This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json) Hash identifier: UmcQL2MFyb2twQwae2OVoFwYru8j9Wu8na+SPWk/Wgw= Subject key identifier: CC:39:E3:60:3E:BD:80:85:E9:04:F2:1A:76:91:D3:F4:9E:5E:D8:28 Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Certificate serial: 019B1C8566B264DEF9371E7005AA082A670B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft Manifest number: 0C73 Signing time: Sun 14 Dec 2025 11:01:03 +0000 Manifest this update: Sun 14 Dec 2025 11:01:03 +0000 Manifest next update: Mon 15 Dec 2025 11:01:03 +0000 Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=) 2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=) 3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=) 4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: ++sI+9wFsoFo0fDgFAYUqxKt6l7uqRiyUP4+0FIaEng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:66:b2:64:de:f9:37:1e:70:05:aa:08:2a:67:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Validity Not Before: Dec 14 11:01:03 2025 GMT Not After : Dec 15 11:01:03 2025 GMT Subject: CN=cc39e3603ebd8085e904f21a7691d3f49e5ed828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:76:7f:fa:d0:99:b2:ae:c3:1f:f9:32:53: 75:10:8c:dd:c9:e6:62:57:bd:5e:d6:b9:34:94:1b: 4c:fc:c9:ac:3f:47:72:da:21:dc:0a:94:83:09:81: 36:a2:9a:99:b8:b5:a0:05:b1:d7:6d:ac:11:2c:5c: 79:33:1f:e5:0f:f0:f4:bb:54:b9:06:bf:5d:2f:4d: f2:9c:45:30:6c:6c:a0:03:00:7c:90:c9:cf:83:09: 68:ad:33:0c:98:03:9e:28:ce:36:b2:99:64:1d:74: d9:04:a1:08:91:20:78:51:57:d1:35:a6:ba:87:be: fe:df:f7:ab:9f:e8:af:ca:20:30:d2:b5:2a:04:27: 4a:a9:2a:1a:62:0a:62:1b:8c:1b:fc:2f:25:25:f5: c4:68:34:17:6a:70:ea:55:18:4f:ad:a7:4f:7a:62: d6:98:55:b4:f6:fb:b2:2f:bd:65:e6:47:53:f1:8e: 79:f2:c9:4d:7f:35:be:69:14:24:3e:d7:85:e4:d2: 77:17:ff:bd:b9:ad:10:18:7e:12:d6:df:d3:e9:52: 85:12:89:37:4e:70:46:0a:c0:66:99:31:44:ff:94: 46:83:ff:32:ea:b0:9d:fd:20:77:64:c4:ea:27:3a: a7:ed:6b:f9:8d:92:08:ed:e0:4d:e7:90:e5:b7:69: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:39:E3:60:3E:BD:80:85:E9:04:F2:1A:76:91:D3:F4:9E:5E:D8:28 X509v3 Authority Key Identifier: keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:98:2e:24:c0:c4:64:35:8c:f9:31:22:de:b6:d6:54:43:f7: 6d:fa:af:36:f1:a5:8f:7e:19:dd:58:42:91:e7:ae:c5:a2:9e: f0:13:b4:2b:17:8f:f9:6a:56:a6:51:7c:c0:8c:1e:48:b1:c9: 8d:ab:ea:fb:f2:06:0a:75:23:f6:fa:51:ff:8d:d0:74:54:b6: 79:79:02:28:65:00:cc:53:c2:fd:4d:5a:9a:16:03:90:5c:91: bd:43:03:5f:94:51:11:72:36:a5:03:0a:ca:e6:19:69:ee:1f: ab:f0:b1:92:37:20:fe:40:e7:83:dd:1d:94:27:f6:ec:ab:c0: 38:f9:aa:74:c0:75:23:80:e8:4b:86:b0:aa:fd:e0:b8:d6:57: fa:ad:8d:93:ad:f5:c2:f1:93:ed:e3:46:64:61:5e:10:6c:0b: f2:92:b4:35:9d:e6:20:8d:7f:26:bb:1e:76:75:e7:78:c9:ec: 16:da:fe:b1:3b:de:e1:c4:9c:a8:8d:09:1d:11:f4:e5:ca:27: 61:38:5b:d1:8d:8d:27:a3:ae:40:88:89:18:32:e5:5a:6d:33: aa:d8:7e:46:c8:f1:20:43:06:1a:d2:93:d3:af:2f:e5:0a:2c: cd:84:f8:be:4f:da:17:28:e9:cd:e4:64:cf:78:dc:87:06:d0: b5:9c:8c:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschWayZN75Nx5wBaoIKmcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0 YzA5MzQwHhcNMjUxMjE0MTEwMTAzWhcNMjUxMjE1MTEwMTAzWjAzMTEwLwYDVQQD EyhjYzM5ZTM2MDNlYmQ4MDg1ZTkwNGYyMWE3NjkxZDNmNDllNWVkODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWh2f/rQmbKuwx/5MlN1EIzdyeZi V71e1rk0lBtM/MmsP0dy2iHcCpSDCYE2opqZuLWgBbHXbawRLFx5Mx/lD/D0u1S5 Br9dL03ynEUwbGygAwB8kMnPgwlorTMMmAOeKM42splkHXTZBKEIkSB4UVfRNaa6 h77+3/ern+ivyiAw0rUqBCdKqSoaYgpiG4wb/C8lJfXEaDQXanDqVRhPradPemLW mFW09vuyL71l5kdT8Y558slNfzW+aRQkPteF5NJ3F/+9ua0QGH4S1t/T6VKFEok3 TnBGCsBmmTFE/5RGg/8y6rCd/SB3ZMTqJzqn7Wv5jZII7eBN55Dlt2nfUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMw542A+vYCF6QTyGnaR0/SeXtgoMB8GA1UdIwQY MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt MDRkYmM5YWMxNDQ0LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0 LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZguJMDE ZDWM+TEi3rbWVEP3bfqvNvGlj34Z3VhCkeeuxaKe8BO0KxeP+WpWplF8wIweSLHJ javq+/IGCnUj9vpR/43QdFS2eXkCKGUAzFPC/U1amhYDkFyRvUMDX5RREXI2pQMK yuYZae4fq/Cxkjcg/kDng90dlCf27KvAOPmqdMB1I4DoS4awqv3guNZX+q2Nk631 wvGT7eNGZGFeEGwL8pK0NZ3mII1/JrsednXneMnsFtr+sTve4cScqI0JHRH05con YThb0Y2NJ6OuQIiJGDLlWm0zqth+RsjxIEMGGtKT068v5QoszYT4vk/aFyjpzeRk z3jchwbQtZyMCg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:17:16 2025 by rpki-client