This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json) Hash identifier: 6GvijXGBtvQI4AAYD2JaNUSvIotckWo5gVblahGTh0A= Subject key identifier: 9C:A6:CF:F3:98:0C:B4:B7:DC:47:B6:BA:5A:99:4E:32:E3:9B:9E:7F Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43 Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043 Certificate serial: 019B3CB512271CAA2F28070E32AE8A4635A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft Manifest number: 0E0C Signing time: Sat 20 Dec 2025 17:00:58 +0000 Manifest this update: Sat 20 Dec 2025 17:00:58 +0000 Manifest next update: Sun 21 Dec 2025 17:00:58 +0000 Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: vVeyjyKYJZhmane1qHPEThCqO0rqZtuWkVOmMcHTMGs=) 2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:12:27:1c:aa:2f:28:07:0e:32:ae:8a:46:35:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043 Validity Not Before: Dec 20 17:00:58 2025 GMT Not After : Dec 21 17:00:58 2025 GMT Subject: CN=9ca6cff3980cb4b7dc47b6ba5a994e32e39b9e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:14:de:e8:7a:08:44:28:09:80:7c:a8:31: 9a:13:12:87:43:cd:a2:f7:11:ec:f2:f2:e4:b3:af: 2a:bd:38:33:1f:28:a3:8f:c4:c9:0f:47:0d:b0:2b: 2b:be:a2:6b:99:36:85:f4:54:03:87:ef:20:77:7a: 3e:b8:a7:bf:43:ff:42:e6:f7:2d:2f:ac:ca:18:aa: 1a:89:11:fe:f8:20:e6:08:8e:73:2c:8a:b8:1b:f2: 00:94:22:98:6b:51:29:7f:9f:69:7b:97:6d:0d:1b: d0:86:b3:88:f6:ba:44:cf:14:f4:dc:d2:a3:46:29: 51:ef:7d:25:97:41:b6:7a:99:24:81:ec:38:ab:fd: 25:ba:96:1e:f2:d1:57:6b:df:27:08:57:a0:bf:3b: b5:74:0f:53:13:ce:19:38:37:86:11:75:12:56:3c: 7c:d9:57:b0:47:1f:30:b9:ba:44:00:64:da:ba:53: 56:42:9b:5e:f0:b0:4b:83:26:dd:62:89:f3:9d:16: 92:0f:5b:70:9d:a9:70:1f:5f:d1:41:56:ac:97:ab: 09:8e:8f:89:d1:bc:44:b7:5f:09:66:c2:fe:7a:a1: db:c4:5c:c8:4f:d1:5c:7f:4c:51:29:9a:de:4f:9a: 4f:98:36:d2:e9:5c:fe:db:2a:b4:e2:23:f0:38:6a: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A6:CF:F3:98:0C:B4:B7:DC:47:B6:BA:5A:99:4E:32:E3:9B:9E:7F X509v3 Authority Key Identifier: keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f5:48:e1:bb:6e:2e:3c:f9:56:fc:f3:08:4d:41:93:02:fb: 2d:77:b0:5c:1f:e1:0a:87:fe:2f:c4:35:97:55:b6:8c:2c:c1: 17:d9:89:95:c4:f6:51:f7:16:6d:63:d5:2f:42:4a:75:d1:e0: b3:53:db:d6:05:7a:93:58:7f:ef:24:97:f5:fe:0f:5d:ee:9a: 08:bb:df:8d:b1:8c:b8:22:f6:bb:bd:68:d9:86:23:f4:89:94: cf:85:83:f6:b1:45:a5:2c:43:cc:e1:20:5d:86:ce:32:45:4c: 78:fc:a1:71:e0:66:dd:0a:fa:99:3b:d5:1b:9c:13:03:68:85: a3:a1:0b:7b:95:9f:1a:1c:e6:19:22:a4:a7:90:c0:c1:14:d0: cc:96:70:b7:9b:ad:e1:ad:0d:3c:d4:02:26:85:ce:95:a5:02: e8:5c:4d:c3:7d:15:c6:81:43:43:eb:fb:0e:1d:d3:f9:ae:49: e5:dd:33:81:6b:62:a3:1a:9c:69:bf:75:6b:d4:0d:8b:e8:da: b8:9b:96:ff:97:34:31:f2:79:e4:88:24:02:3c:14:d4:94:0b: 72:87:7a:2e:b7:b5:14:54:42:15:f0:17:1b:57:e6:22:21:74: da:6a:46:8e:fd:67:b9:00:cd:1e:c3:56:a9:cb:2e:9c:63:8b: 8f:dd:d5:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRInHKovKAcOMq6KRjWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YjgwZDVmNGE5YzkyZGQ5MmE0NjA1NzE5ZTBhZThkMWE2 MmMwNDMwHhcNMjUxMjIwMTcwMDU4WhcNMjUxMjIxMTcwMDU4WjAzMTEwLwYDVQQD Eyg5Y2E2Y2ZmMzk4MGNiNGI3ZGM0N2I2YmE1YTk5NGUzMmUzOWI5ZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlngU3uh6CEQoCYB8qDGaExKHQ82i 9xHs8vLks68qvTgzHyijj8TJD0cNsCsrvqJrmTaF9FQDh+8gd3o+uKe/Q/9C5vct L6zKGKoaiRH++CDmCI5zLIq4G/IAlCKYa1Epf59pe5dtDRvQhrOI9rpEzxT03NKj RilR730ll0G2epkkgew4q/0lupYe8tFXa98nCFegvzu1dA9TE84ZODeGEXUSVjx8 2VewRx8wubpEAGTaulNWQpte8LBLgybdYonznRaSD1twnalwH1/RQVasl6sJjo+J 0bxEt18JZsL+eqHbxFzIT9Fcf0xRKZreT5pPmDbS6Vz+2yq04iPwOGodlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJymz/OYDLS33Ee2ulqZTjLjm55/MB8GA1UdIwQY MBaAFAe4DV9KnJLdkqRgVxngro0aYsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUt YTI2NWYzODA5M2EwLzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUtYTI2NWYzODA5M2Ew LzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPVI4btu Ljz5VvzzCE1BkwL7LXewXB/hCof+L8Q1l1W2jCzBF9mJlcT2UfcWbWPVL0JKddHg s1Pb1gV6k1h/7ySX9f4PXe6aCLvfjbGMuCL2u71o2YYj9ImUz4WD9rFFpSxDzOEg XYbOMkVMePyhceBm3Qr6mTvVG5wTA2iFo6ELe5WfGhzmGSKkp5DAwRTQzJZwt5ut 4a0NPNQCJoXOlaUC6FxNw30VxoFDQ+v7Dh3T+a5J5d0zgWtioxqcab91a9QNi+ja uJuW/5c0MfJ55IgkAjwU1JQLcod6Lre1FFRCFfAXG1fmIiF02mpGjv1nuQDNHsNW qcsunGOLj93V8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:23 2025 by rpki-client