This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json) Hash identifier: naL3PpZ2nvEZLJgHevGt16eF/e74q6KiWuIIPJ7rMjU= Subject key identifier: C2:61:92:D0:7A:F7:7A:93:18:4E:E9:37:47:82:4D:F2:9B:E9:99:C0 Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89 Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489 Certificate serial: 019B59E3AC37FDBFEB7776E40CB771CE0F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft Manifest number: 064D Signing time: Fri 26 Dec 2025 09:00:51 +0000 Manifest this update: Fri 26 Dec 2025 09:00:51 +0000 Manifest next update: Sat 27 Dec 2025 09:00:51 +0000 Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: gTyvuzPIUIR0RepTEVvrJbqapadn8gE6R2K6FOj8aZ0=) 2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ac:37:fd:bf:eb:77:76:e4:0c:b7:71:ce:0f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489 Validity Not Before: Dec 26 09:00:51 2025 GMT Not After : Dec 27 09:00:51 2025 GMT Subject: CN=c26192d07af77a93184ee93747824df29be999c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:42:f9:1f:f9:c1:cc:af:a9:52:c0:9b:34: ba:87:9d:75:56:c3:44:1b:23:8f:e5:85:6a:a1:a0: 24:a2:9e:c5:88:8d:6b:d7:37:fb:c8:d3:17:35:86: 1c:6f:84:3a:63:66:c0:85:ce:02:09:a8:97:86:a1: b6:f5:fa:e9:90:56:01:f0:1d:f9:11:ac:33:e3:8c: 1d:ed:03:11:a6:3f:18:9a:77:17:d2:74:5c:16:a7: 6d:78:1e:02:d7:b3:86:19:5a:35:6b:b7:2b:79:5e: d7:29:27:eb:64:97:ba:94:66:67:e3:b3:da:ba:1e: 4d:14:20:45:f5:87:60:45:21:b0:e6:72:a4:90:2d: df:f0:61:61:5d:bc:4e:51:88:09:13:33:9d:58:40: c4:cf:56:5b:d8:84:28:46:ec:4d:1a:64:62:ec:9d: 67:2e:07:13:96:65:dd:4e:62:06:17:4e:b5:c4:03: a7:9e:76:4c:b3:4c:eb:2f:32:ba:9b:91:61:4d:8c: ba:9b:3e:ee:61:8b:9c:14:d5:72:59:1b:ed:11:69: bf:64:23:a7:5e:69:1d:2a:30:1e:aa:72:21:7e:3e: a0:3f:ac:0c:37:fa:17:7f:71:22:41:01:34:26:51: ff:51:f3:a4:fc:e7:be:e5:2e:7d:30:08:af:ed:fe: b8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:61:92:D0:7A:F7:7A:93:18:4E:E9:37:47:82:4D:F2:9B:E9:99:C0 X509v3 Authority Key Identifier: keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0a:45:d1:96:79:35:2c:23:7d:2a:ca:8f:e9:0e:ea:a5:16: 1a:8d:c7:5d:5e:de:b1:b4:09:5d:aa:2a:e6:3c:3c:ff:a3:58: 31:80:fe:91:7b:89:4f:0b:85:ab:52:ff:b0:14:b3:85:6b:18: f0:9e:31:02:c0:59:7a:5b:b7:bc:3d:1d:87:ea:9d:b5:64:06: 95:9b:be:1c:2c:e3:f8:45:19:dc:1e:fd:db:56:a3:b7:35:10: 2b:bb:11:8a:f5:b8:40:83:6f:3a:23:58:54:36:17:e8:35:2c: 2a:05:11:5f:73:c9:f9:12:a1:32:8c:a1:6b:65:2b:08:ff:71: 6e:3b:b3:80:94:77:7c:60:f9:50:3e:1f:5e:7a:d0:48:8c:17: 33:45:22:a6:10:73:c5:d0:10:95:29:36:29:a8:c3:57:ca:ae: d0:74:f2:db:2e:74:5d:09:9a:b9:d9:67:1d:fa:c7:ff:5d:01: 83:37:95:39:5a:ae:a5:91:3d:80:6d:e8:a2:12:b7:f5:47:b5: c9:55:f5:7b:c0:bf:61:b8:ca:9d:ac:8c:0b:22:df:ce:a7:30: 19:a9:51:f8:a7:d7:e7:b8:fa:71:5e:b5:57:c2:62:1c:ef:08: e1:57:e7:4f:39:1f:f8:13:75:60:66:82:3d:b9:04:11:f8:c5: 25:52:34:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46w3/b/rd3bkDLdxzg8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmQyYjI4NzFjMDZlNWUyMWRmY2QwMTYwMzA3NTgxNmJk MTQ0ODkwHhcNMjUxMjI2MDkwMDUxWhcNMjUxMjI3MDkwMDUxWjAzMTEwLwYDVQQD EyhjMjYxOTJkMDdhZjc3YTkzMTg0ZWU5Mzc0NzgyNGRmMjliZTk5OWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/ZC+R/5wcyvqVLAmzS6h511VsNE GyOP5YVqoaAkop7FiI1r1zf7yNMXNYYcb4Q6Y2bAhc4CCaiXhqG29frpkFYB8B35 Eawz44wd7QMRpj8YmncX0nRcFqdteB4C17OGGVo1a7creV7XKSfrZJe6lGZn47Pa uh5NFCBF9YdgRSGw5nKkkC3f8GFhXbxOUYgJEzOdWEDEz1Zb2IQoRuxNGmRi7J1n LgcTlmXdTmIGF061xAOnnnZMs0zrLzK6m5FhTYy6mz7uYYucFNVyWRvtEWm/ZCOn XmkdKjAeqnIhfj6gP6wMN/oXf3EiQQE0JlH/UfOk/Oe+5S59MAiv7f64PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJhktB693qTGE7pN0eCTfKb6ZnAMB8GA1UdIwQY MBaAFO29KyhxwG5eId/NAWAwdYFr0USJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTkt ZGU2YTljMDE3ZjdiLzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTktZGU2YTljMDE3Zjdi LzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgpF0ZZ5 NSwjfSrKj+kO6qUWGo3HXV7esbQJXaoq5jw8/6NYMYD+kXuJTwuFq1L/sBSzhWsY 8J4xAsBZelu3vD0dh+qdtWQGlZu+HCzj+EUZ3B7921ajtzUQK7sRivW4QINvOiNY VDYX6DUsKgURX3PJ+RKhMoyha2UrCP9xbjuzgJR3fGD5UD4fXnrQSIwXM0UiphBz xdAQlSk2KajDV8qu0HTy2y50XQmaudlnHfrH/10BgzeVOVqupZE9gG3oohK39Ue1 yVX1e8C/YbjKnayMCyLfzqcwGalR+KfX57j6cV61V8JiHO8I4VfnTzkf+BN1YGaC PbkEEfjFJVI0lQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:56 2025 by rpki-client