This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json) Hash identifier: w2AKZ3bTv1Nl3h/isQ0aBV+yqQSDCJtpYvXTcuDfcys= Subject key identifier: F2:E6:69:9C:97:43:32:7A:8D:42:69:D0:96:3E:8C:84:D6:D8:7B:56 Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d Certificate serial: 019B41368269B5345B5928D6D03841B27050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft Manifest number: 05DE Signing time: Sun 21 Dec 2025 14:00:49 +0000 Manifest this update: Sun 21 Dec 2025 14:00:49 +0000 Manifest next update: Mon 22 Dec 2025 14:00:49 +0000 Files and hashes: 1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=) 2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: vhM/knj9rdQbWg2Qa895uyOIKLTEMe+tbS/kZWuC5Z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:82:69:b5:34:5b:59:28:d6:d0:38:41:b2:70:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d Validity Not Before: Dec 21 14:00:49 2025 GMT Not After : Dec 22 14:00:49 2025 GMT Subject: CN=f2e6699c9743327a8d4269d0963e8c84d6d87b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:bb:f5:8f:54:17:f9:d3:50:71:68:cf:fd: 42:80:ef:39:8d:eb:99:1e:10:35:d1:18:36:c0:bd: a6:39:bd:68:e3:bc:e0:c0:7e:5c:74:0c:e7:e9:5b: eb:07:8a:b7:48:c0:64:db:00:04:6e:f0:d4:b0:b6: 35:f9:bd:f8:e5:82:43:74:d5:3a:3a:a7:b0:8a:ec: 9d:d6:a9:90:a5:c8:3e:0f:d9:66:59:95:d0:04:9d: 2e:75:cc:3a:a1:2b:ab:79:85:ea:92:ed:32:14:b0: cd:7a:09:48:e3:29:9e:d3:a3:04:a3:65:d4:89:7c: e2:7b:01:96:7a:fa:62:d1:c7:7f:d6:f8:d5:90:f4: 90:18:a9:d2:9e:d4:d7:37:dc:56:44:b7:ab:cb:3d: 73:82:8a:b0:76:f5:3b:f4:5e:62:e6:35:27:93:69: 36:72:60:2a:ee:cf:6d:ed:a8:3e:0d:e8:90:8e:06: 17:b9:c5:22:7d:d1:e1:3e:2f:f1:ea:fa:60:fb:15: 21:3b:8e:20:46:56:e9:52:60:0f:bf:e9:ab:43:16: 9e:44:b6:22:a9:c6:16:45:51:f8:a4:68:b1:76:52: 8c:39:0a:5a:be:e0:a4:5b:3c:72:83:35:b9:e2:f4: ea:22:40:c7:40:17:fa:28:e8:f9:2f:90:55:a7:da: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:69:9C:97:43:32:7A:8D:42:69:D0:96:3E:8C:84:D6:D8:7B:56 X509v3 Authority Key Identifier: keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:72:a9:1a:6c:2b:63:a9:50:80:8f:63:57:1f:e8:97:61:03: 2a:b7:18:bc:da:b2:d8:52:16:36:14:f2:93:c3:5e:e3:ac:be: 2b:17:a5:a3:95:eb:56:9a:cc:6c:54:11:8f:0a:7b:ee:27:59: b5:1c:5d:db:28:7a:2d:80:f4:2a:d8:b2:31:59:16:01:18:d2: 44:32:4e:fc:a5:c4:46:88:a3:43:1f:68:93:31:93:f7:35:f2: cd:d0:a6:b6:6d:e4:77:d5:62:8c:aa:27:69:7a:c0:a1:22:d7: 24:af:aa:78:87:49:f1:b1:04:52:31:57:f3:ce:e4:97:97:24: d9:a0:f1:d7:fb:f8:69:da:3f:bc:c4:01:67:d0:27:9f:c0:bf: 98:60:8d:47:27:05:dc:f8:3e:64:b5:b7:8e:62:4a:09:86:b8: 96:7c:6f:cd:89:76:25:1f:0a:ed:f4:57:c3:94:a6:04:fa:49: 75:58:af:10:6b:d6:f1:4e:f8:cc:3c:95:4f:49:98:f9:22:6b: f4:93:fe:ab:e5:22:ce:38:65:68:94:2d:5f:fa:e2:10:93:2f: c3:ec:de:2d:e6:05:c9:aa:61:3f:3b:64:ae:de:a0:8d:9a:3c: 68:34:38:38:5f:99:c6:25:03:a9:a5:33:0a:19:e8:c1:81:0b: 1b:d6:0a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNoJptTRbWSjW0DhBsnBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjkyYmRlYTViOTdhY2FiYzJmNjU4YzQxMmJmNzQ2ZWUw ZTIwN2QwHhcNMjUxMjIxMTQwMDQ5WhcNMjUxMjIyMTQwMDQ5WjAzMTEwLwYDVQQD EyhmMmU2Njk5Yzk3NDMzMjdhOGQ0MjY5ZDA5NjNlOGM4NGQ2ZDg3YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mu79Y9UF/nTUHFoz/1CgO85jeuZ HhA10Rg2wL2mOb1o47zgwH5cdAzn6VvrB4q3SMBk2wAEbvDUsLY1+b345YJDdNU6 Oqewiuyd1qmQpcg+D9lmWZXQBJ0udcw6oSureYXqku0yFLDNeglI4yme06MEo2XU iXziewGWevpi0cd/1vjVkPSQGKnSntTXN9xWRLeryz1zgoqwdvU79F5i5jUnk2k2 cmAq7s9t7ag+DeiQjgYXucUifdHhPi/x6vpg+xUhO44gRlbpUmAPv+mrQxaeRLYi qcYWRVH4pGixdlKMOQpavuCkWzxygzW54vTqIkDHQBf6KOj5L5BVp9riEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLmaZyXQzJ6jUJp0JY+jITW2HtWMB8GA1UdIwQY MBaAFLe5K96luXrKvC9ljEEr90buDiB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODIt ZGQ5MDA5YjMzMTdkLzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODItZGQ5MDA5YjMzMTdk LzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHKpGmwr Y6lQgI9jVx/ol2EDKrcYvNqy2FIWNhTyk8Ne46y+Kxelo5XrVprMbFQRjwp77idZ tRxd2yh6LYD0KtiyMVkWARjSRDJO/KXERoijQx9okzGT9zXyzdCmtm3kd9VijKon aXrAoSLXJK+qeIdJ8bEEUjFX887kl5ck2aDx1/v4ado/vMQBZ9Ann8C/mGCNRycF 3Pg+ZLW3jmJKCYa4lnxvzYl2JR8K7fRXw5SmBPpJdVivEGvW8U74zDyVT0mY+SJr 9JP+q+UizjhlaJQtX/riEJMvw+zeLeYFyaphPztkrt6gjZo8aDQ4OF+ZxiUDqaUz ChnowYELG9YKFA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:15 2025 by rpki-client