This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft File: 7HB5DNzgwZKsiG89nvcl85lRg5g.mft (raw, json) Hash identifier: Mk6FoZ9xFY+O5Iv9iKRFiUHhgF9pEkpN1N3Rr9mPHyk= Subject key identifier: 98:E5:FC:49:B1:83:5F:49:33:57:67:36:EA:61:D0:10:A7:E7:74:37 Authority key identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98 Certificate issuer: /CN=ec70790cdce0c192ac886f3d9ef725f399518398 Certificate serial: 019B5AF67A535B193765D5A74816BF1CA333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft Manifest number: 20 Signing time: Fri 26 Dec 2025 14:01:01 +0000 Manifest this update: Fri 26 Dec 2025 14:01:01 +0000 Manifest next update: Sat 27 Dec 2025 14:01:01 +0000 Files and hashes: 1: 7HB5DNzgwZKsiG89nvcl85lRg5g.crl (hash: Ql7gWAzz/skviJFd/YyinkhYhnlEcIUjIrW6CC6gYdo=) 2: 7IVGhCt7G4ZWjEsMqOUMNoh_ONg.roa (hash: cpKLW0xOLtqDGwQV+LND6V3Hw2lFbNNFvzbSjuOjPA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:7a:53:5b:19:37:65:d5:a7:48:16:bf:1c:a3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec70790cdce0c192ac886f3d9ef725f399518398 Validity Not Before: Dec 26 14:01:01 2025 GMT Not After : Dec 27 14:01:01 2025 GMT Subject: CN=98e5fc49b1835f4933576736ea61d010a7e77437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ae:47:64:09:4d:29:c9:c5:fc:64:9b:42:05: 12:33:fb:ad:43:4e:b7:ec:67:2b:70:9d:da:1e:a0: 7d:7e:50:eb:fe:db:c4:b4:e3:5f:bf:a2:31:a7:1a: 26:d1:ea:eb:25:34:c0:8f:3a:e2:b1:e5:0c:4d:3e: 9b:05:9e:1e:af:1b:2e:6f:c6:fa:a7:ac:0f:60:9c: 69:bf:9c:41:5d:41:7f:e2:62:8f:f4:12:54:fa:61: f4:d2:69:df:48:50:00:02:a5:98:cf:bf:47:21:96: 49:8a:d6:cc:46:82:d6:df:0e:8d:91:f6:af:b0:ba: 28:ff:cf:fd:08:29:00:ad:45:99:53:b6:d9:bb:5a: 38:d7:97:cd:58:8f:87:41:8d:b2:e3:fe:56:0b:d2: 93:0f:30:62:03:a5:b4:90:bf:5b:d3:73:24:cf:07: 79:e0:42:3a:cf:89:c3:42:0b:9e:8c:02:5d:9d:32: 31:cb:a1:b4:00:ab:ca:50:93:58:11:aa:73:a4:ef: ec:03:ec:21:9e:a9:03:b9:f7:4d:15:37:bf:f2:27: 30:cb:65:87:48:be:e7:6b:59:ae:5e:27:f4:88:9e: f8:b1:50:1d:c2:62:03:66:e5:fe:83:5b:a9:23:2b: cf:e1:d3:49:5e:d7:4b:3b:bc:13:be:c1:a7:30:e9: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E5:FC:49:B1:83:5F:49:33:57:67:36:EA:61:D0:10:A7:E7:74:37 X509v3 Authority Key Identifier: keyid:EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:51:35:be:fe:d2:79:cb:68:da:fb:13:97:9a:22:95:0b: 35:14:ad:c2:85:d1:b7:0c:d6:43:a0:74:c7:7d:2e:ad:45:3b: 9a:61:6d:de:eb:17:a5:19:93:89:24:a0:f7:d5:f8:03:db:40: 55:7a:5b:05:be:2c:fb:43:c4:f2:da:fb:7d:7c:2e:67:5d:2c: 82:68:8c:a9:bb:5c:bd:90:a7:50:2f:a2:71:ed:f4:97:09:28: 3f:3c:be:20:56:f2:80:cb:26:07:07:89:fd:82:03:cf:aa:7c: 9d:b2:4d:59:8c:a7:5c:eb:3c:f6:66:cb:4d:36:08:6c:b5:b5: 92:a1:6c:5f:46:18:4f:b6:c0:e7:60:fb:d9:7f:4d:a6:5e:da: c8:2c:66:43:e7:6e:28:c2:68:ce:6e:71:4b:cc:26:4a:8b:5a: 47:7c:1b:86:b3:21:49:18:eb:be:11:7c:4c:db:46:e5:5a:39: d1:6c:68:7d:f6:1f:3c:83:2d:4b:ec:54:3b:09:b9:b2:87:0e: 3e:8f:92:57:11:01:b4:87:fa:a3:84:af:8e:c3:ec:14:40:9b: a0:15:54:6a:c8:5d:fb:e9:c4:6b:c4:1e:60:09:21:a2:61:8c: 81:b1:4d:de:b3:77:a8:c0:f3:7c:a9:bd:f5:bf:d7:a5:ac:80: b5:62:82:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9npTWxk3ZdWnSBa/HKMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzA3OTBjZGNlMGMxOTJhYzg4NmYzZDllZjcyNWYzOTk1 MTgzOTgwHhcNMjUxMjI2MTQwMTAxWhcNMjUxMjI3MTQwMTAxWjAzMTEwLwYDVQQD Eyg5OGU1ZmM0OWIxODM1ZjQ5MzM1NzY3MzZlYTYxZDAxMGE3ZTc3NDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm65HZAlNKcnF/GSbQgUSM/utQ063 7GcrcJ3aHqB9flDr/tvEtONfv6Ixpxom0errJTTAjzriseUMTT6bBZ4erxsub8b6 p6wPYJxpv5xBXUF/4mKP9BJU+mH00mnfSFAAAqWYz79HIZZJitbMRoLW3w6Nkfav sLoo/8/9CCkArUWZU7bZu1o415fNWI+HQY2y4/5WC9KTDzBiA6W0kL9b03Mkzwd5 4EI6z4nDQguejAJdnTIxy6G0AKvKUJNYEapzpO/sA+whnqkDufdNFTe/8icwy2WH SL7na1muXif0iJ74sVAdwmIDZuX+g1upIyvP4dNJXtdLO7wTvsGnMOlNEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjl/Emxg19JM1dnNuph0BCn53Q3MB8GA1UdIwQY MBaAFOxweQzc4MGSrIhvPZ73JfOZUYOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81MDc2NjAtMTJiYS00YmU4LTliNzMt Yjc0OTM4N2RmMGY1LzEvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81MDc2NjAtMTJiYS00YmU4LTliNzMtYjc0OTM4N2RmMGY1 LzEvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQ9RNb7+ 0nnLaNr7E5eaIpULNRStwoXRtwzWQ6B0x30urUU7mmFt3usXpRmTiSSg99X4A9tA VXpbBb4s+0PE8tr7fXwuZ10sgmiMqbtcvZCnUC+ice30lwkoPzy+IFbygMsmBweJ /YIDz6p8nbJNWYynXOs89mbLTTYIbLW1kqFsX0YYT7bA52D72X9Npl7ayCxmQ+du KMJozm5xS8wmSotaR3wbhrMhSRjrvhF8TNtG5Vo50WxoffYfPIMtS+xUOwm5socO Po+SVxEBtIf6o4SvjsPsFECboBVUashd++nEa8QeYAkhomGMgbFN3rN3qMDzfKm9 9b/XpayAtWKCfw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client