This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft File: 7uQWWQWFpdNR27yh8LPKn2KreF0.mft (raw, json) Hash identifier: ZQDfBeiW+EIfZB92QZ+sRA0y59AdhfxwQXG10zQTcpI= Subject key identifier: B4:C0:4F:04:8B:5C:00:6A:C7:4D:32:0C:DA:62:1D:FA:2A:58:94:11 Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d Certificate serial: 019B4D03B93E9CAC3C83A301E6EE64FCD914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft Manifest number: 16EA Signing time: Tue 23 Dec 2025 21:00:48 +0000 Manifest this update: Tue 23 Dec 2025 21:00:48 +0000 Manifest next update: Wed 24 Dec 2025 21:00:48 +0000 Files and hashes: 1: 7uQWWQWFpdNR27yh8LPKn2KreF0.crl (hash: JqFVTUZcZ2MT9mFZyR2cPVvt7+VEIYLFWWYzvfRBvmY=) 2: p5y8NQAzzfGGrlu-v-vNfVyVrb0.roa (hash: kc/WazVc1v12QWHIn2ON5G/S24+0++IA58aa0ys1ptw=) 3: rlceh0z0qi4FxUGYf1S5hv84tmY.roa (hash: YCNm2JKiZX4EgTQdbPRuaICefNmNsS+Ht6wjs3LlOwQ=) 4: teWsxLl9UxMj2Kg2LV885UEXtBs.roa (hash: ZwKl0NAlGw0kpVRl3+bmWBFp/xFATu8jsyEj+n7/Y6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:03:b9:3e:9c:ac:3c:83:a3:01:e6:ee:64:fc:d9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d Validity Not Before: Dec 23 21:00:48 2025 GMT Not After : Dec 24 21:00:48 2025 GMT Subject: CN=b4c04f048b5c006ac74d320cda621dfa2a589411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:a2:48:91:59:6a:09:b3:7b:52:76:aa:11: 1f:a9:8b:4d:e2:09:55:1c:72:66:b2:b9:50:63:da: 6f:21:bf:8f:d9:25:a9:fa:7c:9b:60:96:90:af:93: d3:df:6e:28:66:8c:94:e7:9f:aa:13:87:77:04:29: 90:7c:16:cc:7e:fe:9d:fd:3f:ff:83:a6:cf:18:3a: eb:bf:91:88:f5:05:e2:ae:2e:6d:61:39:bc:aa:3c: 40:98:fd:49:4d:ac:f3:25:16:44:9c:c1:b8:4e:d9: d4:a6:ed:18:3e:46:56:a7:8d:9a:e2:ba:2b:3f:28: 6a:74:7b:35:dd:f5:d0:7e:f6:d6:9f:96:46:9d:68: 85:38:f1:d9:19:c9:95:e7:00:f8:4a:ae:91:72:8d: 26:e0:07:8c:92:ec:1a:64:53:2b:55:72:c6:65:67: a9:63:fd:65:a3:8e:3a:33:db:38:3f:4b:7a:a0:ad: 9c:5c:8a:39:75:a7:32:51:bf:e4:ac:3d:bf:74:48: be:3c:37:b9:eb:7d:5c:dc:12:f2:bb:c0:1b:d8:e6: 22:f7:e6:2f:90:b7:79:7a:86:ea:e2:54:fb:53:a4: 03:97:7a:4f:cd:02:b9:d4:a0:03:6f:0b:18:26:60: 3f:c0:85:00:9c:13:4f:fc:62:41:41:2f:3a:02:9c: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C0:4F:04:8B:5C:00:6A:C7:4D:32:0C:DA:62:1D:FA:2A:58:94:11 X509v3 Authority Key Identifier: keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:74:96:44:88:ca:36:8b:dc:8e:e2:64:19:00:b0:0b:87:47: 07:3a:5a:02:f2:d9:c9:08:ed:44:62:33:38:82:39:c3:ac:8c: 3d:9b:f6:98:4e:bd:82:04:67:f5:f5:a6:ea:34:fd:a2:9a:02: c6:78:45:5f:84:b4:0d:73:0e:63:12:cf:9c:bc:3e:f1:10:13: f3:8c:82:27:78:23:ca:cb:1d:2e:94:68:4f:a3:f7:81:43:3c: 8d:0e:43:41:24:2f:e8:b3:93:f5:3a:e8:1c:14:91:6b:95:62: 0d:1a:42:05:58:d9:6c:a2:d3:18:6a:cc:1a:58:6f:22:66:6a: 26:ca:9d:27:90:1a:3d:62:08:96:59:3b:3c:91:cd:fe:4e:1e: f3:65:a3:bf:51:b4:37:0b:16:88:81:c8:82:da:5f:77:37:ed: a8:94:4c:67:17:02:83:57:9c:51:df:14:06:a0:06:46:89:ff: 85:1f:c3:32:23:aa:c3:33:85:ce:35:0c:3a:c5:1d:f4:a8:30: e0:5e:34:b3:5e:8f:c7:bc:c0:08:26:bc:e2:13:cf:a2:bb:bd: e4:fc:cd:89:b2:6e:51:0d:5a:a6:28:e8:c0:35:74:d2:6c:6a: 90:c2:aa:80:24:46:e9:84:af:32:ab:7f:6f:6b:ff:dc:19:94: 6b:e7:2e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNA7k+nKw8g6MB5u5k/NkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTQxNjU5MDU4NWE1ZDM1MWRiYmNhMWYwYjNjYTlmNjJh Yjc4NWQwHhcNMjUxMjIzMjEwMDQ4WhcNMjUxMjI0MjEwMDQ4WjAzMTEwLwYDVQQD EyhiNGMwNGYwNDhiNWMwMDZhYzc0ZDMyMGNkYTYyMWRmYTJhNTg5NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKqiSJFZagmze1J2qhEfqYtN4glV HHJmsrlQY9pvIb+P2SWp+nybYJaQr5PT324oZoyU55+qE4d3BCmQfBbMfv6d/T// g6bPGDrrv5GI9QXiri5tYTm8qjxAmP1JTazzJRZEnMG4TtnUpu0YPkZWp42a4ror PyhqdHs13fXQfvbWn5ZGnWiFOPHZGcmV5wD4Sq6Rco0m4AeMkuwaZFMrVXLGZWep Y/1lo446M9s4P0t6oK2cXIo5dacyUb/krD2/dEi+PDe5631c3BLyu8Ab2OYi9+Yv kLd5eobq4lT7U6QDl3pPzQK51KADbwsYJmA/wIUAnBNP/GJBQS86ApwCswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTATwSLXABqx00yDNpiHfoqWJQRMB8GA1UdIwQY MBaAFO7kFlkFhaXTUdu8ofCzyp9iq3hdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMt MDc2YTc1MGI4NTQxLzEvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMtMDc2YTc1MGI4NTQx LzEvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHSWRIjK NovcjuJkGQCwC4dHBzpaAvLZyQjtRGIzOII5w6yMPZv2mE69ggRn9fWm6jT9opoC xnhFX4S0DXMOYxLPnLw+8RAT84yCJ3gjyssdLpRoT6P3gUM8jQ5DQSQv6LOT9Tro HBSRa5ViDRpCBVjZbKLTGGrMGlhvImZqJsqdJ5AaPWIIllk7PJHN/k4e82Wjv1G0 NwsWiIHIgtpfdzftqJRMZxcCg1ecUd8UBqAGRon/hR/DMiOqwzOFzjUMOsUd9Kgw 4F40s16Px7zACCa84hPPoru95PzNibJuUQ1apijowDV00mxqkMKqgCRG6YSvMqt/ b2v/3BmUa+cufQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:06:43 2025 by rpki-client