This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json) Hash identifier: l33kweuupJyrv7jT4nDCVhiqJtvDUYYa3pIAfv7M0hs= Subject key identifier: D3:93:A8:0F:E0:A9:24:55:41:C2:E4:0B:6F:D9:DD:90:C3:3B:F0:93 Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9 Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9 Certificate serial: 019B766E5BB7294F573C0D9E0C0017B934D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft Manifest number: 0319 Signing time: Wed 31 Dec 2025 22:01:42 +0000 Manifest this update: Wed 31 Dec 2025 22:01:42 +0000 Manifest next update: Thu 01 Jan 2026 22:01:42 +0000 Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: p3Zg7hI8advvS5lEAFIiu/aDCvinRdBQgAcubZt96xk=) 2: xmQ5skD8YtPqUxW5yzoA6bHhREg.roa (hash: JOTsRiuQWzCXcl+Wr2hE6xVJO7LXDTormwzqqmVX6eE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6e:5b:b7:29:4f:57:3c:0d:9e:0c:00:17:b9:34:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9 Validity Not Before: Dec 31 22:01:42 2025 GMT Not After : Jan 1 22:01:42 2026 GMT Subject: CN=d393a80fe0a9245541c2e40b6fd9dd90c33bf093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:17:c4:df:2a:a7:57:4a:34:c9:1f:5e:40: a6:4e:ff:2b:cc:82:ad:86:7d:34:1e:c0:fd:d4:4b: e9:96:6c:7c:5c:b9:5d:35:df:41:55:b9:c3:6a:92: 6b:07:2b:8e:45:ee:27:f5:02:69:55:b7:da:4a:5c: 1a:ab:a8:1b:21:3e:45:46:07:92:64:d6:65:bb:34: 58:50:1e:5c:be:7f:73:bd:8e:3d:af:e9:92:a5:b8: f6:bb:68:8a:ad:16:19:45:6b:90:d7:f4:c5:de:d3: 8b:f7:97:c6:a4:72:60:20:aa:62:24:d4:d4:a5:65: 3c:8d:9f:42:2c:80:48:71:0e:8b:ad:66:e7:05:59: 0b:9d:9c:74:e1:15:d7:65:eb:e2:bc:33:ff:84:64: 69:3b:70:ad:5e:8b:18:38:7d:9b:a9:3a:3c:80:7d: e1:5d:4f:6c:3a:f5:a2:f8:ac:f5:28:ba:fc:12:75: c0:cc:c8:67:33:be:f3:9b:96:ea:01:bc:62:ca:7a: b6:71:c3:c5:d4:54:68:a4:bb:8f:0b:7f:f6:94:7a: 49:ce:dd:be:b1:cc:06:4e:f8:9b:f0:1c:60:18:74: af:6c:b0:e0:1a:a0:95:4b:54:6d:bd:f0:1c:49:e2: 91:a5:97:b9:05:f8:1e:1d:c4:43:c3:49:be:48:bf: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:93:A8:0F:E0:A9:24:55:41:C2:E4:0B:6F:D9:DD:90:C3:3B:F0:93 X509v3 Authority Key Identifier: keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:87:5a:7f:78:50:fe:40:a7:f1:c2:c3:da:3e:4f:ed:89:af: b7:a1:d7:86:df:5e:f9:e5:d0:2e:52:2d:71:00:40:ff:21:80: a5:06:35:ce:94:9d:99:e4:ab:29:d0:df:78:3a:23:31:d0:6a: 4a:3a:3d:b2:9f:a2:e4:e6:72:ac:5b:e0:fa:aa:00:6b:a8:07: 1f:98:90:02:78:2f:42:15:76:d7:70:91:1b:17:a2:4c:ba:45: 26:70:ea:0a:04:6b:12:a1:1e:7f:52:ee:80:6a:e1:3c:2b:24: 82:28:b2:43:1b:80:dd:b1:0e:5d:66:86:e0:e9:75:a6:3f:e3: 66:d7:44:e0:d3:51:41:0d:a5:23:46:58:e2:f3:17:a5:a8:db: 80:83:53:4a:ad:11:36:ed:11:23:0e:4b:bd:c1:75:97:62:53: 8b:04:ab:03:52:3d:d8:c4:49:c4:e0:e5:90:d6:6f:79:83:49: d5:6a:c0:27:39:43:c8:f9:90:29:f1:7f:21:84:9a:e9:14:03: db:be:64:bc:bb:4a:37:5a:36:e5:58:44:22:7f:ba:cd:a0:50: 03:47:cf:db:20:2b:d4:62:b1:ba:4f:8b:7e:98:29:e1:f6:a1: ce:ff:48:17:ed:7d:b5:97:c0:1b:1d:e2:8a:cd:79:df:1a:06: a4:a1:02:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2blu3KU9XPA2eDAAXuTTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTM1ZjRjODY4MGNlMGRiYTRhMDNkOTVlNjY1YzkzY2M5 OWNlYjkwHhcNMjUxMjMxMjIwMTQyWhcNMjYwMTAxMjIwMTQyWjAzMTEwLwYDVQQD EyhkMzkzYTgwZmUwYTkyNDU1NDFjMmU0MGI2ZmQ5ZGQ5MGMzM2JmMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJoXxN8qp1dKNMkfXkCmTv8rzIKt hn00HsD91Evplmx8XLldNd9BVbnDapJrByuORe4n9QJpVbfaSlwaq6gbIT5FRgeS ZNZluzRYUB5cvn9zvY49r+mSpbj2u2iKrRYZRWuQ1/TF3tOL95fGpHJgIKpiJNTU pWU8jZ9CLIBIcQ6LrWbnBVkLnZx04RXXZevivDP/hGRpO3CtXosYOH2bqTo8gH3h XU9sOvWi+Kz1KLr8EnXAzMhnM77zm5bqAbxiynq2ccPF1FRopLuPC3/2lHpJzt2+ scwGTvib8BxgGHSvbLDgGqCVS1RtvfAcSeKRpZe5BfgeHcRDw0m+SL/MMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOTqA/gqSRVQcLkC2/Z3ZDDO/CTMB8GA1UdIwQY MBaAFOxTX0yGgM4NukoD2V5mXJPMmc65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMt NDJmMmZmODU5MzczLzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMtNDJmMmZmODU5Mzcz LzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIdaf3hQ /kCn8cLD2j5P7Ymvt6HXht9e+eXQLlItcQBA/yGApQY1zpSdmeSrKdDfeDojMdBq Sjo9sp+i5OZyrFvg+qoAa6gHH5iQAngvQhV213CRGxeiTLpFJnDqCgRrEqEef1Lu gGrhPCskgiiyQxuA3bEOXWaG4Ol1pj/jZtdE4NNRQQ2lI0ZY4vMXpajbgINTSq0R Nu0RIw5LvcF1l2JTiwSrA1I92MRJxODlkNZveYNJ1WrAJzlDyPmQKfF/IYSa6RQD 275kvLtKN1o25VhEIn+6zaBQA0fP2yAr1GKxuk+Lfpgp4fahzv9IF+19tZfAGx3i is153xoGpKECAQ== -----END CERTIFICATE-----Generated at Thu Jan 1 00:46:41 2026 by rpki-client