This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json) Hash identifier: QbvXZTJuhxu5grqtutdbvSdx+jjcPyCTqE5EioK/s1Y= Subject key identifier: 43:16:4E:96:E0:DC:E7:33:89:D1:57:FD:7A:01:D7:7A:5F:69:E1:91 Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Certificate serial: 019B3D22FCE73BA7CC644F64DFED24F14BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft Manifest number: 0440 Signing time: Sat 20 Dec 2025 19:01:01 +0000 Manifest this update: Sat 20 Dec 2025 19:01:01 +0000 Manifest next update: Sun 21 Dec 2025 19:01:01 +0000 Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: QI9nd46b8zGUypQ2loSPKAq/p20OMBABgMJoy4HmrlA=) 2: C6x_6w-E774Ctv2tM-pwvlDis4g.roa (hash: INLpD3Xn2Y08yhQMCV4sfvThKHmVJ+/cWpnVIk0AjIY=) 3: Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa (hash: wx/H0ps5Y+S8LfFB+UMWHcMD/ey9o03wwXXZ26Kx9zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:fc:e7:3b:a7:cc:64:4f:64:df:ed:24:f1:4b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Validity Not Before: Dec 20 19:01:01 2025 GMT Not After : Dec 21 19:01:01 2025 GMT Subject: CN=43164e96e0dce73389d157fd7a01d77a5f69e191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5f:da:cb:64:0b:6b:ee:47:d4:a0:e2:31:c9: 25:cb:67:dc:db:15:1b:7d:b0:ad:c1:b9:23:46:35: da:7e:25:8c:b1:fc:8b:ae:81:7e:fe:3d:20:88:da: 1a:21:7b:18:4c:a4:3b:bb:5e:6b:2e:03:bc:a6:ba: e8:01:5a:06:85:ba:78:60:da:e5:67:d1:90:f2:53: bb:e8:ab:0e:23:5c:d8:eb:3f:2b:d6:19:b7:50:97: f9:00:a7:39:5c:2e:62:7d:18:34:57:2e:e3:4d:12: 8a:25:fa:84:71:8b:78:10:66:3e:81:ae:0b:ee:6e: d1:ea:e7:50:bb:bf:9a:fb:f3:f3:4a:d8:8b:fc:cc: 47:94:a6:e4:cf:48:cb:79:9c:b0:0e:22:25:2c:46: 77:b4:46:98:56:95:e6:da:53:4f:04:0a:80:fa:1d: 23:5d:42:d2:bd:16:7d:f2:1c:63:38:4e:53:4a:3c: 2d:d8:31:77:06:d3:3b:88:f6:94:b1:09:5b:ae:3d: 02:d0:2a:59:a1:73:6c:4b:50:1e:19:4a:16:79:e2: 47:78:12:16:83:6e:de:18:0a:ce:51:52:01:ff:65: 1f:19:84:b7:df:d3:0c:8a:01:ab:2a:a8:75:26:8d: 97:59:ed:43:76:85:76:b4:4d:69:df:c3:01:12:5f: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:4E:96:E0:DC:E7:33:89:D1:57:FD:7A:01:D7:7A:5F:69:E1:91 X509v3 Authority Key Identifier: keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a9:d0:b7:1f:c1:a9:7c:ca:4d:13:7f:a8:e7:8d:e4:bf:8a: 0f:ed:6c:73:5e:7b:ef:94:b4:5b:70:1a:9d:7b:15:85:8e:fc: e6:50:a3:ce:18:ec:d9:62:87:34:78:73:13:ab:6c:66:35:ec: 4c:3c:3f:a4:45:49:3c:42:8f:19:6c:5d:42:f1:c9:67:83:db: 39:ae:37:9e:a0:8a:3c:54:f2:a2:5b:b7:12:de:90:3a:c6:7f: b6:3a:ce:f9:3e:42:1a:f7:ef:e7:d8:de:75:91:f9:01:89:2c: 60:3f:69:74:13:38:d7:ed:66:f1:83:13:6f:ef:b2:59:fd:45: 96:c1:c6:f4:5e:7b:27:d9:87:df:c7:4e:94:a9:ae:bf:5f:ed: 50:20:62:53:9b:2c:b8:2b:a6:44:cd:70:0e:0a:94:a8:d8:cc: 75:54:50:91:bc:96:69:2c:04:7f:46:75:65:10:5c:e8:ce:dd: 08:7f:4e:83:6f:d6:16:2b:c4:d9:b0:a1:cd:d1:a9:ca:61:04: 8d:c0:f8:b2:b3:59:e7:d3:58:98:8a:35:9f:92:8e:03:d3:d3: d0:e5:5b:07:83:d1:69:34:ce:62:55:7e:cd:43:8b:af:a5:18: 02:1c:b3:89:69:39:e4:1c:d7:ef:21:d1:1d:54:5b:ed:1f:8e: 94:d0:e3:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IvznO6fMZE9k3+0k8UuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZTY0OThkMTc0YWRmNWM4OWEzNjVjMmQxZTQ3N2RjZjI0 Zjk4MmUwHhcNMjUxMjIwMTkwMTAxWhcNMjUxMjIxMTkwMTAxWjAzMTEwLwYDVQQD Eyg0MzE2NGU5NmUwZGNlNzMzODlkMTU3ZmQ3YTAxZDc3YTVmNjllMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51/ay2QLa+5H1KDiMckly2fc2xUb fbCtwbkjRjXafiWMsfyLroF+/j0giNoaIXsYTKQ7u15rLgO8prroAVoGhbp4YNrl Z9GQ8lO76KsOI1zY6z8r1hm3UJf5AKc5XC5ifRg0Vy7jTRKKJfqEcYt4EGY+ga4L 7m7R6udQu7+a+/PzStiL/MxHlKbkz0jLeZywDiIlLEZ3tEaYVpXm2lNPBAqA+h0j XULSvRZ98hxjOE5TSjwt2DF3BtM7iPaUsQlbrj0C0CpZoXNsS1AeGUoWeeJHeBIW g27eGArOUVIB/2UfGYS339MMigGrKqh1Jo2XWe1DdoV2tE1p38MBEl91TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMWTpbg3OczidFX/XoB13pfaeGRMB8GA1UdIwQY MBaAFOzmSY0XSt9ciaNlwtHkd9zyT5guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTIt OWJlY2MxMzZjYzcxLzEvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTItOWJlY2MxMzZjYzcx LzEvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6nQtx/B qXzKTRN/qOeN5L+KD+1sc15775S0W3AanXsVhY785lCjzhjs2WKHNHhzE6tsZjXs TDw/pEVJPEKPGWxdQvHJZ4PbOa43nqCKPFTyolu3Et6QOsZ/tjrO+T5CGvfv59je dZH5AYksYD9pdBM41+1m8YMTb++yWf1FlsHG9F57J9mH38dOlKmuv1/tUCBiU5ss uCumRM1wDgqUqNjMdVRQkbyWaSwEf0Z1ZRBc6M7dCH9Og2/WFivE2bChzdGpymEE jcD4srNZ59NYmIo1n5KOA9PT0OVbB4PRaTTOYlV+zUOLr6UYAhyziWk55BzX7yHR HVRb7R+OlNDjNA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:12:04 2025 by rpki-client