This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json) Hash identifier: Vv+Jf0mI25y9cC2CEh3abtNn5MILcMNRp4CgWaHpapo= Subject key identifier: 97:54:B3:16:E9:CE:19:E9:CA:67:8B:2C:55:AC:DF:73:4F:6A:9B:94 Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8 Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8 Certificate serial: 019B337B515A133B6FF34DBA1C10E7837103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft Manifest number: 09F5 Signing time: Thu 18 Dec 2025 22:01:18 +0000 Manifest this update: Thu 18 Dec 2025 22:01:18 +0000 Manifest next update: Fri 19 Dec 2025 22:01:18 +0000 Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: RJmSxsRC8H3Jcq2kI5j5vkPD6UfKExNFkXNA+loy/7Y=) 2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:51:5a:13:3b:6f:f3:4d:ba:1c:10:e7:83:71:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8 Validity Not Before: Dec 18 22:01:18 2025 GMT Not After : Dec 19 22:01:18 2025 GMT Subject: CN=9754b316e9ce19e9ca678b2c55acdf734f6a9b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:14:91:e2:ec:36:b6:fc:5b:2d:0a:d3:8f: 5d:95:eb:18:d5:5f:00:59:5e:e3:77:b6:70:d8:b7: 9c:6c:2d:17:4f:e0:da:36:36:35:6d:7d:3e:a3:cd: f9:c5:fd:39:95:8a:e1:62:d4:45:1b:1b:0d:2a:e6: c0:36:39:7d:e2:27:5c:53:e5:c1:2c:54:5f:47:6f: 3c:c8:c8:56:92:18:aa:b0:ca:67:f6:d1:bf:65:ca: 80:dd:55:e0:48:36:ef:85:97:be:6c:e4:32:67:e6: 00:74:a9:77:eb:5c:b5:7b:8a:4a:b3:f6:29:0e:b1: 66:80:5a:8f:a1:cf:54:1a:4f:3f:9f:b1:91:bf:c0: d5:fa:bd:78:96:8d:12:bc:f8:35:7c:bf:8c:73:41: 9c:e6:8a:66:95:b9:21:85:c8:3f:72:01:5b:75:fd: 82:63:03:ab:4b:32:94:b9:ed:3f:21:66:9e:82:d1: 05:ec:36:d0:2c:5a:bf:3b:38:40:6f:f2:03:bc:0a: 83:5e:7a:10:ad:f0:98:60:83:cf:96:69:f1:a9:4f: 80:fd:dd:db:11:2a:b9:14:ef:06:28:a7:cd:e8:f6: 5e:db:f7:87:8d:17:54:28:db:16:72:60:17:1c:c4: a7:68:da:5d:08:8f:e4:a4:7b:5c:2a:aa:f7:b1:83: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:54:B3:16:E9:CE:19:E9:CA:67:8B:2C:55:AC:DF:73:4F:6A:9B:94 X509v3 Authority Key Identifier: keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:08:38:62:d4:16:09:6c:63:fb:fd:72:5b:f3:37:f8:93:b7: 6a:02:47:0b:58:fc:52:82:17:71:f2:5b:86:ba:df:66:19:de: a6:10:a2:38:3f:31:68:d5:a8:e8:09:2f:0e:08:2f:34:5e:d6: 24:f3:15:c9:26:ef:e1:cd:44:a7:20:63:0d:21:7e:6e:d1:54: e2:ab:72:49:3f:a8:30:f4:de:a0:72:81:bf:da:c8:90:db:a8: 31:43:dc:9f:b6:e3:a6:e5:b0:2b:ba:ba:48:97:83:2a:57:76: 22:43:e4:a2:ee:d2:f4:1f:86:8b:e3:76:43:96:b8:7d:6c:a4: 5e:5e:05:6c:5b:94:86:e3:58:75:13:3c:ad:91:5f:23:99:f1: fc:bf:48:40:2f:ad:b2:35:0e:26:9d:82:7c:c7:fb:7e:1b:45: 3d:f2:1e:78:ad:5f:82:a0:e1:f3:d5:4e:f0:82:2c:5a:f7:8f: b2:6e:85:ae:55:e3:48:92:df:35:25:79:99:4a:e0:b9:4e:43: 02:24:68:d4:15:fd:76:6b:3b:aa:b0:5b:53:58:20:78:22:e0: 33:cc:d7:a2:ef:48:73:d8:60:71:2b:f2:e5:9c:13:92:fb:8a: 4b:3d:f8:42:12:75:d9:76:95:c8:2e:fe:bc:93:ec:fa:9d:be: d0:fe:03:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze1FaEztv8026HBDng3EDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzM4YTM4MWU2MGY1YThmZTA1ODdmYzZiMWEzYzgxM2M4 ZTNjYTgwHhcNMjUxMjE4MjIwMTE4WhcNMjUxMjE5MjIwMTE4WjAzMTEwLwYDVQQD Eyg5NzU0YjMxNmU5Y2UxOWU5Y2E2NzhiMmM1NWFjZGY3MzRmNmE5Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyMUkeLsNrb8Wy0K049dlesY1V8A WV7jd7Zw2LecbC0XT+DaNjY1bX0+o835xf05lYrhYtRFGxsNKubANjl94idcU+XB LFRfR288yMhWkhiqsMpn9tG/ZcqA3VXgSDbvhZe+bOQyZ+YAdKl361y1e4pKs/Yp DrFmgFqPoc9UGk8/n7GRv8DV+r14lo0SvPg1fL+Mc0Gc5opmlbkhhcg/cgFbdf2C YwOrSzKUue0/IWaegtEF7DbQLFq/OzhAb/IDvAqDXnoQrfCYYIPPlmnxqU+A/d3b ESq5FO8GKKfN6PZe2/eHjRdUKNsWcmAXHMSnaNpdCI/kpHtcKqr3sYNVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdUsxbpzhnpymeLLFWs33NPapuUMB8GA1UdIwQY MBaAFOxzijgeYPWo/gWH/GsaPIE8jjyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMt NTNjZjI2YjBhNzI0LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMtNTNjZjI2YjBhNzI0 LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgg4YtQW CWxj+/1yW/M3+JO3agJHC1j8UoIXcfJbhrrfZhnephCiOD8xaNWo6AkvDggvNF7W JPMVySbv4c1EpyBjDSF+btFU4qtyST+oMPTeoHKBv9rIkNuoMUPcn7bjpuWwK7q6 SJeDKld2IkPkou7S9B+Gi+N2Q5a4fWykXl4FbFuUhuNYdRM8rZFfI5nx/L9IQC+t sjUOJp2CfMf7fhtFPfIeeK1fgqDh89VO8IIsWvePsm6FrlXjSJLfNSV5mUrguU5D AiRo1BX9dms7qrBbU1ggeCLgM8zXou9Ic9hgcSvy5ZwTkvuKSz34QhJ12XaVyC7+ vJPs+p2+0P4DSQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:09:31 2025 by rpki-client