This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json) Hash identifier: DyQfjKxIANntgDgB4ayTKm8+tVq2OPgq6VCH58Gxh94= Subject key identifier: 64:19:D3:18:5E:1C:2D:43:E0:06:76:D0:3D:43:BA:86:8F:E5:0D:A9 Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03 Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903 Certificate serial: 019B42805111E3B1D5536A915CA4B2B916E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 20:01:04 +0000 Manifest this update: Sun 21 Dec 2025 20:01:04 +0000 Manifest next update: Mon 22 Dec 2025 20:01:04 +0000 Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=) 2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=) 3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: PDqdwEqKYTnft2WBgYEjRc7mp0TxC+DaylxLtvtF4+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:51:11:e3:b1:d5:53:6a:91:5c:a4:b2:b9:16:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903 Validity Not Before: Dec 21 20:01:04 2025 GMT Not After : Dec 22 20:01:04 2025 GMT Subject: CN=6419d3185e1c2d43e00676d03d43ba868fe50da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:89:e1:27:17:97:f4:62:d7:f9:2d:66:7a: 8d:08:a1:d0:f7:88:b2:4d:7d:3e:0c:29:a0:61:26: 0c:7a:a0:23:62:d2:08:53:cb:b3:64:70:41:64:65: 63:56:77:6f:fb:73:37:b3:f8:83:ef:12:a6:1e:3d: 00:06:af:01:68:fd:20:c1:a4:aa:a5:de:43:b8:d7: d1:1b:e7:c2:02:78:e3:a7:e8:75:9e:26:28:54:da: af:bf:6d:27:0f:56:17:89:83:96:42:08:8b:fc:2b: da:96:38:4a:2a:9d:75:4a:a2:b8:e2:36:0e:a0:2d: 6d:61:d0:6d:59:f5:64:8e:30:26:5c:2a:85:c1:10: 9e:92:fc:76:e4:57:0c:de:d6:06:e6:b9:e6:45:a8: 02:cf:4a:30:93:7d:07:30:82:c9:2c:c6:09:c6:96: 42:b4:d7:af:13:57:25:5f:c3:76:e7:83:a4:72:ce: ff:7b:fb:9c:99:73:06:cc:76:92:9e:eb:fc:a6:80: 8e:91:c8:0f:b1:9e:a3:29:42:ea:19:2a:71:f4:ae: 4c:34:9f:f5:ef:a3:c3:43:ab:4d:a0:bf:f0:79:15: 50:ee:1d:de:b1:da:46:0f:10:05:19:94:83:fe:86: 29:cf:c8:8d:bd:c1:fa:9c:f2:2d:d3:8b:8c:f6:c3: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:19:D3:18:5E:1C:2D:43:E0:06:76:D0:3D:43:BA:86:8F:E5:0D:A9 X509v3 Authority Key Identifier: keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:37:9b:2a:be:25:00:4d:c7:ba:b2:fa:ec:6f:fd:3b:6d:bf: 6c:4e:84:15:f2:69:a3:4b:99:20:3e:ec:46:c0:a4:c0:23:a9: 1f:5b:39:5c:ed:a9:e9:85:b3:98:98:b7:65:c7:f9:2d:a3:3a: 0f:10:30:c3:55:c6:39:cb:1f:92:18:73:5c:63:11:6e:16:39: a1:0c:1d:52:45:3a:58:2e:d1:31:c3:21:13:2e:4c:b2:9d:9e: 64:30:46:8b:c4:90:98:7e:59:1e:40:79:9a:00:bf:1b:90:9a: 3d:f4:a2:51:54:e6:a9:9d:0d:3e:48:5a:c2:a3:e2:30:b2:81: 90:af:f6:cb:2e:cd:2c:b6:75:d3:ba:dd:0d:ba:d2:22:e4:50: 3b:5b:4a:ab:56:2f:3b:07:89:73:b2:c9:a5:9b:cd:01:3a:7e: 26:e6:a5:52:a5:8b:0a:38:fc:77:08:ca:91:0b:42:1e:58:d0: e3:01:32:15:72:ec:ee:00:1d:05:d1:1b:91:7d:f0:29:53:ab: 08:b8:ce:07:3b:25:0f:9b:9d:da:9d:8a:e5:e4:e2:f1:8a:73: 1c:56:a1:f0:7a:75:25:8b:c3:19:9c:72:f5:e1:68:82:f6:5f: 59:ad:dd:4a:e0:ab:bf:65:33:2c:1c:63:13:8e:55:f8:da:ba: 9b:b9:be:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgFER47HVU2qRXKSyuRbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmIyYTQzMDIwOTRmNGMzZjViYWRhNTQ3ZWY0ZjdlZGUx OGU5MDMwHhcNMjUxMjIxMjAwMTA0WhcNMjUxMjIyMjAwMTA0WjAzMTEwLwYDVQQD Eyg2NDE5ZDMxODVlMWMyZDQzZTAwNjc2ZDAzZDQzYmE4NjhmZTUwZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18qJ4ScXl/Ri1/ktZnqNCKHQ94iy TX0+DCmgYSYMeqAjYtIIU8uzZHBBZGVjVndv+3M3s/iD7xKmHj0ABq8BaP0gwaSq pd5DuNfRG+fCAnjjp+h1niYoVNqvv20nD1YXiYOWQgiL/CvaljhKKp11SqK44jYO oC1tYdBtWfVkjjAmXCqFwRCekvx25FcM3tYG5rnmRagCz0owk30HMILJLMYJxpZC tNevE1clX8N254Okcs7/e/ucmXMGzHaSnuv8poCOkcgPsZ6jKULqGSpx9K5MNJ/1 76PDQ6tNoL/weRVQ7h3esdpGDxAFGZSD/oYpz8iNvcH6nPIt04uM9sPD2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQZ0xheHC1D4AZ20D1DuoaP5Q2pMB8GA1UdIwQY MBaAFLu7KkMCCU9MP1utpUfvT37eGOkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAt MzJiZjE2NDFmYjNiLzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAtMzJiZjE2NDFmYjNi LzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTebKr4l AE3HurL67G/9O22/bE6EFfJpo0uZID7sRsCkwCOpH1s5XO2p6YWzmJi3Zcf5LaM6 DxAww1XGOcsfkhhzXGMRbhY5oQwdUkU6WC7RMcMhEy5Msp2eZDBGi8SQmH5ZHkB5 mgC/G5CaPfSiUVTmqZ0NPkhawqPiMLKBkK/2yy7NLLZ107rdDbrSIuRQO1tKq1Yv OweJc7LJpZvNATp+JualUqWLCjj8dwjKkQtCHljQ4wEyFXLs7gAdBdEbkX3wKVOr CLjOBzslD5ud2p2K5eTi8YpzHFah8Hp1JYvDGZxy9eFogvZfWa3dSuCrv2UzLBxj E45V+Nq6m7m+NQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:49:56 2025 by rpki-client