This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json) Hash identifier: 4BLpDzJvlq3cFDmpY1Q+8vFPjsFdasa/8piDk3xRgec= Subject key identifier: 03:25:ED:EA:24:40:91:F8:B9:52:7F:7F:7E:E3:CE:42:3C:75:EC:3A Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25 Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25 Certificate serial: 019B3420304D321A649C4484AC38B54841EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft Manifest number: 0CDC Signing time: Fri 19 Dec 2025 01:01:23 +0000 Manifest this update: Fri 19 Dec 2025 01:01:23 +0000 Manifest next update: Sat 20 Dec 2025 01:01:23 +0000 Files and hashes: 1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=) 2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: QCv2Sd4K8EIBsYb4I8zFbgrBB7MM9ml04WuXBle3Ofk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:30:4d:32:1a:64:9c:44:84:ac:38:b5:48:41:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25 Validity Not Before: Dec 19 01:01:23 2025 GMT Not After : Dec 20 01:01:23 2025 GMT Subject: CN=0325edea244091f8b9527f7f7ee3ce423c75ec3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e8:d8:84:eb:4b:92:52:68:4b:65:68:e2:bd: 5a:e9:7d:dc:6f:bf:06:03:a9:8b:57:35:0b:e3:97: 95:21:13:ed:f6:54:d6:13:a1:41:5d:d7:62:e1:89: 9a:87:a9:ee:17:42:a4:6e:a9:1a:4c:46:09:12:1d: 1f:50:6a:63:e0:dd:6b:43:dc:13:82:21:a6:6b:01: c7:55:a9:76:4a:ff:ec:d9:91:d4:e3:05:30:dc:3d: ea:5b:b9:87:c1:3e:48:e8:7c:44:9e:45:05:df:d2: db:78:e8:38:e5:a6:3d:1f:3e:1e:4b:88:2c:6e:ec: 78:06:6a:62:07:98:4f:77:f6:c5:10:04:84:96:a1: e0:60:8f:e1:df:ff:a2:1d:d0:ad:dd:a9:2d:fa:b9: 8c:ba:df:e3:7e:f5:f1:3f:fc:7b:c9:7d:f9:be:61: 12:bf:fe:23:9d:d3:de:1d:4e:63:9f:b4:30:5e:95: 94:64:69:d7:bf:b4:27:8d:14:48:3e:9e:64:77:b5: 77:e0:85:8f:09:7d:cc:8e:59:bc:6d:59:1c:2a:b6: 77:07:52:0c:58:ec:b6:ed:28:bc:c8:d1:ad:c1:0d: 8b:56:83:a3:b4:9e:5a:bc:02:3a:21:5b:9e:f1:8e: a4:46:12:1c:04:63:b7:eb:69:83:fd:fa:03:e2:d2: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:25:ED:EA:24:40:91:F8:B9:52:7F:7F:7E:E3:CE:42:3C:75:EC:3A X509v3 Authority Key Identifier: keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:1c:b8:d0:22:05:d5:db:ec:b1:37:68:31:eb:fa:73:f4:68: a9:7c:20:3c:e4:7f:19:94:96:5d:c0:15:1b:99:2b:45:76:5a: c0:6a:c0:4f:94:aa:5b:08:37:c3:02:5f:f8:8b:85:05:c5:f3: 68:ee:4e:0f:d0:30:73:59:cf:48:05:98:16:45:86:f5:6e:a3: 88:3d:f8:31:0b:a1:53:91:9a:dc:45:bb:22:12:3d:ea:8e:7d: 5e:63:1e:a7:51:d8:38:a0:7e:08:79:4d:5b:c0:7b:6d:0d:a2: 3e:3c:30:f3:a4:c7:25:ee:f5:4c:45:b9:5f:2f:0f:af:b5:80: 72:9d:4c:68:1d:e7:0a:b7:9a:ab:52:6e:1f:d2:23:a4:08:81: 16:51:e1:86:bd:f8:e4:45:2e:07:7b:bb:94:d9:01:1f:c5:92: 4f:39:f8:d1:1c:45:7b:98:e9:4b:c1:dc:31:31:c4:0d:f1:5e: 12:9b:b9:be:a3:1a:cf:8a:0d:5b:40:fd:42:88:22:4a:6c:de: 80:7c:30:ae:ee:03:9b:00:77:f2:30:e5:03:20:de:73:7a:0d: 54:3a:12:5c:b0:68:57:85:ec:94:1a:95:43:a6:a6:7e:c8:fe: 21:bf:df:71:4f:28:c2:96:2d:da:92:1e:91:6f:1c:68:80:62: 57:44:d5:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IDBNMhpknESErDi1SEHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjVkMmI0M2FjYzBkOWYwN2FhMDBhYTkwZjAyNWM5NmQ1 Y2VjMjUwHhcNMjUxMjE5MDEwMTIzWhcNMjUxMjIwMDEwMTIzWjAzMTEwLwYDVQQD EygwMzI1ZWRlYTI0NDA5MWY4Yjk1MjdmN2Y3ZWUzY2U0MjNjNzVlYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiujYhOtLklJoS2Vo4r1a6X3cb78G A6mLVzUL45eVIRPt9lTWE6FBXddi4Ymah6nuF0KkbqkaTEYJEh0fUGpj4N1rQ9wT giGmawHHVal2Sv/s2ZHU4wUw3D3qW7mHwT5I6HxEnkUF39LbeOg45aY9Hz4eS4gs bux4BmpiB5hPd/bFEASElqHgYI/h3/+iHdCt3akt+rmMut/jfvXxP/x7yX35vmES v/4jndPeHU5jn7QwXpWUZGnXv7QnjRRIPp5kd7V34IWPCX3Mjlm8bVkcKrZ3B1IM WOy27Si8yNGtwQ2LVoOjtJ5avAI6IVue8Y6kRhIcBGO362mD/foD4tKnkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMl7eokQJH4uVJ/f37jzkI8dew6MB8GA1UdIwQY MBaAFLO10rQ6zA2fB6oAqpDwJcltXOwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmIt MjRiOGMwMmZhODJhLzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmItMjRiOGMwMmZhODJh LzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyhy40CIF 1dvssTdoMev6c/RoqXwgPOR/GZSWXcAVG5krRXZawGrAT5SqWwg3wwJf+IuFBcXz aO5OD9Awc1nPSAWYFkWG9W6jiD34MQuhU5Ga3EW7IhI96o59XmMep1HYOKB+CHlN W8B7bQ2iPjww86THJe71TEW5Xy8Pr7WAcp1MaB3nCreaq1JuH9IjpAiBFlHhhr34 5EUuB3u7lNkBH8WSTzn40RxFe5jpS8HcMTHEDfFeEpu5vqMaz4oNW0D9QogiSmze gHwwru4DmwB38jDlAyDec3oNVDoSXLBoV4XslBqVQ6amfsj+Ib/fcU8owpYt2pIe kW8caIBiV0TVHA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:23:10 2025 by rpki-client