This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json) Hash identifier: loF9ICAm935reYqKZKZPLZoK4zEVZh77/zVeG59cqGE= Subject key identifier: BB:C1:00:80:14:6C:7F:31:4B:F8:5E:5C:7E:F7:98:F5:87:F5:4F:80 Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0 Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0 Certificate serial: 019B3F48B224F9B20A8514188E763711A32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft Manifest number: 1215 Signing time: Sun 21 Dec 2025 05:01:27 +0000 Manifest this update: Sun 21 Dec 2025 05:01:27 +0000 Manifest next update: Mon 22 Dec 2025 05:01:27 +0000 Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: 3HRNqFneA9/raRyffVo1hKcMTYs/TwpL/wflhvbjDo0=) 2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b2:24:f9:b2:0a:85:14:18:8e:76:37:11:a3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0 Validity Not Before: Dec 21 05:01:27 2025 GMT Not After : Dec 22 05:01:27 2025 GMT Subject: CN=bbc10080146c7f314bf85e5c7ef798f587f54f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:20:ab:8f:6b:a2:69:71:32:1e:d8:02:c8: 02:ab:1f:07:9f:9d:42:e2:25:a4:dc:92:93:0b:36: 36:13:bd:12:8b:36:5c:d8:4a:a0:fb:8d:56:95:c2: f0:d5:4d:65:87:27:7e:e5:39:70:7e:e1:82:27:e9: 22:b7:5c:5a:03:28:2c:a8:f0:c0:87:a1:52:a5:8f: 0e:d7:65:74:9e:a2:48:ae:38:91:06:89:d4:c3:3e: 8c:e4:e4:10:ee:26:9c:66:9c:71:2f:76:ff:0f:35: ef:d4:d3:38:d2:c0:ee:c9:8b:ea:be:c3:40:d5:40: 85:87:c6:f9:46:f4:35:2a:e7:a7:4d:47:93:b6:ae: bf:ba:94:81:21:4f:fc:82:c3:a8:bc:20:31:3f:a6: 56:69:bd:7a:08:b9:c5:dd:73:36:61:36:96:3e:b3: f6:19:ee:c6:3d:a0:b8:d6:08:af:22:03:1d:a2:94: 23:76:76:62:fc:d5:83:fd:d3:0b:44:d5:cd:94:b4: cd:d6:f2:9c:84:19:8f:5d:71:ac:cf:42:42:17:c1: b6:42:f8:77:e1:00:25:f3:ef:9a:ed:f9:c2:8d:41: 4e:db:49:04:89:8b:24:45:47:bd:04:57:80:8e:e4: 70:cb:b3:b2:70:8f:8a:08:2c:5a:ad:fc:5d:28:da: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C1:00:80:14:6C:7F:31:4B:F8:5E:5C:7E:F7:98:F5:87:F5:4F:80 X509v3 Authority Key Identifier: keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b1:ac:bf:fd:eb:63:13:4f:ba:ae:9d:5e:97:1d:71:c7:6b: a4:12:20:1a:c2:1e:0d:8d:1f:d1:5f:f9:7c:bf:93:df:ab:97: 42:40:46:90:a5:7a:dd:95:56:63:fd:bd:77:07:fd:22:fd:be: a4:38:4e:0a:82:93:d9:fb:d4:72:b7:f3:7c:0d:42:47:d9:df: 79:78:56:d7:43:24:df:59:7d:bd:e6:bd:4a:da:88:4f:9f:0c: 5c:27:37:3e:1c:e3:65:7f:07:54:b6:1f:7e:3f:f5:8f:fa:f3: dd:60:43:30:18:6c:b2:61:01:73:8c:5c:3f:8d:d1:aa:a2:eb: d6:65:98:11:26:a9:fa:b0:43:30:32:75:2e:b7:fa:4e:e9:61: a6:37:d8:e4:45:19:f1:cd:11:e7:75:05:c1:eb:fd:2e:8e:75: b3:3f:ae:91:70:1c:b0:80:8d:3e:ec:3a:ac:52:f1:8d:b7:2e: 77:c3:c4:51:65:82:7c:57:4c:40:b3:ab:c1:9b:0a:4f:10:b2: c8:b4:70:52:5c:f8:e3:e9:9f:d9:79:59:34:7c:d1:d3:25:4e: f2:e8:43:5b:d5:df:cd:55:81:7b:c1:70:b3:d4:15:60:95:a7: ca:ec:4d:c7:3c:f4:a7:22:3b:6b:51:98:c6:83:39:30:14:6e: b0:52:d1:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLIk+bIKhRQYjnY3EaMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz N2I0ZDAwHhcNMjUxMjIxMDUwMTI3WhcNMjUxMjIyMDUwMTI3WjAzMTEwLwYDVQQD EyhiYmMxMDA4MDE0NmM3ZjMxNGJmODVlNWM3ZWY3OThmNTg3ZjU0ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjggq49romlxMh7YAsgCqx8Hn51C 4iWk3JKTCzY2E70SizZc2Eqg+41WlcLw1U1lhyd+5TlwfuGCJ+kit1xaAygsqPDA h6FSpY8O12V0nqJIrjiRBonUwz6M5OQQ7iacZpxxL3b/DzXv1NM40sDuyYvqvsNA 1UCFh8b5RvQ1KuenTUeTtq6/upSBIU/8gsOovCAxP6ZWab16CLnF3XM2YTaWPrP2 Ge7GPaC41givIgMdopQjdnZi/NWD/dMLRNXNlLTN1vKchBmPXXGsz0JCF8G2Qvh3 4QAl8++a7fnCjUFO20kEiYskRUe9BFeAjuRwy7OycI+KCCxarfxdKNqgUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvBAIAUbH8xS/heXH73mPWH9U+AMB8GA1UdIwQY MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLGsv/3r YxNPuq6dXpcdccdrpBIgGsIeDY0f0V/5fL+T36uXQkBGkKV63ZVWY/29dwf9Iv2+ pDhOCoKT2fvUcrfzfA1CR9nfeXhW10Mk31l9vea9StqIT58MXCc3PhzjZX8HVLYf fj/1j/rz3WBDMBhssmEBc4xcP43RqqLr1mWYESap+rBDMDJ1Lrf6TulhpjfY5EUZ 8c0R53UFwev9Lo51sz+ukXAcsICNPuw6rFLxjbcud8PEUWWCfFdMQLOrwZsKTxCy yLRwUlz44+mf2XlZNHzR0yVO8uhDW9XfzVWBe8Fws9QVYJWnyuxNxzz0pyI7a1GY xoM5MBRusFLRNA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:01:23 2025 by rpki-client