This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json) Hash identifier: lahUMKRqVtKPd3U0aJEnGh+MHTkfhagixtFyl9y37SQ= Subject key identifier: AD:8C:09:97:E7:6A:38:D3:CB:69:E6:3C:05:00:AC:F0:85:B3:33:2B Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Certificate serial: 019B378E637E476DC26E7AEB62A01E839C7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft Manifest number: 179A Signing time: Fri 19 Dec 2025 17:00:37 +0000 Manifest this update: Fri 19 Dec 2025 17:00:37 +0000 Manifest next update: Sat 20 Dec 2025 17:00:37 +0000 Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=) 2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=) 3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: +O2cGsxZ7nEP7kNMR6CpCL8uB/ZnWvibnEtiSkEF49A=) 4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=) 5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=) 6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=) 7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=) 8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=) 9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:63:7e:47:6d:c2:6e:7a:eb:62:a0:1e:83:9c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Validity Not Before: Dec 19 17:00:37 2025 GMT Not After : Dec 20 17:00:37 2025 GMT Subject: CN=ad8c0997e76a38d3cb69e63c0500acf085b3332b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:f5:a8:d9:40:e0:19:29:ac:a8:9c:84:1a: bd:65:cd:70:4b:94:0e:c5:ff:88:1c:98:ca:0e:d4: c0:d4:c4:36:37:8f:4f:20:1e:19:6e:85:21:0a:86: 2e:9f:8a:91:96:0f:3a:ec:70:e8:a6:e1:69:30:af: 5c:c5:14:fe:dd:62:c0:27:bc:d7:1a:c7:0c:39:80: 4d:75:97:7d:07:9e:2b:7f:2d:81:54:80:2b:23:76: 36:b7:00:c2:69:a1:85:31:95:fa:47:e9:36:74:bc: d6:1e:11:04:04:49:5d:d7:2f:89:c9:51:72:ad:b3: d0:4a:e4:61:6d:3f:12:28:c5:97:a4:47:48:9d:e0: ea:db:da:b7:e0:08:7d:96:ba:e3:77:6f:8a:44:91: 53:d1:33:ff:8e:f8:6b:3b:a2:47:72:98:4c:11:66: e9:43:ac:06:26:30:9c:a6:f3:04:1f:4a:05:3c:10: 93:33:c9:91:20:71:7f:ab:5e:6f:00:2e:ca:10:71: b2:07:2a:c6:bd:9d:91:9f:42:ba:97:4d:82:f7:5f: ad:a4:39:d4:fb:a1:e7:47:97:86:48:3c:29:06:15: 3d:21:9e:f2:43:28:b8:91:5b:20:34:d9:9b:b6:5a: 5f:33:84:4e:4b:76:d5:23:c6:fd:2b:e6:ba:4e:c6: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8C:09:97:E7:6A:38:D3:CB:69:E6:3C:05:00:AC:F0:85:B3:33:2B X509v3 Authority Key Identifier: keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:97:b0:61:ca:27:13:6e:30:0a:f1:73:cd:49:fe:40:90:71: 69:4f:64:ef:15:a7:71:0f:79:2e:52:ee:8a:c1:fb:1f:52:37: 55:80:78:12:b7:3a:98:62:92:2a:1c:2f:77:79:bd:00:b6:21: a0:ed:ea:74:48:99:0b:0f:3c:7b:f9:ca:17:db:a2:18:4b:85: 6f:aa:45:2b:27:91:15:2f:24:7c:77:e8:d1:43:f3:66:aa:07: 2f:44:fa:bb:ff:c3:5b:c6:55:ea:5d:70:0e:96:3d:66:8c:4e: a2:77:0b:d2:9d:de:98:4e:e2:99:90:65:be:d5:74:37:cc:a4: 42:67:81:ea:d2:35:fa:6e:46:2b:5d:a1:5e:a7:da:fd:c9:e3: 8e:98:c4:8c:2a:cb:05:0c:b7:54:50:95:26:99:75:f6:c8:62: bf:79:4d:1e:e2:dc:ad:4e:52:1c:1f:25:8e:7e:07:03:67:f8: 9e:43:92:42:94:f7:b3:84:5e:cb:5d:b4:8a:21:fc:ff:4c:59: 42:9d:9e:f3:e6:89:37:8f:1c:07:47:50:8f:1a:45:72:58:da: dd:a2:55:bf:8f:61:23:7f:bf:b6:4b:00:9b:df:25:74:81:0b: 14:77:61:fe:20:47:6d:45:28:b7:c8:82:04:3d:b3:a6:23:83: cd:d1:a8:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jmN+R23CbnrrYqAeg5x8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw ODc5NDcwHhcNMjUxMjE5MTcwMDM3WhcNMjUxMjIwMTcwMDM3WjAzMTEwLwYDVQQD EyhhZDhjMDk5N2U3NmEzOGQzY2I2OWU2M2MwNTAwYWNmMDg1YjMzMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp/1qNlA4BkprKichBq9Zc1wS5QO xf+IHJjKDtTA1MQ2N49PIB4ZboUhCoYun4qRlg867HDopuFpMK9cxRT+3WLAJ7zX GscMOYBNdZd9B54rfy2BVIArI3Y2twDCaaGFMZX6R+k2dLzWHhEEBEld1y+JyVFy rbPQSuRhbT8SKMWXpEdIneDq29q34Ah9lrrjd2+KRJFT0TP/jvhrO6JHcphMEWbp Q6wGJjCcpvMEH0oFPBCTM8mRIHF/q15vAC7KEHGyByrGvZ2Rn0K6l02C91+tpDnU +6HnR5eGSDwpBhU9IZ7yQyi4kVsgNNmbtlpfM4ROS3bVI8b9K+a6TsYk+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2MCZfnajjTy2nmPAUArPCFszMrMB8GA1UdIwQY MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt NTk5NTc3ODdiMDE1LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1 LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZewYcon E24wCvFzzUn+QJBxaU9k7xWncQ95LlLuisH7H1I3VYB4Erc6mGKSKhwvd3m9ALYh oO3qdEiZCw88e/nKF9uiGEuFb6pFKyeRFS8kfHfo0UPzZqoHL0T6u//DW8ZV6l1w DpY9ZoxOoncL0p3emE7imZBlvtV0N8ykQmeB6tI1+m5GK12hXqfa/cnjjpjEjCrL BQy3VFCVJpl19shiv3lNHuLcrU5SHB8ljn4HA2f4nkOSQpT3s4Rey120iiH8/0xZ Qp2e8+aJN48cB0dQjxpFclja3aJVv49hI3+/tksAm98ldIELFHdh/iBHbUUot8iC BD2zpiODzdGoTQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:59 2025 by rpki-client