This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json) Hash identifier: WMfN5S5mW/swFcXEKlRlBY0+6+TQFfxMn+s/nFJvK0o= Subject key identifier: 45:FB:C0:86:57:6F:8B:06:CE:AA:87:0C:F5:0F:7C:80:43:A8:9E:77 Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019B4B4C537F38B4A38081FC6CD42CFF4898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft Manifest number: 17B5 Signing time: Tue 23 Dec 2025 13:00:51 +0000 Manifest this update: Tue 23 Dec 2025 13:00:51 +0000 Manifest next update: Wed 24 Dec 2025 13:00:51 +0000 Files and hashes: 1: 8b-JQ0B4OeomGbojQ4PaiEVexlI.roa (hash: PDPZU+uajsc1VUxrfy28T4es/CG+VoGQyCpiUpUvLyI=) 2: QABfuc4nvtHeT0vqG6JAEeAf21M.roa (hash: NHXYHLNca2RMaeMxdrJ0tAQ2KOU4PCzHu6iJg4kIFME=) 3: QL2SSYulhakA75BZZF7HAK2KA1o.roa (hash: GkirDpEuIjH7IlkFK7z0eYAoS+FFH+rtgzQ90Bk1Etc=) 4: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=) 5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: uKMzIAzVQays7zlYk+oEDxARwzx5yr8M2TFScoFwGhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:53:7f:38:b4:a3:80:81:fc:6c:d4:2c:ff:48:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Dec 23 13:00:51 2025 GMT Not After : Dec 24 13:00:51 2025 GMT Subject: CN=45fbc086576f8b06ceaa870cf50f7c8043a89e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:76:d7:a4:3f:63:76:52:a6:08:ad:b6:26: 54:3a:8a:68:08:bd:35:a2:47:dc:a4:92:60:b9:a4: 23:bc:4e:99:d9:1d:a5:7d:1e:2f:af:91:bc:cd:c7: 73:96:a5:84:61:35:10:e9:fb:be:01:fb:70:fb:2f: a7:20:ff:4a:ca:ab:14:45:5e:15:65:20:03:75:7a: cb:52:fb:28:e1:e6:fb:5f:83:b7:3a:47:3a:f0:9a: 68:2a:01:37:0c:a4:6f:f6:d1:a9:7d:9b:50:bd:31: 51:23:17:5f:97:72:6d:45:d0:69:4f:7b:e1:ca:78: 97:06:cf:8d:9c:6a:08:a5:07:24:71:81:89:f3:c5: 63:95:b4:c7:57:cd:6c:f5:13:c3:00:4b:0a:95:48: de:68:0c:28:f8:cd:39:ba:e7:a4:6b:39:af:2a:81: b5:6f:a7:04:bb:41:ba:94:61:e3:57:b8:33:4b:62: b3:6e:a3:ad:4f:6f:22:ce:b8:ae:3f:13:1f:e5:22: 86:04:12:93:93:35:5b:c3:df:f9:40:4c:a8:e7:a2: 70:66:c3:f0:f4:b6:d2:6b:1f:ce:78:b4:84:e0:23: 64:91:e7:0c:78:63:0e:09:24:91:15:02:61:3d:e7: 29:5c:21:21:b1:42:cb:03:84:41:c2:37:91:8e:62: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FB:C0:86:57:6F:8B:06:CE:AA:87:0C:F5:0F:7C:80:43:A8:9E:77 X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:77:59:5d:0a:be:44:0c:e4:c3:3d:29:f8:1d:4f:a4:d5:ae: 2d:29:17:8c:20:1c:23:a0:1f:16:95:03:fb:75:a1:97:ed:bf: 52:0b:52:8d:55:63:b7:53:66:96:9b:08:03:ac:e6:95:09:7e: 47:c9:44:35:d4:6e:e0:a1:a2:c9:c5:89:df:56:78:0e:36:fe: 22:48:a1:5f:a7:08:78:97:94:d8:9e:24:80:ca:4a:c7:cf:f0: 51:eb:e6:95:40:fe:b3:6d:b8:b4:26:7a:69:3e:bf:d0:51:00: 71:d8:36:c9:cd:3d:c2:52:22:57:8a:46:40:c6:5d:39:ce:59: e4:83:2b:11:09:c0:e9:d1:ed:16:18:3c:24:85:c4:1f:b2:4b: 88:23:bf:14:bc:85:ce:6e:65:dc:a1:51:58:ad:e6:bd:8f:cd: 56:4f:f0:cc:14:73:a3:73:9e:e1:44:0c:cb:74:bf:63:00:b6: 42:4b:0b:50:c5:eb:08:57:c9:51:cb:11:8a:fd:f2:0c:f7:84: c3:24:66:46:0e:66:08:46:af:b1:6b:2f:a5:2b:f1:52:36:a3: 80:87:a4:3f:b0:38:67:3f:97:60:77:0b:a1:4d:7d:ba:6a:0c: a7:11:2a:87:b4:4e:63:00:0d:47:ae:ad:d3:1c:09:c2:78:dc: b7:94:e3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTFN/OLSjgIH8bNQs/0iYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjUxMjIzMTMwMDUxWhcNMjUxMjI0MTMwMDUxWjAzMTEwLwYDVQQD Eyg0NWZiYzA4NjU3NmY4YjA2Y2VhYTg3MGNmNTBmN2M4MDQzYTg5ZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ1216Q/Y3ZSpgittiZUOopoCL01 okfcpJJguaQjvE6Z2R2lfR4vr5G8zcdzlqWEYTUQ6fu+Aftw+y+nIP9KyqsURV4V ZSADdXrLUvso4eb7X4O3Okc68JpoKgE3DKRv9tGpfZtQvTFRIxdfl3JtRdBpT3vh yniXBs+NnGoIpQckcYGJ88VjlbTHV81s9RPDAEsKlUjeaAwo+M05uuekazmvKoG1 b6cEu0G6lGHjV7gzS2KzbqOtT28izriuPxMf5SKGBBKTkzVbw9/5QEyo56JwZsPw 9LbSax/OeLSE4CNkkecMeGMOCSSRFQJhPecpXCEhsULLA4RBwjeRjmLiSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEX7wIZXb4sGzqqHDPUPfIBDqJ53MB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUndZXQq+ RAzkwz0p+B1PpNWuLSkXjCAcI6AfFpUD+3Whl+2/UgtSjVVjt1NmlpsIA6zmlQl+ R8lENdRu4KGiycWJ31Z4Djb+IkihX6cIeJeU2J4kgMpKx8/wUevmlUD+s224tCZ6 aT6/0FEAcdg2yc09wlIiV4pGQMZdOc5Z5IMrEQnA6dHtFhg8JIXEH7JLiCO/FLyF zm5l3KFRWK3mvY/NVk/wzBRzo3Oe4UQMy3S/YwC2QksLUMXrCFfJUcsRiv3yDPeE wyRmRg5mCEavsWsvpSvxUjajgIekP7A4Zz+XYHcLoU19umoMpxEqh7ROYwANR66t 0xwJwnjct5Tj9g== -----END CERTIFICATE-----Generated at Tue Dec 23 15:23:27 2025 by rpki-client