This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json) Hash identifier: QtZcxhiA0hJQ2P0IL7YGZPmiD6WhphBTWrLGxDGXimc= Subject key identifier: FE:1F:78:E1:27:46:72:66:C6:BC:0D:3E:2B:F1:00:B5:D8:2B:28:BD Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e Certificate serial: 019B3E6C76F0BFC7EBCABFDB24BE164B7C34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft Manifest number: 0E7F Signing time: Sun 21 Dec 2025 01:00:54 +0000 Manifest this update: Sun 21 Dec 2025 01:00:54 +0000 Manifest next update: Mon 22 Dec 2025 01:00:54 +0000 Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: zKo21WaQV2vQxniXYpYinGJi8wPMkcwD4E4nVh0jp0g=) 2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=) 3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:76:f0:bf:c7:eb:ca:bf:db:24:be:16:4b:7c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e Validity Not Before: Dec 21 01:00:54 2025 GMT Not After : Dec 22 01:00:54 2025 GMT Subject: CN=fe1f78e127467266c6bc0d3e2bf100b5d82b28bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:8d:7a:21:7d:d1:9b:a9:b3:17:b1:82:a8: 5b:d1:88:b8:96:3f:6e:b2:a5:81:fd:b9:e0:ae:70: 17:a9:82:15:e7:c8:47:58:c0:64:2e:d7:80:06:29: eb:14:74:b2:ce:2d:dd:e2:70:3c:c8:a3:77:6e:fb: 61:b0:f5:e4:19:59:b9:fb:62:5f:da:b9:a9:f2:c1: cd:b9:22:7f:a6:26:d5:e8:2a:ef:43:d4:ae:47:e9: f6:4c:c4:30:39:2a:02:82:45:76:7b:c7:9f:d1:d9: 9c:0f:54:86:fc:d3:76:da:01:4d:5b:9b:27:b7:7b: 7a:4d:92:5b:82:a9:1a:8c:ec:d4:5b:77:b4:94:03: e6:2e:f8:80:81:36:90:8e:5b:2b:b3:f3:25:36:79: 5b:30:53:86:28:07:9f:3b:a5:57:cc:5f:25:54:2b: fe:a7:1a:3b:bc:e5:c0:68:b6:80:38:15:20:0c:8d: 61:74:46:1f:6c:88:35:bd:80:6e:7c:36:95:b6:9c: 1f:10:09:5b:91:f1:5f:30:ed:ef:3c:b3:ad:c0:e4: 39:f4:07:36:51:33:00:b0:04:2c:37:2a:12:f2:d8: 73:63:8b:95:c5:51:d0:86:8c:15:a0:ea:2b:05:56: e8:e9:c5:17:19:d3:7c:57:22:ff:95:6b:ad:d7:4a: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1F:78:E1:27:46:72:66:C6:BC:0D:3E:2B:F1:00:B5:D8:2B:28:BD X509v3 Authority Key Identifier: keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:54:44:3e:df:2b:8d:d6:13:da:da:3f:a2:94:d2:5f:e3:b7: ac:de:5d:2e:43:cd:9d:44:ab:00:56:55:b8:34:a2:df:0f:db: be:6d:c0:76:ca:7d:2e:76:ef:51:6f:83:b1:d6:a1:99:21:f2: 63:e8:01:65:4a:d3:ce:93:17:14:dd:e3:69:58:4d:b4:6e:fa: c1:07:46:46:e5:9f:64:d0:b8:b0:6d:3a:20:54:73:01:0e:66: a7:dd:64:bc:79:3f:2b:34:ea:b5:18:2e:93:73:df:26:24:e3: d7:9d:8d:ac:93:49:5e:85:83:3e:6c:0c:9f:8a:fe:3c:46:9f: 8b:67:7a:3b:ca:e4:2e:4d:f3:6a:e9:20:be:ce:7f:c8:33:7b: 04:6c:64:6c:17:d1:b3:66:62:55:87:f0:e2:da:24:e8:fb:1a: 27:08:2d:2e:49:b4:5b:f3:e9:45:91:24:9c:b7:69:d9:ff:97: c5:7f:5f:75:d1:5f:c1:ce:59:31:56:86:b9:70:01:cd:51:17: c3:b2:cc:45:e8:ef:04:a7:4b:95:fc:71:bd:1b:f6:71:9b:3c: c3:f9:5b:f2:3d:48:ca:0e:cb:a2:ba:2e:99:94:b1:3c:b1:8d: 7d:a2:3b:b5:87:d0:21:21:48:51:ea:98:90:95:38:1d:bd:6b: 0d:d1:8c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bHbwv8fryr/bJL4WS3w0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjNhOGE0YTBkOGM1YWUwMWE5Njk1YjA0MWVkMmM2ZDAy OTZhOWUwHhcNMjUxMjIxMDEwMDU0WhcNMjUxMjIyMDEwMDU0WjAzMTEwLwYDVQQD EyhmZTFmNzhlMTI3NDY3MjY2YzZiYzBkM2UyYmYxMDBiNWQ4MmIyOGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY+NeiF90Zupsxexgqhb0Yi4lj9u sqWB/bngrnAXqYIV58hHWMBkLteABinrFHSyzi3d4nA8yKN3bvthsPXkGVm5+2Jf 2rmp8sHNuSJ/pibV6CrvQ9SuR+n2TMQwOSoCgkV2e8ef0dmcD1SG/NN22gFNW5sn t3t6TZJbgqkajOzUW3e0lAPmLviAgTaQjlsrs/MlNnlbMFOGKAefO6VXzF8lVCv+ pxo7vOXAaLaAOBUgDI1hdEYfbIg1vYBufDaVtpwfEAlbkfFfMO3vPLOtwOQ59Ac2 UTMAsAQsNyoS8thzY4uVxVHQhowVoOorBVbo6cUXGdN8VyL/lWut10oRXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4feOEnRnJmxrwNPivxALXYKyi9MB8GA1UdIwQY MBaAFE+zqKSg2MWuAalpWwQe0sbQKWqeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82ZWYyM2UtOTliYS00YzY5LTkyZTMt NmJiNzA4MDQwOWI0LzEvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82ZWYyM2UtOTliYS00YzY5LTkyZTMtNmJiNzA4MDQwOWI0 LzEvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFREPt8r jdYT2to/opTSX+O3rN5dLkPNnUSrAFZVuDSi3w/bvm3Adsp9LnbvUW+DsdahmSHy Y+gBZUrTzpMXFN3jaVhNtG76wQdGRuWfZNC4sG06IFRzAQ5mp91kvHk/KzTqtRgu k3PfJiTj152NrJNJXoWDPmwMn4r+PEafi2d6O8rkLk3zaukgvs5/yDN7BGxkbBfR s2ZiVYfw4tok6PsaJwgtLkm0W/PpRZEknLdp2f+XxX9fddFfwc5ZMVaGuXABzVEX w7LMRejvBKdLlfxxvRv2cZs8w/lb8j1Iyg7LoroumZSxPLGNfaI7tYfQISFIUeqY kJU4Hb1rDdGMNQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:00:55 2025 by rpki-client