This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json) Hash identifier: nxhG+gPBEwfZIY3XuLDmGMh4QVmIoa1uFLqegbF5R+A= Subject key identifier: B6:3D:4B:ED:43:81:DF:EA:5E:96:47:A8:94:DE:17:3E:4C:51:69:9A Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51 Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51 Certificate serial: 019B4DE06FE678BB72EDD170A586E06F4F27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft Manifest number: 0A4A Signing time: Wed 24 Dec 2025 01:01:52 +0000 Manifest this update: Wed 24 Dec 2025 01:01:52 +0000 Manifest next update: Thu 25 Dec 2025 01:01:52 +0000 Files and hashes: 1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=) 2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: kfXarfxrhve0jTuTe3WcS6k9RoFAN1jZvF8HJAIG9S8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:6f:e6:78:bb:72:ed:d1:70:a5:86:e0:6f:4f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51 Validity Not Before: Dec 24 01:01:52 2025 GMT Not After : Dec 25 01:01:52 2025 GMT Subject: CN=b63d4bed4381dfea5e9647a894de173e4c51699a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:59:82:41:31:29:78:76:99:46:80:1a:55: fb:c8:6d:52:9d:0c:8c:7b:98:9a:ad:6a:ee:22:e3: 15:b2:ad:d7:fc:7a:9a:0b:33:82:f1:79:f3:7d:be: 95:03:ed:98:3b:d9:d6:62:be:a2:2e:19:da:2d:47: 7c:49:fa:88:5f:89:6b:7e:8a:fa:1b:83:9d:f6:6a: 0d:fe:98:5d:f5:ea:c4:60:91:8f:3b:99:3c:86:f2: 20:e8:c1:2a:98:41:47:be:55:3a:4e:fa:f2:4f:33: f9:de:2f:a8:cb:c1:d8:04:81:78:e3:1f:61:5e:5f: 38:b7:0e:30:20:1f:30:f9:af:9c:74:45:c6:39:66: b0:c0:79:5e:86:69:6c:e8:7c:5a:7d:ed:fe:dc:41: f3:94:af:09:d9:c8:90:05:66:d6:73:4e:e6:c5:f2: e9:74:63:dd:7d:2c:73:00:bc:89:9b:57:12:c1:31: 8d:e4:0e:49:7a:2c:cc:fd:07:ba:df:78:4b:52:73: 46:e6:dd:40:87:57:7f:16:b7:69:d6:9d:8e:aa:9b: 3f:1f:8a:68:ec:4c:71:5c:b5:9c:43:a8:65:cf:ce: 1d:d7:1c:1c:1f:39:5d:e2:95:cd:2b:29:b9:c6:65: b2:36:13:44:a0:b6:d5:49:1a:05:01:e5:04:c4:d1: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3D:4B:ED:43:81:DF:EA:5E:96:47:A8:94:DE:17:3E:4C:51:69:9A X509v3 Authority Key Identifier: keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ad:19:25:ca:f9:30:d2:66:cd:12:c3:20:7b:81:af:1c:c4: 64:74:7c:1e:53:e9:ad:ee:8c:f6:48:1f:90:5d:58:df:91:5b: c4:28:3c:18:c1:1b:d9:27:71:6d:18:fe:6a:e9:5b:5e:6f:90: a1:cd:35:fa:8c:1b:c8:45:38:f5:c3:16:06:28:bb:fd:c4:96: 65:8d:34:4d:5f:c9:36:2e:98:d2:17:32:71:ef:fc:b5:42:68: 8f:0b:06:6e:d6:31:51:ed:4e:e4:a2:be:52:0f:7b:e9:38:42: 2a:d6:fb:9b:1d:38:bc:71:36:52:ab:a0:f6:79:74:65:eb:c3: b1:c0:b9:63:29:a2:9a:be:8d:c0:b1:05:24:b0:bf:2f:49:0b: a1:cc:1b:a7:08:8f:6f:f9:23:46:e9:93:b7:42:78:96:67:28: ff:df:a6:bb:a6:1a:86:9d:2c:18:28:1b:27:08:1b:34:6c:40: d9:a7:be:36:c2:ed:86:ab:7e:72:99:1b:a1:46:a4:b7:58:35: 89:51:d3:b7:2a:51:bb:69:e4:06:70:e2:a8:9a:69:d6:fc:1c: 64:2b:cc:25:4e:16:2c:76:1c:8f:f8:b2:b8:46:c4:ef:00:2e: b2:ab:24:aa:21:8d:55:fb:20:63:2f:b4:0f:46:b2:d9:57:e8: 9f:84:fc:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4G/meLty7dFwpYbgb08nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjFkMGYyYzNkMjFlNTRjNGQxODEyNzYwNDQzNWE5MGYy NGRiNTEwHhcNMjUxMjI0MDEwMTUyWhcNMjUxMjI1MDEwMTUyWjAzMTEwLwYDVQQD EyhiNjNkNGJlZDQzODFkZmVhNWU5NjQ3YTg5NGRlMTczZTRjNTE2OTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz15ZgkExKXh2mUaAGlX7yG1SnQyM e5iarWruIuMVsq3X/HqaCzOC8Xnzfb6VA+2YO9nWYr6iLhnaLUd8SfqIX4lrfor6 G4Od9moN/phd9erEYJGPO5k8hvIg6MEqmEFHvlU6TvryTzP53i+oy8HYBIF44x9h Xl84tw4wIB8w+a+cdEXGOWawwHlehmls6Hxafe3+3EHzlK8J2ciQBWbWc07mxfLp dGPdfSxzALyJm1cSwTGN5A5JeizM/Qe633hLUnNG5t1Ah1d/Frdp1p2Oqps/H4po 7ExxXLWcQ6hlz84d1xwcHzld4pXNKym5xmWyNhNEoLbVSRoFAeUExNGpDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY9S+1Dgd/qXpZHqJTeFz5MUWmaMB8GA1UdIwQY MBaAFAux0PLD0h5UxNGBJ2BENakPJNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQt Nzk5ZjdmNDU2MTYwLzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQtNzk5ZjdmNDU2MTYw LzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmK0ZJcr5 MNJmzRLDIHuBrxzEZHR8HlPpre6M9kgfkF1Y35FbxCg8GMEb2SdxbRj+aulbXm+Q oc01+owbyEU49cMWBii7/cSWZY00TV/JNi6Y0hcyce/8tUJojwsGbtYxUe1O5KK+ Ug976ThCKtb7mx04vHE2Uqug9nl0ZevDscC5Yymimr6NwLEFJLC/L0kLocwbpwiP b/kjRumTt0J4lmco/9+mu6Yahp0sGCgbJwgbNGxA2ae+NsLthqt+cpkboUakt1g1 iVHTtypRu2nkBnDiqJpp1vwcZCvMJU4WLHYcj/iyuEbE7wAusqskqiGNVfsgYy+0 D0ay2Vfon4T8IA== -----END CERTIFICATE-----Generated at Wed Dec 24 04:48:27 2025 by rpki-client