This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json) Hash identifier: TnTA4AoxLBDtqljsguq9zWCvzcsPxwXt0C8QEtHbDAU= Subject key identifier: A0:0D:B6:4E:E0:4A:6C:07:CB:A1:DB:F7:FE:71:CC:CB:9B:16:59:FA Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9 Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9 Certificate serial: 019B601CA687CC922FFFBAE19A19AB1B689C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft Manifest number: 0E7F Signing time: Sat 27 Dec 2025 14:00:48 +0000 Manifest this update: Sat 27 Dec 2025 14:00:48 +0000 Manifest next update: Sun 28 Dec 2025 14:00:48 +0000 Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=) 2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=) 3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: dCNcEu/ieNrzjIF6TzAJGTxkc8qqXhJXZHF3l2M1g9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:a6:87:cc:92:2f:ff:ba:e1:9a:19:ab:1b:68:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9 Validity Not Before: Dec 27 14:00:48 2025 GMT Not After : Dec 28 14:00:48 2025 GMT Subject: CN=a00db64ee04a6c07cba1dbf7fe71cccb9b1659fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:4e:b3:0a:c6:f7:1b:8a:f1:08:17:f3:cb: c4:08:9f:d6:a6:8c:24:5f:bb:9b:b5:81:c8:78:de: ea:96:aa:f5:e9:56:60:67:cf:d3:a0:55:95:48:19: b9:ef:d7:c1:25:71:11:27:d1:f2:34:a6:69:b6:da: 9b:0c:c7:ad:8b:9f:b1:bb:d1:f5:21:f7:e8:bb:c8: aa:4b:df:00:1d:3c:f0:fd:df:79:29:fd:4b:95:de: dd:9c:11:d9:a8:36:a0:29:99:6c:52:57:11:9b:81: e0:c4:9d:ce:cf:56:5b:e6:a7:25:cf:02:a5:1e:a0: e2:a3:a3:de:3e:f1:ae:06:41:e3:c2:e2:06:e2:ab: 40:79:93:96:b5:37:5a:ed:14:f3:c5:ed:63:76:d0: 23:f1:ad:c1:5d:29:44:53:d6:63:3f:1b:5b:87:dd: ec:58:6c:5a:5c:32:fc:5b:7f:e5:77:e4:f9:42:0d: 0a:d4:3f:e5:f8:df:4f:78:f2:67:db:32:1b:b3:5f: 33:08:96:5d:22:7d:7c:d3:a9:c1:ad:f4:4a:89:a8: a1:1a:a1:37:bb:63:17:ab:2a:56:f4:ce:e9:f3:96: 42:7a:b1:6b:f8:da:74:a7:f3:6c:3b:a2:91:87:44: 72:64:0b:5c:7f:62:a9:c7:fa:dc:42:37:63:d3:5f: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0D:B6:4E:E0:4A:6C:07:CB:A1:DB:F7:FE:71:CC:CB:9B:16:59:FA X509v3 Authority Key Identifier: keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f5:45:70:13:f8:ff:e9:d3:8c:c4:88:4a:d2:a7:fa:a7:e1: 80:52:50:bd:32:0b:04:c3:79:38:f8:7e:be:93:01:19:d1:b9: 88:e9:40:6b:85:3f:d8:8d:ee:3e:27:34:c7:ef:62:04:a1:53: 2d:90:fc:d5:52:28:ad:aa:de:62:2d:7f:11:92:00:d7:16:2d: 45:26:d6:1c:c0:66:f9:98:7c:e7:57:d4:44:cd:ff:65:c0:31: 8b:73:cb:3a:29:8e:18:d0:6f:0e:91:3f:4b:da:c9:65:03:67: cf:0c:45:a2:16:f8:1a:3d:8f:7a:5e:df:b2:06:d7:0a:be:8a: ad:bc:0e:f6:f4:a7:74:02:e3:c6:06:ba:18:d4:5d:3c:79:f4: 68:74:98:b5:9a:65:a8:5a:4f:5d:af:0d:6f:92:3f:9a:9d:bc: 08:7b:cd:42:ad:9b:d7:de:3f:2d:6a:39:8c:02:cd:2b:31:ef: 1d:26:bd:c5:aa:f1:9a:9e:25:0d:0d:5a:1f:67:65:ff:27:2d: 47:9a:dc:a6:f2:41:ea:e3:6f:b0:94:40:f8:c7:fb:ad:b1:e4: 0e:bd:39:0d:b9:45:8c:10:42:4d:d4:a9:77:49:97:79:48:03: ce:9f:81:6a:02:ad:b9:ae:84:30:29:bf:f8:3d:78:dc:03:98: 6c:c1:5a:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHKaHzJIv/7rhmhmrG2icMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjQ3NGQwNTU3MWRmM2Q0NGY2M2NjYTIxYjQwYjZlMTJj MzkyZDkwHhcNMjUxMjI3MTQwMDQ4WhcNMjUxMjI4MTQwMDQ4WjAzMTEwLwYDVQQD EyhhMDBkYjY0ZWUwNGE2YzA3Y2JhMWRiZjdmZTcxY2NjYjliMTY1OWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYNOswrG9xuK8QgX88vECJ/Wpowk X7ubtYHIeN7qlqr16VZgZ8/ToFWVSBm579fBJXERJ9HyNKZpttqbDMeti5+xu9H1 Iffou8iqS98AHTzw/d95Kf1Lld7dnBHZqDagKZlsUlcRm4HgxJ3Oz1Zb5qclzwKl HqDio6PePvGuBkHjwuIG4qtAeZOWtTda7RTzxe1jdtAj8a3BXSlEU9ZjPxtbh93s WGxaXDL8W3/ld+T5Qg0K1D/l+N9PePJn2zIbs18zCJZdIn1806nBrfRKiaihGqE3 u2MXqypW9M7p85ZCerFr+Np0p/NsO6KRh0RyZAtcf2Kpx/rcQjdj018dKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKANtk7gSmwHy6Hb9/5xzMubFln6MB8GA1UdIwQY MBaAFJO0dNBVcd89RPY8yiG0C24Sw5LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEt MjA0OWY2YWJmZDlkLzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEtMjA0OWY2YWJmZDlk LzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfVFcBP4 /+nTjMSIStKn+qfhgFJQvTILBMN5OPh+vpMBGdG5iOlAa4U/2I3uPic0x+9iBKFT LZD81VIorareYi1/EZIA1xYtRSbWHMBm+Zh851fURM3/ZcAxi3PLOimOGNBvDpE/ S9rJZQNnzwxFohb4Gj2Pel7fsgbXCr6KrbwO9vSndALjxga6GNRdPHn0aHSYtZpl qFpPXa8Nb5I/mp28CHvNQq2b194/LWo5jALNKzHvHSa9xarxmp4lDQ1aH2dl/yct R5rcpvJB6uNvsJRA+Mf7rbHkDr05DblFjBBCTdSpd0mXeUgDzp+BagKtua6EMCm/ +D143AOYbMFahA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:41:16 2025 by rpki-client