This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json) Hash identifier: 8JDmuSuvR5qqIdc9smziXi//t5Dtelmi/8Zb2ts2O7c= Subject key identifier: 9D:75:3D:C8:CE:92:B2:65:E7:21:FE:37:AD:67:34:2E:45:3A:52:33 Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1 Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1 Certificate serial: 019B522A45E73A301180930DF751F204ABD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft Manifest number: 12D8 Signing time: Wed 24 Dec 2025 21:01:00 +0000 Manifest this update: Wed 24 Dec 2025 21:01:00 +0000 Manifest next update: Thu 25 Dec 2025 21:01:00 +0000 Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: 6ElXcOh7Ynd8abLkECEcgL16z3LiOcQkEOnxG1d2BQo=) 2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:45:e7:3a:30:11:80:93:0d:f7:51:f2:04:ab:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1 Validity Not Before: Dec 24 21:01:00 2025 GMT Not After : Dec 25 21:01:00 2025 GMT Subject: CN=9d753dc8ce92b265e721fe37ad67342e453a5233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:68:6b:72:47:20:90:91:eb:40:be:e4:d8: 5b:ff:1a:54:7d:46:81:82:ee:8f:e8:50:af:27:69: 5d:a6:4b:70:df:c1:89:92:74:4d:03:83:90:7f:98: ae:fc:e3:2b:48:74:e4:69:d7:47:12:d7:35:3b:ab: be:46:2b:cb:34:6b:6b:c6:eb:7f:71:25:f8:2e:47: b9:b9:2c:59:76:ce:2a:3b:9e:99:50:79:1d:67:a6: 40:d3:e7:af:aa:48:89:99:97:24:91:28:d8:9f:54: 61:b6:37:21:2f:9f:26:9e:71:97:4a:a0:0b:1a:90: 89:59:cd:c9:b4:4b:61:94:a8:af:69:bf:64:a2:b1: 9e:ae:8a:46:16:5e:8b:a5:6b:9c:17:1d:c8:73:44: 44:1a:59:7d:ed:12:1f:a1:44:3a:c9:e4:e5:e5:89: 1b:32:6c:66:93:db:27:a9:2c:18:4f:b9:31:5a:02: 6e:91:4f:bd:75:c3:7e:87:09:30:3a:61:dd:19:b1: d6:13:7c:d0:1a:08:64:26:31:de:d9:45:79:16:16: 09:2b:7f:b7:15:c4:9f:7d:da:da:a9:7d:ad:29:8d: e6:bf:7f:29:75:c2:58:6b:ff:b4:22:0a:cb:cf:cb: ef:3e:a0:bc:10:e4:2c:6e:e9:0b:09:b4:19:a7:85: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:75:3D:C8:CE:92:B2:65:E7:21:FE:37:AD:67:34:2E:45:3A:52:33 X509v3 Authority Key Identifier: keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:47:c3:40:52:a7:e0:c9:3e:0e:77:0d:21:ed:8f:6a:e2:5d: fa:fa:ac:77:1e:70:85:a4:c7:70:d4:65:23:8d:86:b6:48:cb: 8f:e8:ca:09:f8:42:ff:83:a6:ac:a2:68:32:02:61:89:3d:87: c7:de:eb:b0:a9:75:1c:7e:2a:f3:d2:70:9c:63:5d:8b:f1:72: fb:6c:03:bd:b0:2d:4e:85:8a:2d:ed:38:c3:fe:ce:33:69:3c: 72:ae:e9:1e:d9:cc:6d:1a:88:c9:a4:37:83:53:4d:77:2e:74: 78:97:51:a9:c4:5b:37:64:98:bc:f9:79:ff:ac:76:e5:fa:bd: 1a:82:a7:be:fe:5b:4e:cb:a1:76:1b:dc:48:a6:ac:8a:cd:ef: 8e:08:34:e6:8f:fe:4a:41:1c:bd:74:3f:56:cd:79:03:77:2f: ac:de:60:1b:43:be:de:9b:f4:04:37:2a:8f:a1:e1:7f:f1:df: 15:6f:68:2b:c7:7b:09:47:46:52:2c:74:d0:e7:e6:90:7f:0c: f2:ab:ce:c8:64:0a:19:2f:70:82:3c:e3:ab:99:69:f9:e3:d5: cb:e5:90:19:9d:18:c4:1a:d3:86:9a:ee:70:10:bf:bc:23:f6: 19:3b:41:50:be:f4:c3:5f:f6:43:ff:8a:1d:52:b7:22:0e:b6: 2b:ed:c8:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKkXnOjARgJMN91HyBKvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOGZmOTZlYWUyZDQ0OGVjNzg0OWQxNzNiNTUyZjE1ZjBm NzA0YzEwHhcNMjUxMjI0MjEwMTAwWhcNMjUxMjI1MjEwMTAwWjAzMTEwLwYDVQQD Eyg5ZDc1M2RjOGNlOTJiMjY1ZTcyMWZlMzdhZDY3MzQyZTQ1M2E1MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirhoa3JHIJCR60C+5Nhb/xpUfUaB gu6P6FCvJ2ldpktw38GJknRNA4OQf5iu/OMrSHTkaddHEtc1O6u+RivLNGtrxut/ cSX4Lke5uSxZds4qO56ZUHkdZ6ZA0+evqkiJmZckkSjYn1RhtjchL58mnnGXSqAL GpCJWc3JtEthlKivab9korGeropGFl6LpWucFx3Ic0REGll97RIfoUQ6yeTl5Ykb Mmxmk9snqSwYT7kxWgJukU+9dcN+hwkwOmHdGbHWE3zQGghkJjHe2UV5FhYJK3+3 FcSffdraqX2tKY3mv38pdcJYa/+0IgrLz8vvPqC8EOQsbukLCbQZp4Un9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ11PcjOkrJl5yH+N61nNC5FOlIzMB8GA1UdIwQY MBaAFOyP+W6uLUSOx4SdFztVLxXw9wTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMt NmYxYzk3NGU4NjM3LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMtNmYxYzk3NGU4NjM3 LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEfDQFKn 4Mk+DncNIe2PauJd+vqsdx5whaTHcNRlI42GtkjLj+jKCfhC/4OmrKJoMgJhiT2H x97rsKl1HH4q89JwnGNdi/Fy+2wDvbAtToWKLe04w/7OM2k8cq7pHtnMbRqIyaQ3 g1NNdy50eJdRqcRbN2SYvPl5/6x25fq9GoKnvv5bTsuhdhvcSKasis3vjgg05o/+ SkEcvXQ/Vs15A3cvrN5gG0O+3pv0BDcqj6Hhf/HfFW9oK8d7CUdGUix00OfmkH8M 8qvOyGQKGS9wgjzjq5lp+ePVy+WQGZ0YxBrThprucBC/vCP2GTtBUL70w1/2Q/+K HVK3Ig62K+3Ibg== -----END CERTIFICATE-----Generated at Thu Dec 25 05:26:31 2025 by rpki-client