This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json) Hash identifier: IHRDA5pFiDF8pPDUr4baSX49JRqeCFhPrQnJUG6DVkU= Subject key identifier: 74:F6:83:AD:8A:FB:B3:AB:22:09:AD:56:6B:AD:A4:5E:67:D6:74:DA Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Certificate serial: 019B3FED562EAD808B69CBCBF8DDBBFC919B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:01:17 +0000 Manifest this update: Sun 21 Dec 2025 08:01:17 +0000 Manifest next update: Mon 22 Dec 2025 08:01:17 +0000 Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=) 2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: ve1EGwlaybUReF4Kxy7q9aaybINk+/9Wz/2K6NUKUpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:56:2e:ad:80:8b:69:cb:cb:f8:dd:bb:fc:91:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Validity Not Before: Dec 21 08:01:17 2025 GMT Not After : Dec 22 08:01:17 2025 GMT Subject: CN=74f683ad8afbb3ab2209ad566bada45e67d674da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:66:9c:7c:1e:a5:32:65:b7:31:ec:7f:10: 6e:48:9d:8c:7f:19:d6:56:59:aa:ae:8b:ba:7a:1e: 32:42:41:90:8f:10:64:ab:cd:93:50:20:0e:fe:b6: 96:34:2f:fc:37:d3:49:cc:30:6a:ad:59:1d:35:22: 03:4b:5b:6e:8f:de:9e:2c:d5:fc:73:0e:8a:61:4b: fe:7d:1d:44:c8:ab:fd:ca:a7:b5:82:fb:78:cc:19: 94:fe:79:8c:7d:3d:ca:c4:c5:09:23:78:02:49:1a: ad:30:ee:55:ed:bb:9f:70:e7:ec:24:ed:5f:68:51: 3a:b4:f3:05:56:51:c7:7e:f4:7f:31:c7:65:56:66: 77:b0:b1:67:2a:f1:f4:f9:1e:6e:6f:34:0b:39:7b: e2:6c:a1:96:9e:3e:64:66:07:be:d3:eb:b7:60:a5: a7:05:34:da:6b:05:1a:cf:02:39:47:3f:ab:8c:2e: 69:f6:05:f7:57:e7:9b:83:55:7e:21:59:b4:1d:cd: d4:52:b3:10:8a:bc:e0:0d:2f:d7:fe:97:0b:76:45: 0d:fb:a2:31:1f:38:a7:e3:22:18:81:87:2a:81:e7: 15:f5:ba:9f:f9:5f:87:92:44:f4:31:92:7a:6c:78: 82:46:3e:f3:b4:b4:aa:4d:12:2f:fd:56:e0:48:41: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F6:83:AD:8A:FB:B3:AB:22:09:AD:56:6B:AD:A4:5E:67:D6:74:DA X509v3 Authority Key Identifier: keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1b:f2:ec:8a:74:8e:9e:e6:56:18:37:65:b4:7d:dc:32:64: cb:1d:a6:fb:38:74:13:c6:47:d6:55:e7:51:ad:ea:69:bd:4c: 50:3a:be:54:e2:e4:0f:0d:b9:61:18:85:d4:37:d5:51:6e:3b: 15:b9:32:0b:61:e7:31:6d:97:1d:d5:fe:95:81:77:c4:df:d2: ac:88:e4:fa:c5:fc:8d:a7:01:83:d9:b6:a3:b9:5a:03:40:b1: 80:fc:7e:25:03:fe:7f:cd:ba:b7:15:06:c9:ed:3b:fa:cf:f4: 64:d6:ab:65:fa:e8:1d:41:13:7b:2c:31:66:1d:28:e6:37:a9: c6:88:ba:7d:70:95:64:40:ed:b2:17:13:75:60:cc:c7:a2:9e: d7:fd:0d:5b:82:e9:28:33:0f:f9:4e:df:fc:4e:49:af:ba:56: cd:be:65:8e:b9:70:d5:a6:df:08:1f:0d:70:cf:df:8b:49:93: 55:2c:7e:bd:24:05:28:67:94:b0:ac:44:2b:22:4d:a2:c2:f3: 4c:4b:36:dd:d1:84:ba:0a:55:08:fa:72:c7:4d:33:e6:e6:b7: 18:b0:c7:ad:94:b0:b9:10:67:e7:5e:cc:e4:71:84:c5:14:69: e8:21:10:5a:cf:84:27:ea:e3:8c:0d:e0:21:d6:c3:44:1c:05: 41:32:14:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7VYurYCLacvL+N27/JGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz OWFlZTEwHhcNMjUxMjIxMDgwMTE3WhcNMjUxMjIyMDgwMTE3WjAzMTEwLwYDVQQD Eyg3NGY2ODNhZDhhZmJiM2FiMjIwOWFkNTY2YmFkYTQ1ZTY3ZDY3NGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d5mnHwepTJltzHsfxBuSJ2MfxnW Vlmqrou6eh4yQkGQjxBkq82TUCAO/raWNC/8N9NJzDBqrVkdNSIDS1tuj96eLNX8 cw6KYUv+fR1EyKv9yqe1gvt4zBmU/nmMfT3KxMUJI3gCSRqtMO5V7bufcOfsJO1f aFE6tPMFVlHHfvR/McdlVmZ3sLFnKvH0+R5ubzQLOXvibKGWnj5kZge+0+u3YKWn BTTaawUazwI5Rz+rjC5p9gX3V+ebg1V+IVm0Hc3UUrMQirzgDS/X/pcLdkUN+6Ix Hzin4yIYgYcqgecV9bqf+V+HkkT0MZJ6bHiCRj7ztLSqTRIv/VbgSEGBTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT2g62K+7OrIgmtVmutpF5n1nTaMB8GA1UdIwQY MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt YTZmNGYwZjRmNzJkLzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhvy7Ip0 jp7mVhg3ZbR93DJkyx2m+zh0E8ZH1lXnUa3qab1MUDq+VOLkDw25YRiF1DfVUW47 FbkyC2HnMW2XHdX+lYF3xN/SrIjk+sX8jacBg9m2o7laA0CxgPx+JQP+f826txUG ye07+s/0ZNarZfroHUETeywxZh0o5jepxoi6fXCVZEDtshcTdWDMx6Ke1/0NW4Lp KDMP+U7f/E5Jr7pWzb5ljrlw1abfCB8NcM/fi0mTVSx+vSQFKGeUsKxEKyJNosLz TEs23dGEugpVCPpyx00z5ua3GLDHrZSwuRBn517M5HGExRRp6CEQWs+EJ+rjjA3g IdbDRBwFQTIUxw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:00 2025 by rpki-client