This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json) Hash identifier: jlW/ta4FAYBGu0DJV9ITYOBChXplnxzhwP/tSWdqWZ0= Subject key identifier: 7D:47:11:ED:70:FD:63:73:CD:BC:2F:39:5A:B8:E1:78:CD:EB:09:36 Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019B41A46EF2702B9BA4B63823C885352CD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft Manifest number: 17B0 Signing time: Sun 21 Dec 2025 16:00:53 +0000 Manifest this update: Sun 21 Dec 2025 16:00:53 +0000 Manifest next update: Mon 22 Dec 2025 16:00:53 +0000 Files and hashes: 1: 8b-JQ0B4OeomGbojQ4PaiEVexlI.roa (hash: PDPZU+uajsc1VUxrfy28T4es/CG+VoGQyCpiUpUvLyI=) 2: QABfuc4nvtHeT0vqG6JAEeAf21M.roa (hash: NHXYHLNca2RMaeMxdrJ0tAQ2KOU4PCzHu6iJg4kIFME=) 3: QL2SSYulhakA75BZZF7HAK2KA1o.roa (hash: GkirDpEuIjH7IlkFK7z0eYAoS+FFH+rtgzQ90Bk1Etc=) 4: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=) 5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: nDYTinpgnSN2l50jZTwNTbiVMfdG5Bq6QY36LVQeTqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:6e:f2:70:2b:9b:a4:b6:38:23:c8:85:35:2c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Dec 21 16:00:53 2025 GMT Not After : Dec 22 16:00:53 2025 GMT Subject: CN=7d4711ed70fd6373cdbc2f395ab8e178cdeb0936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:08:96:a9:e5:84:cb:d1:4b:dc:ac:46:df:9e: b1:c5:65:4a:22:94:fe:5b:84:d8:56:da:0b:ef:3f: 5d:1e:80:6b:74:d8:28:89:e0:81:c4:14:b0:59:27: b0:d9:3d:25:06:8e:98:b1:35:91:a9:26:92:26:02: 5b:4e:96:d7:16:9a:89:0b:c0:3f:5b:56:99:6b:32: c9:85:9d:9a:bb:21:b2:16:9b:5b:d1:8f:06:67:b4: db:bf:33:22:8b:69:19:c0:b0:05:29:dd:44:4e:f0: 0c:92:e1:df:4d:54:97:60:8b:12:a2:19:c9:15:03: 0a:23:5f:26:cc:1d:27:46:84:f4:36:0f:cf:74:6a: 3a:1c:eb:0b:ed:f9:4a:f5:e4:e5:4b:90:58:16:79: d4:81:fa:3c:a2:e6:b7:b2:7c:a0:a6:12:67:62:24: 29:15:1c:b3:01:bf:1e:92:2c:c2:16:bb:1e:3c:5b: 2d:5f:69:ad:64:c0:74:c9:88:69:38:93:b2:c5:f3: 3d:89:0e:13:9c:f7:f9:6c:df:00:5c:d3:04:c6:f5: 05:b5:9b:4d:70:c5:42:df:89:92:32:15:d5:c2:ce: 76:93:49:bc:6c:d5:a6:2a:c8:93:e9:ea:b8:40:d1: 57:75:47:0a:5c:02:0a:c0:7e:7e:97:90:2d:b1:ad: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:47:11:ED:70:FD:63:73:CD:BC:2F:39:5A:B8:E1:78:CD:EB:09:36 X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ac:af:74:32:f4:28:9e:ad:8f:03:cf:14:a7:eb:7e:e7:17: 0a:e2:20:c5:71:37:c9:07:72:f5:74:0e:51:21:94:9d:c2:44: 07:15:cf:d7:eb:6c:41:40:b2:8d:a2:9e:a5:2e:b1:40:bf:97: 2e:a6:cc:1e:13:5e:71:46:bc:75:a2:ab:c0:b7:13:6a:fa:30: 3c:7d:87:67:99:5c:26:7b:85:14:98:72:db:67:5c:61:b0:fb: 9e:6d:fe:fc:73:1d:97:47:3f:93:38:5c:3b:9e:97:11:f7:8b: 9a:9a:9c:c5:df:84:07:8d:45:e5:b2:d7:1a:8f:33:e2:0d:7e: ef:2b:a8:d5:91:fc:81:e4:44:2f:23:f3:f3:06:fe:2e:94:cf: e0:f9:eb:1d:b6:ee:88:2b:a9:e9:49:47:62:6d:0f:41:de:db: 4f:82:ef:45:7e:bf:13:8a:70:78:f2:17:f4:82:72:e6:0b:d5: 33:df:99:1f:27:31:2f:96:1c:d7:de:0c:7d:43:05:a2:ff:22: 80:eb:e9:9c:7f:22:cb:97:91:f9:38:34:6d:6e:09:2a:78:6a: ed:45:35:e6:c4:ba:08:14:c8:33:a1:a8:4f:9c:73:f2:56:bf: c3:24:df:e3:a8:b1:c6:cb:01:a8:cc:1d:3a:70:c8:a7:44:b4: f9:01:91:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpG7ycCubpLY4I8iFNSzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjUxMjIxMTYwMDUzWhcNMjUxMjIyMTYwMDUzWjAzMTEwLwYDVQQD Eyg3ZDQ3MTFlZDcwZmQ2MzczY2RiYzJmMzk1YWI4ZTE3OGNkZWIwOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0giWqeWEy9FL3KxG356xxWVKIpT+ W4TYVtoL7z9dHoBrdNgoieCBxBSwWSew2T0lBo6YsTWRqSaSJgJbTpbXFpqJC8A/ W1aZazLJhZ2auyGyFptb0Y8GZ7TbvzMii2kZwLAFKd1ETvAMkuHfTVSXYIsSohnJ FQMKI18mzB0nRoT0Ng/PdGo6HOsL7flK9eTlS5BYFnnUgfo8oua3snygphJnYiQp FRyzAb8ekizCFrsePFstX2mtZMB0yYhpOJOyxfM9iQ4TnPf5bN8AXNMExvUFtZtN cMVC34mSMhXVws52k0m8bNWmKsiT6eq4QNFXdUcKXAIKwH5+l5Atsa1jQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1HEe1w/WNzzbwvOVq44XjN6wk2MB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgayvdDL0 KJ6tjwPPFKfrfucXCuIgxXE3yQdy9XQOUSGUncJEBxXP1+tsQUCyjaKepS6xQL+X LqbMHhNecUa8daKrwLcTavowPH2HZ5lcJnuFFJhy22dcYbD7nm3+/HMdl0c/kzhc O56XEfeLmpqcxd+EB41F5bLXGo8z4g1+7yuo1ZH8geRELyPz8wb+LpTP4PnrHbbu iCup6UlHYm0PQd7bT4LvRX6/E4pwePIX9IJy5gvVM9+ZHycxL5Yc194MfUMFov8i gOvpnH8iy5eR+Tg0bW4JKnhq7UU15sS6CBTIM6GoT5xz8la/wyTf46ixxssBqMwd OnDIp0S0+QGRsw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:14:09 2025 by rpki-client