This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json) Hash identifier: j8/9CaXQTe1DzqFPKh1U7wfBciwAHyMl2wZwyjYR0GM= Subject key identifier: EA:C2:76:B1:E0:B4:40:CE:B4:26:91:5A:5E:17:CF:65:8F:2C:A1:BB Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019B3BD913939AA3DDC394D35923D328F5D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft Manifest number: 17AD Signing time: Sat 20 Dec 2025 13:00:40 +0000 Manifest this update: Sat 20 Dec 2025 13:00:40 +0000 Manifest next update: Sun 21 Dec 2025 13:00:40 +0000 Files and hashes: 1: 8b-JQ0B4OeomGbojQ4PaiEVexlI.roa (hash: PDPZU+uajsc1VUxrfy28T4es/CG+VoGQyCpiUpUvLyI=) 2: QABfuc4nvtHeT0vqG6JAEeAf21M.roa (hash: NHXYHLNca2RMaeMxdrJ0tAQ2KOU4PCzHu6iJg4kIFME=) 3: QL2SSYulhakA75BZZF7HAK2KA1o.roa (hash: GkirDpEuIjH7IlkFK7z0eYAoS+FFH+rtgzQ90Bk1Etc=) 4: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=) 5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: DR9/3SaDVBk1UrMfLYOpplrjrbgYisRrvZXc1CH+qts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:13:93:9a:a3:dd:c3:94:d3:59:23:d3:28:f5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Dec 20 13:00:40 2025 GMT Not After : Dec 21 13:00:40 2025 GMT Subject: CN=eac276b1e0b440ceb426915a5e17cf658f2ca1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:de:8b:73:53:af:97:16:4a:73:ad:b7:6e: c6:54:63:ea:c6:45:4d:b1:33:c7:ae:1d:80:33:19: c8:cf:dd:27:f2:d9:54:2d:e9:37:eb:67:f0:d6:64: 35:8c:38:8c:7a:86:48:51:c3:11:4f:39:5b:6c:69: 7e:85:92:e1:9f:3e:78:1b:39:d1:94:c2:c8:7a:00: cc:07:fa:d0:d7:b0:23:49:b7:99:8b:2b:71:6c:f2: 76:75:fc:19:89:e9:e7:07:06:99:7e:90:1d:a5:94: 2e:58:b1:15:0f:80:34:5b:d5:08:bb:e7:23:aa:7e: 5d:54:23:6a:1c:33:50:e0:3b:3e:f3:a7:2f:d4:6e: 9e:3a:91:d7:58:cf:41:3d:89:65:0e:b1:ae:25:22: 78:aa:1a:85:0e:bc:a0:cb:b9:c3:1e:84:ca:4a:9f: 8d:85:9c:b2:77:f8:43:48:02:49:5e:d4:43:fe:1d: 70:80:6e:fd:7d:8d:8d:ee:f6:bd:80:d9:c3:ef:99: 89:12:d5:d4:48:5e:c2:16:f3:6d:75:68:8f:75:75: b8:4d:bc:51:00:35:3a:12:2f:30:61:06:13:a8:92: 32:77:25:d3:30:66:ea:5a:e9:91:62:d5:6e:db:a0: 9c:46:43:92:c9:b0:ce:0e:e8:fb:31:f1:99:a2:60: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C2:76:B1:E0:B4:40:CE:B4:26:91:5A:5E:17:CF:65:8F:2C:A1:BB X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8b:3e:e0:30:c4:cb:0f:bc:90:52:03:40:5b:84:11:27:97: da:14:47:53:4f:1e:e8:35:b3:44:ca:65:61:fb:81:f2:24:c6: 9a:35:f0:b0:25:f1:84:45:6c:e6:68:2a:9a:26:e2:1f:ce:28: d9:46:ea:e1:19:af:87:71:c6:26:d0:3a:a0:cf:6b:e3:26:f7: 08:bf:60:fa:2c:ce:a9:24:ad:de:bc:6e:7d:cd:73:71:dd:89: d3:eb:34:03:06:a1:4f:87:0f:1f:ee:a6:8f:bf:a6:5d:ef:ca: c6:d2:77:b2:16:65:76:b8:b7:54:30:fe:c0:9f:f1:ca:6c:3b: 49:09:e0:72:65:f4:ac:de:d4:90:22:b4:46:f9:c3:ec:90:70: 89:64:18:07:49:ea:9e:db:b4:99:0a:a6:08:66:10:01:a4:ab: 90:93:c9:f1:fb:01:65:c5:23:46:45:88:f7:0a:1b:4e:05:25: 9a:01:61:5c:6a:9e:e3:ec:01:c5:d0:27:04:a6:a6:7a:88:b3: 07:99:5d:9a:a3:1f:ea:f6:0d:da:a5:0f:76:ea:2c:77:54:3a: fe:39:88:de:b2:2b:1a:82:a2:f7:ad:ea:84:8b:99:65:95:7b: 1c:7e:92:3b:e0:43:49:fd:4f:b9:36:0e:82:ee:68:09:b1:c5: 14:4e:12:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72ROTmqPdw5TTWSPTKPXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjUxMjIwMTMwMDQwWhcNMjUxMjIxMTMwMDQwWjAzMTEwLwYDVQQD EyhlYWMyNzZiMWUwYjQ0MGNlYjQyNjkxNWE1ZTE3Y2Y2NThmMmNhMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTfei3NTr5cWSnOtt27GVGPqxkVN sTPHrh2AMxnIz90n8tlULek362fw1mQ1jDiMeoZIUcMRTzlbbGl+hZLhnz54GznR lMLIegDMB/rQ17AjSbeZiytxbPJ2dfwZiennBwaZfpAdpZQuWLEVD4A0W9UIu+cj qn5dVCNqHDNQ4Ds+86cv1G6eOpHXWM9BPYllDrGuJSJ4qhqFDrygy7nDHoTKSp+N hZyyd/hDSAJJXtRD/h1wgG79fY2N7va9gNnD75mJEtXUSF7CFvNtdWiPdXW4TbxR ADU6Ei8wYQYTqJIydyXTMGbqWumRYtVu26CcRkOSybDODuj7MfGZomB9mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrCdrHgtEDOtCaRWl4Xz2WPLKG7MB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYs+4DDE yw+8kFIDQFuEESeX2hRHU08e6DWzRMplYfuB8iTGmjXwsCXxhEVs5mgqmibiH84o 2Ubq4Rmvh3HGJtA6oM9r4yb3CL9g+izOqSSt3rxufc1zcd2J0+s0AwahT4cPH+6m j7+mXe/KxtJ3shZldri3VDD+wJ/xymw7SQngcmX0rN7UkCK0RvnD7JBwiWQYB0nq ntu0mQqmCGYQAaSrkJPJ8fsBZcUjRkWI9wobTgUlmgFhXGqe4+wBxdAnBKameoiz B5ldmqMf6vYN2qUPduosd1Q6/jmI3rIrGoKi963qhIuZZZV7HH6SO+BDSf1PuTYO gu5oCbHFFE4SoA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:32 2025 by rpki-client