This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft File: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json) Hash identifier: n+hzHhGvAgyigjxHEqzdP7h+2YV9VONiCeQLBbF/z/8= Subject key identifier: DB:17:CB:31:43:B7:75:B6:F1:FD:E4:E3:75:7C:36:A4:AF:39:1E:9B Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23 Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23 Certificate serial: 019B37FC9D110357F1C040D0FBBC71BA4EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 19:01:00 +0000 Manifest this update: Fri 19 Dec 2025 19:01:00 +0000 Manifest next update: Sat 20 Dec 2025 19:01:00 +0000 Files and hashes: 1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: D8LoU0C1k4znZDHXdqAxQmhpQKWGax11E63nGZS4aYY=) 2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:9d:11:03:57:f1:c0:40:d0:fb:bc:71:ba:4e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23 Validity Not Before: Dec 19 19:01:00 2025 GMT Not After : Dec 20 19:01:00 2025 GMT Subject: CN=db17cb3143b775b6f1fde4e3757c36a4af391e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:12:98:68:0a:9f:11:43:44:14:5f:7d:90: fc:9c:67:b9:0a:3c:ac:3e:45:15:23:f3:8f:15:64: 13:88:1f:c4:93:df:f1:89:16:b9:c5:8f:ab:6b:3e: 3f:cc:c3:70:3b:35:48:a2:d7:63:5b:c1:54:34:77: a0:29:1f:6e:98:6f:14:33:5d:58:2c:c0:dc:0c:04: 69:ae:02:dd:32:b7:73:59:5b:1b:e0:d7:bd:1c:5c: 70:c6:f9:21:94:ab:86:96:23:2b:13:ab:eb:46:e6: bf:61:5a:2c:2d:e6:63:e7:92:86:41:26:bc:ef:8a: cb:3e:a9:4d:d0:92:5f:6f:15:89:8e:d7:9e:25:d8: 44:1f:a6:08:bc:c9:ef:69:ea:ad:93:0f:e0:57:b7: 5a:b8:be:9c:6c:47:81:10:99:57:13:d6:8d:01:cc: fc:17:fc:10:1c:85:b7:1b:96:13:8b:4d:d3:78:55: 24:cf:b1:67:9b:a3:fd:38:c2:d2:dc:f1:6a:d6:73: 86:cd:ff:04:57:9c:28:d0:4c:99:da:a0:7d:c7:00: ba:d6:5a:93:4c:c7:45:86:dd:fe:4f:bc:9f:ae:12: ce:d6:a3:28:01:86:33:2e:e1:c2:9c:f4:de:24:d9: f8:12:36:d4:16:fc:5a:b7:a5:54:23:93:e3:7a:83: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:17:CB:31:43:B7:75:B6:F1:FD:E4:E3:75:7C:36:A4:AF:39:1E:9B X509v3 Authority Key Identifier: keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f9:75:7e:45:67:e1:4a:c8:cb:58:69:5a:91:81:f6:61:11: cf:12:ca:be:63:fa:aa:81:f7:78:67:24:56:ed:59:ca:ad:3c: d9:a5:88:69:b2:57:11:e8:f8:3e:8d:cb:4a:3c:92:58:e6:cb: c8:61:7f:b2:26:e1:14:87:bd:1e:0d:19:6b:66:e1:42:e3:cd: b9:fa:67:ef:6d:58:e3:44:41:69:71:8e:68:94:03:d0:f4:79: f6:f5:6d:7f:90:3a:57:08:2a:c9:14:c7:3b:5a:e0:14:31:cb: 47:95:51:48:3c:81:59:ef:70:b6:ab:6f:6d:c8:cc:cb:20:6a: 64:8f:5e:6d:3b:ff:26:3b:52:9d:de:01:4c:20:71:eb:90:f4: 66:90:cf:3a:e1:9f:72:9b:11:1d:8c:76:82:54:7a:7d:2b:e8: bd:65:72:fa:32:b3:98:1d:71:f6:92:4b:9c:04:e3:bc:94:d1: b1:c4:b7:60:f2:45:89:36:92:66:ef:08:e3:69:2c:63:86:bb: 03:d7:00:29:53:2d:dc:0d:a2:68:a2:a2:4a:be:39:44:03:45: a8:fd:03:76:2a:79:92:67:bc:0f:c8:17:ad:0a:de:dc:5e:41: b6:da:a7:82:6a:ef:27:5c:8a:12:4e:17:37:66:f5:f8:11:d3: b6:8e:b6:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/J0RA1fxwEDQ+7xxuk74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlN2EyNjRkYmNjZDc1YWE4NmNkMzYxYzZkMzY2YmQ4OGM5 MGRhMjMwHhcNMjUxMjE5MTkwMTAwWhcNMjUxMjIwMTkwMTAwWjAzMTEwLwYDVQQD EyhkYjE3Y2IzMTQzYjc3NWI2ZjFmZGU0ZTM3NTdjMzZhNGFmMzkxZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8kSmGgKnxFDRBRffZD8nGe5Cjys PkUVI/OPFWQTiB/Ek9/xiRa5xY+raz4/zMNwOzVIotdjW8FUNHegKR9umG8UM11Y LMDcDARprgLdMrdzWVsb4Ne9HFxwxvkhlKuGliMrE6vrRua/YVosLeZj55KGQSa8 74rLPqlN0JJfbxWJjteeJdhEH6YIvMnvaeqtkw/gV7dauL6cbEeBEJlXE9aNAcz8 F/wQHIW3G5YTi03TeFUkz7Fnm6P9OMLS3PFq1nOGzf8EV5wo0EyZ2qB9xwC61lqT TMdFht3+T7yfrhLO1qMoAYYzLuHCnPTeJNn4EjbUFvxat6VUI5PjeoP4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsXyzFDt3W28f3k43V8NqSvOR6bMB8GA1UdIwQY MBaAFO56Jk28zXWqhs02HG02a9iMkNojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMt MzE3ZTgyMGRmY2RiLzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMtMzE3ZTgyMGRmY2Ri LzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPl1fkVn 4UrIy1hpWpGB9mERzxLKvmP6qoH3eGckVu1Zyq082aWIabJXEej4Po3LSjySWObL yGF/sibhFIe9Hg0Za2bhQuPNufpn721Y40RBaXGOaJQD0PR59vVtf5A6VwgqyRTH O1rgFDHLR5VRSDyBWe9wtqtvbcjMyyBqZI9ebTv/JjtSnd4BTCBx65D0ZpDPOuGf cpsRHYx2glR6fSvovWVy+jKzmB1x9pJLnATjvJTRscS3YPJFiTaSZu8I42ksY4a7 A9cAKVMt3A2iaKKiSr45RANFqP0Ddip5kme8D8gXrQre3F5BttqngmrvJ1yKEk4X N2b1+BHTto62rw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:38:39 2025 by rpki-client