This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json) Hash identifier: J1Te7YLf/oHC/owrEpVJCx3xe9SdM0Kcx5Z8UjworlE= Subject key identifier: DF:4A:CC:F3:F1:AC:E3:8A:F4:FE:2B:6E:AD:77:66:46:4E:6E:C0:46 Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Certificate serial: 019B33B19D4B90771D100EEE2AB7347BE50E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft Manifest number: 1798 Signing time: Thu 18 Dec 2025 23:00:36 +0000 Manifest this update: Thu 18 Dec 2025 23:00:36 +0000 Manifest next update: Fri 19 Dec 2025 23:00:36 +0000 Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=) 2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=) 3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: ZGprujfwv0YiDEm6uNxbxGVTe0RhKoopp0jF7TsVfeg=) 4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=) 5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=) 6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=) 7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=) 8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=) 9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:9d:4b:90:77:1d:10:0e:ee:2a:b7:34:7b:e5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Validity Not Before: Dec 18 23:00:36 2025 GMT Not After : Dec 19 23:00:36 2025 GMT Subject: CN=df4accf3f1ace38af4fe2b6ead7766464e6ec046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:a0:3c:86:93:6b:35:fb:25:90:ad:5e:31: 2c:cb:17:c5:be:6d:25:a6:fc:e9:b9:f4:d7:68:9d: 17:c7:d2:a8:5b:65:85:d0:9d:0e:87:15:5f:4b:e7: 51:a2:38:2a:3c:20:cb:52:62:cd:cb:5b:4c:ac:fa: 1f:fb:84:35:c3:8c:ae:ee:ec:a2:34:5a:b5:00:ca: d4:6b:3e:fa:9f:ca:8a:63:0b:d4:73:95:a5:b6:33: 25:9d:1b:d9:93:b0:88:85:f6:dc:22:59:72:42:c3: c9:08:f1:19:61:76:43:55:93:b4:16:a6:0b:10:37: ff:1b:86:df:4c:1b:da:76:ce:39:b2:56:92:f8:ac: 62:72:de:43:c2:e4:c1:66:7b:81:43:13:57:d7:f8: 1a:3d:58:37:e7:d4:c9:1e:f0:d8:3e:e1:78:a7:7f: 47:fa:fb:df:2b:65:e9:c4:8f:5e:d0:5e:87:44:e0: 5a:4a:ec:ef:e4:08:f2:fe:f4:71:0a:5f:a5:87:ca: 63:6c:d7:25:7a:57:65:c8:7c:59:a0:f0:2b:be:9e: a2:f8:4e:f3:b9:4c:49:e0:a8:8a:67:ea:79:39:38: 3c:40:bb:39:a6:ca:f0:ad:55:86:6b:ac:16:32:b3: 31:19:9f:06:a9:a2:f7:29:8d:27:c0:05:37:ea:99: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4A:CC:F3:F1:AC:E3:8A:F4:FE:2B:6E:AD:77:66:46:4E:6E:C0:46 X509v3 Authority Key Identifier: keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a0:7c:fa:e3:7e:e9:78:90:4f:bd:c3:ed:42:a0:db:4e:5e: 3b:d6:91:16:ba:04:dd:c7:4f:d9:32:f5:7b:02:fa:43:12:6c: 3b:e0:16:b5:73:8c:18:a6:a7:12:35:97:78:bc:c2:51:b2:55: c0:f9:db:3d:de:b0:f6:47:f4:d0:b6:01:08:66:60:b4:5d:8a: ec:ce:a8:a8:be:9d:ab:bd:db:e7:55:12:14:14:ff:03:52:f3: f4:3a:bd:69:4f:3a:e3:4e:a4:75:d7:5b:2d:5f:fb:ab:13:81: 55:49:9a:9a:83:5b:c8:a6:60:53:56:b2:fd:34:8e:72:13:e3: 3e:d0:95:42:b1:67:9c:a6:1c:ae:ae:5c:7f:0e:9b:05:4c:2e: ae:12:32:36:09:d7:2e:d5:ec:cb:37:d3:47:f7:b6:0a:3c:a4: 5e:e0:79:e1:8b:c5:85:2c:41:c3:82:8d:f2:9e:3a:0d:43:6a: 6e:6c:6c:df:39:0e:18:c5:bd:1a:6e:65:8d:da:88:16:f3:3a: 21:9c:30:5b:07:a2:32:18:ca:9d:0f:dc:d6:ba:d0:28:0f:30: 9e:27:69:69:c5:28:a0:86:f0:ec:2f:f0:e9:2d:f4:94:aa:14: 11:7e:3b:a3:27:55:27:47:4e:32:44:dc:2c:2a:57:66:56:68: 5a:fb:28:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZ1LkHcdEA7uKrc0e+UOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw ODc5NDcwHhcNMjUxMjE4MjMwMDM2WhcNMjUxMjE5MjMwMDM2WjAzMTEwLwYDVQQD EyhkZjRhY2NmM2YxYWNlMzhhZjRmZTJiNmVhZDc3NjY0NjRlNmVjMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEugPIaTazX7JZCtXjEsyxfFvm0l pvzpufTXaJ0Xx9KoW2WF0J0OhxVfS+dRojgqPCDLUmLNy1tMrPof+4Q1w4yu7uyi NFq1AMrUaz76n8qKYwvUc5WltjMlnRvZk7CIhfbcIllyQsPJCPEZYXZDVZO0FqYL EDf/G4bfTBvads45slaS+Kxict5DwuTBZnuBQxNX1/gaPVg359TJHvDYPuF4p39H +vvfK2XpxI9e0F6HROBaSuzv5Ajy/vRxCl+lh8pjbNcleldlyHxZoPArvp6i+E7z uUxJ4KiKZ+p5OTg8QLs5psrwrVWGa6wWMrMxGZ8GqaL3KY0nwAU36pmROQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9KzPPxrOOK9P4rbq13ZkZObsBGMB8GA1UdIwQY MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt NTk5NTc3ODdiMDE1LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1 LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKB8+uN+ 6XiQT73D7UKg205eO9aRFroE3cdP2TL1ewL6QxJsO+AWtXOMGKanEjWXeLzCUbJV wPnbPd6w9kf00LYBCGZgtF2K7M6oqL6dq73b51USFBT/A1Lz9Dq9aU86406kdddb LV/7qxOBVUmamoNbyKZgU1ay/TSOchPjPtCVQrFnnKYcrq5cfw6bBUwurhIyNgnX LtXsyzfTR/e2CjykXuB54YvFhSxBw4KN8p46DUNqbmxs3zkOGMW9Gm5ljdqIFvM6 IZwwWweiMhjKnQ/c1rrQKA8wnidpacUooIbw7C/w6S30lKoUEX47oydVJ0dOMkTc LCpXZlZoWvsoBw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:11:54 2025 by rpki-client