This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json) Hash identifier: 3Qp99d6TuEP5LdhZjfQAp0xMaoueX26fNiRNvpx3igc= Subject key identifier: ED:42:56:46:B0:40:0F:AB:54:25:3B:A4:08:39:EC:76:08:EE:62:DB Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43 Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043 Certificate serial: 019B258876AE49B7A7250CF62B5C4299D60E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft Manifest number: 0E00 Signing time: Tue 16 Dec 2025 05:00:58 +0000 Manifest this update: Tue 16 Dec 2025 05:00:58 +0000 Manifest next update: Wed 17 Dec 2025 05:00:58 +0000 Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: i5WxT7EP/Gh/TIoye3W6oFAWR5TvjiLbTSn7IAoKd+0=) 2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:76:ae:49:b7:a7:25:0c:f6:2b:5c:42:99:d6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043 Validity Not Before: Dec 16 05:00:58 2025 GMT Not After : Dec 17 05:00:58 2025 GMT Subject: CN=ed425646b0400fab54253ba40839ec7608ee62db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:12:a1:78:8c:c1:79:94:1d:29:d5:d6:91: 56:e3:63:0b:b9:ed:bc:3a:85:29:96:dc:9f:0d:1a: 40:54:ee:5d:fe:c7:db:e7:05:4a:e2:c0:8f:de:43: a8:fa:08:f7:44:07:20:5c:f8:87:b0:0d:f9:e1:68: 47:54:e0:25:0d:22:f4:b7:82:fc:4b:e0:bd:b8:51: f0:1c:89:06:8f:c3:2a:27:c4:76:f1:5f:90:f5:72: cf:a9:13:c4:6e:b3:2b:26:89:4d:67:a0:37:0f:d6: f7:fc:24:0d:e6:79:41:bb:70:aa:83:c4:a1:09:56: 1c:35:32:93:b1:2e:6e:b6:2e:6b:6f:72:6e:9a:5b: 1b:f3:ce:85:f8:02:47:01:ca:db:92:41:a7:7a:ae: 85:46:f4:c5:d5:4c:43:06:2b:ad:a9:d4:ab:c2:db: 2d:1a:8a:77:f3:91:f8:92:7b:3b:b6:08:f9:45:22: 41:fd:62:9b:07:87:19:9b:23:f8:98:fb:fb:17:ca: 71:83:be:13:90:cb:62:72:7e:73:dc:56:12:c4:3c: 11:9e:07:b5:ad:66:be:2b:37:51:af:98:9d:7a:a0: 17:ce:04:63:d1:7e:1b:e3:e6:6e:21:1a:d9:b8:81: 94:da:12:0f:8e:c2:01:92:09:fb:84:25:dc:c1:68: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:42:56:46:B0:40:0F:AB:54:25:3B:A4:08:39:EC:76:08:EE:62:DB X509v3 Authority Key Identifier: keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:51:dc:fd:79:f7:94:a8:3a:59:00:a2:28:21:cf:34:44:ed: dd:ce:1f:a6:51:2a:f6:5a:26:43:15:96:2e:c2:e3:df:f8:61: b9:ed:3a:13:d3:38:29:77:fa:64:cc:0c:ae:da:8d:97:f0:58: 84:89:ea:a2:e8:c3:6c:1e:e4:36:04:e6:f6:45:5f:f3:cc:58: db:39:3d:32:63:84:1e:6b:89:cc:4a:a7:60:cf:ef:62:a8:c5: c6:a8:64:f0:32:bf:1f:58:1a:4b:81:1a:34:6d:34:67:46:ac: 7e:7f:b8:c8:bc:93:61:5d:68:a2:56:9c:30:3d:4f:59:95:3d: d7:01:ed:ba:5b:56:24:60:0a:1e:e1:7f:15:ea:f9:dd:2f:b1: 78:08:fc:ef:c6:65:07:36:f7:a7:0b:39:ee:2d:65:24:0c:a0: be:84:ec:05:a1:58:15:38:c0:5f:ae:4a:ae:36:32:ea:bd:2b: aa:99:7e:9d:c2:a7:39:bb:16:99:40:e8:88:37:69:f1:d8:48: ff:d4:fd:c2:20:b6:be:4b:fd:06:b6:7f:aa:db:34:74:74:55: a0:8b:fa:c2:ed:63:f1:6c:8a:f1:4b:6e:27:6d:9c:ea:31:ae: 1f:29:cb:d9:85:c8:7d:5c:b9:e8:cc:d6:08:2b:af:57:54:b1: 70:45:a0:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliHauSbenJQz2K1xCmdYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YjgwZDVmNGE5YzkyZGQ5MmE0NjA1NzE5ZTBhZThkMWE2 MmMwNDMwHhcNMjUxMjE2MDUwMDU4WhcNMjUxMjE3MDUwMDU4WjAzMTEwLwYDVQQD EyhlZDQyNTY0NmIwNDAwZmFiNTQyNTNiYTQwODM5ZWM3NjA4ZWU2MmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFcSoXiMwXmUHSnV1pFW42MLue28 OoUpltyfDRpAVO5d/sfb5wVK4sCP3kOo+gj3RAcgXPiHsA354WhHVOAlDSL0t4L8 S+C9uFHwHIkGj8MqJ8R28V+Q9XLPqRPEbrMrJolNZ6A3D9b3/CQN5nlBu3Cqg8Sh CVYcNTKTsS5uti5rb3Jumlsb886F+AJHAcrbkkGneq6FRvTF1UxDBiutqdSrwtst Gop385H4kns7tgj5RSJB/WKbB4cZmyP4mPv7F8pxg74TkMticn5z3FYSxDwRnge1 rWa+KzdRr5ideqAXzgRj0X4b4+ZuIRrZuIGU2hIPjsIBkgn7hCXcwWijiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1CVkawQA+rVCU7pAg57HYI7mLbMB8GA1UdIwQY MBaAFAe4DV9KnJLdkqRgVxngro0aYsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUt YTI2NWYzODA5M2EwLzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUtYTI2NWYzODA5M2Ew LzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVHc/Xn3 lKg6WQCiKCHPNETt3c4fplEq9lomQxWWLsLj3/hhue06E9M4KXf6ZMwMrtqNl/BY hInqoujDbB7kNgTm9kVf88xY2zk9MmOEHmuJzEqnYM/vYqjFxqhk8DK/H1gaS4Ea NG00Z0asfn+4yLyTYV1oolacMD1PWZU91wHtultWJGAKHuF/Fer53S+xeAj878Zl Bzb3pws57i1lJAygvoTsBaFYFTjAX65KrjYy6r0rqpl+ncKnObsWmUDoiDdp8dhI /9T9wiC2vkv9BrZ/qts0dHRVoIv6wu1j8WyK8UtuJ22c6jGuHynL2YXIfVy56MzW CCuvV1SxcEWgBw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:31:42 2025 by rpki-client