This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json) Hash identifier: t7v251AwVrBcRXYzEPVFUfTqzRBSnzhatBfYYjMw+o4= Subject key identifier: B5:32:AF:9D:6C:66:6A:BC:79:8B:F9:7A:C1:77:D4:27:61:17:93:FF Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Certificate serial: 019B46CA7D7AEADDE6EA1732E9FFF4397854 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 16:00:33 +0000 Manifest this update: Mon 22 Dec 2025 16:00:33 +0000 Manifest next update: Tue 23 Dec 2025 16:00:33 +0000 Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: Mfc4abwWeZfm3+6VcIdFCdtvJE9wcQrKXa+b9lv+vsw=) 2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:7d:7a:ea:dd:e6:ea:17:32:e9:ff:f4:39:78:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Validity Not Before: Dec 22 16:00:33 2025 GMT Not After : Dec 23 16:00:33 2025 GMT Subject: CN=b532af9d6c666abc798bf97ac177d427611793ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:c9:8f:8b:db:79:98:67:75:d9:80:47:cf: 4c:2d:ed:68:48:19:ec:c5:00:56:47:06:8e:77:1d: f4:39:b2:b4:03:34:33:5a:24:65:7f:95:16:4f:a1: e0:6e:c0:4b:9c:83:51:a3:46:ce:a0:a0:f2:27:18: be:74:f3:51:72:6d:cc:88:c7:d5:e1:40:67:75:f5: b3:e7:82:85:d2:43:20:9b:4c:f6:ad:ff:1b:4f:2b: 06:1e:aa:46:77:00:5d:39:f3:3c:9c:4a:2e:1c:98: 69:60:70:01:29:44:c8:1b:84:bb:8f:ab:af:a7:ec: 6a:1c:2d:35:c7:a3:92:6f:c2:b4:40:1e:a3:e5:1b: fb:43:05:45:0f:95:94:8f:7c:e6:a9:44:6a:6e:14: 37:13:39:22:a4:2e:1d:71:82:db:bb:00:ce:14:5b: 7e:c4:0d:be:be:96:3c:d9:84:26:db:e3:bd:6d:aa: 5f:e8:ac:fd:4e:66:76:fc:a2:ac:b2:df:ef:9d:ed: 96:48:4a:71:d5:b8:d7:e0:cf:96:74:16:fa:d9:81: 83:55:3d:c6:d0:54:42:22:19:54:c1:33:aa:e4:8a: f8:4b:45:f3:85:a7:8d:bb:31:13:91:73:9d:ba:00: a6:b7:31:f7:ee:3d:ea:c1:64:99:23:08:2f:79:76: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:32:AF:9D:6C:66:6A:BC:79:8B:F9:7A:C1:77:D4:27:61:17:93:FF X509v3 Authority Key Identifier: keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:16:06:82:89:a2:93:ad:e6:b6:1b:33:76:60:3b:77:a2:38: 31:11:e6:bd:9f:35:30:c8:61:1c:e2:08:6e:74:bf:df:9c:a6: ed:cb:f9:5a:3b:e0:58:76:15:85:c6:5f:5b:33:be:eb:3d:57: ec:d1:60:14:74:60:11:78:82:74:5b:8c:55:f2:f0:83:a7:bc: 34:33:c2:57:c7:66:4d:e4:53:e8:a2:fc:b5:e6:22:a4:88:70: d1:b9:7f:84:86:7c:cd:43:8c:89:af:7f:7e:9f:20:3e:75:c4: 3f:64:86:4e:09:86:be:02:a8:df:b5:c3:ce:5a:9a:ee:5a:8a: 9e:cf:e3:b6:a7:78:a4:1d:c8:64:62:d3:e1:e9:a7:58:68:f1: 76:db:58:16:51:bc:88:3d:94:4c:18:6b:96:2e:a8:c9:cb:c3: 88:5c:11:50:72:71:dc:65:eb:b3:a9:f8:90:ad:b4:21:85:3a: b5:64:b4:f1:a5:6b:2c:e6:69:f4:d0:83:84:9b:cb:e8:f4:d4: 06:5d:5e:1f:60:da:41:b4:ba:f8:10:9a:9d:f9:3b:ff:44:9a: 0b:7f:44:e8:97:bd:65:35:30:d1:ad:43:1d:32:df:c3:1e:ea: 33:3a:bf:df:7f:a0:84:c3:a9:21:d6:bb:0f:e8:9d:26:6d:a2: 76:a2:5c:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyn166t3m6hcy6f/0OXhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx MTAwYTMwHhcNMjUxMjIyMTYwMDMzWhcNMjUxMjIzMTYwMDMzWjAzMTEwLwYDVQQD EyhiNTMyYWY5ZDZjNjY2YWJjNzk4YmY5N2FjMTc3ZDQyNzYxMTc5M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjJj4vbeZhnddmAR89MLe1oSBns xQBWRwaOdx30ObK0AzQzWiRlf5UWT6HgbsBLnINRo0bOoKDyJxi+dPNRcm3MiMfV 4UBndfWz54KF0kMgm0z2rf8bTysGHqpGdwBdOfM8nEouHJhpYHABKUTIG4S7j6uv p+xqHC01x6OSb8K0QB6j5Rv7QwVFD5WUj3zmqURqbhQ3EzkipC4dcYLbuwDOFFt+ xA2+vpY82YQm2+O9bapf6Kz9TmZ2/KKsst/vne2WSEpx1bjX4M+WdBb62YGDVT3G 0FRCIhlUwTOq5Ir4S0XzhaeNuzETkXOdugCmtzH37j3qwWSZIwgveXZ2cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUyr51sZmq8eYv5esF31CdhF5P/MB8GA1UdIwQY MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhYGgomi k63mthszdmA7d6I4MRHmvZ81MMhhHOIIbnS/35ym7cv5WjvgWHYVhcZfWzO+6z1X 7NFgFHRgEXiCdFuMVfLwg6e8NDPCV8dmTeRT6KL8teYipIhw0bl/hIZ8zUOMia9/ fp8gPnXEP2SGTgmGvgKo37XDzlqa7lqKns/jtqd4pB3IZGLT4emnWGjxdttYFlG8 iD2UTBhrli6oycvDiFwRUHJx3GXrs6n4kK20IYU6tWS08aVrLOZp9NCDhJvL6PTU Bl1eH2DaQbS6+BCanfk7/0SaC39E6Je9ZTUw0a1DHTLfwx7qMzq/33+ghMOpIda7 D+idJm2idqJc/Q== -----END CERTIFICATE-----Generated at Mon Dec 22 17:50:51 2025 by rpki-client