This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json) Hash identifier: NZ2dOe3ZDyMmPUN1c/dNpdLTI0jSLwV1ovwMWg/Ou/8= Subject key identifier: 69:F3:21:F0:51:CA:42:0F:CE:3E:CD:20:7E:DD:9F:CB:E7:04:AD:E6 Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85 Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385 Certificate serial: 019B3D59B9F6F35E387C603003B6FAF9CCC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 20:00:49 +0000 Manifest this update: Sat 20 Dec 2025 20:00:49 +0000 Manifest next update: Sun 21 Dec 2025 20:00:49 +0000 Files and hashes: 1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=) 2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: FAQsq4VT30dB4crcNXbuotGE0mAgDn4qfzmpJ2LTjw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b9:f6:f3:5e:38:7c:60:30:03:b6:fa:f9:cc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385 Validity Not Before: Dec 20 20:00:49 2025 GMT Not After : Dec 21 20:00:49 2025 GMT Subject: CN=69f321f051ca420fce3ecd207edd9fcbe704ade6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ff:6a:e0:45:ba:4e:38:cb:eb:5c:40:12:0d: 3a:38:17:56:ef:86:53:e5:15:cc:a7:74:ef:b0:9c: c8:74:46:bd:d9:d7:c6:e2:dc:d8:43:ec:08:2f:ec: d7:18:cd:77:0a:4b:01:17:9e:4f:58:85:97:b3:6a: 4d:da:c1:ba:39:cb:e8:0a:40:c2:03:10:37:c4:78: 11:a6:43:0f:2c:19:5c:1c:aa:83:9a:81:c0:d7:2e: 48:23:94:87:dd:ee:a1:af:ce:3f:17:d3:4c:92:4d: b0:00:4e:a6:f9:f6:b2:12:36:57:7f:5d:6f:6d:ab: 21:1b:75:d4:0c:e4:97:78:7d:13:23:c7:76:f0:f4: 48:29:b9:5d:ea:23:37:53:23:4c:b5:35:52:07:b9: c6:c4:ec:e1:c7:5f:9a:2c:d9:52:e1:5b:64:44:a9: de:a3:57:e6:0b:cb:34:f2:8b:4b:56:84:a5:c0:1a: c4:52:59:ea:84:a5:40:f5:df:c9:40:8b:84:ad:fb: d0:be:af:02:42:06:23:35:8f:41:e2:f6:b3:4a:e6: e5:94:cd:8b:ef:7a:62:ad:3a:f3:34:e3:c3:13:58: 7e:36:8f:db:f5:39:0c:6b:ef:0b:76:ce:8e:5d:ba: b3:a5:4b:67:0d:83:2d:1a:fe:39:aa:26:7c:e5:18: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F3:21:F0:51:CA:42:0F:CE:3E:CD:20:7E:DD:9F:CB:E7:04:AD:E6 X509v3 Authority Key Identifier: keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:4f:ab:6c:54:43:5c:e6:0d:ea:c4:77:fa:b5:ab:fe:8f: a2:68:54:57:51:26:d9:c5:1e:c9:3b:15:6f:72:e2:65:b5:f5: 60:0c:82:db:64:13:9f:56:70:19:32:1d:e8:fb:28:dc:25:10: 3e:3d:b0:6f:f3:c4:26:4f:2a:19:bf:70:ef:d5:7e:19:46:4f: 81:91:b0:9b:d3:7e:54:65:5e:7e:6c:63:b5:22:6f:8f:78:0b: dc:52:58:b1:82:b5:81:e4:7f:66:0c:26:0b:15:3f:61:99:ae: 98:20:c5:96:56:a9:96:12:7d:7a:aa:26:82:b0:d6:3e:04:2c: 98:fd:b0:d4:7e:8b:c3:31:4f:4c:bd:1f:d6:34:0f:c8:c0:d7: cb:34:86:6f:37:23:c9:ae:de:96:a2:53:1e:c2:78:f9:fc:ec: d8:86:bf:88:f1:74:ee:ac:d4:cb:71:d5:97:78:ab:21:df:bf: cb:af:b3:58:48:08:0c:a1:bd:cb:7e:35:ec:65:ba:50:3e:12: e2:77:d7:c3:a3:36:71:87:a1:28:29:f8:d0:4b:61:5c:34:e4: 45:66:ce:87:0f:3f:f5:63:04:33:42:cb:ae:5b:28:5c:71:31: 99:c5:cc:59:e4:c4:cd:4e:82:37:2c:38:a5:97:30:7a:69:4c: 3e:bd:12:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wbn28144fGAwA7b6+czFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWYwZWQxZTMwOTFlN2I1Yzk5Y2U0M2NhYzEwMzEwNTVi MGYzODUwHhcNMjUxMjIwMjAwMDQ5WhcNMjUxMjIxMjAwMDQ5WjAzMTEwLwYDVQQD Eyg2OWYzMjFmMDUxY2E0MjBmY2UzZWNkMjA3ZWRkOWZjYmU3MDRhZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/9q4EW6TjjL61xAEg06OBdW74ZT 5RXMp3TvsJzIdEa92dfG4tzYQ+wIL+zXGM13CksBF55PWIWXs2pN2sG6OcvoCkDC AxA3xHgRpkMPLBlcHKqDmoHA1y5II5SH3e6hr84/F9NMkk2wAE6m+fayEjZXf11v bashG3XUDOSXeH0TI8d28PRIKbld6iM3UyNMtTVSB7nGxOzhx1+aLNlS4VtkRKne o1fmC8s08otLVoSlwBrEUlnqhKVA9d/JQIuErfvQvq8CQgYjNY9B4vazSubllM2L 73pirTrzNOPDE1h+No/b9TkMa+8Lds6OXbqzpUtnDYMtGv45qiZ85RhqHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnzIfBRykIPzj7NIH7dn8vnBK3mMB8GA1UdIwQY MBaAFO2vDtHjCR57XJnOQ8rBAxBVsPOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2Yt MTdhMWY4NmM2ODA0LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2YtMTdhMWY4NmM2ODA0 LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmlPq2xU Q1zmDerEd/q1q/6PomhUV1Em2cUeyTsVb3LiZbX1YAyC22QTn1ZwGTId6Pso3CUQ Pj2wb/PEJk8qGb9w79V+GUZPgZGwm9N+VGVefmxjtSJvj3gL3FJYsYK1geR/Zgwm CxU/YZmumCDFllaplhJ9eqomgrDWPgQsmP2w1H6LwzFPTL0f1jQPyMDXyzSGbzcj ya7elqJTHsJ4+fzs2Ia/iPF07qzUy3HVl3irId+/y6+zWEgIDKG9y3417GW6UD4S 4nfXw6M2cYehKCn40EthXDTkRWbOhw8/9WMEM0LLrlsoXHExmcXMWeTEzU6CNyw4 pZcwemlMPr0S7g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:14:55 2025 by rpki-client