This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json) Hash identifier: BCdJKDYDE5UQjzjyb+9CW80JZro+/r/r2DatbaL4Qzk= Subject key identifier: A8:0E:83:5F:33:43:92:8A:3B:8B:AD:AA:FE:43:01:B7:4F:A2:32:54 Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99 Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99 Certificate serial: 019B5AF616B8D459DE9B8CBB656D34FAC76F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft Manifest number: 17A0 Signing time: Fri 26 Dec 2025 14:00:35 +0000 Manifest this update: Fri 26 Dec 2025 14:00:35 +0000 Manifest next update: Sat 27 Dec 2025 14:00:35 +0000 Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=) 2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: +hCfMVdYjzNMlMwULDxonxpgILhmpZ5QWkpetMvquFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:16:b8:d4:59:de:9b:8c:bb:65:6d:34:fa:c7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99 Validity Not Before: Dec 26 14:00:35 2025 GMT Not After : Dec 27 14:00:35 2025 GMT Subject: CN=a80e835f3343928a3b8badaafe4301b74fa23254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:11:d2:f4:fe:d7:2e:f3:0a:61:72:5d:9e:11: 45:50:f3:a1:a2:b4:60:8c:56:26:05:61:83:b8:2c: 04:cc:48:0b:76:db:e4:a9:e3:41:85:38:dd:31:f4: 1a:18:e8:86:cf:24:46:a1:ee:e5:36:25:ca:de:27: 16:ef:dd:58:e0:7e:ce:28:32:c6:ea:09:3a:e7:17: 8d:cf:27:b4:5b:c6:2b:cf:9a:58:1a:5f:5b:2f:52: 70:36:72:49:27:a5:8f:ae:f2:2d:52:70:f1:35:df: c5:b9:80:3c:5d:ac:65:2c:6f:4b:a8:88:fc:e1:30: c8:2b:3d:65:1e:65:8f:ac:ff:0d:c2:8d:e1:17:ba: b2:cc:8d:f9:5b:99:8e:34:82:9b:b3:97:19:1f:0b: 51:67:73:c0:03:c5:1e:80:74:6d:55:42:94:f9:78: b7:5d:46:cf:87:83:37:57:f6:0b:93:eb:f0:09:98: 2f:db:18:d2:11:15:09:ec:ba:18:79:97:c6:9c:0d: 9e:b3:57:d9:e5:29:61:f8:fe:f2:fc:43:dd:2e:8f: e3:2f:88:7c:f0:66:8a:5d:70:9b:57:09:a0:9d:6b: 17:db:f9:b5:75:f6:b1:04:92:ef:27:e6:76:a7:7f: 95:b9:ea:38:44:d8:af:59:1c:05:85:8a:41:2b:2c: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0E:83:5F:33:43:92:8A:3B:8B:AD:AA:FE:43:01:B7:4F:A2:32:54 X509v3 Authority Key Identifier: keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:61:31:49:00:e4:51:fc:9c:1d:78:58:7d:07:0a:b9:31:35: 5a:b2:c6:86:f8:45:dd:2d:4b:59:1e:b7:0b:a6:01:6c:1a:da: 34:b8:49:a1:e7:4a:28:6b:71:48:6a:fd:26:78:4a:79:de:b5: 10:8a:b1:df:ae:5d:4b:77:e4:e4:ab:71:fe:03:15:ef:c0:f4: 27:e1:bc:9f:36:d3:ef:83:b2:50:6b:34:f1:14:49:d3:8e:61: 98:a4:ba:44:9f:35:0a:ef:b2:43:e7:9a:88:42:11:26:0b:70: 80:5e:33:59:9e:aa:1f:6d:d3:2c:0a:c0:f4:8b:54:f8:d2:e0: c2:43:36:4c:33:15:88:8c:a3:e6:2b:4b:d7:d7:30:1b:88:a1: 19:c7:6c:df:f6:b0:64:09:f3:3e:f1:0f:88:ec:cd:7a:a7:93: f0:ef:11:4b:bb:7d:f2:33:ef:86:4f:9d:71:1d:60:ef:c6:ce: e2:b3:24:11:12:f6:f7:88:c2:14:c2:f3:bc:b0:13:d8:24:05: 12:75:c8:9c:bf:84:b0:1c:6d:43:d2:0e:f2:4f:a9:76:6a:4e: dc:f7:54:ac:be:db:84:17:f2:02:0a:59:fe:ae:f8:e8:68:90: f7:0f:e5:88:c0:55:dc:71:e8:34:1d:52:57:a4:ba:61:d8:a0: 7a:d6:17:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9ha41Fnem4y7ZW00+sdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYmE2ZDBmMGY5YjE5ZjdmNDNjZWI0M2U3MzU5YTNkODRl OTlkOTkwHhcNMjUxMjI2MTQwMDM1WhcNMjUxMjI3MTQwMDM1WjAzMTEwLwYDVQQD EyhhODBlODM1ZjMzNDM5MjhhM2I4YmFkYWFmZTQzMDFiNzRmYTIzMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxHS9P7XLvMKYXJdnhFFUPOhorRg jFYmBWGDuCwEzEgLdtvkqeNBhTjdMfQaGOiGzyRGoe7lNiXK3icW791Y4H7OKDLG 6gk65xeNzye0W8Yrz5pYGl9bL1JwNnJJJ6WPrvItUnDxNd/FuYA8XaxlLG9LqIj8 4TDIKz1lHmWPrP8Nwo3hF7qyzI35W5mONIKbs5cZHwtRZ3PAA8UegHRtVUKU+Xi3 XUbPh4M3V/YLk+vwCZgv2xjSERUJ7LoYeZfGnA2es1fZ5Slh+P7y/EPdLo/jL4h8 8GaKXXCbVwmgnWsX2/m1dfaxBJLvJ+Z2p3+Vueo4RNivWRwFhYpBKyz3owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgOg18zQ5KKO4utqv5DAbdPojJUMB8GA1UdIwQY MBaAFGu6bQ8Pmxn39DzrQ+c1mj2E6Z2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2Yt MmFlYWRiOTY2Yjc2LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2YtMmFlYWRiOTY2Yjc2 LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWExSQDk UfycHXhYfQcKuTE1WrLGhvhF3S1LWR63C6YBbBraNLhJoedKKGtxSGr9JnhKed61 EIqx365dS3fk5Ktx/gMV78D0J+G8nzbT74OyUGs08RRJ045hmKS6RJ81Cu+yQ+ea iEIRJgtwgF4zWZ6qH23TLArA9ItU+NLgwkM2TDMViIyj5itL19cwG4ihGcds3/aw ZAnzPvEPiOzNeqeT8O8RS7t98jPvhk+dcR1g78bO4rMkERL294jCFMLzvLAT2CQF EnXInL+EsBxtQ9IO8k+pdmpO3PdUrL7bhBfyAgpZ/q746GiQ9w/liMBV3HHoNB1S V6S6YdigetYXgA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:10 2025 by rpki-client