This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json) Hash identifier: tmwihuBV9IytoppJdedejg4BK3UbJOQ7tTSrWut+HgM= Subject key identifier: E1:24:98:42:66:A9:E6:59:49:14:BF:47:64:93:0F:55:E3:CA:C0:DF Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82 Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182 Certificate serial: 019B3AFD37B2FE2A033603ACF0DCD4064040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft Manifest number: 16E8 Signing time: Sat 20 Dec 2025 09:00:31 +0000 Manifest this update: Sat 20 Dec 2025 09:00:31 +0000 Manifest next update: Sun 21 Dec 2025 09:00:31 +0000 Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=) 2: BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa (hash: +wyGsgZf3mkT04YYiaLjKGX/U5oOsHBvxk3RajkpCvY=) 3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: bfP4TNgbsnIoZHYV9Hq/kNwrnx3XgTYzpBbpNuX5L6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:37:b2:fe:2a:03:36:03:ac:f0:dc:d4:06:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182 Validity Not Before: Dec 20 09:00:31 2025 GMT Not After : Dec 21 09:00:31 2025 GMT Subject: CN=e124984266a9e6594914bf4764930f55e3cac0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:1a:4a:b7:cc:6f:b0:cf:5a:16:11:47:05: ed:f0:fc:c2:61:9e:a5:03:a2:ff:56:ef:8c:76:f7: 1a:f1:de:58:5c:20:4e:d9:62:47:f7:aa:a6:69:9a: 31:39:c3:c1:63:2e:9e:62:45:88:7f:3f:29:16:86: e2:80:a4:9e:51:3b:89:fd:a4:02:35:b9:4f:a6:2e: 84:19:29:2d:8a:2f:7e:96:20:04:c1:87:96:b9:66: c9:43:b6:44:aa:04:df:07:d8:4c:85:ff:fc:6f:3e: f4:6c:1f:8d:13:c0:9c:8a:a8:e9:9e:4d:a8:1b:14: 73:10:b0:3c:d6:ce:3f:07:c2:57:11:2d:c1:1e:b6: 7f:e4:18:a4:d1:ee:01:c8:31:b6:4e:5a:00:0e:d7: e9:53:8c:b2:d3:a8:a0:29:c7:17:c0:80:fc:b9:e8: 27:2b:63:cc:df:d8:6b:b1:f8:ea:fe:73:58:f6:4b: c8:15:83:84:80:21:cd:6d:7f:39:e8:94:fc:e6:94: fd:82:20:04:71:07:76:69:4e:c4:a4:46:0e:73:ea: 06:37:cd:1b:d3:a7:eb:6d:71:62:b0:af:0f:00:ed: dc:33:d9:28:32:7b:a0:81:a6:bb:14:f0:6a:52:a9: a8:30:15:f8:e6:a3:5f:1d:8f:3e:f9:2c:aa:ee:51: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:24:98:42:66:A9:E6:59:49:14:BF:47:64:93:0F:55:E3:CA:C0:DF X509v3 Authority Key Identifier: keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:20:9e:0f:94:27:d5:3f:68:71:c9:03:21:31:9c:bd:c9:00: 28:1d:cc:c3:1f:51:b8:c7:22:26:e0:7c:8a:96:47:80:9b:38: 25:96:06:81:95:22:4f:39:61:2a:64:e0:d4:4d:66:c9:e9:d7: 06:94:e1:75:a5:92:87:8c:02:55:03:2b:f6:55:27:72:c8:03: b3:de:02:26:66:00:9e:cd:11:07:8b:21:34:0c:23:86:de:52: a6:98:10:98:7c:32:cb:c8:ab:16:d2:d3:c0:61:5a:c9:20:8e: 78:4c:99:d8:a6:90:c5:eb:1b:e8:de:5a:f6:03:7c:2e:39:e7: e0:58:3a:19:2a:c8:30:28:26:5e:93:da:8d:b2:33:a0:77:57: 35:e3:66:5c:40:f6:5a:05:76:0b:43:09:b3:5e:bd:c9:87:1d: 76:7a:1a:a2:e9:e4:3f:47:66:61:d8:90:77:b2:9c:0e:4d:c4: bb:2c:35:74:5c:07:8b:e9:01:fa:26:f5:9e:44:c5:b2:f5:c0: 75:b8:47:81:ca:c7:57:97:72:3d:09:25:c2:be:0a:19:18:3b: 22:20:7f:97:cb:10:36:be:ac:e8:b9:40:79:24:d9:a2:e3:f5: 1d:37:36:55:65:bd:77:20:ae:b4:e7:f1:10:69:40:60:58:86: d8:65:ee:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/Tey/ioDNgOs8NzUBkBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmNhZTJiMjkwYzgwMWQ1N2QwOWQwMjVhOTM0OGUxNjcw NmYxODIwHhcNMjUxMjIwMDkwMDMxWhcNMjUxMjIxMDkwMDMxWjAzMTEwLwYDVQQD EyhlMTI0OTg0MjY2YTllNjU5NDkxNGJmNDc2NDkzMGY1NWUzY2FjMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiEaSrfMb7DPWhYRRwXt8PzCYZ6l A6L/Vu+Mdvca8d5YXCBO2WJH96qmaZoxOcPBYy6eYkWIfz8pFobigKSeUTuJ/aQC NblPpi6EGSktii9+liAEwYeWuWbJQ7ZEqgTfB9hMhf/8bz70bB+NE8Cciqjpnk2o GxRzELA81s4/B8JXES3BHrZ/5Bik0e4ByDG2TloADtfpU4yy06igKccXwID8uegn K2PM39hrsfjq/nNY9kvIFYOEgCHNbX856JT85pT9giAEcQd2aU7EpEYOc+oGN80b 06frbXFisK8PAO3cM9koMnuggaa7FPBqUqmoMBX45qNfHY8++Syq7lEhhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEkmEJmqeZZSRS/R2STD1XjysDfMB8GA1UdIwQY MBaAFP+8rispDIAdV9CdAlqTSOFnBvGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAt MDk2YWY0NzhmMDRiLzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAtMDk2YWY0NzhmMDRi LzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSCeD5Qn 1T9occkDITGcvckAKB3Mwx9RuMciJuB8ipZHgJs4JZYGgZUiTzlhKmTg1E1myenX BpThdaWSh4wCVQMr9lUncsgDs94CJmYAns0RB4shNAwjht5SppgQmHwyy8irFtLT wGFaySCOeEyZ2KaQxesb6N5a9gN8Ljnn4Fg6GSrIMCgmXpPajbIzoHdXNeNmXED2 WgV2C0MJs169yYcddnoaounkP0dmYdiQd7KcDk3Euyw1dFwHi+kB+ib1nkTFsvXA dbhHgcrHV5dyPQklwr4KGRg7IiB/l8sQNr6s6LlAeSTZouP1HTc2VWW9dyCutOfx EGlAYFiG2GXuCA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:31 2025 by rpki-client