This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json) Hash identifier: r3UZI0TB09c9DRraZqSuY+RtulGp3UdD/zoAzx38jTU= Subject key identifier: 1B:A6:50:8C:09:C2:F2:5A:AC:DF:4C:0B:FE:B5:8D:12:F3:89:F3:EB Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b Certificate serial: 019B5A1AA4C50CFFBACF6C515CB8FAE44EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 10:00:54 +0000 Manifest this update: Fri 26 Dec 2025 10:00:54 +0000 Manifest next update: Sat 27 Dec 2025 10:00:54 +0000 Files and hashes: 1: 4_25V1XttJ1qw5vFtRBIGOQ28e4.roa (hash: jrFE5OHsnZSV8YIte/QlrxAa0XpS7lb+A+yiq4ZHdDE=) 2: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: 9wjuDb1AKlf0GxzZAhDKXL4iknIyXSuGEpnpDq6RSuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a4:c5:0c:ff:ba:cf:6c:51:5c:b8:fa:e4:4e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b Validity Not Before: Dec 26 10:00:54 2025 GMT Not After : Dec 27 10:00:54 2025 GMT Subject: CN=1ba6508c09c2f25aacdf4c0bfeb58d12f389f3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:c0:a1:f0:01:5e:38:10:e4:7e:d9:dd:e2: f6:ac:66:04:38:98:3e:f2:0d:4b:ba:f4:fb:d7:86: c9:bf:a1:e6:d8:e2:23:b6:b9:45:9f:ed:1d:3f:fa: e8:bd:9f:01:f2:4a:0a:af:f0:b9:ec:52:37:f8:5c: 4e:1a:3c:95:7a:8e:9e:15:a3:8b:68:29:83:cc:b7: b9:14:3e:fa:dd:32:04:84:28:dc:0f:f7:c5:e1:23: 20:76:3e:76:26:4d:74:14:8a:c3:80:9e:be:da:f6: ff:19:6d:a3:9d:c3:72:d9:5f:7c:d2:cb:58:19:6c: 57:25:0b:c2:df:48:b4:69:67:63:41:21:fb:5e:03: 38:43:ed:73:15:58:c3:38:36:d0:46:51:fc:32:87: 3f:c9:79:ef:e3:7d:58:4f:70:98:07:8d:f5:7e:11: 50:8a:8c:13:71:f5:92:9f:58:5c:9a:48:0f:ce:f0: a6:c0:83:17:2e:60:b6:0a:42:48:8e:50:1d:22:61: 8c:b7:c8:b3:9f:7c:ea:83:f8:a5:15:ba:ca:97:f9: 75:62:28:1c:c1:2f:c7:b1:b8:84:2b:53:4d:21:0f: 84:1e:43:16:1c:04:2d:d3:a3:12:1c:66:e2:f5:1f: 22:46:fb:47:d8:fb:5e:0a:17:78:cd:6b:d3:d5:e6: db:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A6:50:8C:09:C2:F2:5A:AC:DF:4C:0B:FE:B5:8D:12:F3:89:F3:EB X509v3 Authority Key Identifier: keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9c:5b:d4:5b:a4:eb:cb:ac:94:67:a0:ba:c1:0f:70:23:53: de:1d:de:42:53:98:01:40:5e:6d:da:b8:d7:ec:f9:5d:b8:bc: f9:09:94:1e:66:fb:a8:2a:aa:5a:6c:35:0b:52:1a:68:5a:1f: e8:00:f9:9a:38:c5:d3:0f:65:74:7e:35:1e:3c:03:8c:80:40: b4:4d:4a:2c:6c:d4:b2:5b:c8:a6:ac:60:71:e6:05:21:00:94: fa:67:a6:9d:a5:37:ae:48:88:7b:43:c7:20:a1:4e:7e:0b:13: 1c:48:ce:c4:7d:a5:b1:6e:05:97:4f:8f:7c:d0:37:9f:78:8b: ea:89:ee:79:2d:87:1d:58:59:68:a7:d7:3e:fc:28:c9:96:c9: 70:1e:6e:c0:ca:eb:6d:39:7a:24:a8:17:cf:f6:dd:3b:97:5a: 62:79:61:73:18:09:80:67:d7:4b:31:69:e3:ce:83:32:ba:df: 31:29:cd:7b:fb:60:53:d3:9a:a2:16:b8:b1:54:db:6c:96:4a: 12:8d:33:2e:d8:64:42:f0:17:07:25:59:38:a7:db:d1:35:42: c7:b8:00:9e:b1:61:b4:23:96:34:70:54:26:24:92:90:18:9c: 0b:65:0e:7c:5e:92:9c:6d:ba:4e:1d:b8:25:e0:1b:84:8b:69: 0c:21:cf:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqTFDP+6z2xRXLj65E7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2 NTYzN2IwHhcNMjUxMjI2MTAwMDU0WhcNMjUxMjI3MTAwMDU0WjAzMTEwLwYDVQQD EygxYmE2NTA4YzA5YzJmMjVhYWNkZjRjMGJmZWI1OGQxMmYzODlmM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8HAofABXjgQ5H7Z3eL2rGYEOJg+ 8g1LuvT714bJv6Hm2OIjtrlFn+0dP/rovZ8B8koKr/C57FI3+FxOGjyVeo6eFaOL aCmDzLe5FD763TIEhCjcD/fF4SMgdj52Jk10FIrDgJ6+2vb/GW2jncNy2V980stY GWxXJQvC30i0aWdjQSH7XgM4Q+1zFVjDODbQRlH8Moc/yXnv431YT3CYB431fhFQ iowTcfWSn1hcmkgPzvCmwIMXLmC2CkJIjlAdImGMt8izn3zqg/ilFbrKl/l1Yigc wS/HsbiEK1NNIQ+EHkMWHAQt06MSHGbi9R8iRvtH2PteChd4zWvT1ebbPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBumUIwJwvJarN9MC/61jRLzifPrMB8GA1UdIwQY MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2 LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpxb1Fuk 68uslGegusEPcCNT3h3eQlOYAUBebdq41+z5Xbi8+QmUHmb7qCqqWmw1C1IaaFof 6AD5mjjF0w9ldH41HjwDjIBAtE1KLGzUslvIpqxgceYFIQCU+memnaU3rkiIe0PH IKFOfgsTHEjOxH2lsW4Fl0+PfNA3n3iL6onueS2HHVhZaKfXPvwoyZbJcB5uwMrr bTl6JKgXz/bdO5daYnlhcxgJgGfXSzFp486DMrrfMSnNe/tgU9Oaoha4sVTbbJZK Eo0zLthkQvAXByVZOKfb0TVCx7gAnrFhtCOWNHBUJiSSkBicC2UOfF6SnG26Th24 JeAbhItpDCHPkw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:39 2025 by rpki-client