This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json) Hash identifier: igEZABAap3gm4qWxguQrJeAdS3U/MIJuv/8d1lQmO3g= Subject key identifier: 06:20:CB:D5:D6:05:87:9E:02:5D:8B:0B:C3:D9:C9:53:5B:B6:9A:39 Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76 Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976 Certificate serial: 019B3F11B5E07470DCFD456B125A7097238E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft Manifest number: 16B9 Signing time: Sun 21 Dec 2025 04:01:23 +0000 Manifest this update: Sun 21 Dec 2025 04:01:23 +0000 Manifest next update: Mon 22 Dec 2025 04:01:23 +0000 Files and hashes: 1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=) 2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: bEp1ESFgkmMCtYRn/+7pnVsXG/UjFhr2rs6JmJtdpQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:b5:e0:74:70:dc:fd:45:6b:12:5a:70:97:23:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976 Validity Not Before: Dec 21 04:01:23 2025 GMT Not After : Dec 22 04:01:23 2025 GMT Subject: CN=0620cbd5d605879e025d8b0bc3d9c9535bb69a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:80:71:46:24:a9:e7:b5:96:89:34:dd:4e: 17:7d:f1:96:e1:f8:68:df:aa:12:01:0e:f6:93:fe: 1e:13:8a:08:f2:4d:10:83:9f:ea:d2:3e:ea:89:6a: 81:04:f9:32:e7:34:f8:93:55:e5:17:c6:0d:99:b1: 96:a5:73:70:d0:9d:8b:e1:a6:41:cf:aa:bf:c4:a3: 24:77:87:45:52:91:0a:ec:ef:4c:19:32:4d:35:13: ba:5a:b2:b7:87:6a:2d:0f:94:a0:3b:28:e9:8c:43: 59:7c:a6:37:b8:51:61:41:be:a7:67:8d:f3:18:6f: 90:a8:db:79:5d:e3:ec:6b:e1:db:f4:75:c8:92:f0: ac:fc:9c:bb:79:d6:de:bf:31:46:3e:b8:19:d4:12: cb:47:1e:04:24:6a:09:cd:d7:47:b7:bb:4a:0b:af: 97:1c:97:d5:27:cc:68:2c:71:25:06:db:73:34:6b: 6e:27:b7:7f:d4:a2:32:0f:1a:cc:fa:da:53:7a:2b: a1:8e:e9:ab:10:8d:1e:c4:74:8e:81:60:87:fc:eb: 59:dd:1c:5e:6e:69:53:c8:5e:ba:c3:5b:70:4e:69: f7:0c:7d:db:2c:db:6a:79:df:b1:c4:f9:70:e9:e6: f9:33:ec:05:ae:5e:c4:a3:62:ba:ff:5c:d3:37:97: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:20:CB:D5:D6:05:87:9E:02:5D:8B:0B:C3:D9:C9:53:5B:B6:9A:39 X509v3 Authority Key Identifier: keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:65:65:20:8c:e2:8b:21:f6:a6:4c:67:88:e4:12:47:61:f7: bf:b0:0e:9f:2c:9a:2c:c7:7a:19:ba:1c:5f:0e:78:92:99:e8: 30:21:76:97:da:5c:73:64:7a:41:bd:38:f3:77:e8:92:95:82: 14:da:bf:9b:2e:f2:a4:a6:ff:14:5b:d2:88:06:48:e3:27:8d: cb:ed:bc:3e:d3:e9:cb:6e:ed:42:57:d6:1d:4e:31:5a:e0:f0: 9f:db:e9:8e:a8:a2:da:96:c9:fd:29:17:57:e2:81:e6:ae:f5: bb:a5:72:0c:5a:32:4f:1c:2e:94:e0:45:7b:e1:0f:85:1e:fa: e8:09:45:96:bf:81:f9:ef:e7:61:b8:61:25:64:72:08:a5:35: f1:eb:94:45:cd:59:77:d4:99:0b:1f:9c:2e:3b:ae:57:34:fb: e6:29:10:25:84:6c:fa:db:44:ad:73:ff:57:a8:d2:9f:96:d1: 56:0f:73:2a:1b:0d:60:8d:be:ee:9f:ce:78:2e:46:20:c0:4c: 80:23:03:c2:45:cb:2c:9b:17:a9:17:49:57:67:a2:05:41:c7: bb:ce:a4:e5:f1:0c:a6:21:cb:76:bc:9f:e5:76:4d:06:b2:57: e3:f1:2e:76:57:0c:80:38:75:63:71:f7:8a:a4:b5:38:c8:20: bf:d0:d8:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EbXgdHDc/UVrElpwlyOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWUwMTg2YzY4MjMwMTRiYzJjNDJkMDRlYTY1MGJmNWNj Yjk5NzYwHhcNMjUxMjIxMDQwMTIzWhcNMjUxMjIyMDQwMTIzWjAzMTEwLwYDVQQD EygwNjIwY2JkNWQ2MDU4NzllMDI1ZDhiMGJjM2Q5Yzk1MzViYjY5YTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraiAcUYkqee1lok03U4XffGW4fho 36oSAQ72k/4eE4oI8k0Qg5/q0j7qiWqBBPky5zT4k1XlF8YNmbGWpXNw0J2L4aZB z6q/xKMkd4dFUpEK7O9MGTJNNRO6WrK3h2otD5SgOyjpjENZfKY3uFFhQb6nZ43z GG+QqNt5XePsa+Hb9HXIkvCs/Jy7edbevzFGPrgZ1BLLRx4EJGoJzddHt7tKC6+X HJfVJ8xoLHElBttzNGtuJ7d/1KIyDxrM+tpTeiuhjumrEI0exHSOgWCH/OtZ3Rxe bmlTyF66w1twTmn3DH3bLNtqed+xxPlw6eb5M+wFrl7Eo2K6/1zTN5cluQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYgy9XWBYeeAl2LC8PZyVNbtpo5MB8GA1UdIwQY MBaAFO2uAYbGgjAUvCxC0E6mUL9cy5l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOWE1MmUtNThhMC00MjM4LWFlYjEt OGI3YTRhYmYxY2EyLzEvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yOWE1MmUtNThhMC00MjM4LWFlYjEtOGI3YTRhYmYxY2Ey LzEvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2VlIIzi iyH2pkxniOQSR2H3v7AOnyyaLMd6GbocXw54kpnoMCF2l9pcc2R6Qb0483fokpWC FNq/my7ypKb/FFvSiAZI4yeNy+28PtPpy27tQlfWHU4xWuDwn9vpjqii2pbJ/SkX V+KB5q71u6VyDFoyTxwulOBFe+EPhR766AlFlr+B+e/nYbhhJWRyCKU18euURc1Z d9SZCx+cLjuuVzT75ikQJYRs+ttErXP/V6jSn5bRVg9zKhsNYI2+7p/OeC5GIMBM gCMDwkXLLJsXqRdJV2eiBUHHu86k5fEMpiHLdryf5XZNBrJX4/EudlcMgDh1Y3H3 iqS1OMggv9DY4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:11 2025 by rpki-client