This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json) Hash identifier: k9df8r0+NWIe/2xAMSb9rihKVpaqsa0AodtUhkMbKPo= Subject key identifier: 55:86:DD:B2:EB:F1:79:CB:17:0F:45:5C:BB:86:EB:E1:BA:FD:8C:D2 Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Certificate serial: 019B451377CF4BFB500322C347E21F45F6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft Manifest number: 0C88 Signing time: Mon 22 Dec 2025 08:01:02 +0000 Manifest this update: Mon 22 Dec 2025 08:01:02 +0000 Manifest next update: Tue 23 Dec 2025 08:01:02 +0000 Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=) 2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=) 3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=) 4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: oEeigXqcg+7WPyDfkdZgSmG0HWFINwjqjA7RmREe/Hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:77:cf:4b:fb:50:03:22:c3:47:e2:1f:45:f6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Validity Not Before: Dec 22 08:01:02 2025 GMT Not After : Dec 23 08:01:02 2025 GMT Subject: CN=5586ddb2ebf179cb170f455cbb86ebe1bafd8cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:85:5c:c0:cd:44:53:f8:92:3b:f5:7c:56:04: 1e:90:0e:89:a5:99:16:af:29:03:f2:b7:92:1c:1e: 6a:f2:c7:40:a5:05:25:48:c1:84:95:36:b9:42:7e: ef:d8:5b:25:83:7a:06:ff:69:e8:ac:8d:df:fb:d7: f3:f6:18:f9:41:d7:9e:c7:c6:22:6e:1b:26:d5:3b: 0d:62:29:06:ee:05:44:52:c8:79:92:b6:f1:9c:49: ea:db:c8:1f:ba:c3:61:44:81:6d:f4:e6:90:35:46: 97:a4:d3:1e:10:74:df:94:31:1a:34:93:68:25:7a: 12:d8:f9:5a:24:6f:b3:b0:3a:a9:35:54:1f:9d:d6: 82:ab:e4:ea:87:6f:24:e2:da:b9:54:75:84:78:d1: 61:54:25:db:d2:98:cf:ee:1f:e5:44:65:a3:5b:99: 4d:6a:6c:d1:8f:05:bd:5e:e1:30:85:0d:da:a8:f5: 3d:e4:62:e4:7b:33:7e:c8:1a:72:fb:e4:93:c7:d6: 36:82:22:1a:37:86:0d:1f:e2:40:c6:52:87:af:1e: ab:16:7d:8e:e7:e2:2e:40:61:50:02:65:7c:c0:9f: 89:c6:ed:84:16:6f:61:cc:9f:c4:fe:15:41:1d:1e: 7b:f0:2b:68:de:9f:7d:d6:ce:55:c2:be:b7:35:7e: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:86:DD:B2:EB:F1:79:CB:17:0F:45:5C:BB:86:EB:E1:BA:FD:8C:D2 X509v3 Authority Key Identifier: keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:03:e4:d9:07:d2:39:b2:d4:f3:3e:21:43:36:b2:ce:02:be: 1b:a8:b3:88:eb:54:3d:38:42:b4:4e:0f:4c:e5:ad:69:a0:7e: 48:85:49:77:7f:3e:2f:b8:46:59:c4:41:44:27:98:ed:0f:dc: db:88:b1:b5:ed:23:18:81:c1:85:6a:c0:ae:19:57:b7:62:5f: df:3d:bf:31:d9:4d:a6:22:94:14:2e:89:f2:72:b0:eb:89:65: dc:2a:22:a0:04:48:7b:5c:37:eb:05:e9:ad:ce:83:17:d2:b4: 83:07:57:14:a0:b6:6e:eb:74:44:f0:e1:d7:f1:77:f7:2b:f1: b9:95:74:b0:8a:98:42:d8:b7:a4:e9:e8:98:00:81:d3:ff:d0: 1c:06:a9:bb:fa:ce:55:cd:94:0d:81:2f:e2:80:96:92:59:a4: 6e:04:99:d4:07:ee:19:5c:aa:e9:0e:6b:7b:84:78:e0:f0:7e: b7:4a:86:bc:8f:f2:57:81:73:81:39:61:e2:42:93:79:15:60: f2:d4:cf:f1:83:88:13:cc:36:26:ea:90:e9:89:5e:77:31:a8: b8:03:3e:e7:03:68:ea:92:70:5f:5c:0e:19:50:01:03:c6:5b: 9e:ed:e2:b5:c4:8c:20:3c:64:4a:9e:8f:3a:29:52:5d:32:9b: 40:ea:a9:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE3fPS/tQAyLDR+IfRfasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0 YzA5MzQwHhcNMjUxMjIyMDgwMTAyWhcNMjUxMjIzMDgwMTAyWjAzMTEwLwYDVQQD Eyg1NTg2ZGRiMmViZjE3OWNiMTcwZjQ1NWNiYjg2ZWJlMWJhZmQ4Y2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IVcwM1EU/iSO/V8VgQekA6JpZkW rykD8reSHB5q8sdApQUlSMGElTa5Qn7v2Fslg3oG/2norI3f+9fz9hj5Qdeex8Yi bhsm1TsNYikG7gVEUsh5krbxnEnq28gfusNhRIFt9OaQNUaXpNMeEHTflDEaNJNo JXoS2PlaJG+zsDqpNVQfndaCq+Tqh28k4tq5VHWEeNFhVCXb0pjP7h/lRGWjW5lN amzRjwW9XuEwhQ3aqPU95GLkezN+yBpy++STx9Y2giIaN4YNH+JAxlKHrx6rFn2O 5+IuQGFQAmV8wJ+Jxu2EFm9hzJ/E/hVBHR578Cto3p991s5Vwr63NX4VMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWG3bLr8XnLFw9FXLuG6+G6/YzSMB8GA1UdIwQY MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt MDRkYmM5YWMxNDQ0LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0 LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAPk2QfS ObLU8z4hQzayzgK+G6iziOtUPThCtE4PTOWtaaB+SIVJd38+L7hGWcRBRCeY7Q/c 24ixte0jGIHBhWrArhlXt2Jf3z2/MdlNpiKUFC6J8nKw64ll3CoioARIe1w36wXp rc6DF9K0gwdXFKC2but0RPDh1/F39yvxuZV0sIqYQti3pOnomACB0//QHAapu/rO Vc2UDYEv4oCWklmkbgSZ1AfuGVyq6Q5re4R44PB+t0qGvI/yV4FzgTlh4kKTeRVg 8tTP8YOIE8w2JuqQ6YledzGouAM+5wNo6pJwX1wOGVABA8Zbnu3itcSMIDxkSp6P OilSXTKbQOqpTQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:33:58 2025 by rpki-client