This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft File: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json) Hash identifier: SGKZqbwnUH3dfg0k8pSRq2luiX4XBWVtpkzdwnQbGOg= Subject key identifier: CB:B0:E0:80:D7:52:6B:39:D7:A2:05:90:52:0D:C9:99:08:F8:CF:F3 Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Certificate serial: 019B2D0C35D9A9418AAD333A369B806160B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 16:02:13 +0000 Manifest this update: Wed 17 Dec 2025 16:02:13 +0000 Manifest next update: Thu 18 Dec 2025 16:02:13 +0000 Files and hashes: 1: NEVyHfghC_0IzY6RTdXjWpjvCt0.roa (hash: xHfTcNtnEobrDQmw9/aNxrvi78pLeFshtErwqNjdN7Q=) 2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: os5My8Ta8OMmWnyZvnobAIhZpENBUektHBynTuTN7ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:35:d9:a9:41:8a:ad:33:3a:36:9b:80:61:60:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Validity Not Before: Dec 17 16:02:13 2025 GMT Not After : Dec 18 16:02:13 2025 GMT Subject: CN=cbb0e080d7526b39d7a20590520dc99908f8cff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:f1:4d:67:99:76:09:cf:c8:76:db:c4:8e: 25:cd:21:e7:83:1c:ef:1c:9a:6f:37:d5:81:d7:47: b2:87:4f:21:c3:ad:1c:a0:ed:f6:5d:c0:28:25:ce: 74:6c:5e:fc:5b:67:57:cb:13:da:76:51:55:2a:1b: 73:5e:8d:38:11:89:39:68:9a:2b:c6:a7:17:e5:95: 7b:0f:54:65:cc:48:fe:dc:6c:e1:7d:62:51:15:fe: c1:ee:ab:5a:3a:6e:fe:ca:33:03:d1:7b:0c:61:57: 09:28:64:02:9b:de:e7:65:e5:de:2e:7d:74:4f:06: 03:30:f3:ad:9c:03:be:01:41:5d:57:a5:2f:10:0c: d2:4f:ea:6b:bd:27:a0:01:c5:eb:d5:fd:d8:80:0c: 95:b7:7c:17:56:ac:ff:22:03:86:0c:ae:6d:a8:5e: d6:a2:bf:8d:9b:15:71:17:bf:8f:72:27:50:98:f9: 6d:50:95:b7:55:ea:c0:c1:7a:ee:bc:e1:7c:2b:88: e4:e9:93:9d:e4:3f:8f:63:00:0c:13:9d:a9:9e:3e: d7:0b:5b:0b:a6:13:f2:32:f6:2e:28:45:09:fe:a6: ac:94:b7:b8:25:99:f1:ca:bb:ee:b5:7f:36:c8:14: 7e:bd:8c:7c:62:fe:35:1d:00:4f:39:53:f8:a9:fd: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B0:E0:80:D7:52:6B:39:D7:A2:05:90:52:0D:C9:99:08:F8:CF:F3 X509v3 Authority Key Identifier: keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c0:de:01:68:2c:78:34:35:51:3d:74:be:52:76:a3:5b:75: a9:3e:2c:c3:73:3e:c5:c7:71:4f:41:67:1b:37:44:eb:19:e8: b3:9a:27:2c:59:e5:bb:1b:79:0a:20:63:2b:35:db:36:86:07: cf:09:5b:3b:02:88:2c:64:aa:5c:61:da:b2:fd:a1:09:d5:b0: 2c:04:ee:5e:2d:d1:f6:04:bd:3a:fb:e3:3e:f2:3c:25:e6:71: c0:be:e3:83:f0:85:dd:a1:20:70:8a:93:f5:78:e8:af:f3:fb: 49:51:67:2b:34:be:fc:00:85:a6:a3:d2:e1:a3:9a:1a:94:aa: 60:61:78:40:61:27:e9:52:26:85:ac:b0:c9:c9:2b:e2:f0:ae: 75:57:2a:ec:b0:13:52:68:1f:2b:28:17:8a:fb:9a:a7:30:08: e8:d4:55:1f:36:b9:4a:0c:5c:14:56:49:a6:f5:9b:5d:2c:71: 58:a6:b7:38:49:fd:44:f5:84:fb:69:69:b4:8a:67:a3:c0:60: e2:b9:11:a3:32:04:f9:a0:38:29:55:e8:23:05:13:e6:17:b4: 22:9f:2a:3e:d6:d2:d0:cc:b1:f1:ee:61:d3:d3:af:fa:0b:5f: e1:8c:86:eb:c8:f1:ff:f8:65:f8:c0:a6:22:fb:58:2d:ed:58: 5c:aa:fa:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDDXZqUGKrTM6NpuAYWC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YmIyNGM0Yjk3ODNjYTIzYjZlZDVlNzUwNDQzZWVkM2E3 MmY5M2IwHhcNMjUxMjE3MTYwMjEzWhcNMjUxMjE4MTYwMjEzWjAzMTEwLwYDVQQD EyhjYmIwZTA4MGQ3NTI2YjM5ZDdhMjA1OTA1MjBkYzk5OTA4ZjhjZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztjxTWeZdgnPyHbbxI4lzSHngxzv HJpvN9WB10eyh08hw60coO32XcAoJc50bF78W2dXyxPadlFVKhtzXo04EYk5aJor xqcX5ZV7D1RlzEj+3GzhfWJRFf7B7qtaOm7+yjMD0XsMYVcJKGQCm97nZeXeLn10 TwYDMPOtnAO+AUFdV6UvEAzST+prvSegAcXr1f3YgAyVt3wXVqz/IgOGDK5tqF7W or+NmxVxF7+PcidQmPltUJW3VerAwXruvOF8K4jk6ZOd5D+PYwAME52pnj7XC1sL phPyMvYuKEUJ/qaslLe4JZnxyrvutX82yBR+vYx8Yv41HQBPOVP4qf3p2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuw4IDXUms516IFkFINyZkI+M/zMB8GA1UdIwQY MBaAFMe7JMS5eDyiO27V51BEPu06cvk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzIt NGI1OTU3YWE3NDdmLzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzItNGI1OTU3YWE3NDdm LzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsDeAWgs eDQ1UT10vlJ2o1t1qT4sw3M+xcdxT0FnGzdE6xnos5onLFnluxt5CiBjKzXbNoYH zwlbOwKILGSqXGHasv2hCdWwLATuXi3R9gS9OvvjPvI8JeZxwL7jg/CF3aEgcIqT 9Xjor/P7SVFnKzS+/ACFpqPS4aOaGpSqYGF4QGEn6VImhaywyckr4vCudVcq7LAT UmgfKygXivuapzAI6NRVHza5SgxcFFZJpvWbXSxxWKa3OEn9RPWE+2lptIpno8Bg 4rkRozIE+aA4KVXoIwUT5he0Ip8qPtbS0Myx8e5h09Ov+gtf4YyG68jx//hl+MCm IvtYLe1YXKr6BA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:08:32 2025 by rpki-client