This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft File: s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json) Hash identifier: e6c3Pwj1f1K9RdRs9037gUG7kIKV9vik3a9Q9hj4YsU= Subject key identifier: 40:96:9A:4B:03:97:A5:45:38:AC:59:73:59:13:23:CB:AE:CA:F7:91 Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f Certificate serial: 019B11CA4BA164BD0C16BD239DA0E75AD60E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft Manifest number: 177B Signing time: Fri 12 Dec 2025 09:00:28 +0000 Manifest this update: Fri 12 Dec 2025 09:00:28 +0000 Manifest next update: Sat 13 Dec 2025 09:00:28 +0000 Files and hashes: 1: CWFEcKSRZBYlT2vWWkV5nYcBlHI.roa (hash: nc++n41sb/ngoYKjInAuk6Rbh3YfF9Q+XH3kpi1+H74=) 2: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=) 3: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (hash: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=) 4: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=) 5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: uahjMMJb5ZFkj/3yDDveXlQRVU/2VSRByhA47b3IBDA=) 6: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=) 7: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (hash: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:4b:a1:64:bd:0c:16:bd:23:9d:a0:e7:5a:d6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f Validity Not Before: Dec 12 09:00:28 2025 GMT Not After : Dec 13 09:00:28 2025 GMT Subject: CN=40969a4b0397a54538ac5973591323cbaecaf791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:57:52:05:58:88:74:e8:82:2b:d5:71:92: 7e:c0:d5:bb:2d:fa:6c:4e:6f:c7:1a:86:cf:c8:85: 55:10:c2:c6:8e:2f:7f:90:9b:7e:1c:48:cd:d5:4c: b8:39:4a:2a:bf:4e:39:f4:60:95:55:71:67:65:be: 84:c2:7e:4d:40:8f:7a:00:84:00:fe:f6:24:6f:74: ec:b4:fb:fc:09:a3:5c:7b:bc:1b:65:25:6c:12:2b: 5e:c1:14:c9:bf:40:3a:52:8d:56:5c:7e:c5:da:e4: 77:a0:b0:75:83:44:2c:62:a3:7a:2b:79:ea:76:c8: 31:1c:ba:d5:47:58:7a:87:8b:d4:5b:d8:0a:fa:a7: cc:4a:ea:41:e7:c9:7e:9e:2c:d9:12:25:f4:e5:e6: d9:82:9e:1f:2e:23:d3:0c:2b:2a:ab:2c:c9:36:8a: fb:5e:7d:e4:fb:24:4b:00:6f:42:e4:56:76:0a:fe: a9:b2:e5:a8:16:bf:97:2f:5a:8b:46:c1:81:61:22: d3:cd:b8:b9:57:d5:dd:29:76:ed:42:44:98:f4:b6: 81:7e:28:7d:c0:d0:d7:ed:8e:50:99:36:61:9c:be: 65:ff:c0:1e:be:00:43:d8:f4:7b:ab:31:28:c5:ce: 6c:28:ba:aa:3b:d0:fe:01:1e:9f:aa:e8:5b:18:81: ea:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:96:9A:4B:03:97:A5:45:38:AC:59:73:59:13:23:CB:AE:CA:F7:91 X509v3 Authority Key Identifier: keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3e:44:33:e2:5c:2e:09:fc:7f:80:24:bb:eb:8b:6c:af:7f: ad:6d:73:82:6c:36:73:b3:6f:06:c1:7a:1e:92:e9:11:cb:66: 51:79:7b:ae:22:7c:1c:0e:8c:ab:eb:7b:7e:87:72:f2:d9:2f: 96:c0:92:ef:77:cf:a0:23:d9:0c:09:88:cc:6b:ab:76:98:f5: 51:aa:1a:a4:1e:01:b3:b8:61:2c:20:ff:2e:6d:5b:e3:53:4c: fc:37:16:f9:33:54:8f:33:b3:9f:41:c6:dd:7b:1f:2c:35:a7: 21:7b:ea:d6:15:f8:2c:d2:fc:36:3b:91:5a:3f:fa:c2:ca:33: cc:c1:6e:9e:ce:3e:7f:24:07:14:80:ce:cc:d5:de:6a:2d:c8: d0:3e:ea:8b:01:27:5e:f3:fb:0a:4e:ab:5b:39:9e:3d:e3:8e: 2a:e9:53:50:c2:9d:5a:4d:7d:a5:91:77:cf:b6:86:f1:17:1c: 6a:ba:32:7f:a2:66:2e:0d:cc:97:d4:04:a7:95:28:65:1c:8f: 40:54:da:b7:be:e0:8f:28:36:bc:b9:22:47:14:1e:7b:aa:a7: 43:68:ac:43:12:d3:c5:f1:91:a4:f0:18:cf:6d:8b:63:29:06: 86:3a:4b:25:04:b2:9e:41:d3:42:39:db:66:7b:66:11:b1:74: df:9f:72:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRykuhZL0MFr0jnaDnWtYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh YWUxNGYwHhcNMjUxMjEyMDkwMDI4WhcNMjUxMjEzMDkwMDI4WjAzMTEwLwYDVQQD Eyg0MDk2OWE0YjAzOTdhNTQ1MzhhYzU5NzM1OTEzMjNjYmFlY2FmNzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuJXUgVYiHTogivVcZJ+wNW7Lfps Tm/HGobPyIVVEMLGji9/kJt+HEjN1Uy4OUoqv0459GCVVXFnZb6Ewn5NQI96AIQA /vYkb3TstPv8CaNce7wbZSVsEitewRTJv0A6Uo1WXH7F2uR3oLB1g0QsYqN6K3nq dsgxHLrVR1h6h4vUW9gK+qfMSupB58l+nizZEiX05ebZgp4fLiPTDCsqqyzJNor7 Xn3k+yRLAG9C5FZ2Cv6psuWoFr+XL1qLRsGBYSLTzbi5V9XdKXbtQkSY9LaBfih9 wNDX7Y5QmTZhnL5l/8AevgBD2PR7qzEoxc5sKLqqO9D+AR6fquhbGIHqAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECWmksDl6VFOKxZc1kTI8uuyveRMB8GA1UdIwQY MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct ZDRmMTJiMzdhMzE4LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4 LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcz5EM+Jc Lgn8f4Aku+uLbK9/rW1zgmw2c7NvBsF6HpLpEctmUXl7riJ8HA6Mq+t7fody8tkv lsCS73fPoCPZDAmIzGurdpj1UaoapB4Bs7hhLCD/Lm1b41NM/DcW+TNUjzOzn0HG 3XsfLDWnIXvq1hX4LNL8NjuRWj/6wsozzMFuns4+fyQHFIDOzNXeai3I0D7qiwEn XvP7Ck6rWzmePeOOKulTUMKdWk19pZF3z7aG8Rccaroyf6JmLg3Ml9QEp5UoZRyP QFTat77gjyg2vLkiRxQee6qnQ2isQxLTxfGRpPAYz22LYykGhjpLJQSynkHTQjnb ZntmEbF0359y2w== -----END CERTIFICATE-----Generated at Fri Dec 12 17:06:12 2025 by rpki-client