This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json) Hash identifier: EFofdJ9g5rYN+JlFlR34xZEpSWWcLW1g37ZFRPK78kg= Subject key identifier: 4C:8D:44:3F:85:5B:55:A0:CD:E3:1E:8B:58:1A:A2:66:00:B6:06:EF Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30 Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230 Certificate serial: 019B3C7DEB3F36B47A7E5059366199782AED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:00:43 +0000 Manifest this update: Sat 20 Dec 2025 16:00:43 +0000 Manifest next update: Sun 21 Dec 2025 16:00:43 +0000 Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=) 2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: k9bvQMTWXO+HSji+pDMMzTLqI4GjdKPm81mAOMxBBn8=) 3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:eb:3f:36:b4:7a:7e:50:59:36:61:99:78:2a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230 Validity Not Before: Dec 20 16:00:43 2025 GMT Not After : Dec 21 16:00:43 2025 GMT Subject: CN=4c8d443f855b55a0cde31e8b581aa26600b606ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0e:06:0e:78:b2:16:c0:7c:f4:90:5d:9e:db: 5e:18:a7:bd:f6:e3:e3:c8:3b:32:4b:07:c0:e0:52: 2a:2d:dd:e9:5e:ef:fb:6b:46:2b:91:7c:22:15:8d: dd:c1:11:50:49:08:36:5f:d7:bb:9f:52:b6:d9:d2: 9d:98:fc:2f:5f:7b:0d:0e:ac:55:40:a3:65:03:a2: ca:c7:10:83:fc:ec:0a:f6:09:04:db:44:1b:97:bb: 4d:a0:5f:5e:8b:e7:84:3f:e7:e6:df:6a:ca:00:3e: 70:dd:9d:de:8f:69:6d:b3:fd:14:a4:a6:fc:34:a2: 9d:63:67:81:79:da:9e:7c:99:32:0d:86:de:f2:6b: 71:e3:25:e4:19:59:58:aa:e9:dc:1d:54:b5:a1:98: aa:de:1d:21:f4:97:ba:20:95:5f:11:e6:5e:c4:6a: 1b:2a:2c:33:10:96:4e:f1:b1:19:29:df:af:03:20: 79:b1:d1:dd:b5:72:a3:74:40:1f:53:17:a4:31:2e: 8e:49:e4:20:fe:a0:62:eb:57:05:d8:de:66:07:d6: eb:04:7a:fc:c3:a1:40:f9:56:3b:e1:ac:39:48:5b: b2:14:8e:81:6d:b5:a7:fb:f1:e4:96:8d:db:87:4d: 05:46:e6:2b:0c:06:f1:61:b3:07:47:c5:c6:30:54: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8D:44:3F:85:5B:55:A0:CD:E3:1E:8B:58:1A:A2:66:00:B6:06:EF X509v3 Authority Key Identifier: keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c4:d2:89:83:ee:e4:94:47:82:d0:92:0a:f6:88:73:ba:d7: 24:fb:9d:94:d4:db:d0:d8:73:7b:95:f0:95:9e:5b:fe:1c:ce: 92:a4:92:9e:9c:a1:bf:a3:ef:00:08:6b:8b:2e:78:9e:9c:2c: 0d:88:6b:23:73:8e:64:05:9f:24:01:ac:c8:e8:a4:68:70:36: 0d:16:5d:56:3c:d2:33:06:d5:e3:1d:26:af:9c:61:48:8a:05: 53:7b:8f:e5:fa:a4:94:60:21:d1:7b:61:b2:d8:e6:57:e3:f9: f4:5b:7d:4b:46:86:72:e8:3a:d3:30:e8:a3:9c:cb:d1:cd:05: 65:85:3f:c4:0d:1c:ca:97:88:13:ea:de:1e:3f:0b:da:9d:f6: 69:3e:65:4a:4f:41:3a:43:59:d3:f8:62:1c:79:e4:88:d0:59: 81:0c:cb:97:9f:34:0d:d4:12:11:a1:af:e3:73:44:91:89:9c: fe:77:d0:50:e0:f7:3b:c1:c1:f8:8d:22:8d:f6:81:26:b1:7b: ac:ff:e6:33:00:b2:50:f3:5a:f3:69:21:a4:b6:8c:de:5e:9b: ac:02:3f:35:ab:5e:5e:76:e9:4e:b1:fe:4a:45:53:c8:d5:c3: 71:5c:29:07:b9:3a:69:e0:5f:05:d0:68:e0:70:27:d1:b3:31: f0:2d:69:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fes/NrR6flBZNmGZeCrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzIyMTM4YzBhZjgxYzVjYmY0M2E0ZjhkZGQ3YzhkZTEz YzcyMzAwHhcNMjUxMjIwMTYwMDQzWhcNMjUxMjIxMTYwMDQzWjAzMTEwLwYDVQQD Eyg0YzhkNDQzZjg1NWI1NWEwY2RlMzFlOGI1ODFhYTI2NjAwYjYwNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w4GDniyFsB89JBdntteGKe99uPj yDsySwfA4FIqLd3pXu/7a0YrkXwiFY3dwRFQSQg2X9e7n1K22dKdmPwvX3sNDqxV QKNlA6LKxxCD/OwK9gkE20Qbl7tNoF9ei+eEP+fm32rKAD5w3Z3ej2lts/0UpKb8 NKKdY2eBedqefJkyDYbe8mtx4yXkGVlYquncHVS1oZiq3h0h9Je6IJVfEeZexGob KiwzEJZO8bEZKd+vAyB5sdHdtXKjdEAfUxekMS6OSeQg/qBi61cF2N5mB9brBHr8 w6FA+VY74aw5SFuyFI6BbbWn+/Hklo3bh00FRuYrDAbxYbMHR8XGMFTcZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyNRD+FW1WgzeMei1gaomYAtgbvMB8GA1UdIwQY MBaAFO3CITjAr4HFy/Q6T43dfI3hPHIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYt NTUzOGRjMGJiMDk5LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYtNTUzOGRjMGJiMDk5 LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsTSiYPu 5JRHgtCSCvaIc7rXJPudlNTb0Nhze5XwlZ5b/hzOkqSSnpyhv6PvAAhriy54npws DYhrI3OOZAWfJAGsyOikaHA2DRZdVjzSMwbV4x0mr5xhSIoFU3uP5fqklGAh0Xth stjmV+P59Ft9S0aGcug60zDoo5zL0c0FZYU/xA0cypeIE+reHj8L2p32aT5lSk9B OkNZ0/hiHHnkiNBZgQzLl580DdQSEaGv43NEkYmc/nfQUOD3O8HB+I0ijfaBJrF7 rP/mMwCyUPNa82khpLaM3l6brAI/NateXnbpTrH+SkVTyNXDcVwpB7k6aeBfBdBo 4HAn0bMx8C1ptw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:58:34 2025 by rpki-client