This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json) Hash identifier: NfBWY344L4c2PNfQxQRk7h4DRrr2Q3fCGWXraVYVx3w= Subject key identifier: 19:49:8E:F7:D8:DF:2C:DD:49:3F:E4:97:17:21:DE:F5:EC:14:47:EF Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Certificate serial: 019B3CB4C74B160B0AD5784FB7FF4C1F246F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft Manifest number: 0C3B Signing time: Sat 20 Dec 2025 17:00:39 +0000 Manifest this update: Sat 20 Dec 2025 17:00:39 +0000 Manifest next update: Sun 21 Dec 2025 17:00:39 +0000 Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=) 2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: FEobvjsujxKXjIKlkYJZfgLdOaYzSzaVm2ztGwmg3t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c7:4b:16:0b:0a:d5:78:4f:b7:ff:4c:1f:24:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Validity Not Before: Dec 20 17:00:39 2025 GMT Not After : Dec 21 17:00:39 2025 GMT Subject: CN=19498ef7d8df2cdd493fe4971721def5ec1447ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:b7:1c:3b:93:40:4e:b2:b6:1d:8d:67:0b: bc:46:a0:48:48:4e:ed:26:02:71:b5:a1:62:8a:06: 88:8b:32:2d:6f:ec:2b:b3:ea:a5:fa:32:72:80:4f: 82:c7:11:9b:f7:e0:a6:bd:01:f9:5d:79:af:ce:cc: c0:1e:47:79:8c:22:eb:59:35:5a:50:9f:2d:2d:33: e3:37:8b:75:a7:67:98:9b:ea:1b:57:4a:1b:7e:2e: 3e:8c:3c:81:a3:61:20:c6:41:af:70:5d:22:88:d3: c6:e3:a6:77:65:77:21:1f:af:c5:d2:13:21:72:d8: 90:f1:65:c0:4c:d5:2d:4d:ad:d3:2b:0f:01:35:9d: 39:e7:81:7d:b5:74:3a:f0:3c:a1:aa:a9:41:72:49: 00:76:cd:8d:42:e7:d3:04:82:b2:4f:d9:10:09:bd: 38:c7:30:4d:f0:5c:80:44:ea:c7:e0:a9:4a:e5:42: 97:65:18:47:1b:d0:ce:cc:14:75:24:73:d4:9f:e3: 32:e6:df:6b:06:cc:64:f1:4d:1e:df:f8:d0:45:5f: 1e:02:a8:6b:c5:6c:af:23:d2:ca:71:ef:4c:e8:87: 4c:d6:53:15:29:f7:90:13:f9:c2:fa:88:20:47:34: 67:fb:f1:02:cc:87:26:45:77:83:6e:73:5d:9c:52: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:49:8E:F7:D8:DF:2C:DD:49:3F:E4:97:17:21:DE:F5:EC:14:47:EF X509v3 Authority Key Identifier: keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9e:1e:3b:75:23:38:d1:ca:3a:93:da:c5:5a:9d:3b:ff:0b: f7:d5:74:de:66:87:65:6e:02:f3:ed:23:5c:94:3f:4d:99:68: cb:d8:95:29:58:1d:49:54:63:7d:5b:cd:67:74:37:0e:8c:18: 68:40:b3:4a:7d:4f:06:d4:bf:4b:5e:22:df:4a:81:52:2a:5d: be:fa:b4:d9:06:f1:99:41:c5:e5:53:a6:95:13:88:eb:95:0f: d0:ce:b3:07:38:98:f4:84:87:56:bc:9c:47:4e:ce:42:64:69: a0:59:10:0b:ea:51:f7:d8:7d:9a:7b:ed:65:99:b0:43:cb:e4: a9:22:44:1d:dc:69:2a:0a:29:d7:d3:6a:bf:29:9e:3d:60:b6: a9:d6:bc:c0:fc:d7:32:66:a3:87:48:d4:fc:a0:81:f7:7e:63: 56:35:1f:ea:0c:95:d0:61:d2:e7:8b:4e:01:fb:12:1d:49:3c: 4b:71:ed:96:91:e1:c8:d6:2b:01:2d:1c:e0:29:9b:09:b8:b6: 7c:9c:c4:ae:34:68:9a:7c:42:56:4f:b7:f6:a4:b2:4c:30:a0: fe:26:74:d7:df:db:ba:fa:b4:bb:05:c8:43:b3:3d:d7:e4:fa: 24:a7:69:05:40:99:11:14:f1:7f:ea:79:00:40:fd:3d:3d:61: 65:6d:7a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMdLFgsK1XhPt/9MHyRvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0 MzVlY2UwHhcNMjUxMjIwMTcwMDM5WhcNMjUxMjIxMTcwMDM5WjAzMTEwLwYDVQQD EygxOTQ5OGVmN2Q4ZGYyY2RkNDkzZmU0OTcxNzIxZGVmNWVjMTQ0N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxda3HDuTQE6yth2NZwu8RqBISE7t JgJxtaFiigaIizItb+wrs+ql+jJygE+CxxGb9+CmvQH5XXmvzszAHkd5jCLrWTVa UJ8tLTPjN4t1p2eYm+obV0obfi4+jDyBo2EgxkGvcF0iiNPG46Z3ZXchH6/F0hMh ctiQ8WXATNUtTa3TKw8BNZ0554F9tXQ68DyhqqlBckkAds2NQufTBIKyT9kQCb04 xzBN8FyAROrH4KlK5UKXZRhHG9DOzBR1JHPUn+My5t9rBsxk8U0e3/jQRV8eAqhr xWyvI9LKce9M6IdM1lMVKfeQE/nC+oggRzRn+/ECzIcmRXeDbnNdnFI/3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlJjvfY3yzdST/klxch3vXsFEfvMB8GA1UdIwQY MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt OTU4MTdlZTk0NGNlLzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZ4eO3Uj ONHKOpPaxVqdO/8L99V03maHZW4C8+0jXJQ/TZloy9iVKVgdSVRjfVvNZ3Q3DowY aECzSn1PBtS/S14i30qBUipdvvq02QbxmUHF5VOmlROI65UP0M6zBziY9ISHVryc R07OQmRpoFkQC+pR99h9mnvtZZmwQ8vkqSJEHdxpKgop19NqvymePWC2qda8wPzX Mmajh0jU/KCB935jVjUf6gyV0GHS54tOAfsSHUk8S3HtlpHhyNYrAS0c4CmbCbi2 fJzErjRomnxCVk+39qSyTDCg/iZ019/buvq0uwXIQ7M91+T6JKdpBUCZERTxf+p5 AED9PT1hZW16tg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:27 2025 by rpki-client