This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json) Hash identifier: M/8vHLay5pQBSnsB6orJJHPA/qY7sFPAxUpgV1EfcUg= Subject key identifier: FA:33:9B:41:F5:3C:24:33:63:C3:14:F0:85:88:F8:0D:6C:0F:FD:59 Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Certificate serial: 019B620AD39BEE7A65D39A91375CF1BB39B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft Manifest number: 17B0 Signing time: Sat 27 Dec 2025 23:00:35 +0000 Manifest this update: Sat 27 Dec 2025 23:00:35 +0000 Manifest next update: Sun 28 Dec 2025 23:00:35 +0000 Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=) 2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=) 3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: vFjMADrI1Yt9Q8jv5wKaAEn1y8+B5EVpvuvF256vNN0=) 4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=) 5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=) 6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=) 7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=) 8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=) 9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0a:d3:9b:ee:7a:65:d3:9a:91:37:5c:f1:bb:39:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Validity Not Before: Dec 27 23:00:35 2025 GMT Not After : Dec 28 23:00:35 2025 GMT Subject: CN=fa339b41f53c243363c314f08588f80d6c0ffd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:db:ae:1c:4b:73:69:32:ef:6a:88:5c:af: 5d:2f:0d:33:bf:4c:dd:76:cf:04:31:9a:85:33:04: fa:22:49:05:d2:1e:a1:24:a5:c3:d5:51:ec:43:9e: b5:bd:86:7d:4e:e2:90:a4:bd:82:13:57:9d:95:18: 14:a8:b9:05:fc:a9:04:ad:c4:26:f9:99:90:36:14: 8e:46:20:5c:8c:b4:ac:a4:e1:ab:44:aa:9f:3e:f3: 79:41:f6:11:9a:4a:20:3b:0c:11:36:61:16:2a:1c: 52:29:5e:dd:2b:a2:10:d9:d3:67:0a:7c:16:51:0a: e4:89:a1:ce:f9:17:91:1a:c4:39:99:89:78:a3:9f: f2:f1:88:f3:87:a7:30:6e:bd:8c:b3:a9:2c:f2:61: 5f:a0:33:23:b2:52:2d:cd:c7:38:e5:06:25:db:1e: 67:93:4c:54:f7:b7:6d:fa:cc:d2:db:07:03:2a:33: 3c:2e:5b:00:31:77:d4:14:ef:07:29:92:e9:79:9d: 39:03:83:5c:8d:72:8d:e3:76:1a:14:7d:67:45:08: 94:cb:75:73:1e:4f:fc:b5:7a:61:d4:c8:a5:c9:ae: 8f:b7:a9:e5:19:9f:8b:2a:4f:d4:6a:e2:8b:38:38: 75:6f:67:9c:bd:87:ba:d9:27:da:97:9b:64:e6:2f: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:33:9B:41:F5:3C:24:33:63:C3:14:F0:85:88:F8:0D:6C:0F:FD:59 X509v3 Authority Key Identifier: keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:fc:77:c5:47:0e:73:e7:f6:35:5e:35:11:fc:91:97:25:c9: 05:b4:b0:9b:7d:c5:26:d1:aa:1f:cb:56:6b:ba:1f:de:86:47: ee:0e:70:b4:15:e8:e4:0f:6c:d1:c5:b9:d1:be:2c:2e:a7:fb: 8a:96:c9:7b:15:e1:b3:6d:f9:c9:ee:45:1a:36:b3:02:6a:41: ee:48:c7:cc:de:22:09:6b:0b:ec:f9:dc:a5:f0:83:f4:78:fb: af:c1:c1:b7:7f:fa:f5:a5:db:13:fb:ed:ec:7e:54:47:83:2f: 2f:0a:3c:3e:2e:ad:d8:a6:59:1b:b8:ba:ef:0c:8d:f7:c4:d1: 55:08:13:8e:72:8a:8a:2e:6c:c3:8d:1a:f4:10:78:e2:dd:b8: 31:72:21:14:16:c7:01:05:c7:3b:f9:50:cf:a0:59:52:7e:b7: 5f:c6:b9:cc:96:20:c3:a2:9a:b3:2e:0e:ba:76:b2:d3:26:ac: 52:47:5d:4b:c8:a7:ae:48:6e:cb:19:6e:eb:46:28:a0:2c:60: 50:e5:17:ca:87:09:05:61:18:bb:a7:82:84:c9:ea:d9:e6:81: 83:3c:a4:67:8a:c2:5c:6f:6b:d0:d8:8a:11:ba:92:de:70:8f: 52:2e:19:45:77:aa:03:f7:27:4e:eb:e7:ec:06:79:da:f1:82: 54:b5:b3:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCtOb7npl05qRN1zxuzm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw ODc5NDcwHhcNMjUxMjI3MjMwMDM1WhcNMjUxMjI4MjMwMDM1WjAzMTEwLwYDVQQD EyhmYTMzOWI0MWY1M2MyNDMzNjNjMzE0ZjA4NTg4ZjgwZDZjMGZmZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLPbrhxLc2ky72qIXK9dLw0zv0zd ds8EMZqFMwT6IkkF0h6hJKXD1VHsQ561vYZ9TuKQpL2CE1edlRgUqLkF/KkErcQm +ZmQNhSORiBcjLSspOGrRKqfPvN5QfYRmkogOwwRNmEWKhxSKV7dK6IQ2dNnCnwW UQrkiaHO+ReRGsQ5mYl4o5/y8Yjzh6cwbr2Ms6ks8mFfoDMjslItzcc45QYl2x5n k0xU97dt+szS2wcDKjM8LlsAMXfUFO8HKZLpeZ05A4NcjXKN43YaFH1nRQiUy3Vz Hk/8tXph1Milya6Pt6nlGZ+LKk/UauKLODh1b2ecvYe62Sfal5tk5i/qPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPozm0H1PCQzY8MU8IWI+A1sD/1ZMB8GA1UdIwQY MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt NTk5NTc3ODdiMDE1LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1 LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPx3xUcO c+f2NV41EfyRlyXJBbSwm33FJtGqH8tWa7of3oZH7g5wtBXo5A9s0cW50b4sLqf7 ipbJexXhs235ye5FGjazAmpB7kjHzN4iCWsL7PncpfCD9Hj7r8HBt3/69aXbE/vt 7H5UR4MvLwo8Pi6t2KZZG7i67wyN98TRVQgTjnKKii5sw40a9BB44t24MXIhFBbH AQXHO/lQz6BZUn63X8a5zJYgw6Kasy4Ounay0yasUkddS8inrkhuyxlu60YooCxg UOUXyocJBWEYu6eChMnq2eaBgzykZ4rCXG9r0NiKEbqS3nCPUi4ZRXeqA/cnTuvn 7AZ52vGCVLWzqQ== -----END CERTIFICATE-----Generated at Sun Dec 28 05:49:43 2025 by rpki-client