This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json) Hash identifier: RBvvgt51EvZqGxX+LfBj0UmWO+mez1yWjPG5ISAbGC4= Subject key identifier: F6:24:25:F5:02:CE:12:A5:12:21:F6:D3:FB:B7:78:35:BB:77:3F:D8 Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Certificate serial: 019B41DB7BAA65E89E3AB9559BF13E3D191D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 17:01:01 +0000 Manifest this update: Sun 21 Dec 2025 17:01:01 +0000 Manifest next update: Mon 22 Dec 2025 17:01:01 +0000 Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: mqXqpMmc13ojr4emfIXCko6hcWjXmZvtz3h0Cef2+TE=) 2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:7b:aa:65:e8:9e:3a:b9:55:9b:f1:3e:3d:19:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Validity Not Before: Dec 21 17:01:01 2025 GMT Not After : Dec 22 17:01:01 2025 GMT Subject: CN=f62425f502ce12a51221f6d3fbb77835bb773fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:82:c8:6d:2b:81:5c:08:ae:ac:d6:57:8c: 04:75:c0:fc:57:58:ae:fa:fc:19:ee:31:e5:86:8c: ca:87:9b:bf:c9:d7:78:e5:43:b6:a0:a6:4b:1c:2c: 0b:23:59:bd:8c:ca:e8:6e:14:6d:6e:99:62:2c:8a: b9:ef:64:59:99:1a:4c:6c:8c:cc:22:fa:0d:bb:bf: 37:4e:0c:f4:58:2d:3d:ca:7f:c6:64:42:64:0f:87: cb:5b:b3:ed:1d:4a:b7:c1:ba:34:26:98:c3:42:2e: b6:b4:e4:90:c5:8a:41:70:c8:2d:82:d8:15:e2:ea: fa:f9:45:e7:e3:f3:cd:66:9f:dc:16:49:0c:11:58: cf:69:70:59:0c:f6:f8:5c:59:ae:a0:cf:31:be:3b: d3:57:b0:fb:43:ed:9b:7d:85:8d:5f:20:d3:17:15: 22:eb:40:fb:96:f3:8e:df:e5:aa:d0:72:2d:2d:27: 5f:fc:b6:58:f5:11:75:9c:56:2e:76:5b:44:01:7c: ef:20:52:6a:78:b7:d7:2d:9d:0b:eb:f5:a8:1b:de: af:8d:7e:51:8c:a8:f8:56:61:fa:a3:16:18:fa:fc: 34:0c:e3:29:e6:4e:34:e4:9d:0c:7f:81:c2:66:24: cc:02:9e:b7:f3:01:da:30:12:d1:f4:cf:07:8e:d6: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:24:25:F5:02:CE:12:A5:12:21:F6:D3:FB:B7:78:35:BB:77:3F:D8 X509v3 Authority Key Identifier: keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:13:a6:f8:10:43:66:e3:2f:61:57:80:1d:ac:a1:e2:5f:3b: a4:87:af:29:36:fa:e4:f2:bb:c0:59:23:59:07:be:54:d4:ea: 01:de:f7:ae:6b:f1:3f:66:a4:d3:7c:02:6b:da:c9:9c:de:26: d7:01:c1:73:5f:9c:3a:9f:c1:10:97:62:d9:94:7e:58:b9:e9: 3c:13:b5:47:80:7a:04:f1:21:d7:29:b8:fb:b7:ec:f2:4c:de: 25:6a:fa:67:41:f6:b4:d9:92:a1:78:33:92:4d:64:0b:77:34: ea:32:56:22:5f:eb:73:06:a0:4b:4a:88:b4:55:f6:fc:c8:d0: a9:ff:db:5e:72:31:a4:f1:1c:f5:30:22:69:6f:cd:e4:cb:44: ce:cc:49:fb:9a:9d:8e:62:4d:2f:a9:4c:e3:6a:cd:e2:69:94: e1:59:f4:25:47:aa:cb:de:b1:66:68:7f:94:41:80:d7:6d:6c: 5b:78:d2:22:8a:54:5c:a2:74:f4:63:41:b7:83:4d:03:e6:bb: f2:de:86:64:b8:b1:90:d9:e0:2f:4c:42:01:69:19:f1:35:dd: 58:38:0e:60:bb:b2:8f:71:99:92:21:7f:50:50:52:23:6d:99: 07:a8:ae:62:5b:c4:c2:b3:c3:55:0d:22:16:c9:a1:6a:fd:aa: 37:c6:33:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB23uqZeieOrlVm/E+PRkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYTQ3NWQwOGI2ZjhiNzhlZDExYjBjYTRkMTM2ZGViMzhi Yzk5MWIwHhcNMjUxMjIxMTcwMTAxWhcNMjUxMjIyMTcwMTAxWjAzMTEwLwYDVQQD EyhmNjI0MjVmNTAyY2UxMmE1MTIyMWY2ZDNmYmI3NzgzNWJiNzczZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kmCyG0rgVwIrqzWV4wEdcD8V1iu +vwZ7jHlhozKh5u/ydd45UO2oKZLHCwLI1m9jMrobhRtbpliLIq572RZmRpMbIzM IvoNu783Tgz0WC09yn/GZEJkD4fLW7PtHUq3wbo0JpjDQi62tOSQxYpBcMgtgtgV 4ur6+UXn4/PNZp/cFkkMEVjPaXBZDPb4XFmuoM8xvjvTV7D7Q+2bfYWNXyDTFxUi 60D7lvOO3+Wq0HItLSdf/LZY9RF1nFYudltEAXzvIFJqeLfXLZ0L6/WoG96vjX5R jKj4VmH6oxYY+vw0DOMp5k405J0Mf4HCZiTMAp638wHaMBLR9M8HjtbV2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYkJfUCzhKlEiH20/u3eDW7dz/YMB8GA1UdIwQY MBaAFO6kddCLb4t47RGwyk0Tbes4vJkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQt MzZlMzlmZWQ3YmVkLzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQtMzZlMzlmZWQ3YmVk LzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVROm+BBD ZuMvYVeAHayh4l87pIevKTb65PK7wFkjWQe+VNTqAd73rmvxP2ak03wCa9rJnN4m 1wHBc1+cOp/BEJdi2ZR+WLnpPBO1R4B6BPEh1ym4+7fs8kzeJWr6Z0H2tNmSoXgz kk1kC3c06jJWIl/rcwagS0qItFX2/MjQqf/bXnIxpPEc9TAiaW/N5MtEzsxJ+5qd jmJNL6lM42rN4mmU4Vn0JUeqy96xZmh/lEGA121sW3jSIopUXKJ09GNBt4NNA+a7 8t6GZLixkNngL0xCAWkZ8TXdWDgOYLuyj3GZkiF/UFBSI22ZB6iuYlvEwrPDVQ0i Fsmhav2qN8YzzQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:02:04 2025 by rpki-client