This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft File: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json) Hash identifier: aD/t8TCFB85VmnsAQgULLptAb1r/xsCkcNFm1qhQHdw= Subject key identifier: 13:96:FC:74:57:F5:24:94:5C:B0:24:D7:3B:DF:05:33:20:4D:53:7D Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Certificate serial: 019B2EF90512BCD34CDA0169B22C0D56F1CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 01:00:30 +0000 Manifest this update: Thu 18 Dec 2025 01:00:30 +0000 Manifest next update: Fri 19 Dec 2025 01:00:30 +0000 Files and hashes: 1: NEVyHfghC_0IzY6RTdXjWpjvCt0.roa (hash: xHfTcNtnEobrDQmw9/aNxrvi78pLeFshtErwqNjdN7Q=) 2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: 027CpnCKqCsdjE3/14OPKr45aRf5hxLS7PGWmYioAvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:05:12:bc:d3:4c:da:01:69:b2:2c:0d:56:f1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Validity Not Before: Dec 18 01:00:30 2025 GMT Not After : Dec 19 01:00:30 2025 GMT Subject: CN=1396fc7457f524945cb024d73bdf0533204d537d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:49:44:38:2e:c0:d6:7c:51:8e:96:bf:95: 73:80:c7:bc:19:f2:1c:2e:b0:1a:0c:4e:13:40:ed: b8:80:1c:5b:d3:89:1e:17:f8:23:be:47:af:71:12: db:09:d6:64:4a:c6:7d:20:ab:bc:dc:ad:57:ac:8b: 45:15:de:02:f7:4f:51:c3:8f:7e:e0:4e:82:0e:20: 28:88:94:60:ac:4f:ab:4d:ed:95:ea:f3:1f:33:c3: 5f:16:6f:a8:7b:e8:36:90:7d:88:a8:88:c5:30:51: e2:33:1f:9a:14:15:4f:ed:86:64:1f:2d:0b:1c:2a: d5:67:88:19:f8:0b:8a:b7:12:1b:4f:e6:a5:4d:3d: 8e:81:a7:83:65:2f:74:ed:6b:d4:18:26:77:b4:b6: 3c:bd:f4:10:35:50:48:25:2d:c9:62:77:b9:e6:54: 74:f0:ec:e0:73:6e:e6:fb:9c:24:92:fc:89:f0:f4: 75:ee:3f:64:00:bb:4b:41:4d:49:ab:60:c8:e0:30: 24:ae:d5:48:fa:71:27:d8:67:ce:10:2d:02:f5:2d: c0:33:4a:26:7d:be:60:f5:fa:a4:46:a9:16:57:e2: 61:2f:8e:0b:b6:7a:fe:de:ca:b1:34:ed:37:2a:c4: 27:bc:d2:93:b8:74:97:f1:65:90:d7:52:4c:61:64: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:96:FC:74:57:F5:24:94:5C:B0:24:D7:3B:DF:05:33:20:4D:53:7D X509v3 Authority Key Identifier: keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d5:d1:8f:e9:cf:ca:dd:58:1f:cd:b7:4b:49:02:b8:1d:86: f5:d6:ff:ba:31:1f:14:30:05:97:4d:f0:05:fb:a5:6e:44:64: cd:24:b4:7f:25:ab:59:18:78:e8:16:83:91:b4:ff:d7:6b:5e: be:cc:ee:f3:47:1d:49:1b:03:f4:44:53:7b:64:9a:36:bf:47: 7f:31:5e:44:19:96:87:fa:27:7b:d1:f2:65:bd:12:ba:6b:90: 52:94:12:2a:c5:3a:36:79:94:7f:c8:ec:cb:89:2a:9a:5d:26: fd:a7:e3:6f:a7:65:63:ac:5f:92:67:a7:1b:ae:69:5b:24:a9: 66:fc:ff:59:a5:5f:75:6b:fb:99:19:90:ae:25:1b:10:48:28: d6:04:96:24:89:cf:2f:8f:9b:96:30:98:9b:17:23:b2:51:ad: 0a:d7:d6:59:5b:ea:3f:6c:31:74:5f:53:79:29:57:9a:63:e7: 41:b1:f3:e8:22:09:c7:fa:ec:a7:50:d5:a8:3e:a6:e7:32:0c: 13:95:44:80:6a:05:98:e4:ae:2e:fc:7d:4a:22:b2:7f:e8:36: e3:82:d7:dc:51:ca:43:e7:41:09:19:75:ce:f3:db:10:82:39: 8b:27:2f:34:e5:62:59:ed:cf:49:f4:89:36:fd:6a:48:02:8b: 84:5e:01:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+QUSvNNM2gFpsiwNVvHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YmIyNGM0Yjk3ODNjYTIzYjZlZDVlNzUwNDQzZWVkM2E3 MmY5M2IwHhcNMjUxMjE4MDEwMDMwWhcNMjUxMjE5MDEwMDMwWjAzMTEwLwYDVQQD EygxMzk2ZmM3NDU3ZjUyNDk0NWNiMDI0ZDczYmRmMDUzMzIwNGQ1MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkNJRDguwNZ8UY6Wv5VzgMe8GfIc LrAaDE4TQO24gBxb04keF/gjvkevcRLbCdZkSsZ9IKu83K1XrItFFd4C909Rw49+ 4E6CDiAoiJRgrE+rTe2V6vMfM8NfFm+oe+g2kH2IqIjFMFHiMx+aFBVP7YZkHy0L HCrVZ4gZ+AuKtxIbT+alTT2OgaeDZS907WvUGCZ3tLY8vfQQNVBIJS3JYne55lR0 8Ozgc27m+5wkkvyJ8PR17j9kALtLQU1Jq2DI4DAkrtVI+nEn2GfOEC0C9S3AM0om fb5g9fqkRqkWV+JhL44Ltnr+3sqxNO03KsQnvNKTuHSX8WWQ11JMYWSnEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOW/HRX9SSUXLAk1zvfBTMgTVN9MB8GA1UdIwQY MBaAFMe7JMS5eDyiO27V51BEPu06cvk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzIt NGI1OTU3YWE3NDdmLzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzItNGI1OTU3YWE3NDdm LzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtXRj+nP yt1YH823S0kCuB2G9db/ujEfFDAFl03wBfulbkRkzSS0fyWrWRh46BaDkbT/12te vszu80cdSRsD9ERTe2SaNr9HfzFeRBmWh/one9HyZb0SumuQUpQSKsU6NnmUf8js y4kqml0m/afjb6dlY6xfkmenG65pWySpZvz/WaVfdWv7mRmQriUbEEgo1gSWJInP L4+bljCYmxcjslGtCtfWWVvqP2wxdF9TeSlXmmPnQbHz6CIJx/rsp1DVqD6m5zIM E5VEgGoFmOSuLvx9SiKyf+g244LX3FHKQ+dBCRl1zvPbEII5iycvNOViWe3PSfSJ Nv1qSAKLhF4Bwg== -----END CERTIFICATE-----Generated at Thu Dec 18 10:24:02 2025 by rpki-client