This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json) Hash identifier: LYhtDqMtdf72E0rvsBkQaDgEOrFFJDh/LUDC4gI+Mcs= Subject key identifier: 48:BD:AE:BC:5C:F0:8A:01:88:8A:D8:B6:9A:5B:66:FD:ED:E4:FF:73 Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9 Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9 Certificate serial: 019B5E2E7395D37F50C4D7B2C9CBE1D04EA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft Manifest number: 0E7E Signing time: Sat 27 Dec 2025 05:01:01 +0000 Manifest this update: Sat 27 Dec 2025 05:01:01 +0000 Manifest next update: Sun 28 Dec 2025 05:01:01 +0000 Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=) 2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=) 3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: wWYVLr4SBGgIyhDn8ukH4b1cXWEmjQcefyKBExB04+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:73:95:d3:7f:50:c4:d7:b2:c9:cb:e1:d0:4e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9 Validity Not Before: Dec 27 05:01:01 2025 GMT Not After : Dec 28 05:01:01 2025 GMT Subject: CN=48bdaebc5cf08a01888ad8b69a5b66fdede4ff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:2e:22:25:68:d0:39:08:1a:03:0e:4d:de: e8:d9:f9:61:15:f5:f4:16:c0:43:d0:49:3a:a0:54: bf:b0:11:5f:6a:54:5f:43:8c:e3:4d:86:19:3b:b4: df:95:86:7b:8a:43:ec:59:fb:82:e9:5a:07:b6:db: 76:54:c3:91:d6:fc:ba:00:b7:8e:da:66:82:34:52: 5b:8f:4e:e5:6b:e2:9c:13:60:13:0a:4b:33:4c:d1: 3e:b2:07:94:ec:83:18:b7:46:2f:7e:ed:bc:ef:9a: cd:f0:7d:cc:2d:44:34:4c:c7:3a:a5:4d:28:cd:96: f9:a9:62:19:fd:f0:a5:a1:69:b8:c9:2a:8c:bb:cc: 5e:e7:48:09:33:a5:dc:41:0c:b4:18:a2:f4:bb:91: 79:3e:5a:ac:6a:dd:3b:fc:17:ee:aa:bf:7e:68:5c: 87:f5:aa:06:c2:c3:ea:ad:65:ca:a0:9f:bb:bb:a3: 1a:43:b0:45:b4:7e:2f:23:60:7e:79:25:85:d7:f7: 73:67:74:c3:58:02:6b:49:02:4b:43:b6:89:81:66: 45:3e:2e:d8:fb:4f:37:db:f9:7f:de:a0:0c:5d:95: 10:6f:63:5f:2b:9f:1a:48:33:16:29:90:a0:79:46: 53:2d:e6:a8:a8:c5:cf:9b:47:0c:3c:46:ed:9a:56: 19:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BD:AE:BC:5C:F0:8A:01:88:8A:D8:B6:9A:5B:66:FD:ED:E4:FF:73 X509v3 Authority Key Identifier: keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:89:54:dd:43:33:7d:1e:f4:28:2d:fd:01:5f:ac:fd:a7:3e: 8c:46:4e:51:7b:e7:df:8d:89:3b:d1:41:f8:e5:c2:cc:6f:60: 12:f7:d7:ac:70:cc:db:34:d3:ca:0c:43:2d:4e:4e:88:39:5c: aa:92:d9:41:de:63:1b:8e:8f:bd:32:55:98:75:2a:c2:1b:2f: 2d:e4:db:68:4a:40:8e:04:d5:ff:48:f6:fe:e8:fc:ee:db:58: 6b:e4:68:7e:37:47:a8:de:b1:36:88:e2:51:2d:b1:de:8f:7b: f1:c0:21:6b:b0:75:b3:ea:12:a2:33:54:34:f3:b8:89:36:63: 76:ae:9f:d9:99:77:af:60:bf:bb:93:12:36:df:c4:a9:22:c2: d5:6a:00:c1:2a:c1:f4:72:7c:dc:4f:54:ad:3e:e9:b4:de:2c: 49:23:08:23:85:6f:d6:30:74:34:35:66:05:31:b9:04:44:31: 0a:a5:4b:67:85:ba:1b:2c:c5:f4:4b:56:1c:5b:94:cd:45:f4: 1d:70:56:6a:3a:e0:3f:58:0b:33:d9:0f:cf:09:c3:70:de:18: cf:9e:08:05:b3:6d:f5:74:5e:4f:54:78:fb:08:5f:9b:27:4d: 48:f0:26:8f:16:4f:4a:2e:19:c3:4c:c4:65:0c:19:78:0f:5e: a8:03:e7:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLnOV039QxNeyycvh0E6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjQ3NGQwNTU3MWRmM2Q0NGY2M2NjYTIxYjQwYjZlMTJj MzkyZDkwHhcNMjUxMjI3MDUwMTAxWhcNMjUxMjI4MDUwMTAxWjAzMTEwLwYDVQQD Eyg0OGJkYWViYzVjZjA4YTAxODg4YWQ4YjY5YTViNjZmZGVkZTRmZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY8uIiVo0DkIGgMOTd7o2flhFfX0 FsBD0Ek6oFS/sBFfalRfQ4zjTYYZO7TflYZ7ikPsWfuC6VoHttt2VMOR1vy6ALeO 2maCNFJbj07la+KcE2ATCkszTNE+sgeU7IMYt0Yvfu2875rN8H3MLUQ0TMc6pU0o zZb5qWIZ/fCloWm4ySqMu8xe50gJM6XcQQy0GKL0u5F5Plqsat07/Bfuqr9+aFyH 9aoGwsPqrWXKoJ+7u6MaQ7BFtH4vI2B+eSWF1/dzZ3TDWAJrSQJLQ7aJgWZFPi7Y +0832/l/3qAMXZUQb2NfK58aSDMWKZCgeUZTLeaoqMXPm0cMPEbtmlYZBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEi9rrxc8IoBiIrYtppbZv3t5P9zMB8GA1UdIwQY MBaAFJO0dNBVcd89RPY8yiG0C24Sw5LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEt MjA0OWY2YWJmZDlkLzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEtMjA0OWY2YWJmZDlk LzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANolU3UMz fR70KC39AV+s/ac+jEZOUXvn342JO9FB+OXCzG9gEvfXrHDM2zTTygxDLU5OiDlc qpLZQd5jG46PvTJVmHUqwhsvLeTbaEpAjgTV/0j2/uj87ttYa+RofjdHqN6xNoji US2x3o978cAha7B1s+oSojNUNPO4iTZjdq6f2Zl3r2C/u5MSNt/EqSLC1WoAwSrB 9HJ83E9UrT7ptN4sSSMII4Vv1jB0NDVmBTG5BEQxCqVLZ4W6GyzF9EtWHFuUzUX0 HXBWajrgP1gLM9kPzwnDcN4Yz54IBbNt9XReT1R4+whfmydNSPAmjxZPSi4Zw0zE ZQwZeA9eqAPnaw== -----END CERTIFICATE-----Generated at Sat Dec 27 10:48:52 2025 by rpki-client