This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft File: V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json) Hash identifier: mQmoFXrbZx0ONuSOQ3VpO9XM0fbVVYcGbpAUWszt9cY= Subject key identifier: D7:BD:07:E2:96:94:33:15:27:06:23:2D:B5:FB:30:78:C1:A2:CF:D6 Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F Certificate issuer: /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f Certificate serial: 019B3BD9AEFB57D0E79AA6F063AEB84F63DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft Manifest number: 16B9 Signing time: Sat 20 Dec 2025 13:01:20 +0000 Manifest this update: Sat 20 Dec 2025 13:01:20 +0000 Manifest next update: Sun 21 Dec 2025 13:01:20 +0000 Files and hashes: 1: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (hash: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=) 2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: 8/bZjB1O2ZKQ+0Xsa4FWypUdwUD9LvVvTsBhhG2SpBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:ae:fb:57:d0:e7:9a:a6:f0:63:ae:b8:4f:63:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f Validity Not Before: Dec 20 13:01:20 2025 GMT Not After : Dec 21 13:01:20 2025 GMT Subject: CN=d7bd07e2969433152706232db5fb3078c1a2cfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:b3:42:d1:db:2c:31:6e:22:0b:2a:fb:03: 87:48:55:6e:8d:14:f4:b8:28:de:b9:12:c5:13:c7: ba:1f:87:9f:e3:0c:4a:4d:f6:0f:49:b3:fe:8f:90: 7c:ed:e4:71:6c:aa:ed:85:23:21:d0:2c:96:cf:1b: c4:e8:a3:b7:55:bc:87:dd:0b:f6:68:eb:6e:f7:0b: 36:ed:27:e5:6f:11:db:79:76:e6:32:54:53:f3:26: 1c:0e:e5:96:b5:eb:ec:04:03:24:1a:bc:ea:7e:ad: d4:13:ba:7d:cc:2c:ea:38:45:50:73:01:e1:f1:35: 0f:86:36:08:e1:2e:06:95:12:f7:58:d1:96:17:cc: 69:d2:4a:4c:85:70:90:d5:b4:37:01:3f:f3:8a:07: 13:fa:c2:db:2a:cf:00:3c:3b:ad:d9:ed:57:54:19: a4:b8:15:b3:ba:3a:be:ec:5c:10:ae:7b:96:6a:2e: 05:01:45:79:6b:31:3d:29:f3:f7:19:ae:e5:14:04: f7:e2:d6:63:ca:2c:08:2d:15:4e:2b:e8:31:bd:a4: be:21:92:b5:2f:76:ab:8a:36:96:ac:ed:f2:96:ca: c2:0f:f0:31:08:26:26:28:97:77:3d:ad:d4:79:cb: c2:c5:d8:5e:56:83:7b:5d:ad:ef:87:35:99:d2:cd: e4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BD:07:E2:96:94:33:15:27:06:23:2D:B5:FB:30:78:C1:A2:CF:D6 X509v3 Authority Key Identifier: keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bc:3e:b7:1a:24:05:2a:31:f7:c9:d4:50:75:90:4e:ce:84: 3f:ff:ac:8b:ce:31:8a:03:c0:31:f8:73:a5:e5:cc:e4:80:78: 16:ba:1a:4d:10:ce:6b:a3:6b:75:4e:01:5a:d8:97:d3:6f:4d: e2:04:f1:e4:ec:10:2f:a7:ab:a6:17:8b:b3:57:7b:e9:a0:09: 1f:38:83:d9:8f:33:98:5a:0a:a6:ad:e1:83:77:32:eb:27:14: 74:8e:07:c7:46:00:7b:2b:06:e5:55:6a:ac:4f:90:de:4e:60: 7e:3d:0b:1a:d8:0c:17:35:db:3f:28:cb:55:77:89:e7:0e:ed: 38:01:a0:b6:23:d6:ec:dc:00:59:72:0a:76:53:fd:a7:32:97: 0c:44:dd:56:2f:5c:a9:5a:d2:16:42:71:86:19:79:b4:cf:40: 13:8a:15:54:fe:db:4c:d9:2c:33:89:4d:81:3c:c5:41:96:f9: 6f:ec:c8:ae:0e:11:f7:e8:aa:d9:dd:ce:3c:55:1e:7e:9d:bb: ee:35:d4:29:37:c3:07:c1:1c:91:45:f1:4d:0b:66:79:41:d9: c2:9c:88:b8:59:a8:d4:93:d0:e1:3b:57:eb:54:41:37:4e:f7: af:19:a3:13:a0:13:75:d1:83:3e:bf:4c:e8:cf:7e:02:53:5d: 72:27:6e:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72a77V9DnmqbwY664T2PdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3Yjc3MTE4YmQ1NmIyYjNiNDQ5OWM1NjZhN2M2NDhhYWQ3 YTZlOWYwHhcNMjUxMjIwMTMwMTIwWhcNMjUxMjIxMTMwMTIwWjAzMTEwLwYDVQQD EyhkN2JkMDdlMjk2OTQzMzE1MjcwNjIzMmRiNWZiMzA3OGMxYTJjZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/+zQtHbLDFuIgsq+wOHSFVujRT0 uCjeuRLFE8e6H4ef4wxKTfYPSbP+j5B87eRxbKrthSMh0CyWzxvE6KO3VbyH3Qv2 aOtu9ws27SflbxHbeXbmMlRT8yYcDuWWtevsBAMkGrzqfq3UE7p9zCzqOEVQcwHh 8TUPhjYI4S4GlRL3WNGWF8xp0kpMhXCQ1bQ3AT/zigcT+sLbKs8APDut2e1XVBmk uBWzujq+7FwQrnuWai4FAUV5azE9KfP3Ga7lFAT34tZjyiwILRVOK+gxvaS+IZK1 L3arijaWrO3ylsrCD/AxCCYmKJd3Pa3UecvCxdheVoN7Xa3vhzWZ0s3k+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe9B+KWlDMVJwYjLbX7MHjBos/WMB8GA1UdIwQY MBaAFFe3cRi9VrKztEmcVmp8ZIqtem6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2It MDY1YWE0MTU1ZWQ0LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2ItMDY1YWE0MTU1ZWQ0 LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbw+txok BSox98nUUHWQTs6EP/+si84xigPAMfhzpeXM5IB4FroaTRDOa6NrdU4BWtiX029N 4gTx5OwQL6erpheLs1d76aAJHziD2Y8zmFoKpq3hg3cy6ycUdI4Hx0YAeysG5VVq rE+Q3k5gfj0LGtgMFzXbPyjLVXeJ5w7tOAGgtiPW7NwAWXIKdlP9pzKXDETdVi9c qVrSFkJxhhl5tM9AE4oVVP7bTNksM4lNgTzFQZb5b+zIrg4R9+iq2d3OPFUefp27 7jXUKTfDB8EckUXxTQtmeUHZwpyIuFmo1JPQ4TtX61RBN073rxmjE6ATddGDPr9M 6M9+AlNdcidufA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:16:47 2025 by rpki-client