This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft File: t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json) Hash identifier: /oWoromsLVUV+yLuJmwcLFMGiIuU91O2ccM8P5/a1bs= Subject key identifier: 5B:A0:BA:F2:AF:C3:12:7A:4B:45:64:C3:77:C1:B1:E9:B6:F7:62:10 Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74 Certificate issuer: /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774 Certificate serial: 019B5117F7CB4383A11BA9130A1BD44F0ABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 16:01:23 +0000 Manifest this update: Wed 24 Dec 2025 16:01:23 +0000 Manifest next update: Thu 25 Dec 2025 16:01:23 +0000 Files and hashes: 1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=) 2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: Fj0u0Y9D2kxmP4S1cF5nZthlKK2JemVmi6vM09KTlqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:f7:cb:43:83:a1:1b:a9:13:0a:1b:d4:4f:0a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774 Validity Not Before: Dec 24 16:01:23 2025 GMT Not After : Dec 25 16:01:23 2025 GMT Subject: CN=5ba0baf2afc3127a4b4564c377c1b1e9b6f76210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:a0:c6:67:48:f8:50:7f:f4:60:63:20:f5: b8:d5:2b:2a:70:e9:e2:32:3a:f5:ff:cc:3e:82:e3: d7:a5:d7:20:70:1e:5d:e7:1d:63:8b:83:ec:8f:33: 3c:7a:83:94:3c:f2:86:3a:5d:70:3d:a9:b1:1d:7c: c8:fd:6b:79:1e:30:3b:74:e4:b3:2c:6d:ab:e7:c3: a7:0d:a4:cd:90:74:67:98:88:c9:a2:f8:07:db:16: 19:69:41:7f:de:2d:3e:47:60:4c:56:5b:ce:a5:15: 5e:38:fc:a4:2e:c6:c9:92:57:66:56:fc:84:c4:70: d8:f9:be:70:09:4d:7a:57:ce:5b:5d:1e:21:6a:03: e2:c7:7c:25:13:e4:8e:1d:a0:9c:7c:a1:63:6c:84: 98:16:37:a3:66:cf:11:95:eb:7a:e8:94:59:aa:ab: 96:1a:16:4b:ef:d9:fe:7b:40:2e:de:3a:c1:c5:75: 30:c7:d7:cf:34:89:2c:0d:d6:e5:d2:c3:ec:32:56: 29:3e:1e:90:65:f2:7b:bb:2c:67:69:44:74:b6:af: 81:aa:b8:e2:72:1a:59:9b:9e:e6:56:b4:b2:46:9f: 22:df:3c:70:0a:de:a5:c1:24:0d:85:f0:bc:ee:47: 34:b6:57:15:a3:51:51:3a:d2:5d:23:21:55:e6:82: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A0:BA:F2:AF:C3:12:7A:4B:45:64:C3:77:C1:B1:E9:B6:F7:62:10 X509v3 Authority Key Identifier: keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bb:a4:b4:20:7d:f2:07:2a:b2:34:0b:5a:00:b0:9a:7d:38: bb:8f:03:b1:25:ff:e6:8b:e0:0f:3d:d9:53:9a:a7:4e:eb:f3: 0f:3b:d1:37:51:79:5a:9f:27:05:a6:6e:08:80:ad:3b:5d:f2: 0f:ee:10:33:37:47:35:7f:3e:c4:d3:02:28:ef:5e:ca:21:e9: c0:2c:5f:51:f6:5d:e2:e2:15:1b:ed:e6:9e:6a:9b:46:3a:47: 67:af:9a:30:bb:eb:82:80:fa:94:7a:11:44:08:e9:16:50:98: b3:fd:a7:65:83:82:da:50:e8:b1:f2:b3:5a:37:68:88:52:d2: 87:7a:36:63:d7:6d:fa:9f:ff:49:94:5c:15:76:c2:bc:89:cb: 4f:e6:8d:01:cb:2a:80:49:42:a5:7d:1d:f3:ff:ef:54:a2:7f: d6:0a:f1:24:48:eb:4d:7e:fe:82:b8:e5:fc:9c:b2:df:f7:7e: 77:f9:ea:90:15:93:44:8f:c6:ad:83:f1:3a:bc:f0:b6:92:fa: 7f:bb:7d:58:f4:22:79:6e:14:73:df:cf:48:42:59:60:86:40: 8c:c7:54:33:7b:c8:c7:b5:78:93:de:79:16:fa:4c:3b:e9:33: 8c:42:3b:00:7f:36:5f:f8:d0:16:cf:51:49:03:1f:a4:8a:8b: b1:09:1a:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF/fLQ4OhG6kTChvUTwq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YmMxYWRmYmYzNjI2NDhmYzYzNWMzMzMyZjM4M2JjYmMw MWU3NzQwHhcNMjUxMjI0MTYwMTIzWhcNMjUxMjI1MTYwMTIzWjAzMTEwLwYDVQQD Eyg1YmEwYmFmMmFmYzMxMjdhNGI0NTY0YzM3N2MxYjFlOWI2Zjc2MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySugxmdI+FB/9GBjIPW41SsqcOni Mjr1/8w+guPXpdcgcB5d5x1ji4PsjzM8eoOUPPKGOl1wPamxHXzI/Wt5HjA7dOSz LG2r58OnDaTNkHRnmIjJovgH2xYZaUF/3i0+R2BMVlvOpRVeOPykLsbJkldmVvyE xHDY+b5wCU16V85bXR4hagPix3wlE+SOHaCcfKFjbISYFjejZs8Rlet66JRZqquW GhZL79n+e0Au3jrBxXUwx9fPNIksDdbl0sPsMlYpPh6QZfJ7uyxnaUR0tq+Bqrji chpZm57mVrSyRp8i3zxwCt6lwSQNhfC87kc0tlcVo1FROtJdIyFV5oJK4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuguvKvwxJ6S0Vkw3fBsem292IQMB8GA1UdIwQY MBaAFLe8Gt+/NiZI/GNcMzLzg7y8Aed0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUt ZmQ2MDZiMDZhMDFhLzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUtZmQ2MDZiMDZhMDFh LzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLuktCB9 8gcqsjQLWgCwmn04u48DsSX/5ovgDz3ZU5qnTuvzDzvRN1F5Wp8nBaZuCICtO13y D+4QMzdHNX8+xNMCKO9eyiHpwCxfUfZd4uIVG+3mnmqbRjpHZ6+aMLvrgoD6lHoR RAjpFlCYs/2nZYOC2lDosfKzWjdoiFLSh3o2Y9dt+p//SZRcFXbCvInLT+aNAcsq gElCpX0d8//vVKJ/1grxJEjrTX7+grjl/Jyy3/d+d/nqkBWTRI/GrYPxOrzwtpL6 f7t9WPQieW4Uc9/PSEJZYIZAjMdUM3vIx7V4k955FvpMO+kzjEI7AH82X/jQFs9R SQMfpIqLsQkaIw== -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:09 2025 by rpki-client