This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json) Hash identifier: EEUw9bvJBDS4ZRCL0G3LNG+PSPszIM1xe9Q8Bd/gd7I= Subject key identifier: 2B:62:11:DC:5C:A8:C6:2F:79:3C:19:A6:2A:2F:D4:1B:46:9E:41:00 Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Certificate serial: 019B589A7B32FECC51C22B01013BC0D8A641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 03:01:17 +0000 Manifest this update: Fri 26 Dec 2025 03:01:17 +0000 Manifest next update: Sat 27 Dec 2025 03:01:17 +0000 Files and hashes: 1: 56nNsQD5fhmKgW9wsztaFH2HQR0.roa (hash: ELMB3ISOh5rAiJ3WjaKpUk69zbZHQWDxYkfbd0e3MbM=) 2: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: wfvh+fE+THx3An347Jg34o0HCSKLewxHJ03gtI2V70g=) 3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:9a:7b:32:fe:cc:51:c2:2b:01:01:3b:c0:d8:a6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Validity Not Before: Dec 26 03:01:17 2025 GMT Not After : Dec 27 03:01:17 2025 GMT Subject: CN=2b6211dc5ca8c62f793c19a62a2fd41b469e4100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:72:48:4d:4c:e0:68:01:ec:bd:a0:28:77: 85:7b:16:18:f0:c5:90:7d:82:b2:83:ab:0a:d8:5b: 2b:ad:fc:94:de:c4:ed:9c:15:f9:da:43:dc:e7:75: 2d:0e:6d:c3:27:aa:10:1b:f2:74:e5:3b:5e:07:10: b7:46:c3:17:98:a0:12:d2:18:83:3c:e5:f5:70:58: ba:75:ac:2d:98:40:69:ed:76:70:67:e1:6b:c2:41: c1:d3:e2:13:f8:cc:e7:c6:e9:1b:6c:8f:c5:79:18: fc:f5:21:9c:ee:0a:db:23:15:97:b4:e1:14:7f:eb: c6:46:db:4a:30:72:46:75:43:04:6e:0b:63:f4:a2: 98:04:41:c2:3f:1f:16:18:fd:7c:92:6b:12:9e:6c: 8b:12:ce:04:52:2f:fa:0c:e6:e0:77:08:be:13:8a: 93:ab:94:0e:68:6a:60:7d:1e:8c:51:60:bf:72:5a: 93:09:f6:14:f1:d0:2e:35:4e:27:3c:45:ce:2d:88: 18:5d:47:52:5a:17:e5:80:bc:8f:e2:47:61:d4:8d: fb:0c:b1:db:5a:f6:70:03:62:56:3a:01:36:8e:16: 4b:5d:4d:cd:7f:0a:80:f1:97:18:2e:75:48:c7:ca: 53:9c:f1:64:62:07:bc:b7:4d:ca:44:c3:1b:ad:0f: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:62:11:DC:5C:A8:C6:2F:79:3C:19:A6:2A:2F:D4:1B:46:9E:41:00 X509v3 Authority Key Identifier: keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:42:44:ae:35:8f:fc:34:2c:c0:93:31:d6:75:fb:6e:a7:f7: 04:83:d5:24:8d:d8:4c:b8:fa:c4:56:78:b2:36:04:7a:9f:3f: f4:5c:28:f6:75:2d:1a:5f:a5:ce:42:b3:7e:35:ac:d4:94:04: 6d:35:13:e1:58:06:bd:4d:2f:6f:42:31:32:88:b7:9e:e1:4b: 07:76:b9:26:cc:b7:cd:3b:13:ab:97:aa:e1:5e:8a:13:fd:b6: cc:70:d8:25:eb:e0:cf:9b:d0:0b:8d:2f:0f:af:b8:92:f8:21: 4c:dd:a0:6b:36:b3:e1:5d:19:36:63:bb:4d:7b:66:c6:4d:c3: 6c:64:b3:06:b2:9b:61:91:4a:15:73:d7:90:14:52:a1:75:d5: 44:c9:c2:40:63:f3:2a:9a:16:94:5b:71:58:c7:0b:f7:6a:2f: 39:e6:dd:92:4d:05:d2:0f:ca:8d:29:e3:e4:88:1d:6e:32:83: 00:6d:a1:47:ca:02:24:e3:a6:b1:d5:0e:90:d9:92:70:ac:f3: ef:f1:74:28:6d:3a:5a:d0:f4:d9:09:1f:0c:a2:97:25:1d:b0: 4d:ca:77:67:dc:23:70:f1:97:78:1f:ea:5c:57:c0:d3:0d:02: 57:d5:52:87:6e:9b:97:21:52:bc:5e:9e:93:07:57:49:3e:f0: f7:fa:aa:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYmnsy/sxRwisBATvA2KZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjFlYTVhMTA1MGE4MjkyMjRlYTQ4NmMwZTIyZWJmYzc1 ZDY0MGMwHhcNMjUxMjI2MDMwMTE3WhcNMjUxMjI3MDMwMTE3WjAzMTEwLwYDVQQD EygyYjYyMTFkYzVjYThjNjJmNzkzYzE5YTYyYTJmZDQxYjQ2OWU0MTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sFySE1M4GgB7L2gKHeFexYY8MWQ fYKyg6sK2FsrrfyU3sTtnBX52kPc53UtDm3DJ6oQG/J05TteBxC3RsMXmKAS0hiD POX1cFi6dawtmEBp7XZwZ+FrwkHB0+IT+MznxukbbI/FeRj89SGc7grbIxWXtOEU f+vGRttKMHJGdUMEbgtj9KKYBEHCPx8WGP18kmsSnmyLEs4EUi/6DObgdwi+E4qT q5QOaGpgfR6MUWC/clqTCfYU8dAuNU4nPEXOLYgYXUdSWhflgLyP4kdh1I37DLHb WvZwA2JWOgE2jhZLXU3NfwqA8ZcYLnVIx8pTnPFkYge8t03KRMMbrQ9cfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtiEdxcqMYveTwZpiov1BtGnkEAMB8GA1UdIwQY MBaAFOyx6loQUKgpIk6khsDiLr/HXWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2Ut MDJmZmNlZmYxYWNjLzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2UtMDJmZmNlZmYxYWNj LzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkJErjWP /DQswJMx1nX7bqf3BIPVJI3YTLj6xFZ4sjYEep8/9Fwo9nUtGl+lzkKzfjWs1JQE bTUT4VgGvU0vb0IxMoi3nuFLB3a5Jsy3zTsTq5eq4V6KE/22zHDYJevgz5vQC40v D6+4kvghTN2gazaz4V0ZNmO7TXtmxk3DbGSzBrKbYZFKFXPXkBRSoXXVRMnCQGPz KpoWlFtxWMcL92ovOebdkk0F0g/KjSnj5IgdbjKDAG2hR8oCJOOmsdUOkNmScKzz 7/F0KG06WtD02QkfDKKXJR2wTcp3Z9wjcPGXeB/qXFfA0w0CV9VSh26blyFSvF6e kwdXST7w9/qqvA== -----END CERTIFICATE-----Generated at Fri Dec 26 11:05:15 2025 by rpki-client