This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft File: P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json) Hash identifier: vOpIOkTDPt61W4Qiw5/BeLmaK+643J43Ugx+9TaA18U= Subject key identifier: E6:0B:DF:7D:0D:71:91:88:86:33:96:C7:D0:1E:6F:6D:89:70:2F:E0 Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F Certificate issuer: /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f Certificate serial: 019B4EBBC964C44CE9FDAD85E35243FDE876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft Manifest number: 02C7 Signing time: Wed 24 Dec 2025 05:01:28 +0000 Manifest this update: Wed 24 Dec 2025 05:01:28 +0000 Manifest next update: Thu 25 Dec 2025 05:01:28 +0000 Files and hashes: 1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: j1EVxKeabe1yOWuRkQZGo+ChxiJIhZ8oGxRsYJVsWKk=) 2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:c9:64:c4:4c:e9:fd:ad:85:e3:52:43:fd:e8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f Validity Not Before: Dec 24 05:01:28 2025 GMT Not After : Dec 25 05:01:28 2025 GMT Subject: CN=e60bdf7d0d719188863396c7d01e6f6d89702fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:35:89:5a:9e:f4:57:4f:88:d0:a2:89:40:5c: f7:87:a0:84:1f:e1:42:37:e7:4e:b1:d9:1b:a4:36: a0:e9:2d:f3:cd:aa:c8:89:f5:a3:d5:19:9e:a5:1d: e1:dd:9d:97:3b:86:9f:d6:d9:8b:7f:03:06:1d:71: ba:13:40:e3:9b:a6:21:e1:16:8a:01:be:fd:8b:09: b3:79:c1:83:2f:1c:5c:57:0e:2b:9a:0b:77:b1:39: 7a:fc:e8:3f:bd:ae:2f:41:70:45:ae:f2:f4:b5:1d: e3:0d:ba:f2:74:45:da:af:ba:66:d1:56:18:0b:4f: 99:97:0c:ec:15:2a:c4:d1:29:79:1d:27:5d:a4:78: 4e:9c:24:d9:e4:9e:d8:41:8a:e0:3a:4b:e8:d1:b6: 51:17:03:0b:a9:18:27:30:81:51:fb:82:18:d7:8e: ee:5b:6d:b7:38:53:0d:73:36:bb:34:7c:b9:d7:f3: 2f:33:ae:c6:58:3b:0f:67:ce:49:19:a5:9d:18:c0: 4d:1e:4c:63:3a:6f:92:b1:aa:e4:22:22:74:f8:23: a2:e8:fe:43:04:8f:fc:5b:f5:31:56:3a:87:57:2e: 75:10:b8:50:62:5e:79:04:ff:73:b0:be:65:c7:a6: ba:bb:dd:49:35:e2:c6:a4:ef:3b:7b:9c:b6:5e:24: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0B:DF:7D:0D:71:91:88:86:33:96:C7:D0:1E:6F:6D:89:70:2F:E0 X509v3 Authority Key Identifier: keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:50:5c:14:05:36:56:3a:ff:a0:49:f3:da:54:19:45:00:19: 70:3b:10:a3:db:e8:17:ed:9a:27:93:f2:70:b0:3e:9f:ea:63: 57:56:fe:71:f8:d0:88:2d:a1:d4:5b:6a:fe:42:9a:de:e1:97: 73:02:1c:54:24:36:9d:bb:87:51:e3:24:4f:ad:f7:bb:1b:a6: 3e:7c:29:2c:57:af:f7:fc:f8:75:01:13:88:e0:cd:9c:82:62: ef:14:04:43:1c:49:4b:c8:b4:4f:55:04:53:d1:55:79:99:83: 2b:12:96:08:65:8e:26:85:17:e7:ee:3d:09:bd:00:3a:f9:be: 26:ba:1e:ab:ba:96:45:6c:52:87:78:06:a3:1c:25:f1:17:60: af:0c:b0:05:81:f4:9f:a2:d3:34:b9:ba:dc:96:7b:56:da:93: 58:ed:7f:cc:a8:13:e5:1f:49:80:81:98:61:d2:03:e7:49:9a: 4e:c0:33:27:c2:8f:1d:3a:7a:fc:bb:5f:d2:42:4d:51:55:7d: e2:28:ee:43:2f:94:55:e1:48:0e:ee:59:26:6b:d7:61:38:dc: 98:51:1e:93:b2:be:0a:d9:cf:71:3c:b5:9e:4a:c8:a2:94:3e: c1:a7:01:0f:fe:c4:84:47:24:25:43:f4:fa:4c:f2:6d:be:99: fd:47:40:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu8lkxEzp/a2F41JD/eh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYjc4Y2QxYTMxMGM5OWQ2Mzc3MTQwZTUyOGFhM2U2ZTBk Y2FiOWYwHhcNMjUxMjI0MDUwMTI4WhcNMjUxMjI1MDUwMTI4WjAzMTEwLwYDVQQD EyhlNjBiZGY3ZDBkNzE5MTg4ODYzMzk2YzdkMDFlNmY2ZDg5NzAyZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DWJWp70V0+I0KKJQFz3h6CEH+FC N+dOsdkbpDag6S3zzarIifWj1RmepR3h3Z2XO4af1tmLfwMGHXG6E0Djm6Yh4RaK Ab79iwmzecGDLxxcVw4rmgt3sTl6/Og/va4vQXBFrvL0tR3jDbrydEXar7pm0VYY C0+ZlwzsFSrE0Sl5HSddpHhOnCTZ5J7YQYrgOkvo0bZRFwMLqRgnMIFR+4IY147u W223OFMNcza7NHy51/MvM67GWDsPZ85JGaWdGMBNHkxjOm+SsarkIiJ0+COi6P5D BI/8W/UxVjqHVy51ELhQYl55BP9zsL5lx6a6u91JNeLGpO87e5y2XiQVAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYL330NcZGIhjOWx9Aeb22JcC/gMB8GA1UdIwQY MBaAFD+3jNGjEMmdY3cUDlKKo+bg3KufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzct YzU4MTUxMThlNTJmLzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzctYzU4MTUxMThlNTJm LzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFBcFAU2 Vjr/oEnz2lQZRQAZcDsQo9voF+2aJ5PycLA+n+pjV1b+cfjQiC2h1Ftq/kKa3uGX cwIcVCQ2nbuHUeMkT633uxumPnwpLFev9/z4dQETiODNnIJi7xQEQxxJS8i0T1UE U9FVeZmDKxKWCGWOJoUX5+49Cb0AOvm+Jroeq7qWRWxSh3gGoxwl8RdgrwywBYH0 n6LTNLm63JZ7VtqTWO1/zKgT5R9JgIGYYdID50maTsAzJ8KPHTp6/Ltf0kJNUVV9 4ijuQy+UVeFIDu5ZJmvXYTjcmFEek7K+CtnPcTy1nkrIopQ+wacBD/7EhEckJUP0 +kzybb6Z/UdABg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:35:56 2025 by rpki-client