This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft File: 7HB5DNzgwZKsiG89nvcl85lRg5g.mft (raw, json) Hash identifier: BXU+DrhPyzXuow1SULYGwtAP3dZSCbgB5RrVsRwMPdA= Subject key identifier: 9F:3F:C8:45:3E:33:E5:52:54:30:8E:EC:FD:03:62:19:AB:28:2B:D9 Authority key identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98 Certificate issuer: /CN=ec70790cdce0c192ac886f3d9ef725f399518398 Certificate serial: 019B4F60485E5DC8D0DA88B58C898E186819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft Manifest number: 1A Signing time: Wed 24 Dec 2025 08:01:08 +0000 Manifest this update: Wed 24 Dec 2025 08:01:08 +0000 Manifest next update: Thu 25 Dec 2025 08:01:08 +0000 Files and hashes: 1: 7HB5DNzgwZKsiG89nvcl85lRg5g.crl (hash: TWJfebYEYnAzQd9Y6RoC+uUu4czYdSG3VDOsZ7XDH3M=) 2: 7IVGhCt7G4ZWjEsMqOUMNoh_ONg.roa (hash: cpKLW0xOLtqDGwQV+LND6V3Hw2lFbNNFvzbSjuOjPA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:48:5e:5d:c8:d0:da:88:b5:8c:89:8e:18:68:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec70790cdce0c192ac886f3d9ef725f399518398 Validity Not Before: Dec 24 08:01:08 2025 GMT Not After : Dec 25 08:01:08 2025 GMT Subject: CN=9f3fc8453e33e55254308eecfd036219ab282bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:c8:16:4f:26:4a:61:43:61:a4:38:b7:75: f5:4d:83:f3:9b:0a:e8:99:58:33:b1:5c:3a:0b:21: 0d:08:f7:b4:e6:85:fb:14:28:8f:72:8f:cb:35:b5: 29:92:3d:c6:5c:ca:56:05:cf:77:84:71:ee:75:dc: b8:79:a0:e9:1a:93:c0:7c:a2:89:ee:81:5a:ab:2f: bd:04:ae:27:3e:58:dc:d7:56:bb:a5:00:7c:d9:45: 8b:77:dd:c7:b9:b6:93:6d:f3:8b:60:e2:04:84:c0: 9d:a3:10:a6:35:49:c9:9e:10:8a:bc:2e:fa:3d:cb: f5:7b:80:89:b4:d3:bf:0e:9e:f8:8c:9b:05:77:85: 93:94:ee:0b:cf:83:c4:15:97:7d:24:72:25:93:aa: a0:20:89:bc:f2:4e:ef:c0:83:ce:6a:69:61:5c:3f: 17:31:e6:ba:b7:15:57:8e:a6:18:42:86:1c:96:3a: 39:14:90:a1:0a:6d:cd:79:97:c1:ed:8b:c0:f8:53: 62:5d:27:82:de:eb:f2:ae:af:b5:7e:ba:25:a1:7a: 48:27:90:ed:86:7f:d1:4a:01:75:c5:b5:98:d1:60: f8:71:70:d9:aa:dd:36:29:6b:5d:07:94:1a:55:5f: d2:4e:a4:42:46:70:c4:c6:9f:af:9c:de:ab:99:33: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3F:C8:45:3E:33:E5:52:54:30:8E:EC:FD:03:62:19:AB:28:2B:D9 X509v3 Authority Key Identifier: keyid:EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:65:21:63:47:f2:6a:9c:28:00:91:76:9d:6a:52:78:fe:71: e8:a9:ad:2e:59:65:52:c7:55:3c:35:a3:1f:fa:7f:97:d1:bf: fb:c4:ac:bb:6e:85:35:f6:ce:c3:43:65:34:6a:91:de:f8:91: fa:7e:83:71:9c:28:60:04:00:e4:27:a6:66:96:c6:bc:34:4e: dd:8a:dc:9a:40:0a:53:f0:b5:1f:12:50:26:64:c7:02:b7:e8: 55:a6:5e:f0:fa:ce:5b:eb:ae:50:55:86:03:b4:8f:09:0b:8b: d8:a8:cb:1c:76:54:27:14:0c:95:f6:df:78:c0:8d:c1:8a:1b: 6d:0e:d0:d0:fd:a9:2c:8a:21:c6:c2:fb:45:83:40:92:05:bb: 68:7f:e6:81:b1:26:92:82:b3:17:35:f6:f4:41:fe:38:7d:1d: 3f:03:9f:b8:93:0a:42:60:29:ca:88:02:88:87:e6:87:b7:38: 14:a1:c3:6d:9a:d4:a1:4c:c7:fd:c3:92:be:ac:c1:f7:21:44: 72:9e:ba:52:05:5e:63:a9:9b:f7:7e:be:b3:a6:85:14:f1:8b: c9:a0:e1:b8:27:b1:9d:6d:7a:e4:21:27:d0:96:7d:d2:4c:0e: d1:8d:6d:28:3d:19:b3:2e:ab:c4:a2:5f:bb:ff:d9:2c:b2:e9: 36:b6:07:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYEheXcjQ2oi1jImOGGgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzA3OTBjZGNlMGMxOTJhYzg4NmYzZDllZjcyNWYzOTk1 MTgzOTgwHhcNMjUxMjI0MDgwMTA4WhcNMjUxMjI1MDgwMTA4WjAzMTEwLwYDVQQD Eyg5ZjNmYzg0NTNlMzNlNTUyNTQzMDhlZWNmZDAzNjIxOWFiMjgyYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbbIFk8mSmFDYaQ4t3X1TYPzmwro mVgzsVw6CyENCPe05oX7FCiPco/LNbUpkj3GXMpWBc93hHHuddy4eaDpGpPAfKKJ 7oFaqy+9BK4nPljc11a7pQB82UWLd93HubaTbfOLYOIEhMCdoxCmNUnJnhCKvC76 Pcv1e4CJtNO/Dp74jJsFd4WTlO4Lz4PEFZd9JHIlk6qgIIm88k7vwIPOamlhXD8X Mea6txVXjqYYQoYcljo5FJChCm3NeZfB7YvA+FNiXSeC3uvyrq+1froloXpIJ5Dt hn/RSgF1xbWY0WD4cXDZqt02KWtdB5QaVV/STqRCRnDExp+vnN6rmTPwwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8/yEU+M+VSVDCO7P0DYhmrKCvZMB8GA1UdIwQY MBaAFOxweQzc4MGSrIhvPZ73JfOZUYOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81MDc2NjAtMTJiYS00YmU4LTliNzMt Yjc0OTM4N2RmMGY1LzEvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81MDc2NjAtMTJiYS00YmU4LTliNzMtYjc0OTM4N2RmMGY1 LzEvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGUhY0fy apwoAJF2nWpSeP5x6KmtLlllUsdVPDWjH/p/l9G/+8Ssu26FNfbOw0NlNGqR3viR +n6DcZwoYAQA5CemZpbGvDRO3YrcmkAKU/C1HxJQJmTHArfoVaZe8PrOW+uuUFWG A7SPCQuL2KjLHHZUJxQMlfbfeMCNwYobbQ7Q0P2pLIohxsL7RYNAkgW7aH/mgbEm koKzFzX29EH+OH0dPwOfuJMKQmApyogCiIfmh7c4FKHDbZrUoUzH/cOSvqzB9yFE cp66UgVeY6mb936+s6aFFPGLyaDhuCexnW165CEn0JZ90kwO0Y1tKD0Zsy6rxKJf u//ZLLLpNrYHiw== -----END CERTIFICATE-----Generated at Wed Dec 24 13:40:03 2025 by rpki-client