This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft File: 7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json) Hash identifier: Uj5jaN5rvXvV8ou5+TREYAlGUYUGIo43G1cKy1dsQnc= Subject key identifier: 10:AA:AE:79:72:61:7A:53:80:1B:7C:50:2C:57:B8:33:C7:39:07:35 Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4 Certificate serial: 019B3A21D2D7ED643DC7E54F1C866E482638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft Manifest number: 0D64 Signing time: Sat 20 Dec 2025 05:00:53 +0000 Manifest this update: Sat 20 Dec 2025 05:00:53 +0000 Manifest next update: Sun 21 Dec 2025 05:00:53 +0000 Files and hashes: 1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: ZFRPzuDpXvyishWkWtZ5+hgcacOGaF7OpJHH0MFoNsM=) 2: Xc0IWZbMmju7pbBifzTAy_VFZls.roa (hash: ieHjZYyTowrkAjtUXCZ6gebps3wJnEiAbxYcxuJzbhs=) 3: gRffKuEX0czsrnlZBP9RuWOhUxc.roa (hash: ZNpwDIB3C/ZPnj8Whylo5eGsxYBRndXhcd3COmk7erw=) 4: yxisVf5RbQd_iyu5bjOm2uTCJqY.roa (hash: TlTPbndQ3fvJ6HctsZUhUZG2cQbNIxMU2U4IlG98W/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:d2:d7:ed:64:3d:c7:e5:4f:1c:86:6e:48:26:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4 Validity Not Before: Dec 20 05:00:53 2025 GMT Not After : Dec 21 05:00:53 2025 GMT Subject: CN=10aaae7972617a53801b7c502c57b833c7390735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:6d:98:9d:ab:ef:01:7e:e4:a6:36:1d:d4: 5b:aa:c9:1c:c3:8b:fd:20:92:18:b4:13:95:4e:b6: 52:1a:2b:08:3d:91:c6:32:e5:ad:66:62:96:1c:9e: ad:c5:00:8d:0e:9c:47:0d:aa:e3:55:e6:db:a0:32: cc:7a:46:1c:d4:74:70:27:f9:c8:d5:02:41:e1:f4: ff:e5:60:4c:ac:f2:2b:9b:17:89:16:19:fa:ff:49: 47:29:39:6c:54:78:5f:09:de:9f:bb:41:a1:a2:a8: 1b:3c:54:ce:9f:ea:65:2b:0e:18:9c:36:52:28:e7: 89:a5:a6:19:49:2e:53:38:ad:7d:76:6e:78:e9:5b: cc:03:b2:38:51:46:f2:94:4b:d2:a0:81:26:08:11: d5:25:8f:20:f0:94:da:8e:92:c6:ef:47:04:ca:51: f5:74:f4:29:59:4f:a4:c9:ba:86:61:1b:46:f7:6f: 25:e7:2b:b0:1d:62:8b:c7:c3:a1:a0:57:07:39:9e: 64:cd:6f:35:2c:a3:8d:85:bd:c0:c6:73:a5:b3:ef: b0:02:7a:e2:53:f5:56:67:27:11:c2:6d:36:3b:4b: 7b:bc:69:29:2e:68:46:36:07:06:51:3d:68:1b:9f: e1:6d:6c:46:3f:3d:7e:e4:63:81:72:9c:43:9c:a6: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:AE:79:72:61:7A:53:80:1B:7C:50:2C:57:B8:33:C7:39:07:35 X509v3 Authority Key Identifier: keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f3:4c:b4:cd:e8:cb:4a:a9:e0:f3:de:f9:0a:71:2b:07:d2: af:c7:ac:65:eb:40:38:6d:c5:34:e0:51:4d:df:79:8d:f0:22: d8:75:3f:f6:49:d5:36:92:ec:f9:8b:9f:17:92:9f:d6:c2:7e: 2d:a4:e1:79:8b:52:a9:a8:5b:72:d1:ef:c0:ba:f4:86:7b:c8: 02:7d:36:2b:10:95:27:23:30:b9:e4:8c:26:a0:b3:7b:e3:f7: f3:fb:de:7a:9c:ad:50:ba:71:8c:4a:a5:b5:99:85:50:50:49: 2d:92:af:12:0a:b6:47:9b:d2:88:a1:31:49:5a:6b:32:b6:84: 12:c0:d4:b9:6c:d7:30:f8:33:c2:be:cd:12:4d:ac:eb:fb:1a: 11:97:35:b5:3b:53:d0:1a:f3:67:29:ba:3e:f7:00:ed:fa:91: ed:f3:fc:3c:eb:43:2a:f6:26:da:91:94:dc:76:1b:5a:e5:33: b9:f1:3f:79:92:3b:f4:e7:be:55:76:c0:82:31:53:57:57:1e: fb:9a:ea:2b:c5:fd:ed:6a:29:cc:9a:d2:de:ee:11:be:1d:0f: 85:65:73:a2:43:79:1c:fe:11:eb:2f:ee:8f:fb:03:f1:6a:68: fa:1a:6d:84:c5:2a:e0:7b:6d:2b:8f:0c:00:43:c1:cd:76:82: 4e:1c:fd:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IdLX7WQ9x+VPHIZuSCY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4 ZWJiYjQwHhcNMjUxMjIwMDUwMDUzWhcNMjUxMjIxMDUwMDUzWjAzMTEwLwYDVQQD EygxMGFhYWU3OTcyNjE3YTUzODAxYjdjNTAyYzU3YjgzM2M3MzkwNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBdtmJ2r7wF+5KY2HdRbqskcw4v9 IJIYtBOVTrZSGisIPZHGMuWtZmKWHJ6txQCNDpxHDarjVebboDLMekYc1HRwJ/nI 1QJB4fT/5WBMrPIrmxeJFhn6/0lHKTlsVHhfCd6fu0GhoqgbPFTOn+plKw4YnDZS KOeJpaYZSS5TOK19dm546VvMA7I4UUbylEvSoIEmCBHVJY8g8JTajpLG70cEylH1 dPQpWU+kybqGYRtG928l5yuwHWKLx8OhoFcHOZ5kzW81LKONhb3AxnOls++wAnri U/VWZycRwm02O0t7vGkpLmhGNgcGUT1oG5/hbWxGPz1+5GOBcpxDnKYhXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCqrnlyYXpTgBt8UCxXuDPHOQc1MB8GA1UdIwQY MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It ZTQ1ZmE2NGQ0ZDJkLzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/NMtM3o y0qp4PPe+QpxKwfSr8esZetAOG3FNOBRTd95jfAi2HU/9knVNpLs+YufF5Kf1sJ+ LaTheYtSqahbctHvwLr0hnvIAn02KxCVJyMwueSMJqCze+P38/veepytULpxjEql tZmFUFBJLZKvEgq2R5vSiKExSVprMraEEsDUuWzXMPgzwr7NEk2s6/saEZc1tTtT 0BrzZym6PvcA7fqR7fP8POtDKvYm2pGU3HYbWuUzufE/eZI79Oe+VXbAgjFTV1ce +5rqK8X97WopzJrS3u4Rvh0PhWVzokN5HP4R6y/uj/sD8Wpo+hpthMUq4HttK48M AEPBzXaCThz9lw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:54:09 2025 by rpki-client