This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json) Hash identifier: okb2ThhRtITWpdy/tk8DhygnfT9WmwOKsinhuMxgSU4= Subject key identifier: DA:B3:D3:EE:A2:73:F0:21:F5:F3:77:93:F2:81:C8:A1:3E:89:C0:23 Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Certificate serial: 019B22BEB3916A700DA2C3753660F679C953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 16:01:21 +0000 Manifest this update: Mon 15 Dec 2025 16:01:21 +0000 Manifest next update: Tue 16 Dec 2025 16:01:21 +0000 Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=) 2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: /x+axFzRJ6Efva2z4LKgH6IHUdfsAvN23x9xU9k1Y88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:b3:91:6a:70:0d:a2:c3:75:36:60:f6:79:c9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Validity Not Before: Dec 15 16:01:21 2025 GMT Not After : Dec 16 16:01:21 2025 GMT Subject: CN=dab3d3eea273f021f5f37793f281c8a13e89c023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:ae:c8:1d:eb:91:8b:da:20:44:50:61:0e: 88:5d:68:d9:2a:e6:83:a0:09:e6:57:62:75:2b:50: 67:ad:0a:48:b9:b9:3c:56:66:4f:28:87:c7:cf:ed: d8:82:34:8c:c4:37:6d:ff:f1:0a:f9:fe:96:9d:d9: 63:32:0d:4f:f0:b9:5a:55:3e:10:66:92:ca:78:33: 58:fd:67:35:32:5d:13:61:5f:6f:ee:17:95:d0:5e: ba:4e:49:5a:db:96:e7:74:e9:4e:e2:47:dd:de:c4: 3a:bc:25:f0:55:af:d0:0b:ad:02:8a:fe:f3:80:94: 28:75:9d:71:4c:76:88:38:15:64:7e:a3:73:cb:e3: a6:57:74:da:7f:f0:1e:ae:e6:77:67:e6:c6:ec:3c: 53:9f:f6:5e:1e:d7:e7:78:84:89:eb:90:63:74:e2: bb:2f:e9:f6:2d:dc:df:83:40:64:ae:bc:d7:2c:81: d5:d5:8f:ed:13:bc:3a:56:e3:65:a0:9d:62:65:72: 0f:15:d9:da:47:a7:29:92:ff:c5:c3:ee:8d:7d:aa: 6f:b6:23:a3:c8:83:f3:61:0d:a0:26:f5:0f:74:56: e7:67:35:20:df:eb:29:dd:d8:c5:2a:a0:33:37:fa: 33:04:04:ef:3d:30:c1:94:3a:77:2f:f1:2b:a2:6f: c2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:D3:EE:A2:73:F0:21:F5:F3:77:93:F2:81:C8:A1:3E:89:C0:23 X509v3 Authority Key Identifier: keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d3:b2:16:93:29:69:89:05:e6:2a:16:9e:10:0b:7e:54:a7: 34:40:c0:f3:dd:5f:0f:c8:ec:38:10:1c:74:70:f2:5c:7b:92: fd:95:b6:19:e3:78:80:c8:db:85:df:e3:de:ea:1c:1c:ef:16: 30:e6:ec:43:56:4b:fd:4c:16:96:3e:ab:6d:a0:6f:f6:d3:62: 77:dc:0f:0a:bf:f5:11:c4:81:fd:30:b8:a1:c8:16:87:fa:f7: 5b:22:6d:e6:0b:47:3b:63:33:b7:b7:3c:47:58:ac:41:90:4b: 4a:01:85:93:bf:e4:fb:9e:cd:fe:9f:5a:6a:38:39:a2:46:6d: 61:ee:0a:47:66:6d:bc:54:4e:1e:bc:63:e8:17:a3:a6:51:b9: 7c:af:c6:94:c9:58:8d:34:c1:46:4e:de:ac:cc:d5:76:a6:f0: db:4a:6d:99:8e:f2:af:5e:15:17:4c:d2:a3:ee:89:75:72:b5: ae:bb:58:68:33:4c:a1:00:ae:b3:31:8b:2b:ec:64:00:98:c6: 9d:30:8c:39:2c:df:3d:ec:6c:1a:80:1f:98:85:bf:39:d0:9a: be:23:7b:81:dd:63:44:1d:a7:f5:a6:0a:ce:de:8c:3e:22:f9: b7:15:2a:0e:98:ca:b6:32:79:e8:40:c1:35:02:1b:ab:a8:eb: 9b:25:9e:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivrORanANosN1NmD2eclTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz M2I3OGIwHhcNMjUxMjE1MTYwMTIxWhcNMjUxMjE2MTYwMTIxWjAzMTEwLwYDVQQD EyhkYWIzZDNlZWEyNzNmMDIxZjVmMzc3OTNmMjgxYzhhMTNlODljMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk92uyB3rkYvaIERQYQ6IXWjZKuaD oAnmV2J1K1BnrQpIubk8VmZPKIfHz+3YgjSMxDdt//EK+f6WndljMg1P8LlaVT4Q ZpLKeDNY/Wc1Ml0TYV9v7heV0F66Tkla25bndOlO4kfd3sQ6vCXwVa/QC60Civ7z gJQodZ1xTHaIOBVkfqNzy+OmV3Taf/AeruZ3Z+bG7DxTn/ZeHtfneISJ65BjdOK7 L+n2Ldzfg0BkrrzXLIHV1Y/tE7w6VuNloJ1iZXIPFdnaR6cpkv/Fw+6NfapvtiOj yIPzYQ2gJvUPdFbnZzUg3+sp3djFKqAzN/ozBATvPTDBlDp3L/Erom/CxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqz0+6ic/Ah9fN3k/KByKE+icAjMB8GA1UdIwQY MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt YWQwOTUzZjdmZDQ5LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5 LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9OyFpMp aYkF5ioWnhALflSnNEDA891fD8jsOBAcdHDyXHuS/ZW2GeN4gMjbhd/j3uocHO8W MObsQ1ZL/UwWlj6rbaBv9tNid9wPCr/1EcSB/TC4ocgWh/r3WyJt5gtHO2Mzt7c8 R1isQZBLSgGFk7/k+57N/p9aajg5okZtYe4KR2ZtvFROHrxj6BejplG5fK/GlMlY jTTBRk7erMzVdqbw20ptmY7yr14VF0zSo+6JdXK1rrtYaDNMoQCuszGLK+xkAJjG nTCMOSzfPexsGoAfmIW/OdCaviN7gd1jRB2n9aYKzt6MPiL5txUqDpjKtjJ56EDB NQIbq6jrmyWetw== -----END CERTIFICATE-----Generated at Mon Dec 15 23:30:26 2025 by rpki-client