:b6:a6:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6ClF+9IXGyXVm//gkBBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjE5NWI2NTEyZWM4Nzg3ZDk5YTFiMmU0ZWJkODA4ODRm OTgwYjIwHhcNMjUxMjI4MTcwMTEyWhcNMjUxMjI5MTcwMTEyWjAzMTEwLwYDVQQD Eyg2YTY2NTM2NTAzM2QzOTZlNjNhZDEyNzUzZGYxY2Y4MTc0Yzk3NDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A2fhuqXgSzxUNEZ52tCkWQlHt2U uyUH2IJLlrZ3kNLDdr/4WHTeL73+LFdWzIWdoqrRqVQ7n4fyqIDlVLCUQ7ZIuISX f7uduAmzq4jwqybudR3g1cayXOoD30L7YyWL/RxEgr7icAYwuGru9p6KmAUnQrAy m7gCwxMoWDa+49nXJa7Wn3kVkoiqQvR2rPweoV180vHB4E/2EKDHIBno8vw7A9qB +6oIQLAn2YP7pLdyd/ttxj+OQaIQWqc+U1Ui9JJZMP/17qaj6PjUcV9HxnMWABVQ kJmc/mDREF9tsVxEtMMDkCDFqtiG/N0jr6CbFlB1lIuPGpbFo2oqzwQgJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpmU2UDPTluY60SdT3xz4F0yXSGMB8GA1UdIwQY MBaAFLexlbZRLsh4fZmhsuTr2AiE+YCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mY2ZkMjctMTRjOC00ODQ0LTlmZmYt YjM4ODExMGEzMDc4LzEvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9mY2ZkMjctMTRjOC00ODQ0LTlmZmYtYjM4ODExMGEzMDc4 LzEvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdViEECJ9 RqkeSISiiLoqgwcznsWZd8u9IDBim8jcK6Cn4BtDqre/Fnbw7slMsHFXf8oKJBax GE6eBOzfiLQ9hfhkv80WBPbXr9hmNrzeKaf9tjOSvAham71pojJeCXZb85kGZB/s oYIS1hl1vv20+yLrBI8+95n3U/i1IE5tk2RjvDLVs7DdlAkd8sXLki2u/2F9VlSp sKdONOYU/MvRWPVcq39bTVxA5GNFK3vTcoK6yBIrPX8B1/3NTkc8K9coO5U7r5EP G5+eriSnmm2tHsjSmdhWUSXQu0m7ZVaJzVmyfdSp6/ndH1cTGk4IDIM+Acu6D/+9 MGgVOb2QC7amCw== -----END CERTIFICATE-----Generated at Sun Dec 28 18:53:39 2025 by rpki-client