This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json) Hash identifier: a+7+hfszNp1d5TsOvN2rtvqQu6SAFhaF44fZyvhOKfI= Subject key identifier: 7F:49:7B:42:61:74:70:C7:69:A5:12:7F:18:F1:7E:4E:95:1A:B9:46 Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5 Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5 Certificate serial: 019B46CB06541BD26D3390061F06816BD424 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 16:01:09 +0000 Manifest this update: Mon 22 Dec 2025 16:01:09 +0000 Manifest next update: Tue 23 Dec 2025 16:01:09 +0000 Files and hashes: 1: fq_1cNVhnRyKc2u6Tpi7nWrUD48.roa (hash: 03Y77SRPe3amrviIIQ+5UUog0n/DdIDUF4QQne3bPoA=) 2: joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa (hash: OCQinmVLB46q3fla3T34H+fTxVsr8er+6b+WYrx3pLU=) 3: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: BqnemCxdKonvS0zOEK0PltLZNMWGGyHmgRGBQDxK03k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:06:54:1b:d2:6d:33:90:06:1f:06:81:6b:d4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5 Validity Not Before: Dec 22 16:01:09 2025 GMT Not After : Dec 23 16:01:09 2025 GMT Subject: CN=7f497b42617470c769a5127f18f17e4e951ab946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:28:50:bf:25:8a:69:8a:61:db:72:de:c1: 5d:1b:5a:70:1f:1c:6f:1d:e7:d8:03:91:e9:67:81: fb:ff:2f:1e:b7:58:b5:7c:76:73:aa:1d:4e:f4:77: d6:6f:31:84:6f:15:88:22:9d:af:72:e1:90:e3:9b: 13:41:e5:b4:fb:f4:4e:47:e9:36:66:2a:41:a4:d2: 2c:3e:57:8f:78:cc:e7:57:27:cb:f0:9e:91:8f:1e: cf:33:55:f1:51:d6:2d:92:f3:40:8f:e3:f2:ca:88: 45:ca:6f:cd:31:af:ba:89:c9:41:3b:c4:28:3e:c4: 93:be:44:92:ca:87:bd:04:a4:32:9c:cd:7d:eb:90: 42:32:41:00:51:18:fc:85:85:fc:a1:08:be:bb:66: 8b:c7:12:c6:ec:1d:36:ce:7e:c8:83:54:1a:b1:a2: 91:d1:b7:96:29:6e:87:64:4c:19:48:09:85:c0:59: b9:06:d8:e6:de:98:44:40:44:07:f7:0b:7d:6f:f3: f7:75:86:99:1c:ac:f8:b4:17:30:32:b3:f9:ca:c2: fb:da:81:20:71:3e:da:48:72:7e:c1:71:d7:a8:60: 58:fe:00:a7:0a:55:00:54:89:fa:00:92:d7:2b:db: 20:a8:94:84:36:67:e2:9c:49:7e:f6:30:32:a6:5f: 00:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:49:7B:42:61:74:70:C7:69:A5:12:7F:18:F1:7E:4E:95:1A:B9:46 X509v3 Authority Key Identifier: keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:17:45:45:13:02:2e:75:29:1c:69:07:07:ee:2a:e3:49:64: e4:71:81:9f:c9:2d:81:95:1e:06:51:94:51:67:83:68:05:e0: 63:86:d8:c0:65:d1:dd:b4:8c:42:b3:12:e6:11:4a:7e:0b:de: 8a:21:0e:b3:64:00:e3:3d:9a:2f:75:df:09:2d:76:ad:df:76: 18:9d:52:e7:33:4a:ca:ff:07:a9:ab:56:91:b6:10:83:29:26: d2:9a:89:d2:fe:05:ca:80:2e:83:ec:44:b1:9c:28:de:38:88: 39:85:6d:78:9e:6f:c0:81:30:59:cb:7b:a4:98:07:44:77:77: 2a:27:e9:39:6a:bd:8e:3a:6a:bc:24:a6:87:1d:f3:cf:a7:5f: d0:1f:b5:d3:b8:da:1e:92:4b:bb:f4:4d:96:8f:40:13:df:34: 78:c6:ea:10:cb:d9:31:72:2d:e5:86:46:01:e1:23:36:bd:ba: a9:24:85:1b:f1:2a:67:bd:dc:14:3a:92:ca:b6:50:73:aa:46: cb:9d:d0:14:e7:31:6f:62:a9:fd:9e:6f:a6:ea:23:0c:fc:85: 23:a9:cd:bb:77:16:1e:3d:36:35:47:72:92:43:fe:05:5e:24: 7e:17:f7:40:3a:2f:c9:3e:86:fa:c2:e1:6f:8a:d3:d5:9a:95: b7:92:fb:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGywZUG9JtM5AGHwaBa9QkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx Njk4YjUwHhcNMjUxMjIyMTYwMTA5WhcNMjUxMjIzMTYwMTA5WjAzMTEwLwYDVQQD Eyg3ZjQ5N2I0MjYxNzQ3MGM3NjlhNTEyN2YxOGYxN2U0ZTk1MWFiOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNwoUL8limmKYdty3sFdG1pwHxxv HefYA5HpZ4H7/y8et1i1fHZzqh1O9HfWbzGEbxWIIp2vcuGQ45sTQeW0+/ROR+k2 ZipBpNIsPlePeMznVyfL8J6Rjx7PM1XxUdYtkvNAj+PyyohFym/NMa+6iclBO8Qo PsSTvkSSyoe9BKQynM1965BCMkEAURj8hYX8oQi+u2aLxxLG7B02zn7Ig1QasaKR 0beWKW6HZEwZSAmFwFm5Btjm3phEQEQH9wt9b/P3dYaZHKz4tBcwMrP5ysL72oEg cT7aSHJ+wXHXqGBY/gCnClUAVIn6AJLXK9sgqJSENmfinEl+9jAypl8A1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9Je0JhdHDHaaUSfxjxfk6VGrlGMB8GA1UdIwQY MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt ZGE4OWVkMmViNTVlLzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhdFRRMC LnUpHGkHB+4q40lk5HGBn8ktgZUeBlGUUWeDaAXgY4bYwGXR3bSMQrMS5hFKfgve iiEOs2QA4z2aL3XfCS12rd92GJ1S5zNKyv8HqatWkbYQgykm0pqJ0v4FyoAug+xE sZwo3jiIOYVteJ5vwIEwWct7pJgHRHd3KifpOWq9jjpqvCSmhx3zz6df0B+107ja HpJLu/RNlo9AE980eMbqEMvZMXIt5YZGAeEjNr26qSSFG/EqZ73cFDqSyrZQc6pG y53QFOcxb2Kp/Z5vpuojDPyFI6nNu3cWHj02NUdykkP+BV4kfhf3QDovyT6G+sLh b4rT1ZqVt5L7WA== -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:25 2025 by rpki-client