This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json) Hash identifier: CxExqZQkW3j9tEOw0QMec+9ACCKax7JUVkrv8Q8/ZN0= Subject key identifier: C7:B6:DA:78:9C:7E:CC:71:40:EF:A1:C5:FF:3A:E3:38:40:94:2B:8B Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a Certificate serial: 019B68E980B92FF8B24FC56BCAC2DC438BBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft Manifest number: 17A4 Signing time: Mon 29 Dec 2025 07:01:31 +0000 Manifest this update: Mon 29 Dec 2025 07:01:31 +0000 Manifest next update: Tue 30 Dec 2025 07:01:31 +0000 Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=) 2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: rMoX1aTN18VmCJj5BEKUn53To54Zg2SYh9yg+Foovpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:80:b9:2f:f8:b2:4f:c5:6b:ca:c2:dc:43:8b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a Validity Not Before: Dec 29 07:01:31 2025 GMT Not After : Dec 30 07:01:31 2025 GMT Subject: CN=c7b6da789c7ecc7140efa1c5ff3ae33840942b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:3d:fb:1b:31:49:99:35:f1:f2:ec:e0:c8: ca:45:f3:f7:bf:90:73:e0:07:c1:fb:5b:d6:68:b5: b9:cb:d7:36:64:92:0d:b2:e9:ee:13:27:a9:7e:16: c2:90:cd:c7:5f:22:89:27:88:d6:95:f4:4b:ab:c3: 3e:ef:49:28:59:85:61:20:cf:fa:9f:67:be:6f:1e: fc:a6:70:f2:f2:1b:63:a6:51:0b:d6:7a:d5:89:e8: a6:d8:61:1e:3e:a6:12:bc:07:c3:e2:f4:65:ff:94: 4e:b7:0b:92:60:bd:17:e9:98:b1:a3:2d:43:87:e9: 7c:2e:7f:58:d2:e9:da:c8:f0:2c:1d:63:a8:8c:4d: e7:f6:6e:5c:53:7e:f2:dd:b2:7f:a1:e9:f8:7e:44: 57:97:ce:13:51:0e:c1:3c:e8:29:3e:bb:39:69:27: c2:1f:ec:8b:fe:4b:95:f1:ee:aa:ea:dd:c2:66:ad: dc:84:76:7a:bf:a0:b1:c1:4f:60:6b:0d:1c:c2:a9: a7:f4:91:64:ea:ed:2a:e4:6d:fd:35:f3:0d:6d:55: 9a:91:29:c0:64:54:c3:16:ef:36:16:62:11:29:d8: a9:84:44:b6:c3:6d:40:60:b9:dd:3b:ea:76:3d:a0: 41:66:86:51:d8:61:ca:ad:6c:ee:83:01:6c:4c:96: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B6:DA:78:9C:7E:CC:71:40:EF:A1:C5:FF:3A:E3:38:40:94:2B:8B X509v3 Authority Key Identifier: keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:68:ab:db:af:37:c2:8b:c6:be:ca:df:2b:46:01:bb:80:f3: e8:ad:2c:d0:82:16:50:32:fd:ed:3e:05:d3:98:7e:53:0c:47: 07:04:c2:63:f4:e1:cc:ba:f5:dc:cf:4e:fe:e5:a6:b3:4c:f1: 5f:6b:5a:1f:7a:b8:63:11:55:dd:83:93:a5:88:85:58:ae:15: 6a:09:93:4b:fd:27:55:39:6a:9d:0c:b7:a7:6e:22:50:89:0e: 03:cb:2e:00:68:a3:2b:34:8c:a3:cc:07:2e:15:51:0e:bb:81: 9e:bf:d0:f9:19:e2:82:9d:26:25:2c:ef:66:a8:00:b4:59:f5: 69:09:04:3c:e5:ed:71:65:e3:69:cd:9a:02:d4:93:e9:db:b0: c2:ec:2e:93:59:87:cd:44:c1:87:93:77:0e:bf:fe:7e:3c:7e: b5:49:79:1b:78:4f:24:30:c0:6c:31:a9:f1:1b:88:50:d3:c2: 00:cd:9a:2e:a1:27:09:3c:e4:ed:f2:d6:83:e7:e9:14:95:68: 73:ef:fe:c8:ea:3f:ab:6f:fd:b5:35:53:20:42:8c:e5:85:5c: 61:0c:3d:d9:75:19:1d:41:55:0d:f1:aa:f0:3f:0b:82:07:67: 6c:27:fc:90:ae:85:cf:b4:22:32:68:44:0f:e9:c5:35:4b:c1: c0:e2:c6:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6YC5L/iyT8VrysLcQ4u9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjY3YmE1NzlmNDhhNDIwN2FjNDA5YWJmNGYwMTE5NDA0 NmVhM2EwHhcNMjUxMjI5MDcwMTMxWhcNMjUxMjMwMDcwMTMxWjAzMTEwLwYDVQQD EyhjN2I2ZGE3ODljN2VjYzcxNDBlZmExYzVmZjNhZTMzODQwOTQyYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Q9+xsxSZk18fLs4MjKRfP3v5Bz 4AfB+1vWaLW5y9c2ZJINsunuEyepfhbCkM3HXyKJJ4jWlfRLq8M+70koWYVhIM/6 n2e+bx78pnDy8htjplEL1nrVieim2GEePqYSvAfD4vRl/5ROtwuSYL0X6Zixoy1D h+l8Ln9Y0unayPAsHWOojE3n9m5cU37y3bJ/oen4fkRXl84TUQ7BPOgpPrs5aSfC H+yL/kuV8e6q6t3CZq3chHZ6v6CxwU9gaw0cwqmn9JFk6u0q5G39NfMNbVWakSnA ZFTDFu82FmIRKdiphES2w21AYLndO+p2PaBBZoZR2GHKrWzugwFsTJbFMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMe22nicfsxxQO+hxf864zhAlCuLMB8GA1UdIwQY MBaAFLe2e6V59IpCB6xAmr9PARlARuo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85NjNkNzUtNGNmZi00YjE0LTgzZGYt Yjc3NDMyMGQ5OTdmLzEvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85NjNkNzUtNGNmZi00YjE0LTgzZGYtYjc3NDMyMGQ5OTdm LzEvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGir2683 wovGvsrfK0YBu4Dz6K0s0IIWUDL97T4F05h+UwxHBwTCY/ThzLr13M9O/uWms0zx X2taH3q4YxFV3YOTpYiFWK4VagmTS/0nVTlqnQy3p24iUIkOA8suAGijKzSMo8wH LhVRDruBnr/Q+Rnigp0mJSzvZqgAtFn1aQkEPOXtcWXjac2aAtST6duwwuwuk1mH zUTBh5N3Dr/+fjx+tUl5G3hPJDDAbDGp8RuIUNPCAM2aLqEnCTzk7fLWg+fpFJVo c+/+yOo/q2/9tTVTIEKM5YVcYQw92XUZHUFVDfGq8D8LggdnbCf8kK6Fz7QiMmhE D+nFNUvBwOLG9A== -----END CERTIFICATE-----Generated at Mon Dec 29 16:44:30 2025 by rpki-client