This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json) Hash identifier: 9anwrPps362p38inQPP2vyIqgd35IGyqEEF6zKgNjBc= Subject key identifier: 7B:57:15:36:5E:CD:88:12:75:35:FE:54:48:D9:70:49:90:F2:E3:17 Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf Certificate serial: 019B3EDA06EB282710FEF1A460E523DCCBE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:00:34 +0000 Manifest this update: Sun 21 Dec 2025 03:00:34 +0000 Manifest next update: Mon 22 Dec 2025 03:00:34 +0000 Files and hashes: 1: 3rVvEb5TD5sUIiR8g28gQB62SZ4.roa (hash: I97/quPKUPqVv98vrZrzthe6vPPP5kOtjCTGVwTGxJg=) 2: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: WKN0tCBO1BSun7CwGb5PkOOuwGQZXOfmYLr/eMWiIfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:06:eb:28:27:10:fe:f1:a4:60:e5:23:dc:cb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf Validity Not Before: Dec 21 03:00:34 2025 GMT Not After : Dec 22 03:00:34 2025 GMT Subject: CN=7b5715365ecd88127535fe5448d9704990f2e317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:7f:a8:68:6a:22:2b:f6:ec:26:2b:e9:37: 23:8d:2b:1d:7c:f8:4a:e7:58:75:0f:6a:bb:90:37: 9d:95:4a:1e:74:b7:9b:2e:d2:58:83:48:f4:d1:46: 6f:91:8b:c6:4b:c7:ce:25:af:7a:cd:cd:7f:4b:7e: 22:c1:11:10:b3:bc:d2:c8:3b:03:c7:d0:03:78:fd: 0c:77:da:05:a6:10:6f:8b:af:07:a0:87:d6:fe:f1: 41:23:c1:31:87:96:d3:d6:23:16:aa:99:2e:9d:97: e5:a7:ba:cc:9d:e1:06:d7:02:94:3e:3c:48:c8:68: 73:3c:04:c9:7d:63:54:ca:a4:e6:66:ef:59:c7:f7: c3:2a:13:6f:de:90:4d:d0:03:dd:ac:92:c5:89:73: 8e:58:c9:11:d5:cb:a9:9b:0c:3d:61:de:83:bb:16: d9:f0:6c:6e:84:fe:3f:2f:28:83:7d:48:e7:34:70: a5:2a:4d:9f:52:30:03:6f:38:88:2e:bc:82:55:29: c9:c2:16:be:d9:3b:6a:14:71:1f:29:53:13:ef:ad: 26:5c:a6:6f:f4:4d:91:3d:d4:bc:90:e1:4a:62:d7: 56:fd:66:80:81:eb:58:21:4a:fc:24:fa:3c:89:51: 84:67:ad:e5:10:ea:02:9f:bf:73:98:6f:3c:49:d8: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:57:15:36:5E:CD:88:12:75:35:FE:54:48:D9:70:49:90:F2:E3:17 X509v3 Authority Key Identifier: keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d8:b3:e9:95:2d:b0:74:ea:6c:d6:3c:87:9b:7f:ab:7d:00: 4d:30:52:ec:4c:6c:01:39:90:37:ce:15:3b:bc:ed:9e:0d:55: 8f:f6:a9:bd:1c:44:c3:68:92:5d:76:d0:ba:4d:a8:9c:ff:51: 98:4f:60:1b:fe:9a:4a:41:db:91:fd:3d:e6:c7:ce:8a:33:1f: aa:76:3f:04:e5:44:ea:fc:56:b5:3c:34:de:3b:6b:4c:c5:36: d0:b8:ac:a4:d6:75:54:5f:4f:f8:c5:3b:c4:58:21:d5:a1:b6: dd:59:63:6d:58:d8:af:4a:e6:b9:8b:7e:1b:80:f3:4f:f1:f8: ff:48:81:b5:3c:8b:c1:d8:f3:6b:11:3e:27:e7:78:8f:83:7d: 94:10:bf:c2:81:bd:32:ac:28:dc:16:31:e5:fb:1e:c1:9a:95: 43:f7:f1:98:06:9a:1c:7d:6f:89:fb:e9:f1:00:5f:37:32:08: 2f:a0:7e:3d:7d:f6:6c:0f:fc:09:b6:f2:98:be:02:08:c4:71: 94:78:12:b0:2b:ad:9d:e6:f7:68:7d:2d:8c:98:49:93:74:0e: 7e:ac:92:5b:f9:78:2e:f6:c4:05:93:5d:aa:7e:99:67:44:15: c6:b3:31:de:fc:f0:18:09:84:da:f2:b8:90:62:a7:db:39:89: 33:66:ca:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2gbrKCcQ/vGkYOUj3MvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYjgxNjQwZTFiNjRmNTFkMmJhN2Q3OGY2Nzc3YzA1NmQx MTU0YmYwHhcNMjUxMjIxMDMwMDM0WhcNMjUxMjIyMDMwMDM0WjAzMTEwLwYDVQQD Eyg3YjU3MTUzNjVlY2Q4ODEyNzUzNWZlNTQ0OGQ5NzA0OTkwZjJlMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT9/qGhqIiv27CYr6TcjjSsdfPhK 51h1D2q7kDedlUoedLebLtJYg0j00UZvkYvGS8fOJa96zc1/S34iwREQs7zSyDsD x9ADeP0Md9oFphBvi68HoIfW/vFBI8Exh5bT1iMWqpkunZflp7rMneEG1wKUPjxI yGhzPATJfWNUyqTmZu9Zx/fDKhNv3pBN0APdrJLFiXOOWMkR1cupmww9Yd6DuxbZ 8GxuhP4/LyiDfUjnNHClKk2fUjADbziILryCVSnJwha+2TtqFHEfKVMT760mXKZv 9E2RPdS8kOFKYtdW/WaAgetYIUr8JPo8iVGEZ63lEOoCn79zmG88SdiaXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtXFTZezYgSdTX+VEjZcEmQ8uMXMB8GA1UdIwQY MBaAFHO4FkDhtk9R0rp9ePZ3fAVtEVS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUt ZDMwZjkxNjhmODAxLzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUtZDMwZjkxNjhmODAx LzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdiz6ZUt sHTqbNY8h5t/q30ATTBS7ExsATmQN84VO7ztng1Vj/apvRxEw2iSXXbQuk2onP9R mE9gG/6aSkHbkf095sfOijMfqnY/BOVE6vxWtTw03jtrTMU20LispNZ1VF9P+MU7 xFgh1aG23VljbVjYr0rmuYt+G4DzT/H4/0iBtTyLwdjzaxE+J+d4j4N9lBC/woG9 Mqwo3BYx5fsewZqVQ/fxmAaaHH1vifvp8QBfNzIIL6B+PX32bA/8CbbymL4CCMRx lHgSsCutneb3aH0tjJhJk3QOfqySW/l4LvbEBZNdqn6ZZ0QVxrMx3vzwGAmE2vK4 kGKn2zmJM2bKEw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:11:47 2025 by rpki-client