This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json) Hash identifier: JtCcLpaAzZIQiHrLaUOkQCCor2VJo6RWXf81nlefuzg= Subject key identifier: 5C:E1:AD:25:F0:19:C9:20:E1:BB:28:73:90:38:EF:9F:EF:D3:A5:21 Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8 Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8 Certificate serial: 019B5AF65621A42062375F0EE25256445ABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 14:00:51 +0000 Manifest this update: Fri 26 Dec 2025 14:00:51 +0000 Manifest next update: Sat 27 Dec 2025 14:00:51 +0000 Files and hashes: 1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=) 2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: ngpSOV8mCMIKIHJUB3CHaIkOv5ZFIi8ZwaRt8wa59DA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:56:21:a4:20:62:37:5f:0e:e2:52:56:44:5a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8 Validity Not Before: Dec 26 14:00:51 2025 GMT Not After : Dec 27 14:00:51 2025 GMT Subject: CN=5ce1ad25f019c920e1bb28739038ef9fefd3a521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:b7:5e:ce:3f:7c:9f:c3:6b:de:73:f6:f0: 94:5d:33:46:69:00:8e:4b:f0:06:d6:bd:58:ba:a8: 37:a3:1e:f8:97:2c:18:99:50:5a:af:0a:af:af:df: cc:fe:08:23:de:ad:2f:33:ca:f2:eb:49:71:ba:e7: 43:f4:5c:c2:82:90:8e:ec:9f:53:45:d6:e4:61:c0: 7c:12:78:1f:bb:4f:75:05:76:43:ce:6a:c4:9b:9a: e5:93:1d:f7:0e:af:ec:20:e2:e7:71:ee:cc:05:47: 02:27:22:94:05:45:7b:5d:4f:b6:32:76:23:25:61: ed:f7:0c:2f:06:88:af:d3:40:16:1b:68:ab:3e:8d: ae:c5:22:43:ab:30:ca:60:46:19:cf:7d:c7:52:d7: 31:82:7b:60:67:3f:50:cb:16:20:17:5c:fa:52:72: b4:3a:33:d6:d4:88:6d:bb:1d:70:60:d9:27:d4:32: d5:b6:b8:9e:ff:95:3e:50:e4:22:74:25:2f:cc:c5: 2a:cf:a6:14:b2:40:b1:12:54:f8:74:92:dc:53:9a: a9:33:a5:d8:16:57:a4:84:d1:5d:17:2f:2c:ff:2f: 32:d4:24:1c:36:26:35:4e:d5:ab:97:b6:5d:c2:f6: 59:51:54:19:31:66:0e:ec:2e:18:ee:52:09:8b:53: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E1:AD:25:F0:19:C9:20:E1:BB:28:73:90:38:EF:9F:EF:D3:A5:21 X509v3 Authority Key Identifier: keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7e:40:9e:6e:89:15:2e:0d:20:a9:e6:8c:fa:0d:4a:6e:19: d5:90:22:cc:9c:35:e5:4e:33:a2:8c:6b:06:ac:30:ff:23:2d: 45:4b:db:33:e7:b0:42:db:e4:4b:2f:76:eb:bd:1a:96:a3:45: df:f6:b3:09:d4:df:7e:56:8d:83:80:3d:b1:cb:30:21:c4:21: e5:dc:88:6d:da:35:0a:f9:0e:2f:d4:8b:4e:15:f7:28:3a:b8: 3a:27:3d:6c:f5:30:c8:84:a2:6c:6e:1c:3c:f0:77:97:5f:dc: 43:dd:b7:b4:cb:cf:6e:2d:32:b9:40:8f:50:1a:a3:85:27:96: b4:fc:2e:22:8c:38:5c:e4:42:48:31:84:89:d2:6f:6c:2f:d9: 60:88:a6:2e:1b:0a:4b:a1:67:15:c8:91:fd:17:f3:a9:5c:c3: cf:0c:d3:26:13:0c:0f:a2:da:e9:56:8c:f2:7b:14:a4:26:af: 68:d9:2b:45:7c:99:2d:8e:23:09:dd:b4:16:bb:cc:36:bf:91: f1:4f:fd:5e:6e:6d:af:57:8c:da:16:9e:b7:23:a3:3f:81:e1: a3:0a:3c:84:6c:9a:49:0e:d1:a7:9e:b9:5b:f3:52:37:5e:91: f7:5a:f7:7a:db:26:11:92:92:35:b8:9f:28:e9:92:40:66:1e: 22:2e:03:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9lYhpCBiN18O4lJWRFq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYjQzZGUyMzdmZDBiNmEyODczODkyMzA5MjFkMjVhMmMy ZWQxYTgwHhcNMjUxMjI2MTQwMDUxWhcNMjUxMjI3MTQwMDUxWjAzMTEwLwYDVQQD Eyg1Y2UxYWQyNWYwMTljOTIwZTFiYjI4NzM5MDM4ZWY5ZmVmZDNhNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZy3Xs4/fJ/Da95z9vCUXTNGaQCO S/AG1r1Yuqg3ox74lywYmVBarwqvr9/M/ggj3q0vM8ry60lxuudD9FzCgpCO7J9T RdbkYcB8Engfu091BXZDzmrEm5rlkx33Dq/sIOLnce7MBUcCJyKUBUV7XU+2MnYj JWHt9wwvBoiv00AWG2irPo2uxSJDqzDKYEYZz33HUtcxgntgZz9QyxYgF1z6UnK0 OjPW1Ihtux1wYNkn1DLVtrie/5U+UOQidCUvzMUqz6YUskCxElT4dJLcU5qpM6XY FlekhNFdFy8s/y8y1CQcNiY1TtWrl7ZdwvZZUVQZMWYO7C4Y7lIJi1PgtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzhrSXwGckg4bsoc5A475/v06UhMB8GA1UdIwQY MBaAFH+0PeI3/QtqKHOJIwkh0losLtGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kNGQxMmEtYWI0ZS00ZGJhLTk1ZGUt YmM2MzcxMzBkZTZlLzEvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kNGQxMmEtYWI0ZS00ZGJhLTk1ZGUtYmM2MzcxMzBkZTZl LzEvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC35Anm6J FS4NIKnmjPoNSm4Z1ZAizJw15U4zooxrBqww/yMtRUvbM+ewQtvkSy92670alqNF 3/azCdTfflaNg4A9scswIcQh5dyIbdo1CvkOL9SLThX3KDq4Oic9bPUwyISibG4c PPB3l1/cQ923tMvPbi0yuUCPUBqjhSeWtPwuIow4XORCSDGEidJvbC/ZYIimLhsK S6FnFciR/RfzqVzDzwzTJhMMD6La6VaM8nsUpCavaNkrRXyZLY4jCd20FrvMNr+R 8U/9Xm5tr1eM2haetyOjP4Hhowo8hGyaSQ7Rp565W/NSN16R91r3etsmEZKSNbif KOmSQGYeIi4Dgw== -----END CERTIFICATE-----Generated at Fri Dec 26 22:44:03 2025 by rpki-client